Iptables - Revision history

Hdridder at 09:50, 6 July 2026

2026-07-06T09:50:41Z

← Older revision		Revision as of 09:50, 6 July 2026
Line 1:		Line 1:
	[[category:networking]]		[[category:networking]]
	[[category:Linux/Unix]]		[[category:Linux/Unix]]
	~~Manage~~ firewall rules.		[[nftables]] is a successor of iptables of firewall managment

			;iptables -F
			:Flush all rules
			;iptables -nvL
			:Show all rules

	In Debian rules are in:		In Debian rules are in:

2023-03-05T20:03:54Z

ufw

← Older revision		Revision as of 20:03, 5 March 2023
Line 81:		Line 81:

	;ufw allow proto tcp from 192.168.1.0/24 to any port 22;		;ufw allow proto tcp from 192.168.1.0/24 to any port 22;
	:ufw allow proto tcp from fd8e:xxx:xxx:xxx::/24 to any port 22		:ufw allow proto tcp from fd8e:xxx:xxx:xxx::/64 to any port 22
	:Add firewall rule to allow port 22 (ssh) from a local subnet to the current set and to the ufw configuration files. Works for IPv6 addresses too		:Add firewall rule to allow port 22 (ssh) from a local subnet to the current set and to the ufw configuration files. Works for IPv6 addresses too

2023-03-05T19:06:42Z

ufw

← Older revision		Revision as of 19:06, 5 March 2023
Line 80:		Line 80:
	:Enable/Disable the firewall rules		:Enable/Disable the firewall rules

	;ufw allow proto tcp from 192.168.1.0/24 to any port 22		;ufw allow proto tcp from 192.168.1.0/24 to any port 22;
			:ufw allow proto tcp from fd8e:xxx:xxx:xxx::/24 to any port 22
	:Add firewall rule to allow port 22 (ssh) from a local subnet to the current set and to the ufw configuration files. Works for IPv6 addresses too		:Add firewall rule to allow port 22 (ssh) from a local subnet to the current set and to the ufw configuration files. Works for IPv6 addresses too

2022-11-27T15:12:27Z

ufw

← Older revision		Revision as of 15:12, 27 November 2022
Line 85:		Line 85:
	;ufw delete allow proto tcp from 192.168.1.0/24 to any port 22		;ufw delete allow proto tcp from 192.168.1.0/24 to any port 22
	:Remove firewall rule to allow port 22 (ssh) from a local subnet from current set and from the ufw configuration files.		:Remove firewall rule to allow port 22 (ssh) from a local subnet from current set and from the ufw configuration files.

			;ufw delete <rulenumber>
			:Delete the rule with number <rulenumber> (see below)

			;ufw status numbered
			:Show rule summary with rule numbers

2022-08-18T19:09:32Z

ufw

← Older revision		Revision as of 19:09, 18 August 2022
Line 81:		Line 81:

	;ufw allow proto tcp from 192.168.1.0/24 to any port 22		;ufw allow proto tcp from 192.168.1.0/24 to any port 22
	:Add firewall rule to allow port 22 (ssh) from a local subnet to the current set and to the ufw configuration files.		:Add firewall rule to allow port 22 (ssh) from a local subnet to the current set and to the ufw configuration files. Works for IPv6 addresses too

	;ufw delete allow proto tcp from 192.168.1.0/24 to any port 22		;ufw delete allow proto tcp from 192.168.1.0/24 to any port 22
	:Remove firewall rule to allow port 22 (ssh) from a local subnet from current set and from the ufw configuration files.		:Remove firewall rule to allow port 22 (ssh) from a local subnet from current set and from the ufw configuration files.

2020-04-05T18:36:11Z

← Older revision		Revision as of 18:36, 5 April 2020
Line 51:		Line 51:
	Chain OUTPUT (policy ACCEPT 35665 packets, 49M bytes)		Chain OUTPUT (policy ACCEPT 35665 packets, 49M bytes)
	pkts bytes target prot opt in out source destination		pkts bytes target prot opt in out source destination
			</syntaxhighlight>
			For IPv6
			<syntaxhighlight lang=bash>
			ip6tables-restore < /etc/iptables/rules.v6

	ip6tables -nvL		ip6tables -nvL

2020-02-09T15:05:05Z

← Older revision		Revision as of 15:05, 9 February 2020
Line 65:		Line 65:

	</syntaxhighlight>		</syntaxhighlight>

			=ufw=
			(Uncomplicated FireWall) is a frontend to iptables that creates a pretty complicated set of firewall rules.

			Configuration files are stored in /etc/ufw/

			By default the INPUT and FORWARD chain drop all, OUTPUT allow all.

			;ufw enable/disable
			:Enable/Disable the firewall rules

			;ufw allow proto tcp from 192.168.1.0/24 to any port 22
			:Add firewall rule to allow port 22 (ssh) from a local subnet to the current set and to the ufw configuration files.

			;ufw delete allow proto tcp from 192.168.1.0/24 to any port 22
			:Remove firewall rule to allow port 22 (ssh) from a local subnet from current set and from the ufw configuration files.

2020-02-09T11:40:07Z

← Older revision		Revision as of 11:40, 9 February 2020
Line 8:		Line 8:
	<code>/etc/iptables/rules.v6</code>		<code>/etc/iptables/rules.v6</code>

	Pretty strict rules for a IPv4 webserver ~~are~~ configured like this:		Pretty strict rules for an IPv4 webserver can be configured like this:
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	cat /etc/iptables/rules.v4		cat /etc/iptables/rules.v4
Line 33:		Line 33:
	</syntaxhighlight>		</syntaxhighlight>

	~~And result~~ in:		Activated by <code>iptables-restore < /etc/iptables/rules.v4</code> this results in:

	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>

2019-06-08T18:49:45Z

2018-09-22T15:42:40Z