I have a Centos5 installation with kvm on my server. I am using nat portforwarding to ssh my virtual machines. I have several iptables rules and saved then in /etc/sysconfig/iptables.
After reboot, I see all these rules when I type service iptables status
but I am getting a connection refused error. After typing service iptables restart
everything works. I don't understand, why do I need to restart iptables again? Doesn't it restart on reboot?
/etc/network/interfaces
for pre-up and post-up commands, there could be some other iptables rules. Same thing with/etc/rc.local
.