[CentOS] Understanding iptables

Fri Jul 11 02:49:31 UTC 2008
Filipe Brandenburger <filbranden at gmail.com>

On Thu, Jul 10, 2008 at 10:42 PM, Robert Spangler
<mlists at zoominternet.net> wrote:
> Could you post /etc/sysconfig/iptables?

/etc/sysconfig/iptables doesn't necessarily reflect what is running
right now, and you can't include the counters with it.

An acceptable compromise would be posting the output of the
"iptables-save -c" command, which doesn't have the two issues above.

However, I still think that anyone handling firewalls on Linux using
iptables should be familiar with the output of "iptables -nvL" which
IMO is quite useful itself.

Filipe