Running into a wall with Iptables.rules

dunix · 2004-09-07 09:21:43

I trying to set up an arch box with 2 NIC's and get another arch box to get forward to the internet via the first box, i have installed iptables and config'd rc.conf as it needs to be

But when i try to /etc/rc.d/iptables start it says Cannot load iptables rules: /etc/iptables/iptables.rules is missing!

and i have a iptables.rules file taken from simple_firewall

# this drops all tcp connections not in established or related state
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -j DROP
COMMIT

Could any of you give me a poke in the right direction ?

IceRAM · 2004-09-07 18:48:31

Note: I have no idea what's the format of iptables.rules (and I have no reason to learn this since there is iptables-save/load)

1. use an application to build the firewall rules (gShield/Firestarter/KMyFirewall)
2. once you have everything set, use

iptables-save > /etc/iptables/iptables.rules

3. now you have the previously generated rules saved so that they can be loaded every time your computer boots with the iptables daemon (it's actually a script which calls iptables-load

dunix · 2004-09-08 06:12:32

Hmm, im trying to make my server run without X, so would be nice if it could be done without it.

ghostwalker · 2004-09-08 06:18:01

I find that using a gui to setup a firewall is much easier. I use firestarter. It is simple and sets up more than the firewall parameters also some sysctrl parms.

Walt

ghostwalker · 2004-09-08 06:18:46

This site may be of help also:

http://jetblackz.freeprohost.com/

IceRAM · 2004-09-08 08:38:08

dunix wrote:

Hmm, im trying to make my server run without X, so would be nice if it could be done without it.

Use gShield (you can find the PKGBUILD) by searching the forums. It is completely config file based, also suitable for servers.

cactus · 2004-09-09 02:44:13

or...just use iptables...
the rules really aren't that bad..

dunix · 2004-09-09 05:44:58

Right but i tryed to use iptables, but it didn't want to start, it said the .rules file was missing tho it was there...

cactus · 2004-09-09 18:23:12

that is only because it is trying to load a saved iptables rule-set. As part of the iptables install, there should be a file in there called something like rules.basic or something (in the same directory). Just rename this file to what you need (iptables.rules) and then start iptables. Then you can begin creating your ruleset.

I generally prefer to make a shell script (bash) that has my rules in it. The first part of the script clears old rules out, then starts creating the new rules.
This way you can incrementally add things, and even test them on another machine.

Arch Linux

#1 2004-09-07 09:21:43

Running into a wall with Iptables.rules

#2 2004-09-07 18:48:31

Re: Running into a wall with Iptables.rules

#3 2004-09-08 06:12:32

Re: Running into a wall with Iptables.rules

#4 2004-09-08 06:18:01

Re: Running into a wall with Iptables.rules

#5 2004-09-08 06:18:46

Re: Running into a wall with Iptables.rules

#6 2004-09-08 08:38:08

Re: Running into a wall with Iptables.rules

#7 2004-09-09 02:44:13

Re: Running into a wall with Iptables.rules

#8 2004-09-09 05:44:58

Re: Running into a wall with Iptables.rules

#9 2004-09-09 18:23:12

Re: Running into a wall with Iptables.rules

Board footer