[CentOS] Firewall will not disable - stumped!

[Earl A Ramirez]

On 7 July 2013 20:57, Bob Metelsky <bob.metelsky at gmail.com> wrote:

> very perplexed here - I need to turn off iptables. Ive tried
>
> service iptables save
> service iptables stop
> chkconfig iptables off
>
> service ip6tables save
> service ip6tables stop
> chkconfig ip6tables off
>
> edited
> OPGX280 ~ # cat  /etc/sysconfig/system-config-firewall
> # Configuration file for system-config-firewall
> --disabled
> --service=ssh
>
> OPGX280 ~ :( # cat  /etc/selinux/config
> SELINUX=disabled
>
> OPGX280 ~ :( # chkconfig |grep ip
> ip6tables       0:off   1:off   2:off   3:off   4:off   5:off   6:off
> ipmievd         0:off   1:off   2:off   3:off   4:off   5:off   6:off
> ipsec           0:off   1:off   2:off   3:off   4:off   5:off   6:off
> iptables        0:off   1:off   2:off   3:off   4:off   5:off   6:off
> ipvsadm         0:off   1:off   2:off   3:off   4:off   5:off   6:off
>
>
> Yet - when I reboot  iptables gets started  - if I run
>
> OPGX280 ~ # /etc/rc.d/init.d/iptables status
> Table: filter
> Chain INPUT (policy ACCEPT)
> num  target     prot opt source               destination
> 1    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp
> dpt:53
> 2    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp
> dpt:53
> 3    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp
> dpt:67
> 4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp
> dpt:67
>
> Chain FORWARD (policy ACCEPT)
> num  target     prot opt source               destination
> 1    ACCEPT     all  --  0.0.0.0/0            192.168.122.0/24    state
> RELATED,ESTABLISHED
> 2    ACCEPT     all  --  192.168.122.0/24     0.0.0.0/0
> 3    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
> 4    REJECT     all  --  0.0.0.0/0            0.0.0.0/0
> reject-with icmp-port-unreachable
> 5    REJECT     all  --  0.0.0.0/0            0.0.0.0/0
> reject-with icmp-port-unreachable
>
>
> Note -->  192.168.122.0/24 is NOT my network, I just want the status to
> tell me iptables is NOT running
>
> What else can I look for??
>
> Thanks
> Bob
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Hi Bob,

I am just shooting in the dark here, have you tried /sbin/iptables -F

-- 
Kind Regards
Earl Ramirez