Linux Security Cookbook [Electronic resources] نسخه متنی

Recipe 2.19 Saving a Firewall Configuration

2.19.1 Problem

You want to save your firewall
configuration.

2.19.2 Solution

Save your settings:

For
iptables
:

# iptables-save > /etc/sysconfig/iptables

For ipchains:

# ipchains-save > /etc/sysconfig/ipchains

The destination filename is up to you, but some Linux distributions
(notably Red Hat) refer to the files we used, inside their associated
/etc/init.d scripts.

2.19.3 Discussion

ipchains-save and iptables-save
print your firewall rules in a text format, readable by
ipchains-restore
and
iptables-restore, respectively. [Recipe 2.20]

Our recipes using iptables-save, iptables-restore, ipchains-save, and ipchains-restore will work for both Red Hat and SuSE. However, SuSE by default takes a different approach. Instead of saving and restoring rules, SuSE builds rules from variables set in /etc/sysconfig/SuSEfirewall2.

2.19.4 See Also

iptables-save(8), ipchains-save(8), iptables(8), ipchains(8).