Iptables

Revision as of 03:00, May 7, 2015 by Threesixes (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

net-firewall/iptables


Source Repository:Repository:Gentoo Portage Tree

http://www.netfilter.org/projects/iptables/

Summary: Linux kernel (2.4+) firewall, NAT and packet mangling tools

Use Flags

netlink
Build against libnfnetlink which enables the nfnl_osf util

News

Drobbins

ARM Rebuild

ARM systems will use new stage3's that are not compatible with earlier versions.
2015-06-27 by Drobbins
Drobbins

ABI X86 64 and 32

Funtoo Linux has new 32-bit compatibility libraries inherited from Gentoo. Learn about them here.
2015-06-18 by Drobbins
Drobbins

Pre-built kernels!

Funtoo stage3's are now starting to offer pre-built kernels for ease of install. read more....
2015-05-12 by Drobbins
More...

Iptables

Tip

We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.

iptables is a program used to configure and manage the kernels netfilter modules.

Installation

Kernel Settings

Under Netfilter--> set to all modules--> or all y--> prefer modules.:

-> Networking support
     -> Networking options     
       -> Network packet filtering framework (Netfilter)

Emerge

# emerge iptables

First Run

For some services such as sshguard & Fail2ban you need a generic running firewall. We will save a blank firewall rule set and start the firewall.

ipv4

# rc-service iptables save
# rc-service iptables start

to start upon reboot

# rc-update add iptables default

ipv6

# rc-service ip6tables save
# rc-service ip6tables start

To make the service start upon system reboot, run:

# rc-update add ip6tables default

Show firewall Rules & Status

ipv4

# iptables -L -n

ipv6

# ip6tables -L -n