Running Iptables in linux

ericchan17

whether i can not run the shell script which i created in the file of /etc/sysconfig/iptables. because there is varaible in it.

So how can we run the shell script which created by ourselves

platinum

i think, /etc/sysconfig/iptables is only a shell script, so you should run it by bash or sh.

for example:

1. 
   
2. #named test
   
3. #! /bin/bash
   
4. iptables -vnL
   

复制代码

that's right, you can run it "./test"
but

1. 
   
2. #named test
   
3. iptables -vnL
   

复制代码

that's wrong

your shell script didn't have "#! /bin/bash" at the first line

mocou

1. chmod u+x /your-iptables-shell

复制代码

excute

1. sh /your-iptables-shell

复制代码

or

1. cd /your-iptables-shell-dir
   
2. ./your-iptables-shell

复制代码

放哪里都无所谓啊

ericchan17

you mean i should add the file name of the shell script in the script. what is the meaning of "iptables -vnL"? is it the content of my script.

Now i add "#! /bin/bash" at the first line, and i type "chmod 700 iptables" and "./iptables" to run it.

there is no response for my computer. whether i should wait for long time to reply.

platinum

no no no !!!
说英文好费劲……
你的脚本执行了iptables，而恰恰你的脚本名字也叫iptables，因此实际上进入了一个无穷递归循环嵌套
你把脚本名字改为firewall试试

ericchan17

that is still the same.

When i type "chmod 700 firewall" and "./firewall". there is only show:ip_conntrack version 2.1 (256 buckets,2048 max) -292 bytes per conntrack, and there is no response

platinum

你是在LINUX本机上操作的，还是通过ssh或telnet过去的
如果是后者，所谓的“无反映”现象实际是被你的FIREWALL脚本拦截住了

还是那句话，你首先要知道自己想干什么

ericchan17

i am sure i operate it in the linux. i create the virual machine of linux through using vmware. And i am sure what i want to do.

Now i attempt to use iptables-save and iptables-restore to run it. if it can not run, i will jump into river.(joking)

platinum

troubleshooting一个脚本是很困难的，尤其是一个自己不知道功能和需求的shell

你首先要知道自己要干什么，然后自己写，这样最好，别人的shell不一定适用于你

ericchan17

platinum, thank you.

It is my first time to using iptables to configure home network. it is normal that i can not write the script by myself. however i have understood the script and modified the script to meet my demand.

platinum, thank you very much for your kindly help.

Now i use iptables-save and iptables-restore to run it successfully.

Cheers