Site Tools


clearing_iptables

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
clearing_iptables [2023/05/08 04:40] – -grammar, formatting hogwildclearing_iptables [2023/05/08 04:49] (current) – added "previous" hogwild
Line 1: Line 1:
 ===== Clearing iptables custom commands prior to applying new ones ===== ===== Clearing iptables custom commands prior to applying new ones =====
  
-Let's say, as an example, that you wanted to use some custom iptables commands in a script, such as the firewall script. In fact, the following principles would apply to any recurring script (such as WAN Up).+Let's say, as an example, that you wanted to use some custom iptables commands in a script, such as the firewall script. In fact, the following principles would apply to any recurring script (such as "WAN Up").
  
  \\ You can remove previously-added iptables directives using a simple approach:  \\ You can remove previously-added iptables directives using a simple approach:
Line 11: Line 11:
  \\  \\
  
-The commands below will check what iptables **-A** (append) or **-I** (insert) directives have been issued previously in the current Script/Firewall text. They will then force a run of the same command, replacing any instance of **-A** or **-I** with a **-D** (Delete) switch/parameter. In essence, this will reverse/remove any user-added iptables directives. A user might have created custom tables in which to use advanced iptables commands. This is usually performed using the "**-N**" (new) switch/parameter. The same principles described above will apply to earlier usage of the **-N **switch/parameter.+The commands below will check what iptables **-A** (append) or **-I** (insert) directives have been issued previously in the current Script/Firewall text. They will then force a run of the same command, replacing any instance of **-A** or **-I** with a **-D** (Delete) command. In essence, this will reverse/remove any previous user-added iptables directives.
  
- \\ Here are some things to remember when using these commands:+A user might have created custom tables in which to use advanced iptables commands. This is usually performed using the "**-N**" (new) command. The same principles described above will also apply to previously-issued directives which used the **-N command**. 
 + 
 + \\ Here are some rules to remember when using these commands:
  
   * First, you need to dereference the custom table from the built-in one, using the above method.   * First, you need to dereference the custom table from the built-in one, using the above method.
   * A table must then be emptied with the **-F** (Flush) switch/parameter (for example, **iptables -F $TABLE_NAME ) **.   * A table must then be emptied with the **-F** (Flush) switch/parameter (for example, **iptables -F $TABLE_NAME ) **.
   * Only at this point will you be allowed to remove the table with the command:  **iptables -X $TABLE_NAME** .   * Only at this point will you be allowed to remove the table with the command:  **iptables -X $TABLE_NAME** .
- 
- \\ 
  
  \\  \\
  
  
clearing_iptables.1683517256.txt.gz · Last modified: 2023/05/08 04:40 by hogwild