Most of you know that you need to save your iptables changes using service iptables save before rebooting on Redhat, or else you\u2019lllose all your rules. I brought up the setting IPTABLES_SAVE_ON_STOP to \u201cyes\u201d in \/etc\/sysconfig\/iptables-config. There\u2019s some pretty cool settings in there . Read on for details.<\/p>\n
The file \/etc\/sysconfig\/iptables-config provides a place to configure the behavior of the iptables initscript in \/etc\/init.d\/iptables. The file is documented very well, so give it a quick read. Here\u2019s some of the more interesting settings:<\/p>\n
* IPTABLES_SAVE_ON_STOP \u2013 this defaults to \u201cno\u201d. When set to \u201cyes\u201d, every time the initscript is called with the argument of \u201cstop\u201d (whether via command line or via system shutdown), the initscript will take the current iptables ruleset and dump it into \/etc\/sysconfig\/iptables. Essentially, this is doing a service iptables save behind the scenes when you do a service iptables stop. This is great for sysadmins who get distracted often and forget to commit their iptables commands to persistent storage often.
\n * IPTABLES_SAVE_ON_RESTART \u2013 defaults to \u201cno\u201d. When set to \u201cyes\u201d, it does the exact same thing as IPTABLES_SAVE_ON_START except this does a save operation when the initscript is called with the \u201crestart\u201d option.
\n * IPTABLES_SAVE_COUNTER \u2013 defaults to \u201cno\u201d. Everytime service iptables save is called (including in the two cases above), the rule and chain counters are saved to the file, and restored on startup. This prevents your counters from being reset every time you restart the service.
\n * IPTABLES_STATUS_NUMERIC \u2013 defaults to \u201cyes\u201d. When you do a service iptables status, this will print IP\u2019s instead of hostnames when set to \u201cyes\u201d. When set to \u201cno\u201d, it will do reverse DNS lookups on all the IP\u2019s and \/etc\/services lookups on all ports.
\n * IPTABLES_STATUS_VERBOSE \u2013 prints packet and byte counters in the output of service iptables status.<\/p>\n","protected":false},"excerpt":{"rendered":"
Most of you know that you need to save your iptables changes using service iptables save before rebooting on Redhat, or else you\u2019lllose all your rules. I brought up the setting IPTABLES_SAVE_ON_STOP to \u201cyes\u201d in \/etc\/sysconfig\/iptables-config. There\u2019s some pretty cool settings in there . Read on for details. The file \/etc\/sysconfig\/iptables-config provides a place to… <\/p>\n