[CentOS] Putting nat routing into place permanently? -- service iptables save

Tim Edwards tim at registriesltd.com.au
Fri Nov 4 02:36:34 UTC 2005


Kai Schaetzl wrote:
> William L. Maltby wrote on Thu, 03 Nov 2005 18:59:33 -0500:

> 
> 
> I think the main point of the discussion got lost in the meantime. It was 
> *not* rc.whatever vs. init.d scripts, but "iptables save" vs. running your 
> own iptables script. There are good reasons to run your own script instead 
> of saving and restarting that saved state and it's quite different in 
> functionality. Whether you then run this script as an init script, from 
> rc.local or yet another startup method is a matter of taste (although 
> init.d clearly has technical/usability advantages).

If you really want a 'neat' way to manage your iptables firewall then 
just use shorewall.

-- 
Tim Edwards



More information about the CentOS mailing list