{"id":68049,"date":"2023-07-31T15:01:16","date_gmt":"2023-07-31T07:01:16","guid":{"rendered":"https:\/\/www.hongkiat.com\/blog\/?p=68049"},"modified":"2023-08-01T16:02:13","modified_gmt":"2023-08-01T08:02:13","slug":"linux-command-iptables","status":"publish","type":"post","link":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/","title":{"rendered":"How to Use iptables in Linux"},"content":{"rendered":"

The command iptables<\/code> enables administrators to configure the IP packet filter rules of the Linux kernel firewall. It is essentially a tool that controls the network traffic in a system by determining what packets of data get to stay, where they are directed, and which ones are not allowed.<\/p>\n

With iptables<\/code>, you can define filters and rules based on IP addresses, protocols (such as TCP, UDP), ports, or a combination of these.<\/p>\n

So, typically, iptables<\/code> is used for establishing, managing, and enforcing rules concerning incoming and outgoing network traffic in Linux, which helps in tasks such as Network Address Translation (NAT), packet filtering, and packet mangling. This makes it a crucial tool for network security, allowing control over which connections are permitted or denied at various points in the network.<\/p>\n

Here are some ways to use the iptables<\/code> command:<\/p>\n

1. List Rules<\/h3>\n

To list all the rules in the firewall, you can use the -L<\/code> option.<\/p>\n

iptables -L<\/pre>\n
2. Block an IP Address<\/h3>\n
To block all incoming traffic from a specific IP address, you can use the -A<\/code> option to append a rule to a chain.<\/p>\n
iptables -A INPUT -s 192.168.0.10 -j DROP<\/pre>\n
The command above blocks all incoming traffic from the IP address 192.168.0.10<\/code>.<\/p>\n
3. Allow an IP Address<\/h3>\n
To allow all incoming traffic from a specific IP address, you can use the -A<\/code> option to append a rule to a chain.<\/p>\n
iptables -A INPUT -s 192.168.0.10 -j ACCEPT<\/pre>\n
The command above allows all incoming traffic from the IP address 192.168.0.10<\/code>.<\/p>\n
4. Block a Port<\/h3>\n
To block all incoming traffic on a specific port, you can use the -A<\/code> option to append a rule to a chain.<\/p>\n
iptables -A INPUT -p tcp --dport 80 -j DROP<\/pre>\n
The command above blocks all incoming traffic on TCP<\/code> port 80<\/code>.<\/p>\n
5. Allow a Port<\/h3>\n
To allow all incoming traffic on a specific port, you can use the -A<\/code> option to append a rule to a chain.<\/p>\n
iptables -A INPUT -p tcp --dport 80 -j ACCEPT<\/pre>\n
The command above allows all incoming traffic on TCP<\/code> port 80<\/code>.<\/p>\n
6. Delete a Rule<\/h3>\n
To delete a rule, you can use the -D<\/code> option followed by the chain and rule number.<\/p>\n
iptables -D INPUT 1<\/pre>\n
The command above deletes the first rule in the INPUT chain.<\/p>\n
7. Flush All Rules<\/h3>\n
To remove all rules, you can use the -F<\/code> option.<\/p>\n
iptables -F<\/pre>\n
8. Block a Specific Service<\/h3>\n
If you want to block a specific service, you can specify the service name instead of the port number.<\/p>\n
iptables -A INPUT -p tcp --dport ssh -j DROP<\/pre>\n
More Linux commands:<\/h3>\n\n\n\n\n\n\n\n\n\n
Directory Operations<\/td>\nrmdir<\/code><\/a> \u00b7 cd<\/code><\/a> \u00b7 pwd<\/code><\/a> \u00b7 exa<\/code><\/a> \u00b7 ls<\/code><\/a><\/td>\n<\/tr>\n
File Operations<\/td>\ncat<\/code><\/a> \u00b7 cp<\/code><\/a> \u00b7 dd<\/code><\/a> \u00b7 less<\/code><\/a> \u00b7 touch<\/code><\/a> \u00b7 ln<\/code><\/a> \u00b7 rename<\/code><\/a> \u00b7 more<\/code><\/a> \u00b7 head<\/code><\/a><\/td>\n<\/tr>\n
File System Operations<\/td>\nchown<\/code><\/a> \u00b7 mkfs<\/code><\/a> \u00b7 locate<\/code><\/a><\/td>\n<\/tr>\n
Networking<\/td>\nping<\/code><\/a> \u00b7 curl<\/code><\/a> \u00b7 wget<\/code><\/a> \u00b7 iptables<\/code><\/a> \u00b7 mtr<\/code><\/a><\/td>\n<\/tr>\n
Search and Text Processing<\/td>\nfind<\/code><\/a> \u00b7 grep<\/code><\/a> \u00b7 sed<\/code><\/a> \u00b7 whatis<\/code><\/a> \u00b7 ripgrep<\/code><\/a> \u00b7 fd<\/code><\/a> \u00b7 tldr<\/code><\/a><\/td>\n<\/tr>\n
