Iptables configuration won't stick

I followed wiki and configured iptables firewall like this:
iptables-restore < /etc/iptables/empty.rules
iptables -N TCP
iptables -N UDP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
iptables -P INPUT DROP
iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
iptables -A INPUT -p udp -m conntrack --ctstate NEW -j UDP
iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
iptables -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
iptables -A INPUT -p tcp -j REJECT --reject-with tcp-rst
iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable
iptables -I TCP -p tcp -m recent --update --seconds 60 --name TCP-PORTSCAN -j REJECT --reject-with tcp-rst
iptables -D INPUT -p tcp -j REJECT --reject-with tcp-rst
iptables -A INPUT -p tcp -m recent --set --name TCP-PORTSCAN -j REJECT --reject-with tcp-rst
iptables -I UDP -p udp -m recent --update --seconds 60 --name UDP-PORTSCAN -j REJECT --reject-with port-unreach
iptables -D INPUT -p udp -j REJECT --reject-with icmp-port-unreach
iptables -A INPUT -p udp -m recent --set --name UDP-PORTSCAN -j REJECT --reject-with icmp-port-unreach
iptables -A TCP -p tcp --dport 80 -j ACCEPT
iptables -A TCP -p tcp --dport 21 -j ACCEPT
iptables -A UDP -p udp --dport 53 -j ACCEPT
iptables -A TCP -p tcp --dport 4662 -j ACCEPT
iptables -A UDP -p udp --dport 4665 -j ACCEPT
iptables -A TCP -p tcp --dport 27097 -j ACCEPT
iptables -A UDP -p udp --dport 27097 -j ACCEPT
iptables-save > /etc/iptables/iptables.rules
iptables -D INPUT -j REJECT --reject-with icmp-proto-unreachable
iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable
iptables-save > /etc/iptables/iptables.rules
iptables=/etc/iptables/iptables.rules
And it works fine until I reboot, at which point all settings are back to default

Is your iptables.service starting at boot ?
Last edited by illusionist (2013-05-06 08:28:56)

Similar Messages

  • "Show Script menu in menu bar" setting won't stick

    Hi all,
    I'm starting some Applescript development, and I'd like to make some scripts available in the Scripts menu. I checked the box to "Show Script menu in menu bar" from within the prefs for AppleScript Editor, but it doesn't work. When I close AppleScript Editor, relaunch it, and look at the prefs again, the box is unchecked. I deleted the relevant preference files from my Library and recreated them by launching AppleScript Editor, but the setting just won't stick.
    Any ideas?
    -Tim

    Taylor,
    The preference that I'm looking at is within AppleScript Editor, the program I use to write new AppleScripts. Script Editor was the previous name of the same application. When I check the "Show Script menu in menu bar" in the AppleScript Editor prefs and close with window. The box is unchecked the next time I open the AppleScript Editor application, and the Script menu never appears in my menu bar. Everything works fine on my iMac at home. The problem seems to be isolated to my MBP. Weird.
    -Tim

  • License key won't "stick"

    Hi, I'm administering a Contribute site for about 20 users. I
    installed and licensed all of my authors' copies of 3.0 without
    incident with one exception: one user's license key won't
    "stick"--she's prompted for the license number every time she opens
    Contribute. It lets her in each time, but it's obviously a pain for
    her to have to do this every time. The only thing different about
    her workstation that we can think of is that she has Adobe Acrobat,
    and others don't. Would there be a conflict between Adobe software
    license numbers? It's all I could think of...

    Sien,
    Virtually every time this question comes up, it's a matter of pilot error. You'll need the hyphens. Also make sure that you properly distinguish between zeros and O's, and ones and lower case L's. A hard-to-read typeface was chosen for the serial number on iWork '05. The zeros should have a dot in the center.
    When you get it right, the submit button will be active.
    -Dennis

