PDA

View Full Version : ispconfig is killing external iptables


supertom64
14th February 2007, 18:54
I am using ispconfig 2.2.9 on centos 4.4 without firewall from ispconfig
(ISP Services, Firewall: Off ) because I prefer my own iptables rules.

If I restart a service e.g. Bind-Server: or mySQL-Server:, iptables rules and policies are reset.

Is there a way to tell ISPConfig, that another firewall is used instead of the built in ?

thx in advance
Tom

till
14th February 2007, 18:57
ISPConfig is not doing anything with your IPTables when you deactivated the ISPConfig firewall.

martinfst
14th February 2007, 19:04
ISPConfig is not doing anything with your IPTables when you deactivated the ISPConfig firewall.
I can confirm this, as I run Shorewall as my interface to iptables :)
How do you restart a service?

supertom64
14th February 2007, 19:22
I restart the service with the webinterface:81
iptables is started with original centos iptables rcfile.
cu
Tom

supertom64
15th February 2007, 10:01
Have done a little research on that issue and found it in ispconfig.log.

The webinterface invoke the script:

/root/ispconfig/scripts/lib/classes/ispconfig_system.lib.php, Line 706:
/etc/rc.d/init.d/bastille-firewall stop

which clear the iptables rules and policies.

I have replaced bastille-firewall with a dummy-script and my iptables rules keep alive now.

Thx
cu
Tom