IPTable Basics - Revision history

Ledhed at 06:16, 5 October 2011

2011-10-05T06:16:46Z

Ledhed at 06:13, 5 October 2011

2011-10-05T06:13:44Z

Ledhed: /* Switches */

2007-12-29T09:46:02Z

‎Switches

Ledhed: /* Examples */

2007-12-29T09:43:30Z

‎Examples

Ledhed at 09:27, 29 December 2007

2007-12-29T09:27:52Z

Ledhed: /* Examples */

2007-12-29T09:14:11Z

‎Examples

Ledhed: /* Examples */

2007-12-29T09:13:43Z

‎Examples

Ledhed: /* Examples */

2007-12-29T09:12:57Z

‎Examples

Ledhed at 09:12, 29 December 2007

2007-12-29T09:12:01Z

Ledhed at 09:11, 29 December 2007

2007-12-29T09:11:35Z

@@ Line 1: / Line 1: @@
 == Overview ==
 IPTables works in a Hierarchy. The top most rule in a chain takes precedence over the rules below it.
@@ Line 61: / Line 60: @@
 http://www.howtoforge.com/linux_iptables_sarge  Start Here<br>
 http://iptables-tutorial.frozentux.net/iptables-tutorial.html  Some Technical reading for those nights when you've run out of Ambien<br>
-http://www.netfilter.org/documentation/index.html  More Technical reading (You really don't want to read all of this, just wing it!)<br>
+http://www.frozentux.net/documents/iptables-tutorial/  More Technical reading (You really don't want to read all of this, just wing it!)<br>
 http://www.justlinux.com/nhf/Security/IPtables_Basics.html More IPTABLES basics.<br>
 [[Category:IPTables]]

← Older revision		Revision as of 06:13, 5 October 2011
Line 1:		Line 1:
−	~~References:<br>~~
−	~~http://www.howtoforge.com/linux_iptables_sarge Start Here<br>~~
−	~~http://iptables-tutorial.frozentux.net/iptables-tutorial.html Some Technical reading for those nights when you've run out of Ambien<br>~~
−	~~http://www.netfilter.org/documentation/index.html More Technical reading (You really don't want to read all of this, just wing it!)<br>~~

	== Overview ==		== Overview ==
Line 61:		Line 57:


		+
		+	References:<br>
		+	http://www.howtoforge.com/linux_iptables_sarge Start Here<br>
		+	http://iptables-tutorial.frozentux.net/iptables-tutorial.html Some Technical reading for those nights when you've run out of Ambien<br>
		+	http://www.netfilter.org/documentation/index.html More Technical reading (You really don't want to read all of this, just wing it!)<br>
		+	http://www.justlinux.com/nhf/Security/IPtables_Basics.html More IPTABLES basics.<br>

	[[Category:IPTables]]		[[Category:IPTables]]

@@ Line 27: / Line 27: @@
 -F = '''Flush''' (deletes all rules from the specified chain)<br>
 -L = '''List''' (lists the currently applied rulesets)<br>
--p = '''Protocol''' (Protocol being used [i.e. tcp, udp ...])<br>
+-p = '''Protocol''' (Protocol being used [i.e. tcp, udp, icmp ...])<br>
 -s = ''Source'' (Source Address)<br>
 --sport = '''Source Port'''<br>
@@ Line 34: / Line 34: @@
 -j = '''Jump''' (Jump to an action [i.e. ACCEPT, DROP, REJECT])<br>
 --line-numbers (displays line numbers for each rule. Usefull when deleting or inserting rules)<br>
 == Examples ==

← Older revision		Revision as of 09:43, 29 December 2007
Line 58:		Line 58:


−	This ~~allows all~~ outgoing ~~traffic to pass through~~.	+	This allow establishment of connections initialized by our outgoing packets.
	iptables -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT		iptables -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

@@ Line 3: / Line 3: @@
 http://iptables-tutorial.frozentux.net/iptables-tutorial.html  Some Technical reading for those nights when you've run out of Ambien<br>
 http://www.netfilter.org/documentation/index.html  More Technical reading (You really don't want to read all of this, just wing it!)<br>
 == Chains ==
@@ Line 8: / Line 14: @@
 * '''FORWARD -''' Rules for traffic that will be forwarding to another IP behind this server (i.e. This box is a firewall for other PC's).
 * '''OUTPUT -''' Rules for traffic that is going out of this server (i.e. To the Internet)
 For more detailed info on what these 'Chains' do feel free to ask the Google Gods!

