Iptables - Revision history

Ractive at 00:27, 3 July 2018

2018-07-03T00:27:06Z

2018-03-06T21:12:51Z

← Older revision		Revision as of 21:12, 6 March 2018
Line 27:		Line 27:
	sudo iptables-save > iptables.rules		sudo iptables-save > iptables.rules
	sudo iptables-restore < iptables.rules		sudo iptables-restore < iptables.rules

			check hit conuts for all rules:
			sudo iptables -vL --line-numbers

	references:		references:

	https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands		https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands

2018-02-25T19:23:56Z

← Older revision		Revision as of 19:23, 25 February 2018
Line 23:		Line 23:
	accept tcp 8080 from local:		accept tcp 8080 from local:
	sudo iptables -A INPUT -p tcp --dport 8080 -s 192.168.1.0/24 -j ACCEPT		sudo iptables -A INPUT -p tcp --dport 8080 -s 192.168.1.0/24 -j ACCEPT

			to save rules to text file and restore from said file:
			sudo iptables-save > iptables.rules
			sudo iptables-restore < iptables.rules

	references:		references:

	https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands		https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands

2018-02-25T04:41:56Z

← Older revision		Revision as of 04:41, 25 February 2018
Line 21:		Line 21:
	iptables -P OUTPUT ACCEPT		iptables -P OUTPUT ACCEPT

			accept tcp 8080 from local:
			sudo iptables -A INPUT -p tcp --dport 8080 -s 192.168.1.0/24 -j ACCEPT

	references:		references:

	https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands		https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands

2018-02-25T04:17:53Z

2018-02-25T04:17:08Z

← Older revision		Revision as of 04:17, 25 February 2018
Line 17:		Line 17:

	set overall policies:		set overall policies:
	iptables --policy INPUT ~~ACCEPT~~		iptables --policy INPUT DROP
	iptables -P FORWARD ~~DROP~~		iptables -P FORWARD ACCEPT
	iptables -P OUTPUT ACCEPT		iptables -P OUTPUT ACCEPT

2018-02-25T04:16:14Z

← Older revision		Revision as of 04:16, 25 February 2018
Line 10:		Line 10:
	allow ssh:		allow ssh:
	sudo iptables -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT		sudo iptables -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT

	sudo iptables -A OUTPUT -p tcp --sport 22 -m conntrack --ctstate ESTABLISHED -j ACCEPT		sudo iptables -A OUTPUT -p tcp --sport 22 -m conntrack --ctstate ESTABLISHED -j ACCEPT

	delete by number:		delete by number:
	sudo iptables -L --line-numbers		sudo iptables -L --line-numbers
			sudo iptables -D INPUT 3

			set overall policies:
			iptables --policy INPUT ACCEPT
			iptables -P FORWARD DROP
			iptables -P OUTPUT ACCEPT

	~~sudo iptables -D INPUT 3~~

	references:		references:

	https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands		https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands

2018-02-25T04:01:22Z

← Older revision		Revision as of 04:01, 25 February 2018
Line 12:		Line 12:

	sudo iptables -A OUTPUT -p tcp --sport 22 -m conntrack --ctstate ESTABLISHED -j ACCEPT		sudo iptables -A OUTPUT -p tcp --sport 22 -m conntrack --ctstate ESTABLISHED -j ACCEPT

			delete by number:
			sudo iptables -L --line-numbers

			sudo iptables -D INPUT 3

	references:		references:

	https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands		https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands

2018-02-25T03:58:45Z

← Older revision		Revision as of 03:58, 25 February 2018
Line 7:		Line 7:
	sudo dpkg-reconfigure iptables-persistent		sudo dpkg-reconfigure iptables-persistent


			allow ssh:
			sudo iptables -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT

			sudo iptables -A OUTPUT -p tcp --sport 22 -m conntrack --ctstate ESTABLISHED -j ACCEPT

	references:		references:

	https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands		https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands

2018-02-18T05:59:36Z

← Older revision		Revision as of 05:59, 18 February 2018
Line 4:		Line 4:
	sudo dpkg-reconfigure iptables-persistent		sudo dpkg-reconfigure iptables-persistent

	or (~~untested~~):		or (stretch):
	sudo ~~invoke~~-~~rc.d~~ iptables-persistent ~~save~~		sudo dpkg-reconfigure iptables-persistent