program to configure the Linux IP packet filtering rules
iptables is the userspace command line program used to configure the Linux 2.4.x and later IPv4 packet filtering ruleset (firewall). It is targeted at system administrators. Since Network Address Translation is also configured from the packet filter ruleset, iptables is used for this, too. The iptables package also includes ip6tables. ip6tables is used for configuring the IPv6 packet filter.
It is an enhancement on ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects.
DocumentationUser and developer FAQs available in various languages from http://www.iptables.org/documentation/index.html#documentation-faq; User tutorials available from http://www.iptables.org/documentation/index.html#documentation-howto; User HOWTOs available from http://www.iptables.org/documentation/index.html#documentation-howto;
This is a high priority project
released on 27 January 2017
git clone git://git.netfilter.org/iptables.git
1 September 2004
Leaders and contributors
Resources and communication
|Bug Tracking||Bug Tracking||http://bugzilla.netfilter.org/|
|Developer||VCS Repository Webview||http://git.netfilter.org/iptables/|
|Required to use||Linux kernel 2.4.4 or later (author recommends 2.4.18 or later)|
This entry (in part or in whole) was last reviewed on 17 April 2018.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the page “GNU Free Documentation License”.
The copyright and license notices on this page only apply to the text on this page. Any software or copyright-licenses or other similar notices described in this text has its own copyright notice and license, which can usually be found in the distribution or license text itself.