System Information and Management<\/td>\nenv<\/code><\/a> \u00b7 history<\/code><\/a> \u00b7 top<\/code><\/a> \u00b7 who<\/code><\/a> \u00b7 htop<\/code><\/a> \u00b7 glances<\/code><\/a> \u00b7 lsof<\/code><\/a><\/td>\n<\/tr>\n
User and Session Management<\/td>\nscreen<\/code><\/a> \u00b7 su<\/code><\/a> \u00b7 sudo<\/code><\/a> \u00b7 open<\/code><\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>","protected":false},"excerpt":{"rendered":"
Learn how to configure IP packet filter rules in Linux with iptables for better network control.<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3397],"tags":[888,3316],"topic":[],"class_list":["entry-content","is-maxi"],"acf":[],"yoast_head":"\nHow to Use iptables in Linux - Hongkiat<\/title>\n<meta name=\"description\" content=\"Learn how to configure IP packet filter rules in Linux with iptables for better network control.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Use iptables in Linux\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure IP packet filter rules in Linux with iptables for better network control.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/\" \/>\n<meta property=\"og:site_name\" content=\"Hongkiat\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/hongkiatcom\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-31T07:01:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-01T08:02:13+00:00\" \/>\n<meta name=\"author\" content=\"Hongkiat.com\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@hongkiat\" \/>\n<meta name=\"twitter:site\" content=\"@hongkiat\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hongkiat.com\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/linux-command-iptables\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/linux-command-iptables\\\/\"},\"author\":{\"name\":\"Hongkiat.com\",\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#\\\/schema\\\/person\\\/7cc686597d92f9086729e4bcc1577ba3\"},\"headline\":\"How to Use iptables in Linux\",\"datePublished\":\"2023-07-31T07:01:16+00:00\",\"dateModified\":\"2023-08-01T08:02:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/linux-command-iptables\\\/\"},\"wordCount\":365,\"publisher\":{\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#organization\"},\"keywords\":[\"Linux\",\"Linux Commands\"],\"articleSection\":[\"Desktop\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/linux-command-iptables\\\/\",\"url\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/linux-command-iptables\\\/\",\"name\":\"How to Use iptables in Linux - Hongkiat\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#website\"},\"datePublished\":\"2023-07-31T07:01:16+00:00\",\"dateModified\":\"2023-08-01T08:02:13+00:00\",\"description\":\"Learn how to configure IP packet filter rules in Linux with iptables for better network control.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/linux-command-iptables\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/linux-command-iptables\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/linux-command-iptables\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Use iptables in Linux\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/\",\"name\":\"Hongkiat\",\"description\":\"Tech and Design Tips\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#organization\",\"name\":\"Hongkiat.com\",\"url\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/wp-content\\\/uploads\\\/hkdc-logo-rect-yoast.jpg\",\"contentUrl\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/wp-content\\\/uploads\\\/hkdc-logo-rect-yoast.jpg\",\"width\":1200,\"height\":799,\"caption\":\"Hongkiat.com\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/hongkiatcom\",\"https:\\\/\\\/x.com\\\/hongkiat\",\"https:\\\/\\\/www.pinterest.com\\\/hongkiat\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/#\\\/schema\\\/person\\\/7cc686597d92f9086729e4bcc1577ba3\",\"name\":\"Hongkiat.com\",\"description\":\"This post is published by an HKDC (hongkiat.com) staff. (I.e., intern, staff writer, or editor).\",\"sameAs\":[\"https:\\\/\\\/www.hongkiat.com\"],\"url\":\"https:\\\/\\\/www.hongkiat.com\\\/blog\\\/author\\\/com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Use iptables in Linux - Hongkiat","description":"Learn how to configure IP packet filter rules in Linux with iptables for better network control.