[CentOS] Help: Server security compromised?

Wed Aug 6 06:26:46 UTC 2008
Morten Nilsen <morten at runsafe.no>

Bent Terp wrote:
> On Wed, Aug 6, 2008 at 7:48 AM, Noob Centos Admin
> <centos.admin at gmail.com> wrote:
>> /sbin/iptables -A RH-Firewall-1-INPUT -s -j DROP
> I'd recommend you add the extra rules by editing
> /etc/sysconfig/iptables instead. At least that way you can be sure
> they'll survive restarts off iptables.

I rather prefer to add rules using the command and then issuing
service iptables save
when I'm adding one or two simple rules..
If completely redesigning the firewall or adding in many complex rules,
then I edit the iptables file.

Cheers, Morten