← Back to all services
Firewalls

iptables Firewall Rules & Configuration

iptables systemctl: netfilter-persistent

Classic Linux packet filtering. Still widely used, being replaced by nftables.

🔌 Default Port

N/A
N/A
Packet filter

📦 Installation Command

apt install iptables iptables-persistent

⚙️ Configuration Files

  • /etc/iptables/rules.v4
  • /etc/iptables/rules.v6

📂 Default Directories

  • config: /etc/iptables
  • data: N/A (kernel)
  • logs: /var/log/syslog
  • rules: /etc/iptables/rules.v4

🔐 Default Credentials

Username:N/A
Password:N/A
💡 Requires root

⚠️ Conflicts

nftables (same subsystem) Port: N/A

✅ Works With

fail2bandocker

🛡️ Security Notes

Use iptables-persistent to save rules, always allow established connections first, log before drop

❓ Frequently Asked Questions

iptables vs UFW?
UFW is a frontend for iptables with simpler commands. iptables offers more control.
How to save iptables rules?
Run: sudo iptables-save > /etc/iptables/rules.v4 or use iptables-persistent package.
How to allow port in iptables?
Run: sudo iptables -A INPUT -p tcp --dport <port> -j ACCEPT