Iptables: Difference between revisions

From DWIKI
mNo edit summary
 
(7 intermediate revisions by the same user not shown)
Line 12: Line 12:


== Tutorials ==
== Tutorials ==
* [http://iptables-tutorial.frozentux.net/iptables-tutorial.html http://iptables-tutorial.frozentux.net/iptables-tutorial.html]
* [[Load Balancing Across Multiple Links]]
* [[Load Balancing Across Multiple Links]]
== Tools ==
== Tools ==
[http://www.fwbuilder.org/ http://www.fwbuilder.org/]
[http://www.fwbuilder.org/ http://www.fwbuilder.org/]
iptstate
iptstate
*[https://firehol.org/ Firehol]
=HOWTO=
==Rules with comment==
iptables -I INPUT .... -m comment --comment="some comment"
== FAQ ==
=== How to stop iptables log from flooding console? ===
-stop syslog
-dmesg -n 1
-start syslog
??
 
=== can't initialize iptables table `filter': iptables who? (do you need to insmod?) ===
??
=== Couldn't load target `LOG':No such file or directory ===
Means kernel module not loaded
  [[Category:Networking]]     


==FAQ==
==Log with label==
===How to stop iptables log from flooding console?===
-j LOG --log-prefix="FOO"
-stop syslog
-dmesg -n 1
-start syslog

Latest revision as of 15:38, 10 February 2023

Description

iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators.

Since Network Address Translation is also configured from the packet filter ruleset, iptables is used for this, too.

The iptables package also includes ip6tables. ip6tables is used for configuring the IPv6 packet filter.

Documentation

Tutorials

Tools

http://www.fwbuilder.org/ iptstate

HOWTO

Rules with comment

iptables -I INPUT .... -m comment --comment="some comment"


FAQ

How to stop iptables log from flooding console?

-stop syslog
-dmesg -n 1
-start syslog

??

 

can't initialize iptables table `filter': iptables who? (do you need to insmod?)

??

Couldn't load target `LOG':No such file or directory

Means kernel module not loaded

Log with label

-j LOG --log-prefix="FOO"