Iptables is a Linux kernel-level module allowing us to perform various networking manipulations (i.e. packet filtering) to achieve better network security.
\nHere are some iptables commands I have found useful. This list will be updated from time to time.
\n__________________________
\nView all current iptables rules:<\/p>\n
iptables -L -v<\/p>\n
__________________
\nView all INPUT rules:<\/p>\n
iptables -L INPUT -nv<\/p>\n
____________________________________
\nHow to block an IP address using iptables:<\/p>\n
iptables -I INPUT -s “201.128.33.200” -j DROP<\/p>\n
____________________________
\nTo block a range of IP addresses:<\/p>\n
iptables -I INPUT -s “201.128.33.0\/24” -j DROP<\/p>\n
__________________________
\nHow to unblock an IP address:<\/p>\n
iptables -D INPUT -s “201.128.33.200” -j ACCEPT
\nor
\nAccept packets from trusted IP addresses
\n\/sbin\/iptables -A INPUT -s 192.168.0.4 -j ACCEPT
\n________________________________
\nHow to block all connections to a port:
\nTo block port 25:<\/p>\n
iptables -A INPUT -p tcp –dport 25 -j DROP
\niptables -A INPUT -p udp –dport 25 -j DROP<\/p>\n
_______________
\nHow to un-block:
\nTo enable port 25:<\/p>\n
iptables -A INPUT -p tcp –dport 25 -j ACCEPT
\niptables -A INPUT -p udp –dport 25 -j ACCEPT <\/p>\n
__________________________________________________________
\nTo save all rules so that they are not lost in case of a server reboot:<\/p>\n
\/etc\/init.d\/iptables save<\/p>\n","protected":false},"excerpt":{"rendered":"
Iptables is a Linux kernel-level module allowing us to perform various networking manipulations (i.e. packet filtering) to achieve better network security. Here are some iptables commands I have found useful. This list will be updated from time to time. __________________________ View all current iptables rules: iptables -L -v __________________ View all INPUT rules: iptables -L… <\/p>\n