iptables firewall

[Master of Reality]

is there anyway to get the line number of errors in a bash script? i've looked through this script for a while looking for where this stuff is:

Code: [Select]

i picked up thios script from some website and modifed it, but does anyone see anything wrong with this script?:

Code: [Select]

[ December 05, 2002: Message edited by: The Master of Reality / B0B ]

[flap]

The variable EXTERNAL isn't declared.

Where you have lines like:

$IPTABLES -A INPUT -i $EXTERNAL -p tcp --dport swat -j DROP

you should presumably have $EXTERNALIF instead of $EXTERNAL

[voidmain]

I don't know what your goal is but if this is a RedHat machine (even if it isn't) I have found that webmin makes an outstanding iptables configurator. In RedHat as you know the iptables service script is /etc/init.d/iptables. That script can/will save your current iptables rules in a configuration file called /etc/sysconfig/iptables. It loads the rules from that table when you start the iptables service. Webmin is a nice graphical interface to configure the firewall. Be careful so you don't set a rule to shut you out of webmin though or you will have to go to the console to undo the rule that has blocked you out.

If you already know this stuff just ignore it. Maybe you have another reason to use a script for above/beyond type of configuration. The webmin way is nice, neat and clean and uses the system's predefined way of setting up your firewall.

[ December 05, 2002: Message edited by: void main ]

[Master of Reality]

paranoia is my main reason, . my other reason is just for fun  

and as yu can see how i've set taht script that its not redhat.

[Kintaro]

Just because your paranoid, doesnt mean there not after you! -Nirvana

[Master of Reality]

your gonna be happy X11... i might actually restart my server to upgrade my hard drive and OS. The Bob Hub will only be down for hopefully less than 2 mintues

[Kintaro]

And my server most likly will not be powered down until...
* I get cable and put in another net card.
* Power goes out
* I start respecting my hardware.

mor theres a better thing then restart:
# rm -rf /

or this:
# dd if=/dev/hda of=/dev/zero

[voidmain]

quote:Originally posted by X11 / BOB: 3xtr4 skr1pty:

or this:
# dd if=/dev/hda of=/dev/zero

Got a little case of lexdysia there? I think you meant:

# dd if=/dev/zero of=/dev/hda

[ December 06, 2002: Message edited by: void main ]

[Master of Reality]

i'm just swqitching hard drives. I wont be formatting it until i know that there is nothing essential that i forgot on there. THe Bb Hub will be down for about 2 mintues now

[Zombie9920]

Haha, I know of a way to keep the BoB Hub down for longer than 2 minutes. I'm not going into details though.  

[ December 07, 2002: Message edited by: Zombie9920 ]

[Kintaro]

Help us mor, he might eat our hats.

[choasforages]

physical abuse to the server doens't count.
and neither does a DDoS attack
so put yer smurphing software away

[beltorak0]

to see a script execute; use "sh -x"

-t.

[TheQuirk]

Does this make my server have the largest current uptime (BE QUIET VOID!!) on this board that uses that little uptime counting thing?