book

Linux iptables Pocket Reference

by Gregor N. Purdy

August 2004

Intermediate to advanced

96 pages

1h 52m

English

O'Reilly Media, Inc.

Read now

Unlock full access

An Example CommandConceptsTablesChainsPacket flowRulesMatchesTargetsApplicationsConfiguring iptablesPersistent rulesOther configuration filesCompiling your own kernelConnection TrackingAccountingNetwork Address Translation (NAT)Source NAT and MasqueradingDestination NATTransparent ProxyingLoad Distribution and BalancingStateless and Stateful FirewallsTools of the Trade
Getting helpThe iptables Subcommandsiptables Matches and TargetsInternet Protocol (IPv4) matchesACCEPT targetah matchconnmark MatchCONNMARK targetconntrack matchDNAT targetDROP targetdscp matchDSCP targetecn matchECN targetesp matchFTOS targethelper matchicmp matchip (Internet Protocol IPv4) matchesiplimit matchipv4options matchIPV4OPTSSTRIP targetlength matchlimit matchLOG targetmac matchmark matchMARK targetMASQUERADE targetmultiport matchNETLINK targetNETMAP targetnth matchowner matchpkttype matchpool matchPOOL targetpsd (Port Scan Detector) matchQUEUE targetquota matchrandom matchrealm matchrecent matchrecord-rpc matchREDIRECT targetREJECT targetRETURN targetROUTE targetSAME targetSNAT targetstate matchstring matchtcp matchtcpmss matchTCPMSS targettime matchtos matchTOS targetttl matchTTL targetudp matchULOG targetunclean match
iptables-restoreiptables-save

Content preview from Linux iptables Pocket Reference

About the Author

Gregor N. Purdy is a consultant, author, trainer, and lecturer on large-scale decision support system requirements, design, and implementation. He is also the author of various Perl modules and the Perl Shell. He uses CVS to manage his personal projects and those of his clients. He is also a contributor to the Comprehensive Perl Archive Network (CPAN) and to the ongoing development of the new Perl 6 virtual machine, Parrot.