Iptables: Difference between revisions
Chipster19 (talk | contribs) m use configure script |
No edit summary |
||
| Line 18: | Line 18: | ||
Compile the package: | Compile the package: | ||
./configure --prefix= -- | ./configure --prefix=/usr --libexecdir=/lib/iptables \ | ||
--bindir=/sbin --sbindir=/sbin && | |||
make | make | ||
| Line 41: | Line 42: | ||
Compile the package: | Compile the package: | ||
CC="gcc ${BUILD64}" ./configure --prefix=/usr \ | |||
--libexecdir=/lib64/iptables --bindir=/sbin \ | |||
--sbindir=/sbin && | |||
make | |||
Install the package | Install the package | ||
make | make install | ||
= Contents = | = Contents = | ||
Revision as of 09:06, 5 July 2008
| Download Source: | http://iptables.org/projects/iptables/files/iptables-1.4.20.tar.bz2 |
|---|---|
| Download Source: | ftp://ftp.netfilter.org/pub/iptables/iptables-1.4.20.tar.bz2 |
Introduction to Iptables
iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators.
Project Homepage: http://iptables.org/projects/iptables/
Dependencies
Non-Multilib
Compile the package:
./configure --prefix=/usr --libexecdir=/lib/iptables \
--bindir=/sbin --sbindir=/sbin &&
make
Install the package
make install
Multilib
This package does not provide any libraries so only one installation is needed.
32Bit
Not Supported under a 64bit Kernel.
N32
Not Supported under a 64bit Kernel.
64Bit
Compile the package:
CC="gcc ${BUILD64}" ./configure --prefix=/usr \
--libexecdir=/lib64/iptables --bindir=/sbin \
--sbindir=/sbin &&
make
Install the package
make install
Contents
Installed Programs: iptables, iptables-restore, iptables-save, ip6tables
Installed Libraries: libip6t_*.so, libipt_*.so
Installed Directory: /lib/iptables
Short Descriptions
iptables: is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.
iptables-restore: is used to restore IP Tables from data specified on STDIN. Use I/O redirection provided by your shell to read from a file.
iptables-save: is used to dump the contents of an IP Table in easily parseable format to STDOUT. Use I/O-redirection provided by your shell to write to a file.
ip6tables: is used to set up, maintain, and inspect the tables of IPv6 packet filter rules in the Linux kernel. Several different tables may be defined. Each table contains a number of built-in chains and may also contain user-defined chains.
libip*.so: library modules are various modules (implemented as dynamic libraries) which extend the core functionality of iptables.
Boot Script
To set up the iptables firewall at boot, install the /etc/rc.d/init.d/iptables init script included in the bootscripts package.
make install-iptables
Misc
Some scripts helpful can be found at http://www.linuxfromscratch.org/blfs/view/svn/postlfs/firewall.html