iptables rule disappear after restart the service

Hi all,

I use Fedora core 3

i use iptables -L then show a list of rules that running,
then i try to add new rule, and /etc/rc.d/init.d/iptables restart .
I use iptables -L, there is nothing rule i can see~ why ??

(E-Mail Removed) writes:

>Hi all,

>I use Fedora core 3

>i use iptables -L then show a list of rules that running,
>then i try to add new rule, and /etc/rc.d/init.d/iptables restart .
>I use iptables -L, there is nothing rule i can see~ why ??

Because iptables does not memorize everything you tell it. It places it in
short term storage. When you restart, it reads what it needs from long term
storage ( the disk) and since you did not place your changes into long term
storage, it is gone.

In comp.os.linux.networking Unruh <unruh-(E-Mail Removed)>:
> (E-Mail Removed) writes:

>>Hi all,

>>I use Fedora core 3

>>i use iptables -L then show a list of rules that running,
>>then i try to add new rule, and /etc/rc.d/init.d/iptables restart .
>>I use iptables -L, there is nothing rule i can see~ why ??

> Because iptables does not memorize everything you tell it. It places it in
> short term storage. When you restart, it reads what it needs from long term
> storage ( the disk) and since you did not place your changes into long term
> storage, it is gone.

Indeed, though he can utilize the system init script to do just
that:

# /etc/init.d/iptables
Usage: /etc/init.d/iptables
{start|stop|restart|condrestart|status|panic|save}

# lsb_release -d
Description: Fedora Core release 5 (Bordeaux)

Should be the same on FC3 and an additional ncurses tool called
'lokkit' allowing for easy configuration suitable for some basic
firewall. Or just read the iptables script what it does.

BTW
Would be nice if the OP could stop multi-posting, seems another
G/2 cancer? Don't they tell how to cross-post and does it work
with their interface? Taking into account it is after a few years
still labeled "beta"?

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo (E-Mail Removed) | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 389: /dev/clue was linked to /dev/null