  • Configuration framework system error - the configurable won't be loaded

    Hi, I have followed the tutorial on how to url=https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/kmc/Implementing%20Resource%20List%20Filters%20for%20Flexible%20UI%20Navigation/index.htm]Implement a Resource List Filters for Flexible UI Navigation[/url]
    When uploading my par file into the portal, I get following error in the defaulttrace file, although the filter works :
    <i>[synchronizer_(config://install/cm/services/resourcelistfilter)_(source:config://import/install/data/cm/services/resourcelistfilter)] cannot load [(configurable: SimpleTbpResourceListFilter:ResourceListFilter)] : ConfigException: Configuration framework system error: "id consistency error on [SimpleTbpResourceListFilter != SimpleTBPResourceListFilter] : the configurable won't be loaded ! please, check file name..."</i>
    Seems like it's related to the configuration of the .co.xml file. Like in the tutorial I have created this file in location src.config - install - date - cm - services - resourcelistfilter (this folder had to be created manually, not generated by the RF wizard).
    <u><b>_simple_tbp_resource_list_filter.co.xml</b></u>
    <?xml version="1.0"  encoding="UTF-8" ?>
    <!-- file generated by configuration framework 03.03.2005 17:09:00 -->
    <Configurable configclass="ResourceListFilter">
    <property name="classname" value="z.imec.flexsort.filter.SimpleTBPResourceListFilter"/>
    <property name="description" value="A sample implementation of a resource list filter. Filters out documents with TBP Valid From and Valid To properties."/>
    <property name="alias" value="SimpleTBPResourceListFilter"/>
    </Configurable>
    <u><b>configArchive.properties</b></u>
    # com.sap.portal.pdk.srv.config
    ca.name=SimpleTBPResourceListFilter.prjconfig
    ca.version=6.0.1.1
    ca.creation.time=1708
    ca.creation.date=20070425
    ca.creation.user=Kevin Laevers
    ca.creation.machine=unknown
    ca.dependencies: bc.util.prjconfig, bc.sf.prjconfig, bc.sf.service.prjconfig, bc.rf.prjconfig
    cma.name=SimpleTBPResourceListFilter.prjconfig
    cma.version=6.0.1.1
    cma.storage=sfs
    cma.creation.time=1708
    cma.creation.date=20070425
    cma.creation.user=Kevin Laevers
    cma.creation.machine=unknown
    cma.dependencies: bc.util.prjconfig, bc.sf.prjconfig, bc.sf.service.prjconfig, bc.rf.prjconfig
    Any idea on the message in the defaulttrace file?
    Thanks :o)
    Kevin

    Hello,
    Can you please explain what exactly the issue? I'd like to know any issues you are having with the video workflow.
    Thanks,
    Vish

  • Boldface won't "stick" in database document

    I'm using a large database document in AppleWorks in which some text is boldfaced. Boldface won't "stick" in those fields now -- if I boldface some text, it returns to lightface as soon as I move out of the field. If I enter a field where the text is already boldfaced, it immediately returns to lightface. I've tried closing the document, restarting AppleWorks and restarting the computer, and the problem continues.
    I'm running a MacBook with OSX v. 10.4.11 and AppleWorks 6.2.9.
    Thanks for any help.

    "Is there a way to export all of the data in the file to a new file without copying and pasting pieces of it or carrying over the corrupt data?"
    Create a new DB document with the same fields in the same order as the old one.
    Open the old one, show all records in "List" view.
    Go file > Save as... ASCII Text (or Text, whichever is available in the list of Save as choices).
    Switch to the new DB
    Click on the single (empty) record in the DB to select it, then go Edit > Clear to delete the record.
    Go file >Insert... to open the Open dialogue.
    Navigate to and select the Text file you saved above. Click Open.
    Check to see that the imported data has gone into the correct fields. If it has, you're done. If it hasn't, then the Tab order of the fields in the two DBs does not match. Revise the tab order of one so that they are the same in both DBs, then repeat the process above.
    Regards,
    Barry

  • Color profile won't stick.

