Firewall not getting displayed

Parshwa Murdia b330bkn at gmail.com
Fri Jul 23 14:33:43 UTC 2010


On Fri, Jul 23, 2010 at 6:11 PM, JB <jb.123abc at yahoo.com> wrote:

> some sanity checks (I am on Fedora 13; it is up to date):
> root at localhost jb]# ls -al /etc/sysconfig/ip*tables
> -rw-------. 1 root root 416 Jul 23 13:52 /etc/sysconfig/ip6tables
> -rw-------. 1 root root 411 Jul 23 13:52 /etc/sysconfig/iptables


My results for the command:

[root at localhost ~]# ls -al /etc/sysconfig/ip*tables

is:

-rw-------. 1 root root 784 2010-07-07 14:40 /etc/sysconfig/ip6tables
-rw-------. 1 root root 742 2010-07-07 14:40 /etc/sysconfig/iptables


> [root at localhost jb]# cat /etc/sysconfig/ip*tables
> # Firewall configuration written by system-config-firewall
> # Manual customization of this file is not recommended.
> *filter
> :INPUT ACCEPT [0:0]
> :FORWARD ACCEPT [0:0]
> :OUTPUT ACCEPT [0:0]
> -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> -A INPUT -p ipv6-icmp -j ACCEPT
> -A INPUT -i lo -j ACCEPT
> -A INPUT -j REJECT --reject-with icmp6-adm-prohibited
> -A FORWARD -j REJECT --reject-with icmp6-adm-prohibited
> COMMIT
> # Firewall configuration written by system-config-firewall
> # Manual customization of this file is not recommended.
> *filter
> :INPUT ACCEPT [0:0]
> :FORWARD ACCEPT [0:0]
> :OUTPUT ACCEPT [0:0]
> -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> -A INPUT -p icmp -j ACCEPT
> -A INPUT -i lo -j ACCEPT
> -A INPUT -j REJECT --reject-with icmp-host-prohibited
> -A FORWARD -j REJECT --reject-with icmp-host-prohibited
> COMMIT


For this command,

[root at localhost ~]# cat /etc/sysconfig/ip*tables

the result is,

# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m ipv6header --header ah -j ACCEPT
-A INPUT -m ipv6header --header esp -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 5353 -d ff02::fb -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 631 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 137 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 138 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp6-adm-prohibited
-A FORWARD -j REJECT --reject-with icmp6-adm-prohibited
COMMIT
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p ah -j ACCEPT
-A INPUT -p esp -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 5353 -d
224.0.0.251 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 631 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 137 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 138 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT


> # [root at localhost jb]# yum list *system-config-firewall*
> Loaded plugins: fastestmirror, langpacks, presto, priorities, protect-packages,
>              : refresh-packagekit
> ...
> Installed Packages
> system-config-firewall.noarch             1.2.25-1.fc13         @updates-testing
> system-config-firewall-base.noarch        1.2.25-1.fc13         @updates-testing
> system-config-firewall-tui.noarch         1.2.25-1.fc13         @updates-testing


For the following command,

[root at localhost ~]# yum list *system-config-firewall*

the result is,

Loaded plugins: protectbase, refresh-packagekit
0 packages excluded due to repository protections
Installed Packages
system-config-firewall.noarch                 1.2.16-3.fc11             @updates
system-config-firewall-tui.noarch             1.2.16-3.fc11             @updates
You have new mail in /var/spool/mail/root

Don't know what could be the error!

Regards,
Parshwa Murdia


More information about the users mailing list