Red Hat Bugzilla – Bug 247564
firewall/IPtables changes are not applied
Last modified: 2007-11-30 17:12:10 EST
Description of problem:
Changes applied to firewall settings, such as adding ports, through system-
config-securitylevel are ignored. In a possibly related issue, similar changes
made directly to iptables, although accepted in the table at the time, are
removed on reboot.
Only happens with Fed 7, no issues with Fed 6 or Fed 5.
I note a related bug has been registered where trying to enable/disable the
firewall through this tool fails.
Version-Release number of selected component (if applicable):
Fedor 7. 2.6.21-1.3228.fc7
each time, on both Fedora 7 systems I have running. One system under VMware
server 1.0.3, one system on a Pentium based server platform.
Steps to Reproduce:
1. open system-config-securitylevel (note the extended start up time)
2. add a port, apply or ok the change, close tool.
3. re-open, note that change has not applied.
4. do iptables -L, note the change is not listed
5. add the port through iptables, eg:
iptables -A <chain> -p tcp --dport <some port> -j ACCEPT
6. do iptables -L, note that change is listed.
7. reboot, do iptables -L, note that any changes have been removed.
As described above. Even when the change is listed in the table the system
will not allow access through the sepcified port.
Port change is accepted and enabled.
This is the same as bug 247544.
Agreed. Missed that one.
*** This bug has been marked as a duplicate of 247544 ***