[MES-FSUG] Run iptables as normal

Nooh

2015-10-16 11:45:53 UTC

Hi all,

Lucky..!

I have found it out;

*sudo su - root << EOFiptables -I INPUT -p tcp --dport 1950 -j ACCEPT;
iptables-save > /etc/sysconfig/iptables.log;EOF*

, but now got a different issue:

script is not taking next values in 'for' loop:

*for i in `cat $1`doscp -o "StrictHostKeyChecking no" test.sh
my_user@$i:/tmp/ssh -o "StrictHostKeyChecking no" my_user@$i "sudo chmod +x
/tmp/test.sh ; sh /tmp/test.sh"done*

test.sh is here
----------------

*#!/bin/bashsudo hostname;function iptable_saving{sudo su - root <<
EOFiptables -I INPUT -p tcp --dport 1950 -j ACCEPT; iptables-save >
/etc/sysconfig/iptables.log;EOF}echo " Saving iptables and logs to
/etc/sysconfig/iptables.log..";iptable_saving;echo
"########################################..Completed..#############################################";sudo
rm -f /tmp/test.sh*
But it seems like(output in my terminal) :

localhost
########################################..Completed..#############################################
^CKilled by signal 2.

Post by Nooh Pulakkal

It is stuck at the stage and when I try to kill using Ctrl+C, then it

will take the next value..

Any helps are appreciated please.

Great Thanks in Advance ..!!

Post by Nooh Pulakkal
Hi all,
I have came across a situation to save my *iptables* configuration using
normal user without touching sudoers file.
I want to run '*sudo iptables -I INPUT -p tcp --dport 1950 -j ACCEPT;sudo
iptables-save > /etc/sysconfig/iptables.log*' logged in as normal user.
*(*I am able to run* sudo runuser -l root -c '**iptables-save >
/etc/sysconfig/iptables.log'*) //to explain that I(with sudo) have all
write permissions
Is there anyway to run iptables-save and append to new log file
/etc/sysconfig.log without touching sudoers ?
I dont have runuser installed on my target VMs, and I have huge number of
target VMs which is making me lazy to login to each servers. Stuck in
between a script.. :(
Any helps appreciated please..!
Great Thanks in advance..!!
--
With Regards,
Nooh P P
+919633195109

--
--
You received this message because you are subscribed to the "MES-FSUG" group.
To post to this group, send email to mes-***@googlegroups.com
To unsubscribe from this group, send email to mes-fsug-***@googlegroups.com
For more options, visit this group at http://groups.google.com/group/mes-fsug?hl=en

Our IRC channel #mes-fsug at irc.freenode.net. Webpage for GNULabs @ MESCE is at http://gnulabs.org/mesce/

---
You received this message because you are subscribed to the Google Groups "MES-FSUG" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mes-fsug+***@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.