ipchains-restore is somewhat picky when it comes to parsing the file saved
with ipchains-save. If a human intends to edit that file, almost for sure
she will insert blank lines. The default startup script for ipchains
already allows for comments in /etc/sysconfig/ipchains. But it will fail to
properly filter comments starting with spaces, or empty lines. The normal
grep would be:
grep -v "^[[:space:]]*#" | grep -v "^[[:space:]]*$"
instead of grep -v "^#"
Created attachment 207 [details]
Patch to /etc/rc.d/init.d/ipchains, to properly exclude comments and new lines from $IPCHAINS_CONFIG
Incorporated directly into ipchains-1.3.9-10. Thanks for the patch.