sorry for being so ignorant-- it just dawned on me what
i was looking at--each one of those scripts is a piece of the firewall -- some how was thinking there was a nice consise config file with all the rules one after another that isn't so is it? since the open port rpm does work i should be able to change the run order number to get it in the right place -- verified by looking at a iptables -L -- yes/no/maybe ?
Take a look at the file
masq located in the directory
/etc/rc.d/init.d/. That is the file generated by the template fragments you have been looking at. You will note that each fragment builds a part of the final file. The order in which the file is built, therefore the order in which the rules appear, is controlled by the fragment file names. The numbers at the beginning of each file name provide the relative position in final file for the information generated by that fragment. The exceptions being
template-begin which is always generated first and
template-end which is always generated last.
To rearrange the order is simply a matter of changing the fragment file names so that they sort in the order you want. Any changes should always be done in the
templates-custom directory structure to allow you to easily revert back to the original configuration and allow your changes to survive any system updates.
Some additional information on custom templates is available in the
documentation area