Iptables Concepts: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 21: Line 21:
==iptables and ip6tables Services==
==iptables and ip6tables Services==


iptables and ip6tables services are [[systemd]] services that use the <tt>iptables</tt> tool to interact with the kernel netfilter framework.
iptables and ip6tables services are [[systemd]] services that use the <tt>iptables</tt> tool to interact with the kernel netfilter framework. The iptables services are known to yum as "iptables-services".


==firewalld==
==firewalld==

Revision as of 19:31, 5 January 2016

Internal

netfilter, iptables tool, iptables service and firewalld

IptablesConcepts.png

netfilter

netfilter is a set of hooks inside the Linux kernel that allows kernel modules to register callback functions with the network stack. A registered callback function is then called for every packet that traverses the respective hook.

iptables

iptables is a Linux userspace command line tool that manipulates the IPv4 network packet filtering rules. Packet filtering is most commonly used to implement firewalling functionality. It is also used to implement Network Address Translation (NAT). The iptables command is known to yum as "iptables".

ip6tables

ip6tables is the equivalent command line tool that manipulates the IPv6 network packet filtering rules.

iptables and ip6tables Services

iptables and ip6tables services are systemd services that use the iptables tool to interact with the kernel netfilter framework. The iptables services are known to yum as "iptables-services".

firewalld

firewalld is a firewall service daemon with D-BUS interface. More details about firewalld available here:

firewalld

iptables service and firewalld

The iptables service and firewalld are incompatible, you must use one or another.

This is how fiewalld is prevented to start at boot.

Older Firewall Implementations

ipchains

ipfwadm

Chain

Rule