The aim of the iptables-tutorial is to explain iptables in a complete and simple way. The iptables-tutorial is currently rather stable, and contains information on all the currently available matches and targets (in kernel), as well as a couple of complete example scripts and explanations. It contains a complete section on iptables syntax, as well as other interesting commands such as iptables-save and iptables-restore.

For the moment, this tutorial is hopefully at a stand-still. If anyone finds a problem or incomplete explanation, I will fix it. However, most of my time goes to getting the ipsysctl-tutorial finished for now.

If you need help, you are better off by asking the netfilter mailing list which you can reach at netfilter at lists.netfilter.org. For more information on this, visit the netfilter mailinglist page. You may also contact the linuxsecurity mailing list at security-discuss AT linuxsecurity dotcom. Both are fairly large, and should be able to help you much much better than I can.

I would like to give a huge thanks to Ericsson Radio Access for their generous contribution to this project. Thanks to them, I now have a fully functional labb network.

* Added spanish translation section.
* Added firewall_rules_table_final.pdf and links in other_resources.sgml (Stuart Clark)
* Removed duplicate CONFIG_PACKET in example_scripts.sgml, strictly not needed (Robert P. J. Day)
* Fixed a whole bunch of errors and grammatical incorrectness (Robert P. J. Day)
* Revised explanation of state NEW (Robert P. J. Day)
* Fixed bad sed fix in last version, which deleted state in -m state... (Mark Orenstein)
* Deleted LAN_BROADCAST_ADDRESS variable, and corresponding rules since they where just filler (Edmond Shwayri)
* Minor changes. Some preparations to get portuguese and spanish translations inside the tutorial.
* Fixed deep links with chunkyhtml again.
* Fixed blackened images so they now look correct.