Additional Resources; Iptables Control Scripts; And Ipv6; Iptables Iptables - Red Hat ENTERPRISE LINUX 3 Reference Manual

iptables
Chapter 17.
17.5.1.
iptables
The behavior of the
iptables
configuration file. The following is a list of directives contained within this file:
• IPTABLES_MODULES
when a firewall is activated. These can include connection tracking and NAT helpers.
• IPTABLES_SAVE_ON_STOP
the firewall is stopped. This directive accepts the following values:
— Saves existing rules to
yes
•
ing the previous version to
— The default value. Does not save existing rules when the firewall is stopped.
no
•
•
IPTABLES_SAVE_ON_RESTART
directive accepts the following values:
— Saves existing rules to
yes
•
ing the previous version to
— The default value. Does not save existing rules when the firewall is restarted.
no
•
• IPTABLES_SAVE_COUNTER
rules. This directive accepts the following values:
— Saves the counter values.
yes
•
— The default value. Does not save the counter values.
no
•
• IPTABLES_STATUS_NUMERIC
hostnames. This directive accepts the following values:
— Returns only IP addresses within a status output.
yes
•
— The default value. Returns domain or hostnames within a status output.
no
•
17.6.
ip6tables
If the
iptables-ipv6
the next-generation IPv6 Internet protocol. The command used to manipulate the IPv6 netfilter is
. Most directives for this command are identical to those used for
ip6tables
table is not yet supported. This means that it is not yet possible to perform IPv6 network address
nat
translation tasks, such as masquerading and port forwarding.
Saved rules for
ip6tables
the initscripts are saved in the
ip6tables
The configuration file for
the names for each directive vary slightly. For instance, the
IPTABLES_MODULES
Control Scripts Configuration File
initscripts is controlled by the
— Specifies a space-separated list of additional
— Saves current firewall rules to
/etc/sysconfig/iptables
/etc/sysconfig/iptables.save
— Saves current firewall rules when the firewall is restarted. This
/etc/sysconfig/iptables
/etc/sysconfig/iptables.save
— Saves and restores all packet and byte counters in all chains and
— Outputs IP addresses in a status output instead of domain or

and IPv6

package is installed, netfilter under Red Hat Enterprise Linux can filter
are stored in the
initscript is
ip6tables
is
IP6TABLES_MODULES
/etc/sysconfig/iptables-config
/etc/sysconfig/ip6tables
/etc/sysconfig/ip6tables.save
/etc/sysconfig/ip6tables-config
in
ip6tables-config
iptables
/etc/sysconfig/iptables
when the firewall is stopped, mov-
.
when the firewall is restarted, mov-
.
iptables
file. Old rules saved by
file.
iptables-config
.
263
modules to load
when
, except the
and
directive