Hack The Sec-Leading Resource Of Linux Tutorial: Firewall

Setting Up a Port Forwarding Using Uncomplicated Firewall(UFW)

<p style="text-align: center;"><span style="font-family: arial; font-size: large;"><b><u><br />Setting Up a Port Forwarding Using Uncomplicated Firewall(UFW)</u></b></span></p><p><span style="font-family: georgia; font-size: medium;">The Linux kernel in Ubuntu provides a packet filtering system called netfilter, and the traditional interface for manipulating netfilter are the iptables suite of commands. iptables provide a complete firewall solution that is both highly configurable and highly flexible.</span></p><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnwJqO5t-cjYlTKJwDUOWpBE6hpcStrXARypGodCji4qUFUgtg2ocsVUHZGm_VaZJARKMRjmnlgIDhOUHWEO5wTG0-oclNxRCZpvAiHMjuATmAULsaXKwqEUTKSxNrB7g385tyZmzbc_ZT/s577/firewall_www.hackthesec.co.in.jpg" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" data-original-height="359" data-original-width="577" height="199" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnwJqO5t-cjYlTKJwDUOWpBE6hpcStrXARypGodCji4qUFUgtg2ocsVUHZGm_VaZJARKMRjmnlgIDhOUHWEO5wTG0-oclNxRCZpvAiHMjuATmAULsaXKwqEUTKSxNrB7g385tyZmzbc_ZT/s320/firewall_www.hackthesec.co.in.jpg" width="320" /></a></div><span style="font-family: georgia; font-size: medium;"><br /></span><p></p><p><span style="font-family: georgia; font-size: medium;">Becoming proficient in iptables takes time, and getting started with netfilter firewalling using only iptables can be a daunting task. As a result, many frontends for iptables have been created over the years, each trying to achieve a different result and targeting a different audience.</span></p><p></p><p><span style="font-family: georgia; font-size: medium;">The Uncomplicated Firewall (ufw) is a frontend for iptables and is particularly well-suited for host-based firewalls. ufw provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall. ufw aims to provide an easy to use interface for people unfamiliar with firewall concepts, while at the same time simplifies complicated iptables commands to help an administrator who knows what he or she is doing. ufw is an upstream for other distributions and graphical frontends.</span></p><p><span style="color: #2b00fe; font-family: georgia; font-size: medium;"><b><u>Setting Up a Port Forward</u></b></span></p><p><span style="font-family: georgia; font-size: medium;">We are going to forward incoming traffic on the port 8000 to 8081</span></p><p><span style="font-family: georgia; font-size: medium;"><b>Enabling UFW:</b> If not already enabled, start by enabling UFW. Run the following command in the terminal:</span></p><pre class="language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class="language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="https://www.hackthesec.co.in/2023/02/root@hackthesec" style="background-color: transparent; box-sizing: border-box; color: #007abe; text-decoration-line: none;">root@hackthesec</a> ~]# sudo ufw enable</code></pre><p><span style="font-family: georgia;"><span style="font-size: medium;">Open the UFW configuration file: To set up port forwarding, you must edit the UFW configuration file, <b>located at /etc/default/ufw</b>.</span><span style="font-size: large;">    </span></span></p><p><span style="font-family: georgia; font-size: medium;">We mostly proffered Nano editor  </span></p><pre class="language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class="language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="https://www.hackthesec.co.in/2023/02/root@hackthesec" style="background-color: transparent; box-sizing: border-box; color: #007abe; text-decoration-line: none;">root@hackthesec</a> ~]# sudo nano /etc/default/ufw</code></pre><p><span style="font-family: georgia; font-size: medium;">Enable packet forwarding: In the UFW configuration file, find the line that says </span></p><p><span style="font-family: georgia; font-size: medium;"><b>DEFAULT_FORWARD_POLICY="DROP" </b></span></p><p><span style="font-family: georgia; font-size: medium;">Change DROP to ACCEPT so it looks like this: </span></p><p><span style="font-family: georgia; font-size: medium;"><b>DEFAULT_FORWARD_POLICY="ACCEPT" </b></span></p><p><span style="font-family: georgia; font-size: medium;">This change allows UFW to forward packets, which is necessary for port forwarding.</span></p><pre class="language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class="language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="https://www.hackthesec.co.in/2023/02/root@hackthesec" style="background-color: transparent; box-sizing: border-box; color: #007abe; text-decoration-line: none;">root@hackthesec</a> ~]# DEFAULT_FORWARD_POLICY="ACCEPT"</code></pre><p><span style="font-family: verdana; font-size: medium;"></span></p><p><span style="color: #0a0a0a; font-family: georgia;"><span style="font-size: 17px;">Press <b>Ctrl+O</b> to save the changes, then <b>Ctrl+X </b>to exit nano.</span></span></p><p><span style="color: #0a0a0a; font-size: 17px;"><span style="font-family: georgia;"><b>Modify UFW’s before rules:</b> UFW uses a set of "<b>before rules</b>" that are executed before the standard rules. These before rules can be used to set up port forwarding. </span></span></p><pre class="language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class="language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="https://www.hackthesec.co.in/2023/02/root@hackthesec" style="background-color: transparent; box-sizing: border-box; color: #007abe; text-decoration-line: none;">root@hackthesec</a> ~]# sudo nano /etc/ufw/before.rules </code></pre><p><span style="font-family: georgia; font-size: medium;">Add the following lines at the end of the file, replacing <your-ip> with the IP address of the machine where the packets will be forwarded:</span></p><pre class="language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; direction: ltr; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><span style="color: #f8f8f2; font-family: Consolas, Monaco, Andale Mono, monospace;"><span style="font-size: 14.7456px;"># NAT table rules
*nat
:POSTROUTING ACCEPT [0:0]
 
