Hi Would it be possible to somehow disable changing iptables rules from scripts and enable changing only from config file, which loading would be protected by special password defined in kernel? Or even better, your could preset iptables rules in kernel. That rules would be unchangeable. I think this would improve Linux firewall security on systems with complex and tight rules. Matrix
