From: Andrew Schulman <andrex@alumni.utexas.net>
To: netfilter@lists.netfilter.org
Subject: Re: Are established connections interrupted when iptables is restarted?
Date: Wed, 22 Dec 2004 12:48:11 -0500 [thread overview]
Message-ID: <MPG.1c337d639722a0f598969e@localhost> (raw)
In-Reply-To: 200412221511.43567.gdh@acentral.co.uk
> > I make changes in the /etc/sysconfig/iptables file and then do a "service
> > iptables restart". Would this interrupt the established connections through
> > the firewall?
>
> Provided that 'service iptables restart' does not unload the conntrack module,
> then the established-connections table will not be reloaded - you will likely
> have a second or two of no connectivity while the ruleset is reloaded,
> though.
Right. I've done this many times, and never seen any dropped
connections. I've even restarted the firewall from a remote ssh
session, and never had any trouble-- just a short pause in the console
output. Of course, that's terrible practice-- if your firewall script
doesn't finish executing, for whatever reason, then you're hosed until
you can get back to the console.
--
To reply by email, replace "deadspam.com" by "alumni.utexas.net"
next prev parent reply other threads:[~2004-12-22 17:48 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-12-22 15:06 Are established connections interrupted when iptables is restarted? Deepak Seshadri
2004-12-22 15:11 ` Gavin Hamill
2004-12-22 15:17 ` Gavin Hamill
2004-12-22 17:48 ` Andrew Schulman [this message]
2004-12-23 2:13 ` R. DuFresne
2004-12-23 4:37 ` Jason Opperisano
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=MPG.1c337d639722a0f598969e@localhost \
--to=andrex@alumni.utexas.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox