Linux ipchains configuration

Hi Dan,

Thanks for your reply. Well the reason why I think its ipchains is because the file name I copy pasted the config above from is called:ipchains

And there is no iptables file in the /sysconfig directory (only one file named iptablesnose).

So all I do is add those two lines to the ipchains file correct? Then how do I activate or restart it.

Thanks,

Wally

Ok dan I just double checked and there are two more files that have iptables in the name:

iptables_back
iptables-config

Not sure if this makes a difference on what file I have to configure or not.

Wally

IP-Chains was replaced by IP-Tables in the 2.4 version of the Linux Kernel in 2001! So, if you really are using ipchains, you need to find out where they are being set and migrate them to iptables (unless you're still running a 2.2 kernel.

So, let's do some investigating:

Part 1) What kernel and packet filter are you really using?
 a) run the command "uname -r" to get your kernel version... if it starts with a 2.2, ipchains is actually right for you. If it starts with 2.4, you're still very out of date, and should migrate to iptables. if it starts with 2.6, your kernel is a "modern" one and you are definitely already using iptables, as ipchains wasn't grandfathered into the 2.6 kernel.
 b) regardless of the output above, let's see which you're using. Run BOTH of the the commands "iptables -L" and "ipchains -L"  If each provides output, then post it here. If one or the other says the command is not found, post that result here as well. Also, for each one that runs without error, also run the same command with a -V option (e.g. "iptables -V" and/or "ipchains -V")

Part 2) Where are you getting these existing rules from?
 a) default (or more correctly, startup) iptables are stored at /etc/sysconfig/iptables.
 b) default / startup ipchains are NORMALLY stored at /etc/ipchains.rules

Both of the above are controlled by startup scripts, so...
 c) find out the default "runlevel" for your system by running the command "grep initdefault /etc/inittab | grep -v '^#' ". The output should look like:
    id:3:initdefault:
if that IS your output line, then your default runlevel is 3 -- if the 3 above is a 2 or 5, that is normal but your default runlevel is a 2 or 5... you need this number though for the next step:
 d) list the startup files for your runlevel by running the command "ls /etc/rc3.d/S*" (only using YOUR runlevel in place of the 3 I used here).
 e) lastly, please post the contents of the startup file for either ipchains or iptables by capturing the output of "cat /etc/rc3.d/S??ip*" -- this will be kind long, as it is a startup/shutdown control script file...

We'll go from there...
 
So, to reiterate -- please post the following:
 - Your kernel level
 - Your ipchains and/or iptables version (output of -V) and current status (output of -L)
 - Your default runlevel (probably 2, 3, or 5)
 - Your list of startup scripts -- at least the ones for iptables and/or ipchains
 - The contents of your startup ipchains or iptables script

I'll await your reply!

Dan
IT4SOHO

Wow thats pretty complete Dan, well I got it working with the info you gave me, thanks!