IP6TABLES(8) iptables 1.8.11 IP6TABLES(8) (NAME) ip6tables - NAT IPv6 (SYNOPSIS) iptables [-t table] {-A|-C|-D|-V} chain rule-specification ip6tables [-t table] {-A|-C|-D|-V} chain rule-specification iptables [-t table] -I chain [rulenum] rule-specification iptables [-t table] -R chain rulenum rule-specification iptables [-t table] -D chain rulenum iptables [-t table] -S [chain [rulenum]] iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] iptables [-t table] -N chain iptables [-t table] -X [chain] iptables [-t table] -P chain policy iptables [-t table] -E old-chain-name new-chain-name rule-specification := [matches...] [target] match := -m matchname [per-match-options] target := -j targetname [per-target-options] (DESCRIPTION) iptables ip6tables IPv4 IPv6 . . (chain) . . . <<>> ("target") (jump) . (TARGETS) . iptables-extensions(8) ACCEPT DROP RETURN . ACCEPT . DROP . RETURN () . RETURN (policy) . (TABLES) ( ). -t, --table table . . : filter: ( -t ). : INPUT ( ) FORWARD ( / ) OUTPUT ( ). nat: . : PREROUTING ( ) INPUT ( ) OUTPUT ( ) POSTROUTING ( ). NAT IPv6 . . mangle: . .. : PREROUTING ( ) OUTPUT ( ). .. : INPUT ( ) FORWARD ( ) POSTROUTING ( ). raw: (connection tracking) NOTRACK . (hooks) ip_conntrack . : PREROUTING ( ) OUTPUT ( ). security: (MAC) SECMARK CONNSECMARK . SELinux . security filter (DAC) filter MAC . : INPUT ( ) OUTPUT ( ) FORWARD ( ). (OPTIONS) iptables ip6tables . (COMMANDS) . . iptables . -A, --append chain rule-specification . / (resolve) . -C, --check chain rule-specification . -D iptables . -D, --delete chain rule-specification -D, --delete chain rulenum . : ( ) . -I, --insert chain [rulenum] rule-specification . . . -R, --replace chain rulenum rule-specification . / . . -L, --list [chain] . . iptables ( filter ) NAT : iptables -t nat -n -L -n DNS . -Z ( ) () . . : iptables -L -v iptables-save(8). -S, --list-rules [chain] . iptables-save . iptables ( filter ). -F, --flush [chain] ( ) ( ). . -Z, --zero [chain [rulenum]] . -L, --list ( ) ( ). -N, --new-chain chain . . -X, --delete-chain [chain] . . . . . iptables-nft . -P, --policy chain target (policy) ( ) . ACCEPT DROP . -E, --rename-chain old-chain new-chain . . -h . ( ) (syntax) . (PARAMETERS) ( ). -4, --ipv4 iptables iptables-restore . -4 ip6tables-restore . . IPv4 IPv6 iptables-restore ip6tables-restore . -6, --ipv6 -6 iptables-restore . . IPv4 IPv6 iptables-restore ip6tables-restore . ip6tables ip6tables-restore . [!] -p, --protocol protocol . tcp udp udplite icmp icmpv6 esp ah sctp mh "all" . /etc/protocols . <> . all . "all" . ip6tables IPv6 esp . esp ipv6-nonext .. . all . HBH -p 0 -m hbh . [!] -s, --source address[/mask][,...] . address (hostname) ( /mask) . (resolve) . DNS . mask ipv4 ( iptables) . 24 iptables 255.255.255.0 . <> . --src . ( -A) ( -D). [!] -d, --destination address[/mask][,...] . -s () . --dst . -m, --match match . . (short-circuit) (false) . -j, --jump target . ( ) ( ). ( -g ) . -g, --goto chain . --jump RETURN --jump . [!] -i, --in-interface name ( INPUT FORWARD PREROUTING ). <> . <<+>> . . [!] -o, --out-interface name ( FORWARD OUTPUT POSTROUTING ). <> . <<+>> . . [!] -f, --fragment (fragmented) IPv4 . ( ICMP) . <> -f (head fragments) . IPv4 ip6tables . -c, --set-counters packets bytes ( INSERT APPEND REPLACE). (OTHER OPTIONS) : -v, --verbose . ( ) TOS . 'K' 'M' 'G' , ,, ,,, ( -x ). . -v : iptables-legacy libiptc iptables-nft netlink ( ) . iptables-nft netlink . -V, --version (Kernel API) . -w, --wait [seconds] xtables. . . ( seconds) . -n, --numeric . IP . ( ) . -x, --exact . K ( ) M ( K) G ( M). -L . --line-numbers . --modprobe=command command ( ) . (LOCK FILE) iptables /run/xtables.lock . XTABLES_LOCKFILE . (MATCH AND TARGET EXTENSIONS) iptables . iptables-extensions(8) . (DIAGNOSTICS) . . . . . . (BUGS) ;-) https://bugzilla.netfilter.org . iptables setuid-to-root . iptables ( ) . IPCHAINS (COMPATIBILITY WITH IPCHAINS) iptables ipchains (Rusty Russell) . INPUT OUTPUT . ( INPUT OUTPUT ) . -i -o FORWARD . NAT iptables 'filter' . (IP masquerading) . : -j MASQ -M -S -M -L iptables . (SEE ALSO) iptables-apply(8) iptables-save(8) iptables-restore(8) iptables-extensions(8) packet-filtering-HOWTO iptables NAT-HOWTO NAT netfilter-extensions-HOWTO netfilter-hacking-HOWTO netfilter . : https://www.netfilter.org. (AUTHORS) (Rusty Russell) (Michael Neuling) iptables . (Marc Boucher) iptables ipnatctl mangle (owner match) mark . (James Morris) TOS tos . (Jozsef Kadlecsik) REJECT . (Harald Welte) ULOG NFQUEUE libiptc TTL DSCP ECN . Netfilter : Jozsef Kadlecsik Pablo Neira Ayuso Eric Leblond Florian Westphal Arturo Borrero Gonzalez. : Marc Boucher Martin Josefsson Yasuyuki Kozakai James Morris Harald Welte Rusty Russell. Herve Eychenne . (VERSION) iptables/ip6tables 1.8.11 . iptables 1.8.11 IP6TABLES(8)