MC, 2025

Command Linux iptables: A Complete Guide with Examples

When it comes to managing network security on a Linux system, the iptables command is one of the most powerful tools in your arsenal. Whether you're looking to set up firewalls, control network traffic, or block specific IP addresses, iptables is your go-to solution. In this article, we will explore what the iptables command is, how it works, and provide some practical examples to help you get started with configuring network security on your Linux machine.

What is the Command Linux iptables?

iptables is a command-line utility in Linux that allows system administrators to configure the firewall rules for the Linux kernel's networking subsystem. It works by defining a set of rules that control the traffic flowing in and out of your system. These rules can specify actions such as allowing or blocking specific types of network traffic based on various criteria, including IP addresses, protocols, ports, and more.

The rules in iptables are organized into chains, and each chain can have multiple rules. These chains are part of tables, which are essentially groups of related rules that are applied depending on the type of network traffic being processed (e.g., filtering, NAT). In short, iptables gives you granular control over how your Linux system handles incoming and outgoing network traffic.

Basic Structure of an iptables Command

The general syntax of an iptables command is as follows:

iptables -t

Here’s what each part of the command means:

-t

: Specifies the table where the rule will be added (e.g., filter, nat, mangle).

: Defines which chain the rule will apply to (e.g., INPUT, OUTPUT, FORWARD).

: Defines what to do with the traffic that matches the criteria (e.g., ACCEPT, DROP, REJECT).

: Specifies the conditions for matching packets (e.g., source IP, destination port, protocol).

Now that we understand the basic structure, let's explore how to use this powerful tool with some practical examples!

Commonly Used iptables Commands

Here are a few common iptables commands that will help you get started:

1. Listing iptables Rules

One of the most basic commands you'll need is iptables -L, which lists all current firewall rules. This command helps you see the configuration of your firewall and understand what rules are currently applied.

sudo iptables -L

This command will display all rules in the default filter table, showing the chains (e.g., INPUT, OUTPUT) and the rules within those chains.

2. Allowing Incoming Traffic on a Specific Port

If you need to allow incoming traffic on a specific port (e.g., port 80 for HTTP), you can use the following iptables command:

sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT

This command tells iptables to append a rule to the INPUT chain that accepts incoming TCP traffic on port 80. It’s a common rule for allowing web traffic to reach your server.

3. Blocking Incoming Traffic from a Specific IP

If you want to block all incoming traffic from a particular IP address, use this command:

sudo iptables -A INPUT -s 192.168.1.100 -j DROP

This rule will block all traffic from the IP address 192.168.1.100 to your server. The DROP action discards the packets silently, meaning no response is sent back to the source.

4. Allowing Outgoing Traffic to a Specific IP

To allow your system to send traffic to a specific IP address, use the following command:

sudo iptables -A OUTPUT -d 203.0.113.10 -j ACCEPT

This command adds a rule to the OUTPUT chain that allows outgoing traffic to the IP address 203.0.113.10.

5. Saving iptables Rules

After adding or modifying firewall rules, you might want to save them so they persist after a reboot. The method for saving iptables rules depends on your Linux distribution. On Debian-based systems (like Ubuntu), you can use:

sudo iptables-save > /etc/iptables/rules.v4

This command saves the current iptables configuration to a file so that it can be reloaded upon system restart.

Advanced iptables Features

While the basic commands are enough for many use cases, iptables also offers advanced features for more complex scenarios:

1. NAT (Network Address Translation)

With iptables, you can configure NAT to alter the source or destination addresses of packets. For example, to create a simple port forwarding rule, you can use the following command:

sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 192.168.1.10:8080

This rule forwards incoming HTTP traffic (port 80) to an internal server at 192.168.1.10 on port 8080.

2. Stateful Packet Inspection (SPI)

iptables supports stateful packet inspection, which allows it to track the state of network connections. This feature is crucial for allowing related or established connections to pass through the firewall. For example, to allow established connections, you can use:

sudo iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

This rule ensures that packets related to already established connections are allowed, making your firewall more flexible and efficient.

Common Troubleshooting with iptables

Despite its powerful features, iptables can sometimes be tricky to configure. Here are some common issues and troubleshooting tips:

Traffic is blocked despite rules allowing it: Double-check the order of the rules. iptables processes rules sequentially, so make sure your allow rule isn’t overridden by a previous rule.
Changes don’t persist after reboot: Remember to save your iptables rules using the appropriate method for your distribution (e.g., iptables-save on Debian-based systems).
Firewall is not blocking traffic as expected: Ensure that the iptables service is running and that the correct table and chain are being used.

Conclusion

In conclusion, the iptables command is an essential tool for managing network traffic and securing your Linux system. Whether you’re configuring a simple firewall or setting up complex network routing rules, iptables gives you the power to control your system’s network behavior. By learning the basics and experimenting with some of the more advanced features, you can ensure your system remains secure while allowing the necessary traffic to flow freely.

Now that you’re familiar with the basic syntax and common commands, it’s time to dive into your Linux system and start configuring your firewall. With practice, you’ll become an iptables pro in no time. Stay safe, and happy networking!

Przeczytaj również, bo warto!