2016-03-06 18:50:33 +03:00
|
|
|
# iptables
|
|
|
|
|
2017-07-20 21:53:15 +03:00
|
|
|
> Program that allows configuration of tables, chains and rules provided by the Linux kernel firewall.
|
2016-03-06 18:50:33 +03:00
|
|
|
|
|
|
|
- See chains and rules for specific table:
|
|
|
|
|
|
|
|
`sudo iptables -t {{table_name}} -vnL`
|
|
|
|
|
|
|
|
- Set chain policy rule:
|
|
|
|
|
|
|
|
`sudo iptables -p {{chain}} {{rule}}`
|
|
|
|
|
|
|
|
- Append rule to chain policy for IP:
|
|
|
|
|
|
|
|
`sudo iptables -A {{chain}} -s {{ip}} -j {{rule}}`
|
|
|
|
|
|
|
|
- Append rule to chain policy for IP considering protocol and port:
|
|
|
|
|
|
|
|
`sudo iptables -A {{chain}} -s {{ip}} -p {{protocol}} --dport {{port}} -j {{rule}}`
|
|
|
|
|
|
|
|
- Delete chain rule:
|
|
|
|
|
|
|
|
`sudo iptables -D {{chain}} {{rule_line_number}}`
|
|
|
|
|
2016-04-21 15:44:40 +03:00
|
|
|
- Save iptables configuration:
|
2016-03-06 18:50:33 +03:00
|
|
|
|
2016-07-13 11:53:22 +03:00
|
|
|
`sudo iptables-save > {{path/to/iptables_file}}`
|