iptables command in Linux with Examples
Last Updated : 03 Jul, 2024
The iptables command in Linux is a powerful tool that is used for managing the firewall rules and network traffic. It facilitates allowing the administrators to configure rules that help how packets are filtered, translated, or forwarded. On using this iptables, you can set up security policies to control incoming and outgoing traffic, define port forwarding, and implement network address translation (NAT). It’s essential for securing servers and networks by selectively permitting or denying specific types of traffic based on defined rules and conditions. This flexibility makes iptables a fundamental component in Linux networking and security configurations.
In this article, we are going discuss on what are iptables, the total tables in Iptables, and built-in chains in tables of iptables. What are the common parameters in the table and then discuss the filters of iptables, discussing why to use the iptables and its benefits effectively.
What are iptables?
It is a command line interface used to set up and maintain tables for the Netfilter firewall for IPv4, included in the Linux kernel. The firewall matches packets with rules defined in these tables and then takes the specified action on a possible match.
- Tables is the name for a set of chains.
- Chain is a collection of rules.
- Rule is condition used to match packet.
- Target is action taken when a possible rule matches. Examples of the target are ACCEPT, DROP, QUEUE.
- Policy is the default action taken in case of no match with the inbuilt chains and can be ACCEPT or DROP.
Syntax
iptables --table TABLE -A/-C/-D... CHAIN rule --jump Target
Tables in Iptables
There are five possible tables as follows:
- filter: Default used table for packet filtering. It includes chains like INPUT, OUTPUT and FORWARD.
- nat : Related to Network Address Translation. It includes PREROUTING and POSTROUTING chains.
- mangle : For specialised packet alteration. Inbuilt chains include PREROUTING and OUTPUT.
- raw : Configures exemptions from connection tracking. Built-in chains are PREROUTING and OUTPUT.
- security : Used for Mandatory Access Control
Built-in Chains of Tables in Iptables
There are few built-in chains that are included in tables. They are:
- INPUT : A set of rules for packets destined to localhost sockets.
- FORWARD :for packets routed through the device.
- OUTPUT : It is locally generated packets, meant to be transmitted outside.
- PREROUTING : It is used for modifying packets as they arrive.
- POSTROUTING : IIt helps in modifying packets as they are leaving.
User-defined Chains
User-defined chains can also be created. The following are the some of the possible one with examples:
1. -A, –append : Append to the chain provided in parameters.
Syntax
iptables [-t table] --append [chain] [parameters]
Example:
This command drops all the traffic coming on any port.
iptables -t filter --append INPUT -j DROP
Output
2. -D, –delete : Delete rule from the specified chain.
Syntax
iptables [-t table] --delete [chain] [rule_number]
Example:
This command deletes the rule 2 from INPUT chain.
iptables -t filter --delete INPUT 2
Output
3. -C, –check :Check if a rule is present in the chain or not. It returns 0 if the rule exists and returns 1 if it does not. Syntax:
iptables [-t table] --check [chain] [parameters]
Example:
This command checks whether the specified rule is present in the INPUT chain.
iptables -t filter --check INPUT -s 192.168.1.123 -j DROP
Output
Examples of Iptables Commands with Common Parameters
The iptables command uses parameters to match packets and define actions. Key parameters include -p or --proto, which specify the protocol of the packet, such as tcp, udp, icmp, ssh, etc. This parameter allows administrators to selectively filter or handle packets based on their communication protocol. The common parameters are:
1. -p, –proto : is the protocol that the packet follows. Possible values maybe: tcp, udp, icmp, ssh etc. Syntax:
iptables [-t table] -A [chain] -p {protocol_name} [target]
Example:
This command appends a rule in the INPUT chain to drop all udp packets.
iptables -t filter -A INPUT -p udp -j DROP
Output
2. -s, –source: is used to match with the source address of the packet.
Syntax
iptables [-t table] -A [chain] -s {source_address} [target]
Example:
This command appends a rule in the INPUT chain to accept all packets originating from 192.168.1.230.
iptables -t filter -A INPUT -s 192.168.1.230 -j ACCEPT
Output
3. -d, –destination : is used to match with the destination address of the packet.
Syntax
iptables [-t table] -A [chain] -d {destination_address} [target]
Example:
This command appends a rule in the OUTPUT chain to drop all packets destined for 192.168.1.123.
iptables -t filter -A OUTPUT -d 192.168.1.123 -j DROP
Output
4. -i, –in-interface : matches packets with the specified in-interface and takes the action. Syntax:
iptables [-t table] -A [chain] -i {interface} [target]
Example:
This command appends a rule in the INPUT chain to drop all packets destined for wireless interface.
iptables -t filter -A INPUT -i wlan0 -j DROP
Output
5. -o, –out-interface : matches packets with the specified out-interface.
