iptables

Configure tables, chains and rules of the Linux kernel IPv4 firewall. Use ip6tables to set rules for IPv6 traffic. See also: iptables-save, iptables-restore. More information: https://manned.org/iptables.

  • View chains, rules, packet/byte counters and line numbers for the filter table:

sudo iptables --verbose --numeric --list --line-numbers

  • Set chain [P]olicy rule:

sudo iptables --policy chain rule

  • [A]ppend rule to chain policy for IP:

sudo iptables --append chain --source ip --jump rule

  • [A]ppend rule to chain policy for IP considering [p]rotocol and port:

sudo iptables --append chain --source ip --protocol tcp|udp|icmp|… --dport port --jump rule

  • Add a NAT rule to translate all traffic from the 192.168.0.0/24 subnet to the host's public IP:

sudo iptables --table nat --append POSTROUTING --source 192.168.0.0/24 --jump MASQUERADE

  • [D]elete chain rule:

sudo iptables --delete chain rule_line_number