[SOLVED] iptables - New install, existing conf

Question

I copied my /etc/iptables/iptables.rules to my new install but the rules arn't being read.
[root@host ~]# iptables -nvL
Chain INPUT (policy ACCEPT 76 packets, 5793 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 68 packets, 8988 bytes)
pkts bytes target prot opt in out source destination
GNU nano 2.2.6 File: /etc/conf.d/iptables
# Configuration for iptables rules
IPTABLES_CONF=/etc/iptables/iptables.rules
IP6TABLES_CONF=/etc/iptables/ip6tables.rules
First few lines of my rules file...
GNU nano 2.2.6 File: /etc/iptables/iptables.rules
# Generated by iptables-save v1.4.12.1 on Tue Sep 20 08:26:18 2011
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [40:5840]
-A INPUT -i lo -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
I've rebooted a few times since and restarted the iptables service but still no joy.  Any ideas?
Last edited by Swarfega (2013-02-06 20:13:30)

Answer 1

Well not sure if you meant to, but the loaded rules are technically identical to your rules file. You forgot to change:
:INPUT ACCEPT [0:0]
to
:INPUT DROP [0:0]
Could just be that netfilter is being smart and leaves out "extra" rules.