6. -j, –jump : this parameter specifies the action to be taken on a match.
Syntax
iptables [-t table] -A [chain] [parameters] -j {target}
Example:
This command adds a rule in the FORWARD chain to drop all packets.
iptables -t filter -A FORWARD -j DROP
Output
Filters of Iptables
The following are the filters of iptables:
1. While trying out the commands, you can remove all filtering rules and user created chains.
sudo iptables --flush
2. To save the iptables configuration use:
sudo iptables-save
3. Restoring iptables config can be done with:
sudo iptables-restore
- There are other interfaces such ipv6 tables which are used to manage filtering tables for IPv6.
Why use Iptables in Linux?
The following are the some of the reasons to use Iptables in Linux:
- Firewall Configuration: It helps in enabling the precise control over the netowrk traffic to protect against unauthorized access and attacks.
- Packet Filtering: It allows in filtering based on the criteria like protocol, IP addresses and prots providing the security.
- Network Address translation (NAT): It facilitates with seamless communication between different network segments.
- Logging and Monitoring: It provides the insights into the network activity for providing feature sof security auditing and troubleshooting.
Benefits of Using iptable Command
The following are the benefits of using iptable command:
- Robust Firewall Capabilities: It facilitates with configuration of firewall rules to control incoming and outgoing traffic, enhancing network security.
- Precise Packet Filtering: It provides the filtering based on criteria such as protocol, source/destination IP addresses, and ports, ensuring only authorized traffic passes through.
- Network Address Translation (NAT): It supports NAT functionality for translating IP addresses and ports, essential for network connectivity and management.
- Logging and Monitoring: It provides logging capabilities to monitor and analyze network traffic, aiding in security auditing and troubleshooting.
Features of Iptables
The following are the some of the features of Iptables:
- Packet Filtering: Iptables facilitates with providing filtering features for network packets based on various criteria such as source and destination IP addresses and ports.
- NAT: Iptables supports the NAT by allowing for the translation of the private IP address to public address making an essential for devices within a private network to establish the communication with external networks.
- Stateful Inspection: Through stateful inspection, iptables helps in tracking the state of network connections with providing the enhanced security by legitimating the traffic that is only allowed.
Usecases of Iptables
The following are the some of the usecases of Iptables:
- Firewall Protection: Iptables can be configured through blocking the unauthorized access and allow legitimate traffic. It facilitates with providing a robust firewall to secure a network or individual system.
- Traffic Shaping and Control: By setting rules, iptables we can manage and prioritize network traffic, ensuring critical services maintain performance and reducing congestion during peak usage times.
- Network Address Translation (NAT): iptables facilitates NAT, allowing multiple devices on a private network to access external networks using a single public IP address, essential for home and business networks.
- Port Forwarding: With iptables, administrators can redirect traffic from one port to another, enabling access to services running on different ports or internal servers from external networks.
Similar Reads
Linux/Unix Tutorial
Linux is a widely-used open-source operating system, similar to Windows, Mac, and Android. It shares similarities with Unix, another operating system known for its commercial use. Unix and Linux have comparable components, including the kernel, shell, and programs. Many commands in Unix and Linux ex
12 min read
Getting Started with Linux
What is Linux Operating System
The Linux Operating System is a type of operating system that is similar to Unix, and it is built upon the Linux Kernel. The Linux Kernel is like the brain of the operating system because it manages how the computer interacts with its hardware and resources. It makes sure everything works smoothly a
13 min read
LINUX Full Form - Lovable Intellect Not Using XP
LINUX stands for Lovable Intellect Not Using XP. Linux was developed by Linus Torvalds and named after him. Linux is an open-source and community-developed operating system for computers, servers, mainframes, mobile devices, and embedded devices. Linux receives requests from system programs and it r
2 min read
Difference between Linux and Windows
Linux: Linux could be a free and open supply OS supported operating system standards. It provides programming interface still as programme compatible with operating system primarily based systems and provides giant selection applications. A UNIX operating system additionally contains several several
7 min read
What are Linux Distributions ?
A Linux distribution, often shortened to “distro,†is a packaged version of Linux that comes with the Linux kernel plus a collection of software and utilities that make the OS functional and user-friendly. Some distros are optimized for business environments, offering tools for productivity and ente
8 min read
Difference between Unix and Linux
Linux is an operating system that was developed by Linus Torvalds in 1991. The name "Linux" originates from the Linux kernel. It is an open-source software that is completely free to use. It is used for computer hardware and software, game development, mainframes, etc. It can run various client prog
4 min read
Installation with Linux
How to Install Arch Linux in VirtualBox?
