> To prove that you have unmodified versions of the script, simply run > rpm -V initscripts > and it should not list the ifup script as modified. The output is > explained in "man rpm". The only thing that came back was "..5....T c /etc/initab" ls /etc/sysconfig/ip* produced "/etc/sysconfig/iptables" iptables-save produced (I added the line between each actual line of code for ease of reading): #Generated by iptables-save v1.2.7a on Fri Aug 8 16:26:33 2003 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [164654:11246312] :RH-Lokkit-0-50-INPUT - [0:0] -A INPUT -j RH-Lokkit-0-50-INPUT -A FORWARD -j RH-Lokkit-0-50-INPUT -A RH-Lokkit-0-50-INPUT -i lo -j ACCEPT -A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 0:1023 --tcp-flags SYN,RST,ACK SYN -j REJECT --reject-with icmp-port-unreachable -A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 2049 --tcp-flags SYN,RST,ACK SYN -j REJECT --reject-with icmp-port-unreachable -A RH-Lokkit-0-50-INPUT -p udp -m udp --dport 0:1023 -j REJECT --reject-with icmp-port-unreachable -A RH-Lokkit-0-50-INPUT -p udp -m udp --dport 2049 -j REJECT--reject-with icmp-port-unreachable -A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 6000:6009 --tcp-flags SYN,RST,ACK SYN -j REJECT --reject-with icmp-port-unreachable -A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 7100 --tcp-flags SYN,RST,ACK SYN -j REJECT --reject-with icmp-port-unreachable COMMIT #Completed on Fri Aug 8 16:26:33 2003 -- Thanks! dmc :-D ~~~~~~~~~~~~~~~~~~~~~~~~~ | Jesus === Freedom | ~~~~~~~~~~~~~~~~~~~~~~~~~ -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list