About:
iptables is built on top of netfilter, the packet alteration framework for Linux 2.4.x and 2.6.x. It is a major rewrite of its predecessor ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects such as packet mangling.

Author:
Harald Welte [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.79/10.00 (50 votes)

Homepage:
http://netfilter.org/projects/iptables/
Tar/BZ2:
ftp://ftp.netfilter.org/pub/iptables/iptables-1.4.2.tar.bz2
Changelog:
http://netfilter.org/[..]les/changes-iptables-1.4.2-rc1-1.4.2.txt
Bug tracker:
http://bugzilla.netfilter.org/
Mailing list archive:
http://marc.info/?l=netfilter

Trove categories: [change]

[Development Status]		5 - Production/Stable
[Environment]		Console (Text Based)
[Intended Audience]		End Users/Desktop, System Administrators
[License]		OSI Approved :: GNU General Public License (GPL)
[Operating System]		POSIX :: Linux
[Programming Language]		C
[Topic]		Internet, Security, System :: Networking, System :: Networking :: Firewalls

Dependencies: [change]
Linux (2.4 branch) (required)
Linux (2.6 branch) (recommended)
[download links]

 Branches

Branch	Version	Last release	License	URLs
Default	1.4.2	23-Oct-2008	GNU General Public License (GPL)
Release candidates After code freeze, intended for testing.	1.2.9rc1	09-Oct-2003	GNU General Public License (GPL)

 Articles referencing this project

• Telephony Software
  by Flavio Villanustre , in Category Reviews
  Sat, Mar 30th 2002 00:00
  

 Comments

[»] Main Features
by sonyvaio - Nov 21st 2008 05:59:02

* stateless packet filtering (IPv4 and IPv6)
* stateful packet filtering (IPv4 and IPv6)
* all kinds of network address and port translation, e.g. NAT/NAPT (IPv4 only)
* flexible and extensible infrastructure
* multiple layers of API's for 3rd party extensions
* large number of plugins/modules kept in 'patch-o-matic' repository

[reply] [top]

[»] High performance, featureful, firewall
by Robert Marmorstein - Jun 2nd 2006 08:29:35

IPtables/Netfilter supports all sorts of advanced features, such as NAT, masquerading, packet redirect, and many others. It also has all sorts of useful matches, such as the STRING match and the ipset module. It is one of the very best stateful firewall systems available.

[reply] [top]