Installing Arch Linux on a virtual machine is an excellent way to experience this powerful and flexible Linux distribution without affecting your main system. If you're looking to install Arch Linux in VirtualBox, this guide will take you through the process step-by-step. Arch Linux is known for its
7 min read
Fedora Linux Operating System
Fedora Linux is a free and open-source operating system based on the Linux kernel and was developed by the community-supported Fedora Project. It is known for its fast release cycle, which keeps the operating system up to date with the latest software and technologies. What is the Fedora Linux Opera
12 min read
How to install Ubuntu on VirtualBox?
Installing Ubuntu on VirtualBox is a great way to experience the powerful features of this popular Linux distribution without altering your main operating system. Whether you’re a developer, a student, or simply curious about Linux, setting up Ubuntu on VirtualBox allows you to test and explore in a
6 min read
How to Install Linux Mint?
Linux Mint is the second-largest Linux-based distro used in the world. Linux Mint is a community-driven Linux distribution based on Ubuntu which itself is based on Debian and bundled with a variety of free and open-source applications. So here we discuss the installation of Linux mint. Installation
3 min read
How to Install Kali Linux on Windows?
Kali Linux is an open-source Linux distribution based on Debian, designed for sophisticated penetration testing and security auditing. Kali Linux includes hundreds of tools for diverse information security activities such as penetration testing, security research, computer forensics, and reverse eng
2 min read
How to Install Linux on Windows PowerShell Subsystem?
There are several ways to Install a Linux subsystem on your Windows PC Powershell Environment. It is good for learners, but it is recommended using original Linux OS if you are a developer as the Subsystem lacks the pre-installed Linux tools. Before we begin installing a Linux subsystem, we need to
2 min read
How to Find openSUSE Linux Version?
openSUSE is well known for its GNU/Linux-based operating systems, mainly Tumbleweed, a tested rolling release, and Leap, a distribution with Long-Term-Support(LTS). MicroOS and Kubic are new transactional, self-contained distributions for use as desktop or container runtime. Here we figure out which
2 min read
How to Install CentOS
CentOS is a popular open-source Linux distribution aimed at servers and provides compatibility with Red Hat's RPM package manager. It is built with the goal of providing a stable operating system that provided great compatibility with the upstream RHEL (Red hat enterprise Linux) CentOS is therefore
2 min read
Linux File System
Linux File System
Operating systems, the software that powers your computer, rely on a crucial element known as the file system. Think of it as a virtual organizational tool that manages, stores, and retrieves your data efficiently. In the Linux world, a diverse range of file systems has emerged, each crafted to addr
11 min read
Linux File Hierarchy Structure
The Linux File Hierarchy Structure or the Filesystem Hierarchy Standard (FHS) defines the directory structure and directory contents in Unix-like operating systems. It is maintained by the Linux Foundation. In the FHS, all files and directories appear under the root directory /, even if they are st
5 min read
Linux Directory Structure
Prerequisite: Linux File Hierarchy Structure In Linux/Unix operating system everything is a file even directories are files, files are files, and devices like mouse, keyboard, printer, etc are also files. Here we are going to see the Directory Structure in Linux. Types of files in the Linux system.
5 min read
Linux Kernel
Linux Kernel
Linux Kernel is the heart of Linux operating systems. It is an open-source (source code that can be used by anyone freely) software that is most popular and widely used in the industry as well as on a personal use basis. Who created Linux and why? Linux was created by Linus Torvalds in 1991 as a hob
4 min read
Kernel in Operating System
A kernel is the core part of an operating system. It acts as a bridge between software applications and the hardware of a computer. The kernel manages system resources, such as the CPU, memory, and devices, ensuring everything works together smoothly and efficiently. It handles tasks like running pr
10 min read
How Linux Kernel Boots?
Many processes are running in the background when we press the system's power button. It is very important to learn the Linux boot process to understand the workings of any operating system. Knowing how the kernel boots is a must to solve the booting error. It is a very interesting topic to learn, l
11 min read
Difference between Operating System and Kernel
In the world of computing, two terms that are frequently mentioned are Operating System (OS) and Kernel. In this article, we will explore the key differences between the OS and the Kernel, their functions, and how they work together to manage hardware and software. What is an Operating System?An Ope
3 min read
Linux Kernel Module Programming: Hello World Program
Kernel modules are pieces of code that can be loaded and unloaded into the kernel upon demand. They extend the functionality of the kernel without the need to reboot the system. Custom codes can be added to Linux kernels via two methods. The basic way is to add the code to the kernel source tree and
7 min read
Linux Loadable Kernel Module
If you want to add code to a Linux kit, the basic way to do that is to add source files to the kernel source tree and assemble the kernel. In fact, the process of setting up the kernel consists mainly of selecting which files to upload to the kernel will be merged. But you can also add code to the L
7 min read
Loadable Kernel Module - Linux Device Driver Development
For Linux device drivers, we can use only two languages: Assembler and C. Assembler implements the main parts of the Linux kernel, while C implements the architecture-dependent parts. Uploaded kernel modules are often referred to as kernel modules or modules, but those are misleading names because t
4 min read
Linux Networking Tools
Network configuration and troubleshooting commands in Linux
Computers are often connected to each other on a network. They send requests to each other in the form of packets that travel from the host to the destination. Linux provides various commands from network configuration and troubleshooting. Network Configuration and Troubleshooting Commands in Linux
5 min read
How to configure network interfaces in CentOS?
