Iptables (Debian): Unterschied zwischen den Versionen

Aus MattWiki
K (Matt verschob die Seite IPTables einrichten (Debian) nach IPTables (Debian), ohne dabei eine Weiterleitung anzulegen)
 
(14 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
== IPTables 1.4.21 auf Debian 8.0 einrichten ==
== Commands ==


  # cd /etc
  iptables-save > iptables.rules          # Export iptables rules to iptables.rules
  # wget <iptables rules file>
  iptables-restore < iptables.rules       # Import iptables rules from iptables.rules
# chmod 600 iptables.rules
  iptables -L                            # List active iptables
  # nano iptables.test.rules # update at least SSH port
iptables -L -v                          # List active iptables and show adapters
  # iptables-restore < iptables.rules
  iptables -S                            # List active in iptables-save-format
iptables -F                            # Flush active rules


Prüfen, ob SSH Zugriff noch funktioniert.
== iptables on Debian ==


IP-Tables Konfiguration beim Netzwerk Startup laden:
=== Add iptables Rule File ===


  # iptables-save > iptables.rules
Copy '''iptables.rules''' to '''/etc'''
  # chmod 600 iptables.rules
 
  # cd /etc/network/if-pre-up.d/
  chown root:root iptables.rules
  # wget <iptables load file>
  chmod 600 iptables.rules
  # chmod +x iptables
  iptables-restore < iptables.rules
 
Check, if still works.
 
=== Enable Automatic Load of Rules at Startup ===
 
Copy iptables-restore script to '''/etc/network/if-pre-up.d/'''
 
Add execution permissions:
 
  chmod +x iptables
 
The package '''iptables-persistent''' which also can be used for persisting iptables:
 
  # apt-get install iptables-persistent
 
== Blacklisting with ipset with Automatic Updates ==
 
See: https://github.com/trick77/ipset-blacklist
 
[[Category:Linux]]
[[Category:Terminal]]

Aktuelle Version vom 27. September 2020, 09:36 Uhr

Commands

iptables-save > iptables.rules          # Export iptables rules to iptables.rules
iptables-restore < iptables.rules       # Import iptables rules from iptables.rules
iptables -L                             # List active iptables
iptables -L -v                          # List active iptables and show adapters
iptables -S                             # List active in iptables-save-format
iptables -F                             # Flush active rules

iptables on Debian

Add iptables Rule File

Copy iptables.rules to /etc

chown root:root iptables.rules
chmod 600 iptables.rules
iptables-restore < iptables.rules

Check, if still works.

Enable Automatic Load of Rules at Startup

Copy iptables-restore script to /etc/network/if-pre-up.d/

Add execution permissions:

chmod +x iptables

The package iptables-persistent which also can be used for persisting iptables:

# apt-get install iptables-persistent

Blacklisting with ipset with Automatic Updates

See: https://github.com/trick77/ipset-blacklist