    Since I installed a Matrox M9125 graphics card, colour profiles set in "Color Management" won't stick. The default "Device" for "Common Management" is "Display: Generic Non--PnP Monitor - Matrox M9125PCIe x16". When I select my actual monitor (NEC 2690) from the Device drop down list profiles appear - including one I have made using an Eye-One Display 2 - and I can set it as the default one. However, when I re-open "Color Management" the profile I just set is gone, the profile list is empty and the Device is back to the Generic PnP ...display etc.
    The profiles worked fine in my previous vga card (Nvidia) and stayed selected.
    I have Vista Ultimate 32Bit and CS3.
    Grateful for any help on this.
    David

    Hi,
    I just want to sympathise with the China/Printer issue.
    Most of my artwork goes over there and I want to rip my hair out with every new job. Steve is right that we as artists really should go by the printer's specs, but when dealing with a language barrier, not to mention a 12 hour time difference it's so far been imposssible for me to do. I keep a Pantone color picker at my desk and manually enter in the CMYK values. It doesn't always work though.
    About your problem, the only thing I can think of is that you have images in your file that were RBG when placed in your file. It might not be what's going on, but something to check anyway.  
    Good luck,
    Cherie

  • Mail settings won't stick, how to fix?

    The column settings in Mail suddenly won't stick. Probably a corrupt preference? What's the best way to deal with the problem?
    Thanks,
    iHope

    Well, in theory, if we backup the whole shmeer, we can at least go back to where we are now...
    Quit Mail. First I'd backup these two Mail folders, by right clicking on them in the Finder, then choose Archive/Compress.
    Users/YourUserName/Library/Mail
    Users/YourUserName/Library/Mail Downloads
    Right click on that Mail folder, choose archive, you'll get everything in the folder, and the folder itself in a file called Mail.zip, move it to a safe place, same for the Mail Downloads folder... only the plist is separate.
    Try dragging this file to the desktop in case we need to put it back later...
    /Users/YourUserName/Library/Preferences/com.apple.mail.plist
    (May or may not require you to setup your account(s) again.)
    Then In your home folder, try moving this +folder & file+ to the Desktop then reboot...
    First, Safe Boot from the HD, (holding Shift key down at bootup), run Disk Utility in Applications>Utilities, then highlight your drive, click on Repair Permissions, then move these +folder & file+ to the Desktop.
    Move this Folder to the Desktop...
    /Users/YourUserName/Library/Caches/Mail/
    Move this file to the Desktop...
    /Users/YourUserName/Library/Mail/Envelope Index
    These too...
    /Users/YourUserName/Library/Mail/<[email protected]>/.mboxCache.plist
    /Users/YourUserName/Library/Mail/Mailboxes/.mboxCache.plist
    Reboot.

  • Password for icloud won't stick on iPhone 6

    Settings for icloud repeatedly ask me to enter AppleID Password - it won't stick. I have been noticing lately that it seems to disappear when moving out of wifi and changing over to LTE or even sometimes 4G areas. I've done all the resets, and signed out and into iCloud re-entering my Apple Id & password numerous times. It still disappears after short time. At present I'm unsure whether it happens when in wifi area all the time or not. It's frustrating when every time I reply to an email or txt it asks me to enter A-ID-Psswd-; then I hit cancel and can go ahead and finish the email or txt. I also a few times during the time this box popped up, went into iCloud settings and again the psswd had disappeared!
    I've had this iPhone6 (64GB) for 10 days and it has newest 8.1.1 and this prob has been happening from the beginning.

    It stopped with 8.1.2 update to iOS
    UPDATED INFO: It's back. I called Apple Help desk and they said it's built into iph 6, that the box for password stays blank but the info is STORED INSIDE THE PHONE somplace, so it's really there, even tho' it doesn't appear that it is.
    So even tho' the password box is blank, it's not asking me for the password anymore like it did in the past.

  • Deafult Printer won't "stick" XEROX Phaser 7760GX

    When I set the XEROX Phaser 7760GX IP networked printer as default in system settings, it has reverted to "last used" next time I i look. I have downloaded and installed new printdriver since upgrading to Leopard and it prints fine but won't stick.
    It might be the same problem but in the Adobe CS3 InDesign Print Presets [Deafult] I'm unable to select the Default Printer (Greyed out)

    I have another idea on how to use the old driver. NO guarantees.
    For all who may be reading this -- this is for Yosemite -- it reduces security by relaxing sandboxing. It is a workaround, not a permanent fix.
    Use the Terminal utility to run the two commands below -
    sudo sh -c 'echo "Sandboxing Relaxed" >> /etc/cups/cups-files.conf'
    sudo launchctl stop org.cups.cupsd
    (sudo means superuser do - this is your admin user on OS X. It asks for your password - but it hides it from you when you type - for security)

