Iptables Command: A Guide to Firewall Configuration on Ubuntu Router

Firewalls are an essential part of network security, and iptables is a powerful command-line tool for configuring firewalls on Ubuntu routers. In this guide, we will walk you through the basics of using the iptables command to set up and manage your firewall configuration.

What is iptables?

iptables is a user-space utility program that allows a system administrator to configure the IP packet filter rules of the Linux kernel firewall implemented as different Netfilter modules. The filters are organized in different tables, which contain chains of rules for how to treat network traffic packets.

Understanding the Basics

Before we dive into the iptables command, it's important to understand some basic concepts:

• Tables: iptables uses different tables to organize rules. The most common tables are filter (default), nat, and mangle. The filter table is responsible for packet filtering, nat table handles network address translation, and mangle table modifies packet headers.
• Chains: Each table contains chains, which are lists of rules. The default chains are INPUT, OUTPUT, and FORWARD. INPUT chain handles incoming packets, OUTPUT chain deals with outgoing packets, and FORWARD chain is for packets being routed through the system.
• Rules: Rules define what to do with packets that match certain criteria. Each rule consists of a set of conditions (matching criteria) and a target (action to perform).

Checking the Current Firewall Configuration

Before making any changes, it's a good idea to check the current firewall configuration. Open a terminal and enter the following command:

This will display the current rules for each chain in the filter table. By default, there may not be any rules defined, and all chains will have a policy of ACCEPT, which means all packets are allowed.

Adding a Rule

Let's say you want to block incoming SSH traffic to your Ubuntu router. You can add a rule to the INPUT chain of the filter table to achieve this. Open a terminal and enter the following command:

Let's break down this command:

• -A INPUT: This option appends a rule to the INPUT chain.
• -p tcp: This option specifies the protocol to match (in this case, TCP).
• --dport 22: This option specifies the destination port to match (in this case, port 22 for SSH).
• -j DROP: This option specifies the target to jump to if the packet matches the conditions (in this case, drop the packet).

After adding this rule, any incoming SSH traffic to your Ubuntu router will be blocked.

Saving and Restoring Rules

By default, iptables rules are not persistent and will be lost after a system reboot. To save your rules and automatically restore them on boot, you can use the iptables-persistent package.

To install the package, open a terminal and enter the following command:

During the installation, you will be prompted to save the current IPv4 and IPv6 rules. Choose "Yes" for each prompt to save the rules.

If you ever need to restore the saved rules, you can use the following command:

This will restore the IPv4 rules from the saved file. Similarly, you can use rules.v6 for IPv6 rules.

Removing a Rule

If you want to remove a rule, you need to know its position in the chain. You can list the rules with line numbers using the following command:

Once you have identified the rule you want to remove, you can delete it using the following command:

Replace <line_number> with the actual line number of the rule you want to delete.

Conclusion

Configuring firewalls can be a complex task, but with the iptables command, you have the power to control incoming and outgoing network traffic on your Ubuntu router. By understanding the basics of tables, chains, and rules, you can create a secure network environment tailored to your needs.

References