How can I disable firewall in command line and see the change in the gui

aespara · 09-12-2012, 08:48 AM

Hello all,

I need to disable the Firewall in command line so I type
/etc/rc.d/init.d/iptables stop
chkconfig iptables off
chkconfig ip6tables off
seems to work when I check the status, however when I check the gui the Enable option still selected.

How can I make the Firewall to change from enabled to disable in command line?

thank you.

acid_kewpie · 09-12-2012, 08:49 AM

/etc/rc.d/init.d/iptables stop

This WILL stop the firewall. run "iptables -vnL" to see the current ruleset, adn you shoudl see it's empty.

szboardstretcher · 09-12-2012, 08:51 AM

What "Gui" are you talking about here? What distro/version?

aespara · 09-12-2012, 09:16 AM

when I type system-config-securitylevel I still see that firewall option\tab is enabled, I need to change it to disabled.
I was able to disable the selinux tab, all i did in my script is to change the text from enforcing to disabled the /etc/sysconfig/selinux file.
I would like to do something similar with the firewall options.

thank you.

acid_kewpie · 09-12-2012, 09:53 AM

personally I've never touched those gui tools. Why not just stop using them and then it's irrevelant? No... seriously...

aespara · 09-12-2012, 10:19 AM

Chris,

Because I am not the only one who is using the system, other people might change settings if the labels are not dimmed. otherwise I would not be asking for help.

thank you.

chrism01 · 09-12-2012, 09:24 PM

The GUI reads the setting as it goes in; its not updated in real time.
If you disable at the cli, then (as above) it IS disabled and if you come out of the GUI and back in, you should see that.

aespara · 09-12-2012, 10:03 PM

Thank you for your help Chris,once I disable at cli and check for status I get one result (as above), then i go back in GUI i still can disable the firewall then I check status and get a different result.(as below)

/etc/rc.d/init.d/iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination

Chain FORWARD (policy ACCEPT)
num target prot opt source destination

Chain OUTPUT (policy ACCEPT)
num target prot opt source destination

thank you

chrism01 · 09-13-2012, 06:00 AM

In addition, you should ensure only trusted people have the root access required to do this and make sure you co-ordinate with them.