# Forward traffic from port 8000 to port 8081.
-A PREROUTING -p tcp --dport 8000 -j DNAT --to-destination <your-ip>:8081
 
# Don’t masquerade local traffic.
-A POSTROUTING -s 192.168.1.0/24 -j MASQUERADE
 
COMMIT</span></span></pre><p><span style="font-family: georgia;"><span style="color: #0a0a0a; font-size: 17px;">Press </span><b style="color: #0a0a0a; font-size: 17px;">Ctrl+O</b><span style="color: #0a0a0a; font-size: 17px;"> to save the changes, then </span><b style="color: #0a0a0a; font-size: 17px;">Ctrl+X </b><span style="color: #0a0a0a; font-size: 17px;">to exit nano.</span></span></p><p><span style="font-family: georgia; font-size: medium;">Restart UFW: Finally, for the changes to take effects</span></p><pre class="language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class="language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="https://www.hackthesec.co.in/2023/02/root@hackthesec" style="background-color: transparent; box-sizing: border-box; color: #007abe; text-decoration-line: none;">root@hackthesec</a> ~]# sudo ufw disable 
[<a class="token email-link" href="https://www.hackthesec.co.in/2023/02/root@hackthesec" style="background-color: transparent; box-sizing: border-box; color: #007abe; text-decoration-line: none; word-spacing: normal;">root@hackthesec</a><span style="word-spacing: normal;"> ~]# </span>sudo ufw enable </code></pre><p><span style="font-family: verdana; font-size: medium;"><br /></span></p><p><span style="font-family: georgia; font-size: medium;">@hackthesecurity</span></p>

Setting Up a Port Forwarding Using Uncomplicated Firewall(UFW)

Setting Up a Port Forwarding Using Uncomplicated Firewall(UFW) The Linux kernel in Ubuntu provides a packet filtering system called netfilte...

Find (View) Default Zone for Firewalld on CentOS 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" style="background-color: white; border: 0px; box-sizing: inherit; font-family: proxima-nova, sans-serif; line-height: 3.4rem; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-size: large;"><u>Default Zone for Firewalld on CentOS</u></span></h1>
<div>
<span style="color: #222222; font-family: Verdana, Geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b>FirewallD </b>is a firewall management tool for Linux operating systems. It provides firewall features by acting as a front-end for the iptables packet filtering system provided by the Linux kernel.The name firewalld adhekres to the Unix convention of naming system daemons by appending the letter “d”.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidMhBSIkaFV-5V29KsSx21R5-88rjd0MpN0qexTBjjWGDo1EGwneJSYHvoMh-TyYEviYXK5AvOi9Y5bvP1whsE8Pk6Rkb9yJr6X8YWfK9aTLzEy9nKUvrNh3DxPLrhJNjGFS7ucm7DIYTN/s1600/firewall-www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidMhBSIkaFV-5V29KsSx21R5-88rjd0MpN0qexTBjjWGDo1EGwneJSYHvoMh-TyYEviYXK5AvOi9Y5bvP1whsE8Pk6Rkb9yJr6X8YWfK9aTLzEy9nKUvrNh3DxPLrhJNjGFS7ucm7DIYTN/s1600/firewall-www.hackthesec.co.in.png" /></a></div>
<div>
<span style="color: #222222; font-family: Verdana, Geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Zones enhance an administrator’s capability to define trusts and restrict network traffic. On installation and without any configuration, the default zone for firewalld is set to the public zone.</span></span></div>
<div>
<span style="background-color: #ffff88; font-family: proxima-nova, sans-serif; font-size: 13px; line-height: 19.5px;">Note: When network interfaces added to firewalld they are assigned to the default zone.</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 15.6px;">firewall-cmd --get-default-zone</span></span></pre>
</div>
<div>
<pre class="xtypo_info" style="background: url("assets/shadow.png") 50% 100% repeat-x rgb(245, 245, 245); border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-shadow: rgb(204, 204, 204) 0px 0px 3px; box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; font-stretch: normal; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; tab-size: 4; text-shadow: rgb(255, 255, 255) 0px 1px 0px; white-space: pre-wrap; word-break: break-all; word-wrap: break-word;">public</pre>
</div>
<div>
<span style="color: #222222; font-family: Verdana, Geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">In this case the default zone is the public zone. The default trust level of this zone is to not trust the other servers on the network. Only chosen incoming connections are accepted.</span></span></div>
<div>
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>

