How do I save iptables config?

12,873

Solution 1

Your iptables rule is active once you execute it. Issuing a restart merely restores your iptables config to however it was last saved. There is no need to do the restart.

Solution 2

there is a package that contains a system service to restore

sudo apt-get install iptables-persistent

put rules in /etc/iptables/rules.

one way to do this is:

sudo bash -c "iptables-save > /etc/iptables/rules"

Solution 3

On many Linux distributions, you can save changes made to iptables config by:

service iptables save

or alternately

/etc/init.d/iptables save

But this doesn't activate changes, it merely makes them permanent. The moment you executed the iptables command, the change was active. This command makes changes in real time.

Solution 4

iptables-save
iptables-restore

will save rules in a plain text file, and usually restored on system sturup by the init.d script. see iptables.conf e iptables man for details

Share:
12,873

Related videos on Youtube

DisgruntledGoat
Author by

DisgruntledGoat

I'm a web developer and programmer from the UK. I'll fill this out more when I can be bothered; really I'm just trying to get the autobiography badge.

Updated on September 17, 2022

Comments

  • DisgruntledGoat
    DisgruntledGoat over 1 year

    I have just installed Webmin on a Ubuntu server. According to the docs you need to open up port 10000 (which is what Webmin runs on), with this:

    iptables -A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT
    

    It then says you need to apply the firewall configuration with:

    /etc/init.d/iptables restart
    

    However, this command doesn't work for me. Is there a different command that saves the changes on Ubuntu?

  • Kevin Son
    Kevin Son over 13 years
    these commands dont exist.
  • Kevin Son
    Kevin Son over 13 years
    there is no such service in the current version of Ubuntu 10.04
  • Kevin Son
    Kevin Son over 13 years
    and it will go away on the next reboot
  • Sandokas
    Sandokas over 13 years
    Simply forgotten a dash. Fixed