@@ Line 32: / Line 32: @@
 This will delete the 2nd rule from the INPUT chain.
   iptables -D INPUT 2
 This will delete all rules from the FORWARD chain.
   iptables -F FORWARD
 This adds a rule to the 2nd slot in the INPUT chain (which consequently drops all traffic and should be the last item in the chain).
@@ Line 42: / Line 44: @@
 This 'Lists' all the rules with their corresponding line numbers.
   iptables -L --line-numbers
 This opens incoming port 25 (SMTP) traffic and adds the rule to the top of the chain.
   iptables -I INPUT -p tcp --dport 25 -j ACCEPT
 This allows all outgoing traffic to pass through.

@@ Line 36: / Line 36: @@
   iptables -F FORWARD
-This adds a rule to the 2nd slot in the INPUT chain (which consequently drops all traffic).
+This adds a rule to the 2nd slot in the INPUT chain (which consequently drops all traffic and should be the last item in the chain).
   iptables -A INPUT -j DROP

← Older revision		Revision as of 09:11, 29 December 2007
Line 4:		Line 4:
	http://www.netfilter.org/documentation/index.html More Technical reading (You really don't want to read all of this, just wing it!)<br>		http://www.netfilter.org/documentation/index.html More Technical reading (You really don't want to read all of this, just wing it!)<br>

		+	== Chains ==
		+	* '''INPUT -''' Rules for traffic coming into this server (i.e. From the Internet).
		+	* '''FORWARD -''' Rules for traffic that will be forwarding to another IP behind this server (i.e. This box is a firewall for other PC's).
		+	* '''OUTPUT -''' Rules for traffic that is going out of this server (i.e. To the Internet)
		+	For more detailed info on what these 'Chains' do feel free to ask the Google Gods!
		+
		+
		+
		+	== Switches ==
		+	Before we get started we need to know a few of the command line switches.<br>
		+	-A = '''Append''' (adds the rule to the bottom of the specified chain)<br>
		+	-I = '''Insert''' (adds the rule to the top of the specified chain)<br>
		+	-D = '''Delete''' (deletes the rule from the specified chain)<br>
		+	-F = '''Flush''' (deletes all rules from the specified chain)<br>
		+	-L = '''List''' (lists the currently applied rulesets)<br>
		+	-p = '''Protocol''' (Protocol being used [i.e. tcp, udp ...])<br>
		+	-s = ''Source'' (Source Address)<br>
		+	--sport = '''Source Port'''
		+	-d = '''Destination''' (Destination Address)<br>
		+	--dport = '''Destination Port'''
		+	-j = '''Jump''' (Jump to an action [i.e. ACCEPT, DROP, REJECT])<br>
		+	--line-numbers (displays line numbers for each rule. Usefull when deleting or inserting rules)<br>
		+
		+
		+	== Examples ==
		+
		+	This will delete the 2nd rule from the INPUT chain.
		+	iptables -D INPUT 2
		+
		+	This adds a rule to the 2nd slot in the INPUT chain (which consequently drops all traffic).
		+	iptables -A INPUT -j DROP
		+
		+
		+	This 'Lists' all the rules with their corresponding line numbers.
		+	iptables -L --line-numbers
		+
		+	This opens incoming port 25 (SMTP) traffic and adds the rule to the top of the chain.
		+	iptables -I INPUT -p tcp --dport 25 -j ACCEPT
		+
		+	This allows all outgoing traffic to pass through.
		+	iptables -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT


	[[Category:IPTables]]		[[Category:IPTables]]