On 1 November 2011 09:08, Martin Chiteri <martin.chiteri@gmail.com> wrote:

@Wash, you can save your new rules in a script and let them be run

with the others scheduled for startup, for instance by placing them in

/etc/profile.

This I would do if a *iptables -s*  does not save my newly created

(security) policies.

Hey Wash,

Am not a guru either but some pointers here;

What you say is possible if you for example;

• Something is flushing your iptables on boot <eg. some commands may be placed here /etc/rc.local>

• You didnt save your iptables rules <you could test by restarting the iptables b4 you reboot - service iptables restart>

• The iptables-config file is modified not to save on reboot </etc/sysconfig/iptables-config>

You could also exec a simple command on CLI then <service iptables save>, then <reboot> - see if it saves.