Linux/iptables: Difference between revisions

From Wiki
mNo edit summary
mNo edit summary
Line 4: Line 4:
{| class="wikitable"
{| class="wikitable"
|+
|+
!
!Tables
!
!Chains
!
!
!
!
|-
|-
|filter
|FILTER
|
|
* INPUT
* INPUT
Line 17: Line 17:
|
|
|-
|-
|nat
|NAT
|
|
* PREROUTING
* PREROUTING
Line 25: Line 25:
|
|
|-
|-
|mangle
|MANGLE
(modify ip headers)
|
|
* PREROUTING
* PREROUTING
Line 35: Line 36:
|
|
|-
|-
|raw
|RAW
(connection tracking)
|
|
* PREROUTING
* PREROUTING
Line 42: Line 44:
|
|
|-
|-
|security
|SECURITY
|
|
|
|

Revision as of 17:13, 4 December 2023


Tables Chains
FILTER
  • INPUT
  • OUTPUT
  • FORWARD
NAT
  • PREROUTING
  • OUTPUT
  • POSTROUTING
MANGLE

(modify ip headers)

  • PREROUTING
  • POSTROUTING
  • OUTPUT
  • INPUT
  • FORWARD
RAW

(connection tracking)

  • PREROUTING
  • OUTPUT
SECURITY

Tables

  • Filter (Default)
  • NAT
  • Mangle (modify ip headers)
  • (Raw) (Connection tracking)
  • (Security) (SELinux Tagging)

Chains

raspi wifi to ethernet

  • rc.local
    • iptables --table nat --append POSTROUTING --out-interface wlan0 -j MASQUERADE
    • iptables --append FORWARD --in-interface eth0 -j ACCEPT