[CentOS-docs] Re: IPTables HowTo (Comment)

[Manuel Wolfshant]

Ned Slider wrote:
> Ned Slider wrote:
>> Manuel Wolfshant wrote:
>>> Oh, yes, please add a note about "at now + 5 minutes pretty please 
>>> disable firewall". It's simple, effective, useful. Safety nets are 
>>> needed.
>>>
>>
>> Something like this maybe:
>>
>> echo 'service iptables stop' | at now + 5 minutes
>>
>> One issue with this approach being that the at package isn't always 
>> installed by default so may not be present on all systems.
>>
>
> SELinux doesn't like this approach either >:)
worked like a breeze here:
[root at pc39 ~]# echo 'service iptables stop' | at now + 1 minutes
job 2 at 2008-08-25 16:02
[root at pc39 ~]# service iptables status
Table: nat
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination
1    MASQUERADE  all  --  192.168.122.0/24     0.0.0.0/0

[...]
[root at pc39 ~]# date
Mon Aug 25 16:01:47 EEST 2008
[root at pc39 ~]# service iptables status
Firewall is stopped.
[root at pc39 ~]# date
Mon Aug 25 16:03:42 EEST 2008
[root at pc39 ~]# getenforce
Enforcing


What error did you get ?