iptables

[Fitzy]

I am trying to set up iptables, I get this error message and dont' know what to do. Please help.


org.freedesktop.DBus.Python.IOError: Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/slip/dbus/service.py", line 121, in reply_handler
result = method(self, *p, **k)
File "/usr/share/system-config-firewall/fw_dbus.py", line 113, in write
ip6t_status, log) = fw_lokkit.updateFirewall(config, old_config)
File "/usr/share/system-config-firewall/fw_lokkit.py", line 199, in updateFirewall
ip4tables.write(config)
File "/usr/share/system-config-firewall/fw_iptables.py", line 268, in write
shutil.copy2(self.filename, "%s.old" % self.filename)
File "/usr/lib/python2.7/shutil.py", line 127, in copy2
copyfile(src, dst)
File "/usr/lib/python2.7/shutil.py", line 82, in copyfile
with open(dst, 'wb') as fdst:
IOError: [Errno 13] Permission denied: '/etc/sysconfig/iptables.old'


EDIT. I did chmod 777 /etc/sysconfig/iptables.old and it still doesnt work

[Lazydog]

Are you doing this as root?

[Fitzy]

Yes I am. If it help in the diagnostics, I am using the fire wall wizard, being all the iptables stuff I found online aren't very detailed. If you know a good source where I can learn how to write and apply my own iptables that would be great. Otherwise I am stuck with my ACL's, which restricts my mobility.

Than you for your time.

[Lazydog]

IPTABLES Tutorial This is a great place to start. It has an explanation of each command and how it is to be used.

[tboland]

Make sure you turn off SELINUX. That could mess up the python script for the firewall

as root:
setenforce 0


When done:
setenforce 1

to turn selinux back on.

Tom

[Lazydog]

Why does everyone say to turn of SELinux? SELinux is a security measure and one should really learn how to use it instead of just turning it off.

[tboland]

I always turn SELINUX back on, but it makes system development very hard because yo can't easily tell what is causing the problem - what you are doing and what SELinux is doing to get in the middle.

This is especially true of people just getting into Linux.

If you notice, I did not tell them to disable SELinux. I told them to turn it off, fix the problem, then turn it back on.

Personally, I think SELinux is a great idea with a HORRIBLE implementation.

Tom

[Lazydog]

Here is the thing with SELinux, when you shut it off to get something to work once you turn it back on again what ever was being blocked by SELinux will be blocked again so you really haven't fixed/repaired the problem you just went around it. The problem is still there. Better to learn how to fix your SELInux problems.

Besides if it is SELinux that is causing you your problems there is a notice of it so you will know that SELinux was the cause of it.

[Fitzy]

Hey sorry it took me so long.

So, turning off SELINUX, if I dont want to turn it off how do I make it work?

[Lazydog]

You using RH or one of its sisters?