User Tools

Site Tools


iptables:save_iptable_rules

This is an old revision of the document!


IPTables - Save IPTable rules

Save the iptables rules

The generic method of saving iptables rules is to use the command iptables-save, which writes to stdout.

iptables-save > /etc/network/iptables.rules

Example usage

As root, issue:

iptables-save > /etc/iptables.rules

In /etc/network/if-pre-up.d/iptables put:

#!/bin/sh
iptables-restore < /etc/iptables.rules
exit 0

In /etc/network/if-post-down.d/iptables put:

#!/bin/sh
iptables-save -c > /etc/iptables.rules
if [ -f /etc/iptables.rules ]; then
  iptables-restore < /etc/iptables.rules
fi
exit 0

Give permission to the scripts:

sudo chmod +x /etc/network/if-post-down.d/iptables
sudo chmod +x /etc/network/if-pre-up.d/iptables

Restore the iptables rules

The output created by iptables-save can then by read on stdin by iptables-restore.

If on a server, without NetworkManager, a common approach is then to use a pre-up command in /etc/network/interfaces.

iface eth0 inet static
        ....
        pre-up iptables-restore < /etc/network/iptables.rules

NOTE: Do note that the commands iptables, iptables-save and iptables-restore are IPv4 only. For IPv6 traffic the equivalent commands are ip6tables, ip6tables-save and ip6tables-restore.

iptables/save_iptable_rules.1475838767.txt.gz ยท Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki