Iptables: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 26: Line 26:
=iptables tool=
=iptables tool=


=iptables Services=
=iptables Service=


==Getting Information about iptables Services==
==Getting Information about iptables Service==


<pre>
<pre>
Line 34: Line 34:
</pre>
</pre>


==iptables Services Installation==
==iptables Service Installation==


iptables services and firewalld are incompatible. If iptables services are used, firewalld must be disabled: [[firewalld#Disable]].
iptables service and firewalld are incompatible. If iptables service is used, firewalld must be disabled: [[firewalld#Disable]].


<pre>
<pre>
Line 43: Line 43:
</pre>
</pre>


==iptables Services Configuration==
==iptables Service Configuration==


==iptables Services Operations==
==iptables Service Operations==


===Enable to Start at Boot===
===Enable to Start at Boot===

Revision as of 19:39, 5 January 2016

External

Internal

Overview

iptables is a Linux command line tool used to query and manipulate the network packet filtering rules maintained by the Linux kernel. Network packet filtering in the kernel is implemented by the netfilter framework. The term "iptables" is also used to refer to the iptables service, which is a systemd service that uses the iptables tool to configure the packet filtering rules at boot. netfilter and iptables are used to implement network firewalls and NAT. The relationships between these concepts is explained in iptables Concepts: netfilter, iptables tool, iptables service and firewalld.

Concepts

iptables Concepts

iptables tool

iptables Service

Getting Information about iptables Service

systemctl status iptables

iptables Service Installation

iptables service and firewalld are incompatible. If iptables service is used, firewalld must be disabled: firewalld#Disable.

yum install iptables
yum install iptables-services

iptables Service Configuration

iptables Service Operations

Enable to Start at Boot

After rule configuration, enable the iptables service to start at boot:

systemctl enable iptables

Configuration