Hi, anybody ever seen, that the mangle table only contains: PREROUTING ACCEPT POSTROUTING ACCEPT I thought that isn''t possible. There is a extension script which could have caused that and I just try to find out how. Alex ------------------------------------------------------------------------------ Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today! http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
Alexander Wilms wrote:> Hi, > > anybody ever seen, that the mangle table only contains: > > PREROUTING ACCEPT > POSTROUTING ACCEPT > > I thought that isn''t possible. > > There is a extension script which could have caused that and I just try to find out how.I''ve not seen that happen. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today! http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
Hi Tom, thanks for your answer. Am I right that those are build-ins and should be undeletable? Alex ----- Ursprüngliche Mail ----- Von: "Tom Eastep" <teastep@shorewall.net> An: "Shorewall Users" <shorewall-users@lists.sourceforge.net> Gesendet: Montag, 22. Juni 2009 20:24:52 GMT +01:00 Amsterdam/Berlin/Bern/Rom/Stockholm/Wien Betreff: Re: [Shorewall-users] General mangle table question Alexander Wilms wrote:> Hi, > > anybody ever seen, that the mangle table only contains: > > PREROUTING ACCEPT > POSTROUTING ACCEPT > > I thought that isn't possible. > > There is a extension script which could have caused that and I just try to find out how.I've not seen that happen. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today! http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users ------------------------------------------------------------------------------ Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today! http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
Alexander Wilms wrote:> Hi Tom, > > thanks for your answer. Am I right that those are build-ins and should be undeletable?I think you can delete them with iptables-restore by simply not including them in the configuration. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today! http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
I tried with a damaged save file: # Generated by iptables-save v1.4.2-rc1 on Mon Jun 22 22:35:44 2009 *mangle :PREROUTING ACCEPT [274328:242392011] :POSTROUTING ACCEPT [284896:29166300] COMMIT # Completed on Mon Jun 22 22:35:44 2009 A restore doesn't touch those chains. But forget it, guess I'll never see it again. ----- Ursprüngliche Mail ----- Von: "Tom Eastep" <teastep@shorewall.net> An: "Shorewall Users" <shorewall-users@lists.sourceforge.net> Gesendet: Montag, 22. Juni 2009 22:06:54 GMT +01:00 Amsterdam/Berlin/Bern/Rom/Stockholm/Wien Betreff: Re: [Shorewall-users] General mangle table question Alexander Wilms wrote:> Hi Tom, > > thanks for your answer. Am I right that those are build-ins and should be undeletable?I think you can delete them with iptables-restore by simply not including them in the configuration. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today! http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users ------------------------------------------------------------------------------ Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today! http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users