Iptables

From CBLFS
Revision as of 07:21, 26 October 2013 by Aaediwen (talk | contribs) (Update dependencies for 1.4.20)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search
Download Source: http://iptables.org/projects/iptables/files/iptables-1.4.20.tar.bz2
Download Source: ftp://ftp.netfilter.org/pub/iptables/iptables-1.4.20.tar.bz2

Introduction to Iptables

iptables is the userspace command line program used to configure the IPv4 and IPv6 packet filtering rule set in Linux 2.4.x or later. It is targeted towards system administrators.

Project Homepage: http://iptables.org/projects/iptables/

Dependencies

Optional


Non-Multilib

Compile the package:

./configure --prefix=/usr --libexecdir=/lib/iptables \
    --bindir=/sbin --sbindir=/sbin && 
make

Install the package

make install

Multilib

This package does not provide any libraries so only one installation is needed.

32Bit

Not Supported under a 64bit Kernel.

N32

Not Supported under a 64bit Kernel.

64Bit

Compile the package:

CC="gcc ${BUILD64}" ./configure --prefix=/usr \
    --libexecdir=/lib64/iptables --bindir=/sbin \
    --sbindir=/sbin --libdir=/usr/lib64 && 
make

Install the package

make install

Contents

Installed Programs: iptables, iptables-restore, iptables-save, ip6tables

Installed Libraries: libip6t_*.so, libipt_*.so

Installed Directory: /lib/iptables

Short Descriptions

iptables: is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

iptables-restore: is used to restore IP Tables from data specified on STDIN. Use I/O redirection provided by your shell to read from a file.

iptables-save: is used to dump the contents of an IP Table in easily parseable format to STDOUT. Use I/O-redirection provided by your shell to write to a file.

ip6tables: is used to set up, maintain, and inspect the tables of IPv6 packet filter rules in the Linux kernel. Several different tables may be defined. Each table contains a number of built-in chains and may also contain user-defined chains.

libip*.so: library modules are various modules (implemented as dynamic libraries) which extend the core functionality of iptables.

Boot Script

To set up the iptables firewall at boot, install the /etc/rc.d/init.d/iptables init script included in the bootscripts package.

make install-iptables

Misc

Some scripts helpful can be found at http://www.linuxfromscratch.org/blfs/view/svn/postlfs/firewall.html