Sponsored by: Search | Newsletter | (Remote web server) Conference |
Sponsored by: Search | Newsletter | Conference | Tech Jobs O’Reilly’s Emerging Technology Conference: May 13-16, 2002 Articles Linux Apache MySQL Perl PHP Python BSD Essentials What is LAMP? The Best of ONLamp.com aboutSQL Big Scary Daemons FreeBSD Basics HTTP Wrangler Linux in the Enterprise Linux Network Administration The Linux Professional Perl P5P Digest Archive PHP Admin Basics PHP Phanatics Python_News Security Alerts Alphabetical Directory of Linux Commands This directory of Linux commands is from Linux in a Nutshell, 3rd Edition. Click on any of the 379 commands below to get a description and list of available options. All links in the command summaries point to the online version of the book on Safari Tech Books Online. Buy it now Read it online ipchains command [options] System administration command. Edit IP firewall rules in the 2.2 Linux kernel. A 2.2 Linux kernel compiled with firewall support will examine the headers of all network packets and compare them to matching rules to see what it should do with the packet. A firewall rule consists of some matching criteria and a target, a result to be applied if the packet matches the criteria. The rules are organized into chains. You can use these rules to build a firewall or just reject certain kinds of network connections. Firewall rules are organized into chains, an ordered checklist that the kernel works through looking for matches. There are three built-in chains input, output, and forward. Packets entering the system are tested against the input chain. Those exiting the system are checked against the output chain. If an incoming packet is destined for some other system, it is checked against the forward chain. Each of these chains has a default target, a policy, in case no match is found. User-defined chains can be created and used as targets for packets, but they have no default policies. If no match can be found in a userdefined chain, the packet is returned to the chain from which it was called and tested against the next rule in that chain. ipchains only changes the rules in the running kernel. When the system is powered off, all those changes are lost. You can use the ipchains-save command to make a script you can later run with ipchains-restore to restore your firewall settings. Such a script is often called at boot up and many distributions have an ipchains initialization script that uses the output from ipchains-save. Commands ipchains is always invoked with one of the following commands: -A chain rules, –append chain rules Append new rules to chain. -I chain number rules, –insert