On 16/04/11 20:34, Vaclav Mocek wrote:
> On 04/16/2011 08:13 PM, Nicolas Kovacs wrote:
>> Hi,
>>
>> Until recently, I've only been using the
>> system-config-securitylevel-tui utility, because it's easy to use
>> while covering all my needs.
>>
>> Now I have to switch to a manual iptables configuration, because 1)
>> the system-config-securitylevel-tui utility has been "dumbed" down,
>> and 2) some of the things I want to do need a more fine-grained control.
>>
>> What's the most "orthodox" (e. g. clean) solution to configure
>> iptables manually (in a script, somewhere) with SL ?
>>
>> Cheers,
>>
>> Niki Kovacs
> A custom script. Very nice how to for RH and Fedora could be find here:
>
> http://fedoraunity.org/Members/kanarip/iptables-howto
>

Yes, definitely easiest to control iptables with a short/simple script IMHO.

Also take a look at the CentOS Wiki iptables howto page which shows in 
detail how to implement such a script:

http://wiki.centos.org/HowTos/Network/IPTables

Once you've created your script, making changes to your firewall are as 
simple as making a quick edit to the script in your favourite text 
editor and (re)running the script.