A network interface is a link between a computer and another network(Private or Public). The network interface is basically a card which is known as NIC or Network Interface Card, this does not necessarily have to be in a physical form instead, it can be inbuilt into the software. If we take the exa
5 min read
Command-Line Tools and Utilities For Network Management in Linux
If you are thinking of becoming a system administrator, or you are already a system admin, then this article is for you. As a system admin, your daily routine will include configuring, maintaining, troubleshooting, monitoring, securing networks, and managing servers within data centers. Network conf
8 min read
Linux - Network Monitoring Tools
Network monitoring is using a system (hardware or software) that continuously observes your network and the data flows through it, depending on how the monitoring solution actually functions and informs the network administrator. We can keep a check on all the activities of our network easily. While
4 min read
Shell Scripting & Bash Scripting
Introduction to Linux Shell and Shell Scripting
If we are using any major operating system, we are indirectly interacting with the shell. While running Ubuntu, Linux Mint, or any other Linux distribution, we are interacting with the shell by using the terminal. In this article we will discuss Linux shells and shell scripting so before understandi
7 min read
What is Terminal, Console, Shell and Kernel?
Understanding the terms terminal, console, shell, and kernel is crucial for anyone working with computers or learning about operating systems. These concepts are key components of how we interact with our devices and software. The terminal is a text-based interface used to interact with the computer
5 min read
How to Create a Shell Script in linux
Shell is an interface of the operating system. It accepts commands from users and interprets them to the operating system. If you want to run a bunch of commands together, you can do so by creating a shell script. Shell scripts are very useful if you need to do a task routinely, like taking a backup
7 min read
Shell Scripting - Different types of Variables
The shell is a command-line interpreter for Linux and Unix systems. It provides an interface between the user and the kernel and executes commands. A sequence of commands can be written in a file for execution in the shell. It is called shell scripting. It helps to automate tasks in Linux. Scripting
4 min read
Bash Scripting - Introduction to Bash and Bash Scripting
Bash is a command-line interpreter or Unix Shell and it is widely used in GNU/Linux Operating System. It is written by Brian Jhan Fox. It is used as a default login shell for most Linux distributions. Scripting is used to automate the execution of the tasks so that humans do not need to perform them
12 min read
Bash Script - Define Bash Variables and its types
Variables are an important aspect of any programming language. Without variables, you will not be able to store any required data. With the help of variables, data is stored at a particular memory address and then it can be accessed as well as modified when required. In other words, variables let yo
12 min read
Shell Scripting - Shell Variables
A shell variable is a character string in a shell that stores some value. It could be an integer, filename, string, or some shell command itself. Basically, it is a pointer to the actual data stored in memory. We have a few rules that have to be followed while writing variables in the script (which
6 min read
Bash Script - Difference between Bash Script and Shell Script
In computer programming, a script is defined as a sequence of instructions that is executed by another program. A shell is a command-line interpreter of Linux which provides an interface between the user and the kernel system and executes a sequence of instructions called commands. A shell is capabl
4 min read
Shell Scripting - Difference between Korn Shell and Bash shell
Korn Shell: Korn Shell or KSH was developed by a person named David Korn, which attempts to integrate the features of other shells like C shell, Bourne Shell, etc. Korn Shell allows developers to generate and create new shell commands whenever it is required. Korn shell was developed a long year bac
3 min read
Shell Scripting - Interactive and Non-Interactive Shell
A shell gives us an interface to the Unix system. While using an operating system, we indirectly interact with the shell. On Linux distribution systems, each time we use a terminal, we interact with the shell. The job of the shell is to interpret or analyze the Unix commands given by users. A shell
3 min read
Shell Script to Show the Difference Between echo “$SHELL†and echo ‘$SHELL’
In shell scripting and Linux, the echo command is used to display text on the terminal or console. When used with the $SHELL variable, which contains the path of the current user's shell program, the output of the echo command can be different depending on whether the variable is enclosed in single
4 min read