Tom Brown wrote:
thanks - once added do i need to do anything to make these 'live' ? I
imagine that a iptables restart will cut off current connections ? Is
there not a 'reload' or similar?
The moment you run iptables to add a rule, that rule becomes live.