Iptables quick guide - Revision history

Nighthawk: /* allowing muliple ports */

2014-11-03T21:47:05Z

‎allowing muliple ports

Nighthawk at 14:13, 27 October 2014

2014-10-27T14:13:50Z

Nighthawk: /* allow muliple ports example */

2014-02-20T21:20:00Z

‎allow muliple ports example

Nighthawk: /* allow muliple ports example */

2014-02-20T21:19:40Z

‎allow muliple ports example

Nighthawk: /* NAT */

2013-10-08T18:53:33Z

‎NAT

Nighthawk at 19:21, 6 August 2013

2013-08-06T19:21:06Z

Nighthawk at 17:01, 6 August 2013

2013-08-06T17:01:28Z

Nighthawk: Pushed from thelinuxwiki.com.

2013-02-25T19:01:41Z

Pushed from thelinuxwiki.com.

New page

http://www.linode.com/wiki/index.php/Netfilter_IPTables_Mini_Howto

== Changing the default policy in iptables ==

iptables -P INPUT DROP

allow outbound rsync and insert rule at the top of the chain
iptables -I OUTPUT -p tcp -d 1.1.1.1 --dport 873 -j ACCEPT

== NAT ==
'''show nat rules'''
iptables -L -t nat

'''hide nat behind and interface'''
iptables -t nat -A POSTROUTING -o tun0 -s 192.168.1.0/24 -j MASQUERADE

== saving rules for reload on reboot ==

on fedora 17
iptables-save > /etc/sysconfig/iptables

[[category:iptables]]

@@ Line 18: / Line 18: @@
 port range
-  iptables -A tableName -p tcp --dports start_port:end_port -j ACCEPT
+  iptables -A tableName -p tcp --match multiport --dports start_port:end_port -j ACCEPT
 example
   iptables -I OUTPUT -p tcp -d 1.1.1.1 --dport '''1024:65535''' -j ACCEPT

@@ Line 1: / Line 1: @@
 http://www.linode.com/wiki/index.php/Netfilter_IPTables_Mini_Howto
-== Changing the default policy in iptables ==
+==rule basics==
   iptables -P INPUT DROP
@@ Line 9: / Line 11: @@
-== allowing muliple ports ==
+=== allowing muliple ports ===
 list of ports
   iptables -A tableName -p tcp  --match multiport --dports port1,port2,port3 -j ACCEPT
@@ Line 20: / Line 22: @@
   iptables -I OUTPUT -p tcp -d 1.1.1.1 --dport '''1024:65535''' -j ACCEPT
-== IP range example ==
+=== IP range example ===
    iptables -A INPUT -p tcp --dport 22 -m iprange --src-range 192.168.1.100-192.168.1.200 -j ACCEPT
 == NAT ==

@@ Line 9: / Line 9: @@
-== allow muliple ports example ==
+== allowing muliple ports ==
 list of ports
   iptables -A tableName -p tcp  --match multiport --dports port1,port2,port3 -j ACCEPT

@@ Line 10: / Line 10: @@
 == allow muliple ports example ==
-  iptables -I OUTPUT -p tcp -d 1.1.1.1 --dport '''1024:65535''' -j ACCEPT
+list of ports
 == IP range example ==

@@ Line 11: / Line 11: @@
 == allow muliple ports example ==
   iptables -I OUTPUT -p tcp -d 1.1.1.1 --dport '''1024:65535''' -j ACCEPT
 == NAT ==

@@ Line 22: / Line 22: @@
 '''hide nat behind and interface'''
   iptables -t nat -A POSTROUTING -o tun0 -s 192.168.1.0/24 -j MASQUERADE
 == saving rules for reload on reboot ==

← Older revision		Revision as of 17:01, 6 August 2013
Line 8:		Line 8:
	iptables -I OUTPUT -p tcp -d 1.1.1.1 --dport 873 -j ACCEPT		iptables -I OUTPUT -p tcp -d 1.1.1.1 --dport 873 -j ACCEPT

		+
		+	== allow muliple ports example ==
		+	iptables -I OUTPUT -p tcp -d 1.1.1.1 --dport '''1024:65535''' -j ACCEPT

	== NAT ==		== NAT ==