brain initiation
This commit is contained in:
12
20230608020239-ip_tables.org
Normal file
12
20230608020239-ip_tables.org
Normal file
@@ -0,0 +1,12 @@
|
||||
:PROPERTIES:
|
||||
:ID: 1acb20f4-ad0f-4447-9138-c09a949fdd1a
|
||||
:END:
|
||||
#+title: IP-Tables
|
||||
|
||||
Iptables is a user-space utility program that allows a system administrator to configure the [[id:f055acfb-05dd-4228-a92a-356240b8c975][IP]] [[id:fde35a08-897d-4502-aead-1f4414ea639c][packet]] filter rules of the [[id:5fada795-19a3-4ba6-97c0-0b70bd728a2f][Linux]] kernel [[id:b9047be5-edca-4eca-8bac-c45e03373942][firewall]], implemented as different Netfilter modules. The filters are organized in different tables, which contain chains of rules for how to treat [[id:c9461f7b-7368-4b88-b90b-2d785fda2159][network]] traffic packets. Different [[id:33388695-657c-44a2-8359-c7b6137233d0][kernel]] modules and programs are currently used for different [[id:bd5b34ba-aa98-4808-b97b-2376aa7b8866][protocols]]; iptables applies to IPv4, ip6tables to IPv6, arptables to [[id:cdcf5e86-4af4-4137-8dc8-6f85061ad60a][ARP]], and ebtables to [[id:c5a27aff-1c9c-4355-a793-202d71388930][ethernet]] frames.
|
||||
|
||||
Iptables requires elevated privileges to operate and must be executed by user [[id:673d1cb1-536b-42f1-a046-40a8937c4283][root]], otherwise it fails to function. On most Linux systems, iptables is installed as ~/usr/sbin/iptables~ and documented in its man pages, which can be opened using man [[id:1acb20f4-ad0f-4447-9138-c09a949fdd1a][IP-tables]] when installed. It may also be found in ~/sbin/iptables~, but since iptables is more like a service rather than an "essential binary", the preferred location remains ~/usr/sbin~.
|
||||
|
||||
The term iptables is also commonly used to inclusively refer to the kernel-level components. X_tables is the name of the kernel module carrying the shared code portion used by all four modules that also provides the API used for extensions; subsequently, Xtables is more or less used to refer to the entire firewall (v4, v6, arp, and eb) architecture.
|
||||
|
||||
Madrigal Industrial Solutions uses the Iptables in conjunction with [[id:daa194c9-63f1-433e-8826-a0b4e9020e16][wireguard]] and continuously the [[id:80666401-173e-4828-9c29-552dab716946][dns]] [[id:f2b1d5af-1a7d-47a5-95c8-4a85d558419e][server]].
|
||||
Reference in New Issue
Block a user