Difference between revisions of "Iptables"

From CBLFS
Jump to navigationJump to search
Line 68: Line 68:
  
 
  make install-iptables
 
  make install-iptables
 +
 +
== Misc ==
 +
 +
Some scripts helpful can be found at http://www.linuxfromscratch.org/blfs/view/svn/postlfs/firewall.html

Revision as of 20:44, 11 October 2006

Download Source: http://www.netfilter.org/projects/iptables/files/iptables-1.3.6.tar.bz2

Dependencies

Non-Multilib

Compile the package:

make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin

Install the package

make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin install

Multilib

This package does not provide any libraries so only one installation is needed.

32Bit

Not Supported under a 64bit Kernel.

N32

Not Supported under a 64bit Kernel.

64Bit

Compile the package:

make CC="gcc ${BUILD64}" PREFIX=/usr LIBDIR=/lib64 BINDIR=/sbin

Install the package

make PREFIX=/usr LIBDIR=/lib64 BINDIR=/sbin install

Contents

Installed Programs: iptables, iptables-restore, iptables-save, ip6tables

Installed Libraries: libip6t_*.so, libipt_*.so

Installed Directory: /lib/iptables

Short Descriptions

iptables: is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

iptables-restore: is used to restore IP Tables from data specified on STDIN. Use I/O redirection provided by your shell to read from a file.

iptables-save: is used to dump the contents of an IP Table in easily parseable format to STDOUT. Use I/O-redirection provided by your shell to write to a file.

ip6tables: is used to set up, maintain, and inspect the tables of IPv6 packet filter rules in the Linux kernel. Several different tables may be defined. Each table contains a number of built-in chains and may also contain user-defined chains.

libip*.so: library modules are various modules (implemented as dynamic libraries) which extend the core functionality of iptables.

Boot Script

To set up the iptables firewall at boot, install the /etc/rc.d/init.d/iptables init script included in the blfs-bootscripts package.

make install-iptables

Misc

Some scripts helpful can be found at http://www.linuxfromscratch.org/blfs/view/svn/postlfs/firewall.html