Mastering IPTables, Part I

Linux Journal Presents: Linux comes with a powerful firewall built-in, although the interface can be a little intimidating. This is the first in a multi-part tutorial on how to master basic and not-so-basic IPTables functionality and create the perfect firewall for your home network.

Category:

Science & Technology

Tags:

• firewall
• gateway
• gnu
• hacker
• internet
• ip
• iptables
• journal
• kernel
• linux
• network
• router
• security
• server
• switch
• tcp
• web

[patcito]

If someone would have access to my machine and be able to change the path of iptables which would mean that the intruder probably has root access to my machine, I think that would mean I'm already screwed and the intruder can do whatever he wants. An absolute path wouldn't help at all.

[kirktolliver]

This has to be one of the most comprehensible tutorial on iptables i've seen anywhere. Thank you for shining the light on this subject. Looking forward to wacth your future vids.

[izmufreq]

Super tutorial... Got the basics...

Cheers buddy... Expecting more from you...

:-)

[rahul88051]

thanks a lot !!!!!!!

[xxxJohnutzxxx]

@patcito this is ok if you realize that somebody hacked your system, but it happen very often not to realize that.

[wwwwpmd]

Nice one. Added to the list sysadmin.md/iptables.html

[namphong2036]

wonderful work, thank you so much Master :D

[zzsql]

there used to be a nice tool called quicktables which was a simple script that asked you some simple questions to build a basic ruleset based upon your answers.

Then you can customize to your needs.

it stopped being developed a few years ago but you can still download it.

[sannitig]

input = Dest. Firewall

output = Source Firewall

Forward = through firewall

[thablackmarkit]

lol i found a neat book,

amazon* c o m/Linux-Firewalls-Detection-Re­sponse-iptables/dp/1593271417/­ref=sr_1_1?ie=UTF8&s=books&qid­=1242065650&sr=1-1

[linuxservers]

I understand that - Input Chain match packets wich destination is the Firewall itself and OUTSIDE Chain match packets that were originated inside of the Firewall, Forward chain is for packets that pass through it.