注意:
The Funtoo Linux project has transitioned to "Hobby Mode" and this wiki is now read-only.
Difference between revisions of "Package:Iptables"
Jump to navigation
Jump to search
Threesixes (talk | contribs) m (more details) |
Threesixes (talk | contribs) m |
||
Line 8: | Line 8: | ||
== Installation == | == Installation == | ||
=== Kernel Settings === | === Kernel Settings === | ||
{{kernelop|title=set to all modules, or all y, prefer modules.|desc= | {{kernelop|title=Netfilter, set to all modules, or all y, prefer modules.|desc= | ||
-> Networking support | -> Networking support | ||
-> Networking options | -> Networking options |
Latest revision as of 03:00, May 7, 2015
Iptables
Tip
We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.
iptables is a program used to configure and manage the kernels netfilter modules.
Installation
Kernel Settings
Under Netfilter--> set to all modules--> or all y--> prefer modules.:
-> Networking support -> Networking options -> Network packet filtering framework (Netfilter)
Emerge
root # emerge iptables
First Run
For some services such as sshguard & Fail2ban you need a generic running firewall. We will save a blank firewall rule set and start the firewall.
ipv4
root # rc-service iptables save root # rc-service iptables start
to start upon reboot
root # rc-update add iptables default
ipv6
root # rc-service ip6tables save root # rc-service ip6tables start
To make the service start upon system reboot, run:
root # rc-update add ip6tables default
Show firewall Rules & Status
ipv4
root # iptables -L -n
ipv6
root # ip6tables -L -n