💾 Archived View for freeshell.de › tldr › iptables.gmi captured on 2023-06-16 at 19:03:20. Gemini links have been rewritten to link to archived content

-=-=-=-=-=-=-

iptables

Program that allows configuration of tables, chains and rules provided by the Linux kernel firewall.

More information.

View chains, rules, and packet/byte counters for the filter table:

sudo iptables -vnL

Set chain policy rule:

sudo iptables -P {chain} {rule}

Append rule to chain policy for IP:

sudo iptables -A {chain} -s {ip} -j {rule}

Append rule to chain policy for IP considering protocol and port:

sudo iptables -A {chain} -s {ip} -p {protocol} --dport {port} -j {rule}

Add a NAT rule to translate all traffic from the `192.168.0.0/24` subnet to the host's public IP:

sudo iptables -t {nat} -A {POSTROUTING} -s {192.168.0.0/24} -j {MASQUERADE}

Delete chain rule:

sudo iptables -D {chain} {rule_line_number}

Save iptables configuration of a given table to a file:

sudo iptables-save -t {tablename} > {path/to/iptables_file}

Restore iptables configuration from a file:

sudo iptables-restore < {path/to/iptables_file}

Copyright © 2014—present the tldr-pages team and contributors.

This work is licensed under the Creative Commons Attribution 4.0 International License (CC-BY).

CC-BY