How to configure iptables at boot?

[beansbaxter]

I just installed DA onto CentOS 5.5.

I was unable to access the server or the DA login page, however from these instructions, I typed in the following and was able to get things working:

# /sbin/service iptables stop
# /sbin/chkconfig iptables off

When I restart my server, I have to type that in every time in order to access the server. How can I make it so every time the server boots, it keeps access open?

Is there any security issue I have to be concerned about by keeping iptables stopped and off?

Thanks.

 

[tomtom901]

You could install something like CSF and add your IP to the whitelist?

Or, you could try this, but it will be gone on the next reboot unless you import iptables from a file.

/sbin/iptables -A INPUT -i eth0 -s yourip -j ACCEPT

 

[beansbaxter]

Yeah, I was looking at installing CSF.

I would prefer to just keep port 2222 open and calls to Apache open. If you go to the IP address, the "Apache is functioning normally" page doesnt even come up. And I want to be able to access DA from wherever I may be.

 

[tomtom901]

Drop me a PM with an e-mailaddress if you'd like. I'll install CSF and configure it for you if you'd like.

 

[beansbaxter]

I just installed CSF. Does CSF override the built in firewall that comes with CentOS?

 

[beansbaxter]

Well, sweet! I installed CSF, rebooted the server, and voila everything is working great. I did not have to stop iptables to access the server.

Thanks! I appreciate the help!

 

[tomtom901]

I just installed CSF. Does CSF override the built in firewall that comes with CentOS?

CSF is just an appliance that can communicate with IPTables. When you do iptables -L, you will see your iptables rules inserted from CSF.

Don't forget to disable testing mode!