You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
|
|
|
iptables-save
|
|
|
|
|
|
===
|
|
|
|
|
|
|
|
|
|
|
|
备份iptables的表配置
|
|
|
|
|
|
|
|
|
|
|
|
## 补充说明
|
|
|
|
|
|
|
|
|
|
|
|
**iptables-save命令** 用于将linux内核中的iptables表导出到标准输出设备商，通常，使用shell中I/O重定向功能将其输出保存到指定文件中。
|
|
|
|
|
|
|
|
|
|
|
|
### 语法
|
|
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
iptables-save(选项)
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
### 选项
|
|
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
-c：指定要保存的iptables表时，保存当权的数据包计算器和字节计数器的值；
|
|
|
|
|
|
-t：指定要保存的表的名称。
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
### 实例
|
|
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
[root@localhost ~]# iptables-save -t filter > iptables.bak
|
|
|
|
|
|
[root@localhost ~]# cat iptables.bak
|
|
|
|
|
|
# Generated by iptables-save v1.3.5 on Thu Dec 26 21:25:15 2013
|
|
|
|
|
|
*filter
|
|
|
|
|
|
:INPUT DROP [48113:2690676]
|
|
|
|
|
|
:FORWARD accept [0:0]
|
|
|
|
|
|
:OUTPUT ACCEPT [3381959:1818595115]
|
|
|
|
|
|
-A INPUT -i lo -j ACCEPT
|
|
|
|
|
|
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
|
|
|
|
|
|
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
|
|
|
|
|
|
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
|
|
|
|
|
|
-A INPUT -p icmp -j ACCEPT
|
|
|
|
|
|
-A OUTPUT -o lo -j ACCEPT
|
|
|
|
|
|
COMMIT
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<!-- Linux命令行搜索引擎：https://jaywcjlove.github.io/linux-command/ -->
|
