Linux基础命令iptables-save的用法

选项

说明

[root@localhost ~]# iptables-save –c                   //显示计数器信息

# Generated by iptables-save v1.4.7 on Sun Sep 30 16:20:14 2018

*filter

:INPUT ACCEPT [0:0]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [1802:148673]

[14011:18173274] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 

[27:2268] -A INPUT -p icmp -j ACCEPT 

[585:30820] -A INPUT -i lo -j ACCEPT 

[4526:2073410] -A INPUT -i eth+ -j ACCEPT 

[0:0] -A INPUT -i wlan+ -j ACCEPT 

[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT 

[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT 

[root@localhost ~]# iptables-save -t nat               //输出nat表的信息

# Generated by iptables-save v1.4.7 on Sun Sep 30 16:21:17 2018

*nat

:PREROUTING ACCEPT [6181:2947647]

:POSTROUTING ACCEPT [573:30328]

:OUTPUT ACCEPT [2466:479800]

-A POSTROUTING -o eth+ -j MASQUERADE 

-A POSTROUTING -o wlan+ -j MASQUERADE 

COMMIT

# Completed on Sun Sep 30 16:21:17 2018