Difference between revisions of "Iptables"
m (--libdir=/usr/lib64 added) |
|||
Line 13: | Line 13: | ||
== Dependencies == | == Dependencies == | ||
+ | |||
+ | {{Note|If tcpmss is being used with iptables look at this message for more info [http://marc.info/?l=netfilter-devel&m=123798544815753&w=1].}} | ||
== Non-Multilib == | == Non-Multilib == |
Revision as of 07:47, 3 April 2009
Download Source: | http://iptables.org/projects/iptables/files/iptables-1.4.20.tar.bz2 |
---|---|
Download Source: | ftp://ftp.netfilter.org/pub/iptables/iptables-1.4.20.tar.bz2 |
Contents
Introduction to Iptables
iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators.
Project Homepage: http://iptables.org/projects/iptables/
Dependencies
Non-Multilib
Compile the package:
./configure --prefix=/usr --libexecdir=/lib/iptables \ --bindir=/sbin --sbindir=/sbin && make
Install the package
make install
Multilib
This package does not provide any libraries so only one installation is needed.
32Bit
Not Supported under a 64bit Kernel.
N32
Not Supported under a 64bit Kernel.
64Bit
Compile the package:
CC="gcc ${BUILD64}" ./configure --prefix=/usr \ --libexecdir=/lib64/iptables --bindir=/sbin \ --sbindir=/sbin --libdir=/usr/lib64 && make
Install the package
make install
Contents
Installed Programs: iptables, iptables-restore, iptables-save, ip6tables
Installed Libraries: libip6t_*.so, libipt_*.so
Installed Directory: /lib/iptables
Short Descriptions
iptables: is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.
iptables-restore: is used to restore IP Tables from data specified on STDIN. Use I/O redirection provided by your shell to read from a file.
iptables-save: is used to dump the contents of an IP Table in easily parseable format to STDOUT. Use I/O-redirection provided by your shell to write to a file.
ip6tables: is used to set up, maintain, and inspect the tables of IPv6 packet filter rules in the Linux kernel. Several different tables may be defined. Each table contains a number of built-in chains and may also contain user-defined chains.
libip*.so: library modules are various modules (implemented as dynamic libraries) which extend the core functionality of iptables.
Boot Script
To set up the iptables firewall at boot, install the /etc/rc.d/init.d/iptables init script included in the bootscripts package.
make install-iptables
Misc
Some scripts helpful can be found at http://www.linuxfromscratch.org/blfs/view/svn/postlfs/firewall.html