Linux/iptables: Difference between revisions

From Wiki
Line 54: Line 54:
== Basics ==
== Basics ==
<pre>
<pre>
iptables CHAINRULE [-j target]
iptables
         -A (append - add rule at end)
         -A (append - add rule at end)
         -C (check)
         -C (check)
Line 68: Line 68:
         -s (source address)
         -s (source address)
         -d (destination address)
         -d (destination address)
        -j (target)


         -t (table to manipulate (default: filter)
         -t (table to manipulate (default: filter)
         -n (numeric output of addresses and ports)
         -n (numeric output of addresses and ports)
</pre>
</pre>

Revision as of 17:51, 4 December 2023

Tables Chains
FILTER
  • INPUT
  • OUTPUT
  • FORWARD
NAT
  • PREROUTING
  • OUTPUT
  • POSTROUTING
MANGLE

(modify ip headers)

  • PREROUTING
  • POSTROUTING
  • OUTPUT
  • INPUT
  • FORWARD
RAW

(connection tracking)

  • PREROUTING
  • OUTPUT
SECURITY
Targets
REJECT
DROP
ACCEPT
RETURN
MASQUERADE

Basics

iptables
         -A (append - add rule at end)
         -C (check)
         -D (delete - remove rule)
         -F (flush - remove all rules)
         -I (insert - add at position)
         -L (list - show all rules in chain)
         -N (new chain)
         -X (delete chain)

         -i (input interface)
         -o (output interface)
         -s (source address)
         -d (destination address)

         -j (target)

         -t (table to manipulate (default: filter)
         -n (numeric output of addresses and ports)

View state

iptables -L

raspi wifi to ethernet

  • rc.local
    • iptables --table nat --append POSTROUTING --out-interface wlan0 -j MASQUERADE
    • iptables --append FORWARD --in-interface eth0 -j ACCEPT