Changeset 48ecffe8
- Timestamp:
- 01/27/2005 02:31:07 AM (18 years ago)
- Branches:
- 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 6.0, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, ken/inkscape-core-mods, krejzi/svn, lazarus, nosym, perl-modules, plabs/python-mods, qt5new, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/soup3, xry111/test-20220226
- Children:
- 305e60de
- Parents:
- 17fb537e
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
postlfs/security/iptables.xml
r17fb537e r48ecffe8 19 19 <?dbhtml filename="iptables.html"?> 20 20 <title>iptables-&iptables-version;</title> 21 <indexterm zone="iptables"> 22 <primary sortas="a-Iptables">Iptables</primary> 23 </indexterm> 21 24 22 25 <para>The next part of this chapter deals with firewalls. The principle … … 74 77 </sect3> 75 78 76 <!-- <sect3><title>Additional downloads</title>77 <itemizedlist spacing='compact'>78 <listitem><para>Required Patch (fixes a build issue with79 <application>linux</application>-2.6.7): <ulink80 url="&patch-root;/iptables-&iptables-version;-build_fix-1.patch"/></para>81 </listitem>82 </itemizedlist></sect3> -->83 84 79 </sect2> 85 80 … … 90 85 commands:</para> 91 86 92 <screen><userinput><command>make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin && 93 make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin install</command></userinput></screen> 87 <screen><userinput><command>make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin</command></userinput></screen> 88 89 <para>Now, as the root user:</para> 90 91 <screen><userinput role='root'><command>make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin install</command></userinput></screen> 94 92 95 93 </sect2> … … 113 111 <title>Contents</title> 114 112 115 <para>The <application>iptables</application> package contains 116 <command>iptables</command>, <command>iptables-restore</command>, 117 <command>iptables-save</command>, <command>ip6tables</command> 118 and the <filename class='libraryfile'>libip*.so</filename> library 119 modules.</para> 113 <segmentedlist> 114 <segtitle>Installed Programs</segtitle> 115 <segtitle>Installed Libraries</segtitle> 116 <segtitle>Installed Directory</segtitle> 120 117 121 </sect2> 118 <seglistitem> 119 <seg>iptables, iptables-restore, iptables-save and ip6tables</seg> 120 <seg>libip6t_*.so and libipt_*.so</seg> 121 <seg>/lib/iptables</seg> 122 </seglistitem> 123 </segmentedlist> 122 124 123 <sect2><title>Description</title> 125 <variablelist> 126 <bridgehead renderas="sect3">Short Descriptions</bridgehead> 127 <?dbfo list-presentation="list"?> 124 128 125 <sect3><title>iptables</title> 126 <para><command>iptables</command> is used to set up, maintain, and inspect the 127 tables of <acronym>IP</acronym> packet filter rules in the Linux kernel.</para> 128 </sect3> 129 <varlistentry id="iptables-prog"> 130 <term><command>iptables</command></term> 131 <listitem><para>is used to set up, maintain, and inspect the tables of 132 <acronym>IP</acronym> packet filter rules in the Linux kernel.</para> 133 <indexterm zone="iptables iptables-prog"> 134 <primary sortas="b-iptables">iptables</primary> 135 </indexterm></listitem> 136 </varlistentry> 129 137 130 <sect3><title>iptables-restore, iptables-save</title> 131 <para>These are used to save and to restore your elaborated set of chains and 132 rules. Until <application>iptables</application>-1.2.5, they were declared 133 experimental.</para> 134 </sect3> 138 <varlistentry id="iptables-restore"> 139 <term><command>iptables-restore</command></term> 140 <listitem><para>is used to restore <acronym>IP</acronym> Tables from data 141 specified on <acronym>STDIN</acronym>. Use I/O redirection provided by your 142 shell to read from a file.</para> 143 <indexterm zone="iptables iptables-restore"> 144 <primary sortas="b-iptables-restore">iptables-restore</primary> 145 </indexterm></listitem> 146 </varlistentry> 135 147 136 <sect3 id="ip6tables" xreflabel="ip6tables"><title>ip6tables</title> 137 <para>This is the same as <command>iptables</command> but for use with 138 <acronym>IP</acronym>v6. As of v1.2.5, it is not as complete as the standard 139 <acronym>IP</acronym>v4 version, especially with regard to some of the 140 modules.</para> 141 </sect3> 148 <varlistentry id="iptables-save"> 149 <term><command>iptables-save</command></term> 150 <listitem><para>is used to dump the contents of an <acronym>IP</acronym> Table 151 in easily parseable format to <acronym>STDOUT</acronym>. Use I/O-redirection 152 provided by your shell to write to a file.</para> 153 <indexterm zone="iptables iptables-save"> 154 <primary sortas="b-iptables-save">iptables-save</primary> 155 </indexterm></listitem> 156 </varlistentry> 142 157 143 <sect3><title>libip*.so library modules</title> 144 <para>These are various modules (implemented as dynamic libraries) which 145 extend the core functionality of <command>iptables</command>.</para> 146 </sect3> 158 <varlistentry id="ip6tables"> 159 <term><command>ip6tables</command></term> 160 <listitem><para>is used to set up, maintain, and inspect the tables of 161 <acronym>IP</acronym>v6 packet filter rules in the Linux kernel. Several 162 different tables may be defined. Each table contains a number of built-in 163 chains and may also contain user-defined chains.</para> 164 <indexterm zone="iptables ip6tables"> 165 <primary sortas="b-ip6tables">ip6tables</primary> 166 </indexterm></listitem> 167 </varlistentry> 168 169 <varlistentry id="libip-iptables"> 170 <term><filename class='libraryfile'>libip*.so</filename></term> 171 <listitem><para>library modules are various modules (implemented as dynamic 172 libraries) which extend the core functionality of 173 <command>iptables</command>.</para> 174 <indexterm zone="iptables libip-iptables"> 175 <primary sortas="c-libip-iptables">libip*.so</primary> 176 </indexterm></listitem> 177 </varlistentry> 178 </variablelist> 147 179 148 180 </sect2>
Note:
See TracChangeset
for help on using the changeset viewer.