IPTABLES Basics for CentOS Fedora Linux Redhat Ubuntu Debian Linux

iptables Basics

will list your current iptables configuration.

To allow established sessions to receive traffic

# iptables -A INPUT -m conntrack –ctstate ESTABLISHED,RELATED -j ACCEPT

You could start by blocking traffic, but you might be working over SSH, where you would need to allow SSH before blocking everything else.

To allow incoming traffic on the default SSH port (22), you could tell iptables to allow all TCP traffic on that port to come in.

# iptables -A INPUT -p tcp –dport ssh -j ACCEPT

Now check the current configuration

For Interface based access for eth0 specify -i eth0
Once we enabled the ssh port.we can drop all other incoming ports.

# iptables -A INPUT -j DROP

Now check the rule

In the final step we have to enable loopback interface. After all the traffic has been dropped. We need to insert this rule before that. Since this is a lot of traffic, we’ll insert it as the first rule so it’s processed first.

#iptables -I INPUT 1 -i lo -j ACCEPT

To enabling logging

# iptables -I INPUT 5 -m limit –limit 5/min -j LOG –log-prefix “iptables denied: ” –log-level 7

To save this configuration

This configuration will enable ssh port and disable all other incoming ports.

For interface based configuration

Also you can manual edit  /etc/sysconfig/iptables

For Detailed Configuration