kadischi post failed -- Reposted here -- iptables always started no matter what

j.e.aneiros jesus.aneiros at gmail.com
Fri Aug 26 21:34:29 UTC 2011


On Fri, Aug 26, 2011 at 5:14 PM, Phil Meyer <pmeyer at themeyerfarm.com> wrote:

> Please tolerate this post intended for the livecd-creator list.  They
> are bouncing me now days.  Maybe its time I changed deodorant?  I dunno ...
>
> I am desperate!
>
> ---
>
> livecd-tools-15.7-1.fc15.x86_64
>
> Kickstarts all contain:
>
> firewall --disabled
> selinux --disabled
>
> I even went as far as this:
>
> %packages
> ---
> [stuff deleted]
> ---
> -system-config-firewall*
>
> and
>
> %post
> ---
> [stuff deleted]
> ---
> /sbin/chkconfig iptables off
> /sbin/chkconfig ip6tables off
> echo '#' > /etc/sysconfig/iptables
> echo '#' > /etc/sysconfig/ip6tables
> echo '#' > /etc/sysconfig/iptables-config
> echo '#' > /etc/sysconfig/ip6tables-config
> echo "#\n--disabled" > /etc/sysconfig/system-config-firewall
> %end
>
>
> Could you use service iptables stop and service ip6tables stop ?

You could also use chkconfig to deactivate the firewalls

--aneiros

What happens is that /etc/sysconfig/iptables, /etc/sysconfig/iptables,
> and /etc/sysconfig/system-config-firewall ALWAYS get recreated AFTER
> %post runs!
>
> That causes the iptables kernel modules to load, and filtering started,
> even though iptables is actually configured for off and does not start.
>
> What is doing that?  I cannot find it.
>
> Any help is appreciated.
>
> Thanks!
> --
> users mailing list
> users at lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
>



-- 
J. E. Aneiros
GNU/Linux User #190716 en http://counter.li.org
perl -e '$_=pack(c5,0105,0107,0123,0132,(1<<3)+2);y[A-Z][N-ZA-M];print;'
PK fingerprint: 5179 917E 5B34 F073 E11A  AFB3 4CB3 5301 4A80 F674
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/users/attachments/20110826/e88f309e/attachment.html 


More information about the users mailing list