I believe you have to have COMMIT as the last line of your /etc/sysconfig/iptables. This is commit the changes. Ryan -----Original Message----- From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of Jessica Zhu Sent: Friday, May 13, 2005 3:12 PM To: redhat-list@xxxxxxxxxx Subject: iptables help Hi, I tried to customize and set up firewall using iptables on Red Hat Enterprise Linux ES release 3. The file /etc/sysconfig/iptables got edited. After I finished editing, I restarted service using /etc/init.d/iptables restart or service iptables restart. However, though it's got successfully restarted, when I checked the status, none of my editing taking effection. It's weired. For example, the default chain INPUT, OUTPUT and FORWARD all are ACCEPT, down in new iptables I edited, it's like as follows, *filter :INPUT DROP :FORWARD DROP :OUTPUT ACCEPT [0:0] But nothing take effection after iptables got restarted. What happened? Jessica -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list