Can not prevent firewall from starting on CentOS?

I have disabled iptables from starting at booting time using chkconfig. Upon checking the status,

sudo chkconfig iptables --list
iptables       0:off 1:off 2:off 3:off 4:off 5:off 6:off

However, after rebooting the host, iptables was not disabled. What's going on?
Well, in  my case, I have daemon libvirtd starts at booting time which depends on iptables, automatically creates iptables rules for each started qemu network. After disable it from start, iptables was disbaled too.

sudo chkconfig libvirtd off

if this is not the case for you, please do check the content of /etc/rc.local file, to look for any active firewall rule, such as
/sbin/iptables -I INPUT -m iprange --src-range 10.208.42.196-10.255.255.255 -j DROP

and disbable it. Some other things to look at are, init script, cron jobs.
As a quick hack until it is solved, you could run echo "service iptables stop" >> /etc/rc.local



No comments:

Post a Comment

Datatable static image not found on the server

When you use ```datatables.min.css``` and ```datatables.min.js``` locally, instead of datatables CDN, you may have encountered that ```sort...