Hello all!
First email list post!
Xtreme Linux newbie
I have been trying to get iptables/squid/Dansguardian
to work together but I am quite good at screwing
things up. Machine is an FC4 box
My iptables won't start, I tried to install 1.3.5
(currently running 1.3.0) but screwed that up. I
managed to go back to 1.3.0. Here is some output:
[root@Leavenworth ~]# service iptables start
Flushing firewall rules:
[ OK ]
Setting chains to policy ACCEPT: filter
[ OK ]
Unloading iptables modules:
[ OK ]
Applying iptables firewall rules: iptables-restore:
line 24 failed
[FAILED]
This is the ouput of: cat /etc/sysconfig/iptables:
# Generated by iptables-save v1.3.0 on Fri Jan 27
06:22:49 2006
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A FORWARD -j RH-Firewall-1-INPUT
-A INPUT -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any
-j ACCEPT
-A RH-Firewall-1-INPUT -p ipv6-crypt -j ACCEPT
-A RH-Firewall-1-INPUT -p ipv6-auth -j ACCEPT
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp
--dport 5353 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j
ACCEPT
-A RH-Firewall-1-INPUT -m state --state
RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m
tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m
tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with
icmp-host-prohibited
COMMIT
# Completed on Fri Jan 27 06:22:49 2006
# Generated by webmin
#*
# Forward HTTP connections to Squid proxy
-A PREROUTING -p tcp -m tcp -s 8080 --dport 80 -j
REDIRECT --to-ports 3128
COMMIT
# Completed
If I do an iptables-save > firewall-config this is
what the file ends up with:
# Generated by iptables-save v1.3.0 on Tue Feb 7
18:15:27 2006
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [48:2884]
:RH-Firewall-1-INPUT - [0:0]
-A FORWARD -j RH-Firewall-1-INPUT
-A INPUT -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any
-j ACCEPT
-A RH-Firewall-1-INPUT -p ipv6-crypt -j ACCEPT
-A RH-Firewall-1-INPUT -p ipv6-auth -j ACCEPT
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp
--dport 5353 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j
ACCEPT
-A RH-Firewall-1-INPUT -m state --state
RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m
tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m
tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with
icmp-host-prohibited
COMMIT
# Completed on Tue Feb 7 18:15:27 2006
I'd like to get rid of this and start all over again:
# Completed on Fri Jan 27 06:22:49 2006
# Generated by webmin
#*
# Forward HTTP connections to Squid proxy
-A PREROUTING -p tcp -m tcp -s 8080 --dport 80 -j
REDIRECT --to-ports 3128
COMMIT
becasue I think it is messing me up! Is there a way of
"deleting" the script and iptables making me a nice
new one without any errors?
Thank you so much for your time
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
