Iptables

<< Security | Index | Netstat >>

Show iptables rules

• iptables --line-numbers -vnL

Delete a rule

• iptables -D INPUT 1

Input a rule at a certain position

• sudo iptables -I INPUT 1 -s 198.251.89.119/16 -j DROP
• see: https://serverfault.com/questions/592061/block-range-of-ip-addresses

Trace a PID and show the port it uses

• strace -p 30456 -f -e trace=network -s 10000

Save the new rules

• /etc/init.d/iptables save