On Fri, 24 Apr 2020 18:28:21 -0400, Jeffrey Walton said:
The problem I am having is, adding the new information to the existing iptables rules in /etc/sysconfig/iptables. I want to write my rules to a separate file and then tell /etc/sysconfig/iptables to include it at the correct position.
I read the iptables(8), iptables-save(8) and iptables-restore(8) man pages, but I don't see how to combine the different sources.
How do I tell iptables to include a second external source at a specific location?
Turn the problem on its side.... #!/bin/bash cat /etc/iptables.header /etc/iptables.newstuff /etc/iptables.trailer > /etc/sysconfig/iptables iptables-restore < /etc/sysconfig/iptables (basically the solution I did for an NFS server, where 'newstuff' and /etc/exports were both machine-generated by a perl script that read a config file of authorized clients.