radin/my-docs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

remove old file

Browse Source
This commit is contained in:
root
2025-08-12 20:11:35 +03:30
parent ae273d1149
commit d822d7eb85
1 changed files with 0 additions and 114 deletions
Download Patch File Download Diff File Expand all files Collapse all files

114
Security & Networking/Iptables/temp.md
View File

@@ -1,114 +0,0 @@
iptable work with net filter
connection type:
1. new
2. stablished
3. Related
iptable-persitant --> install iptables and save in iptables file
defualt path --> /etc/iptables
command format
```bash
iptables -t <table-names> <option> <chain-name> <match> -j <action>
```
table name:
1. filter (default) --> Filtering Packets
2. nat --> Nating Service
3. mangel --> Edit Packets
4. raw --> edit packets before prossecc by os
chains:
1. filter:
1. INPUT
2. OUTPUT
3. Forward
2. nat
1. OUTPUT
2. PREROUTING
3. PASTROUTING
3. mangle
1. INPUT
2. OUTPUT
3. Forward
4. PREROUTING
5. PASTROUTING
4. raw
1. OUTPUT
2. PREROUTIUNG
INPUT : Connection Incomming into Server
OUTPUT : Packets Outgoiing From server
FORWARD : Packer incomming to server but the target is not server (routing)
PREROUTING : EDIT Packets Before Routing
PASTROUTING : Edit Packet After Routing And Before Exit From Server
option:
1. `-A`: Append
2. `-I`: Insert
3. `-D`: Delete
actions:
ACCEPT: accept the packet
DROP: drop the packer without any msg
REJECT: drop the packet with send message to packet sender
LOG: Log The Packet
MASQUERADE: Nating
```bash
iptables-save >> <file_dir>
```
```bash
iptables -nL
```
```bash
iptables -t nat -nL
```
```bash
iptables -t filter -I INPUT -s 192.168.1.100 -j ACCEPT
```
```bash
iptables -t filter -I INPUT -j DROP
```
```bash
iptables -t filter -A INPUT -j DROP
```
```bash
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
```
```bash
iptables -I INPUT -p tcp --dport 22 -j DROP
```
```bash
iptables -A INPUT -p tcp -s 192.168.1.100 -j DROP
```
```bash
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
```
```bash
les -A INPUT -p tcp -m multiport --dport 22,443,80,3306 -j ACCEPT
```
```bash
iptables -A INPUT -p tcp -m multiport --dport 22,443,80,3306 -d 192.168.10.0/24 -j ACCEPT
```
```bash
iptables -A INPUT -p tcp --dport 80 -m limit --limit 100/minute --limit-burst 200 -j ACCEPT
```
```bash
iptables -t NAT -A PREROUTING -i ens33 -p tcp --dport 80 -j REDIRECT --to-port 443
```