iptables rules changes problem

Hadi.Salim

• November 13, 2015 11:34

ever time i set iptable rule from Bash shell get dispeer when ever the vps restart. is there's any why to set it permanent, From cPanel ? or whatever location.

• 

  dalem

  • November 14, 2015 13:10

  Are you running a Firewall like CSF along side your IPtables rules ?

  0
• 

  Hadi.Salim

  • November 14, 2015 13:58

  no.

  0
• 

  dalem

  • November 14, 2015 14:00

  have you saved your rules so they load on reboot ?? cat /etc/sysconfig/iptables service iptables save

  0
• 

  Hadi.Salim

  • November 14, 2015 15:51

  i did but doesn't help...

  0
• 

  dalem

  • November 14, 2015 19:59

  last but not least is your iptables set to start on boot chkconfig | grep iptables if not chkconfig iptables on

  0
• 

  Hadi.Salim

  • November 15, 2015 15:14

  Yes my iptables set to start at boot time. i have checked it. im wondering why this happen every time i set rule in iptables get dispeer when the vps restart.Is there's any cPanel script over write my rules ?.

  0
• 

  dalem

  • November 16, 2015 21:52

  add a /etc/init.d/iptables restart to your rc.local file likely your server booting faster than than the network is coming up

  0
• 

  cPanelMichael

  • November 18, 2015 17:52

  Hello :) cPanel will not overwrite your custom rules, but I still suggest installing a third-party firewall management utility such as CSF (it's free): ConfigServer Security & Firewall Thank you.

  0
• 

  Hadi.Salim

  • November 20, 2015 17:00

  my vps hosted in virtuozzo server. is there's any hard coded script in virtuozzo to overwrite my iptables rules ?

  0
• 

  dalem

  • November 20, 2015 23:07

  Negative no script in in virtuozzo to overwrite your rules

  0
• 

  Hadi.Salim

  • November 23, 2015 14:25

  Hello :) cPanel will not overwrite your custom rules, but I still suggest installing a third-party firewall management utility such as CSF (it's free): ConfigServer Security & Firewall Thank you.

  
  unfortunately we cant install CSF. due to iptables module missing from our vps. we contact our provider to install the missing module, the said our kernel is static. they cant recompile and patch the kernel for that module. they suggest us to move to dedicate server. and we are not ready too. is there's any way to install iptables module with out patching and recompile the kernel ?

  0
• 

  dalem

  • November 23, 2015 14:37

  Not if your on openVZ you do not have access you will need XEN, KVM or another full virtualization to add kernel modules Note: CSF runs just fine on virtuozzo your host has not taken the time or to set up the node properly in the first place. So its not Can't is wont

  0
• 

  Hadi.Salim

  • November 23, 2015 21:07

  Not if your on openVZ you do not have access you will need XEN, KVM or another full virtualization to add kernel modules Note: CSF runs just fine on virtuozzo your host has not taken the time or to set up the node properly in the first place. So its not Can't is wont

  
  can i generate module and copy it the vps it will work ?

  0
• 

  dalem

  • November 24, 2015 14:20

  you do not have access to the kernel so you cant load kernel modules so No

  0

Please sign in to leave a comment.