Hardened Linux From Scratch - Version SVN-20110904

Chapter 6. Installing Basic System Software

6.36. Iptables-1.4.7

The iptables package contains utilities to administer a firewall

Approximate build time: 0.2 SBU
Required disk space: 10.5 MB

6.36.1. Installation of Iptables

Configure Iptables with the following command: 

./configure --prefix=/usr     \
    --bindir=/sbin --sbindir=/sbin --sbindir=/sbin \
    --libdir=/lib --libexecdir=/lib \
    --with-pkgconfigdir=/usr/lib/pkgconfig

Build the package: 

make

This package does not come with a test suite.

Install the package: 

make install

6.36.2. Contents of Iptables

Installed program: iptables, iptables-restore, iptables-save, iptables-xml, iptables-multi, ip6tables, ip6tables-restore, ip6tables-save, and ip6tables-multii
Installed libraries: libip4tc.so, libip6tc.so, libiptc.so, libxtables.so, and numerous modules in /lib/xtables/
Installed directories: /lib/xtables/xtables and /usr/include/libiptc

Short Descriptions

iptables

is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel. It is a symbolic link to iptables-multi

iptables-restore

is used to restore IP Tables from data specified on STDIN. Use I/O redirection provided by your shell to read from a file. It is a symbolic link to iptables-multi

iptables-save

is used to dump the contents of an IP Table in easily parseable format to STDOUT. Use I/O-redirection provided by your shell to write to a file. It is a symbolic link to iptables-multi

iptables-xml

is used to convert the output of iptables-save to an XML format. Using the iptables.xslt stylesheet converts the XML back to the format of iptables-restore. It is a symbolic link to iptables-multi

ip6tables*

are a set of commands for IPV6 that parallel the iptables commands above. All of these commands are symbolic links to ip6tables-multi