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/","og_locale":"en_US","og_type":"article","og_title":"How to Use iptables in Linux","og_description":"Learn how to configure IP packet filter rules in Linux with iptables for better network control.","og_url":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/","og_site_name":"Hongkiat","article_publisher":"https:\/\/www.facebook.com\/hongkiatcom","article_published_time":"2023-07-31T07:01:16+00:00","article_modified_time":"2023-08-01T08:02:13+00:00","author":"Hongkiat.com","twitter_card":"summary_large_image","twitter_creator":"@hongkiat","twitter_site":"@hongkiat","twitter_misc":{"Written by":"Hongkiat.com","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/#article","isPartOf":{"@id":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/"},"author":{"name":"Hongkiat.com","@id":"https:\/\/www.hongkiat.com\/blog\/#\/schema\/person\/7cc686597d92f9086729e4bcc1577ba3"},"headline":"How to Use iptables in Linux","datePublished":"2023-07-31T07:01:16+00:00","dateModified":"2023-08-01T08:02:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/"},"wordCount":365,"publisher":{"@id":"https:\/\/www.hongkiat.com\/blog\/#organization"},"keywords":["Linux","Linux Commands"],"articleSection":["Desktop"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/","url":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/","name":"How to Use iptables in Linux - Hongkiat","isPartOf":{"@id":"https:\/\/www.hongkiat.com\/blog\/#website"},"datePublished":"2023-07-31T07:01:16+00:00","dateModified":"2023-08-01T08:02:13+00:00","description":"Learn how to configure IP packet filter rules in Linux with iptables for better network control.","breadcrumb":{"@id":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.hongkiat.com\/blog\/linux-command-iptables\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hongkiat.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to Use iptables in Linux"}]},{"@type":"WebSite","@id":"https:\/\/www.hongkiat.com\/blog\/#website","url":"https:\/\/www.hongkiat.com\/blog\/","name":"Hongkiat","description":"Tech and Design Tips","publisher":{"@id":"https:\/\/www.hongkiat.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hongkiat.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.hongkiat.com\/blog\/#organization","name":"Hongkiat.com","url":"https:\/\/www.hongkiat.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hongkiat.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.hongkiat.com\/blog\/wp-content\/uploads\/hkdc-logo-rect-yoast.jpg","contentUrl":"https:\/\/www.hongkiat.com\/blog\/wp-content\/uploads\/hkdc-logo-rect-yoast.jpg","width":1200,"height":799,"caption":"Hongkiat.com"},"image":{"@id":"https:\/\/www.hongkiat.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/hongkiatcom","https:\/\/x.com\/hongkiat","https:\/\/www.pinterest.com\/hongkiat\/"]},{"@type":"Person","@id":"https:\/\/www.hongkiat.com\/blog\/#\/schema\/person\/7cc686597d92f9086729e4bcc1577ba3","name":"Hongkiat.com","description":"This post is published by an HKDC (hongkiat.com) staff. (I.e., intern, staff writer, or editor).","sameAs":["https:\/\/www.hongkiat.com"],"url":"https:\/\/www.hongkiat.com\/blog\/author\/com\/"}]}},"jetpack_featured_media_url":"https:\/\/","jetpack_shortlink":"https:\/\/wp.me\/p4uxU-hHz","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/posts\/68049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/comments?post=68049"}],"version-history":[{"count":3,"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/posts\/68049\/revisions"}],"predecessor-version":[{"id":68469,"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/posts\/68049\/revisions\/68469"}],"wp:attachment":[{"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/media?parent=68049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/categories?post=68049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/tags?post=68049"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.hongkiat.com\/blog\/wp-json\/wp\/v2\/topic?post=68049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}