  • VPN password won't stick

    I enter my VPN password in the Network settings but the password won't stick. I keep getting a dialog box that asks me to re-enter it. This just started to happen. How to fix?
    Thanks in advance,
    Ken

    Hello,
    Is there more than one entry for that account in Keychain Access?
    I mean there should be 2, one for incoming & one for outgoing.
    The Password rejection can confuse people since it's a catch all meaning...
    This Password, Username, Authentication method... is not recognized on this Port to this Server, or a server end problem.
    If using a browser to login via WebMail works it's not Name or Password, but one of the other ones.
    The receiving email ports are:
    IMAP is port 143
    IMAP-SSL is port 993
    POP is port 110
    POP-SSL is port 995
    Outgoing ports are...
    SMTP and SMTP-SSL is on ports 25, 587 and 465. Port 587 has to be SSL, and port 465 is enforced TLS-wrapped and is generally used by Outlook users.
    Is it gMail maybe?
    Gmail send but not receive...
    Here are two steps that have come in handy in related situations
    1) login to gmail on your computer or device via a web browser
    2) once logged in successfully, go to this URL to unlock:
    https://www.google.com/accounts/DisplayUnlockCaptch

  • Setting default Office apps won't stick

    I'm trying to make MS Office X the default for my appilcations, but it keeps reverting to MS Office 2004. (I'm running 10.8.6 on a Mac Pro.)
    I've had "2004" on my drive for many years and "X" for 2-3 years. I've pretty much continued to use 2004 because it's working okay and I haven't had time for something to go wrong. Now I'm trying to make X the default for Word and Excel (I never use Power Point, and I don't want to mess with Entourage right now), but I can't get it to "stick."
    I tried all the usual things, and then started digging around. I realized that my System Preferences showed a plugin called "RCDefaultAPP" that I must have installed at some point. I did a search ofmy drive but couldn't find anything by that name. At this site: http://www.rubicode.com/Software/RCDefaultApp/ I found this about removing the plugin: "Drag RCDefaultApp.prefPane to the trash. Any changed LaunchServices settings remain changed, though "disabled" settings will no longer be disabled." I understand the first sentence, but I have no idea what the second sentence means. So I trashed the icon from my Preferencs Pane, ran "Repair Disk Permissions" just to play it safe, and rebooted. I'm still not getting any further.
    I begin by quitting any version of Word that's open. When I open the "Get Info" windwo from a Word document (or right click on a document and choose "Open With"), it shows the icon for 2004 and says "Microsoft Word (default) (090513)." Under that, as always, it says "Use this application to open all documents like this one." From there I choose "Microsoft Word (10.0.0)" and it shows the new icon. If I close the window and launch the document, it launches "X" as expected. However, if I open another document--whether or not "X" is already open--it launches "2004." I can do this manually with any document and that document will launch "X."
    So, I go back into the "Get info" window and choose "Microsoft Word (10.0.0)" again. This time, however, I click the "Change All" button. As soon as I do this, the icon reverts from "X" to "2004." It just won't stick. The same is true of Excel.
    I haven't messed with any other documents or apps because I'm afraid I'll just mess something up. I've looked up "discussions" in both the Apple community and MS community....I've Googled. I don't see any other discussions about this other than the steps I've just described. I don't know what else to try.
    Thoughts? Help?

    Launch Services can get "temperamental" at times.  For a case like you describe, if it insists of defaulting to app A when you want app B, compress app A (say as a zip file).  This basically tells Launch Services "screw you - now try to find A".
    So compress your Word 2004 app.  The tell LS to use the newer Word.  Even if it doesn't stick I think LS wil find the newer Word since none other can be found for word documents.
    To compress a file, right (control) click on the file in the finder to being up its contextual menu and select Compress.  A .zip file will be created.  You can then trash the uncompressed original.  But before you empty the trash double click the zip to recreate the expanded file and run it just to make sure the zip file was valid (this is a paranoid step).  If it launches ok trash the expanded file and now you can empty the trash.

  • New member: My Settings won't stick; I don't know how to create a signature

    My Settings won't stick; I don't know how to create a signature
    How can I correct these two difficulties please?

    Sorry, not clear. I meant "My Settings" (top right hand corner of FCE Discussions window), not in FCE itself. The time zone setting is accepted but the next time I look it has reverted to USA GMT-8 hours, and some other settings are similarly affected
    and by "signature" I meant some text that always appears at the bottom of Discussions messages, saying somethink like "Mac Pro 2.0 GHz, FCE 3.5" etc. I can't see a place to specify that.
    (But now I see something has appeared!)
    Thanks.
    Message was edited by: Steve Kirk

  • Default paper size won't stick in Snow Leopard

    Hi,
    I have a Mac which prints to a usb laser, which is on the network. Since Snow Leopard the default paper size won't stick. Every time I print I have to change it from US Letter to A4. It's ok on the Mac which host the printer. Both Macs are on Snow Leopard. (I have ensured that the Region is appropriate and set the Default Paper Size in the Printer prefs.)
    Anyone any ideas?

    I had a similar problem and none of the above solutions worked. However, with the help of my daughter, we figured it out (at least it worked for me).
    Go to Apple Preferences/Print & Fax.
    Pick your printer.
    Ensure the 'Default paper size' is correct.
    Click on the 'Options & Supplies' button, then 'Driver'.
    On the Fit to Page menu, choose 'Nearest Size and Scale'
    All the programs now use the default paper and size.
    I hope this helps.
    Don

  • Common toolbar changes won't stick

    acrobat XI common toolbar changes won't stick and are lost when closing acrobat

    This only happens when double clicking a pdf file.  The default common toolbar is opened every time.

  • Apple Configurator won't open.

    I am teacher using a class set of iPads for the first time. I had hoped to use Apple Configurator to sync iPads and manage everything.
    When I first tried, I got the message during the Prepare stage that the Apple ID wasn't authorized. I authorized the MacBook Pro OSX I am using to use the Apple ID I wanted so that worked. Then, I got the error message during the Supervise stage that it cannot install app. I never figured out which one after some trial and error.
    But, NOW Apple Configurator won't open - it says the file might be corrupted, truncated, or in an unexpected format. How can I totally get rid of a file and start again?
      I've tried moving to the trash, emptying the trash and then reinstalling. I've tried restarting my computer. I've tried using both of my iTunes accounts to get it from the App Store and every time I try to open it, the same error message comes up. Is there some temporary or other file that I need to get it out of in order to start new?
    Thanks for your help.

    You can try completely deleting your configurator data folder. This should reset the app to a clean state, but you will lose all device and user data.
    For Configurator 1.2 or later, delete the folder ~/Library/Containers/com.apple.configurator
    For Configurator 1.1 or previous, delete the folder ~/Library/Application Support/com.apple.configurator.

Maybe you are looking for

  • Stack Overlow Exception

    Hi I am using Jdeveloper 11.1.2 . I am getting below exception. Please help me. <LifecycleImpl> <_handleException> ADF_FACES-60098:Faces lifecycle receives unhandled exceptions in phase RENDER_RESPONSE 6 javax.faces.FacesException: javax.servlet.Serv

  • Simple app to view images and do minor editing?

    If I download a photo or two I need an app to view them and do minor editing.  Preview doesn't allow me to save and is cumbersome to use.  i need a simple default image browser...not iPhoto.  Thanks.

  • What's the deal with Mail!

    Hello helpers, What's it with Mail, just added the new security update and need to re-set up all my Mail account. Will this always happen with this application! Mail can be frustrating at times! Anyone knows why this is happen and what can be done to

  • Localhost:8080 redirects to localhost.ie:8080

    Hi All, I am interested in learning more about webservices and have just install Sun Java System Application Server 8. After starting the server, I needed to see if the server and installation went ok. This is done by typing : http:localhost:8080 int

  • Temporary bypass of auto assignment of Inspection type

    I have checked 'auto assignment' in QM master data view.  My goods receipts are generating inspection lots with 01 inspection type.  This is all good.  Is it possible to trick the system not to assign the inspection type in certain cases even though