Find (View) Default Zone for Firewalld on CentOS 7

Default Zone for Firewalld on CentOS FirewallD is a firewall management tool for Linux operating systems. It provides firewall features ...

How do I Install and Use Iptables on CentOS/RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #990000;">How do I Install and Use Iptables on CentOS/RHEL 7</span></h2>
<div>
<br /></div>
<div style="text-align: left;">
<span style="font-family: "verdana" , sans-serif;"><span style="background-color: white; line-height: 28px;">Latest Linux operating systems like CentOS/RedHat 7 and Fedora 21 has stop using iptables and start now using dynamic firewall daemon firewalld which provides a dynamically managed firewall. It supports for network and zones to assign a level of trust to a network, connections and interfaces. Firewalld also provides and interface for services or applications to add firewall rules directly. This article will help you to disable firewalld service and then install and use iptables on CentOS and Red Hat 7 Systems. </span><a href="https://fedoraproject.org/wiki/FirewallD" style="background-color: white; line-height: 28px; outline: none; text-decoration: none;" target="_blank">Visit here</a><span style="background-color: white; line-height: 28px;"> to read more about firewallD.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnwJqO5t-cjYlTKJwDUOWpBE6hpcStrXARypGodCji4qUFUgtg2ocsVUHZGm_VaZJARKMRjmnlgIDhOUHWEO5wTG0-oclNxRCZpvAiHMjuATmAULsaXKwqEUTKSxNrB7g385tyZmzbc_ZT/s1600/firewall_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnwJqO5t-cjYlTKJwDUOWpBE6hpcStrXARypGodCji4qUFUgtg2ocsVUHZGm_VaZJARKMRjmnlgIDhOUHWEO5wTG0-oclNxRCZpvAiHMjuATmAULsaXKwqEUTKSxNrB7g385tyZmzbc_ZT/s1600/firewall_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="background-color: white; line-height: 28px;"><br /></span></span></div>
<div>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Disable Firewalld Service</span></h2>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Before installing and using iptables services on CentOS and Red Hat 7 systems, we need to disable firewalld service. To completely disable firewalld service use following commands.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># systemctl <orange style="color: orange;">stop</orange> firewalld
# systemctl <orange style="color: orange;">mask</orange> firewalld<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Now check firewalld status</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># <orange style="color: orange;">systemctl status firewalld</orange>

firewalld.service
   Loaded: masked (/dev/null)
   Active: inactive (dead) since Fri 2015-02-27 11:09:37 EST; 56s ago
 Main PID: 7411 (code=exited, status=0/SUCCESS)

Feb 27 11:02:18 svr10 systemd[1]: Started firewalld - dynamic firewall daemon.
Feb 27 11:09:36 svr10 systemd[1]: Stopping firewalld - dynamic firewall daemon...
Feb 27 11:09:37 svr10 systemd[1]: Stopped firewalld - dynamic firewall daemon.<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Install Iptables Service in CentOS/RHEL 7</span></h2>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Now install iptables service using yum package manager using following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum install iptables-services -y<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">After installing enable iptables service and start using below commands.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># systemctl <orange style="color: orange;">enable</orange> iptables
# systemctl <orange style="color: orange;">start</orange> iptables<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Now check the iptables service status using below command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># <orange style="color: orange;">systemctl status iptables</orange>

iptables.service - IPv4 firewall with iptables
   Loaded: loaded (/usr/lib/systemd/system/iptables.service; enabled)
   Active: <green style="color: green;">active (exited)</green> since Fri 2015-02-27 11:14:12 EST; 14s ago
  Process: 7938 ExecStart=/usr/libexec/iptables/iptables.init start (code=exited, status=0/SUCCESS)
 Main PID: 7938 (code=exited, status=0/SUCCESS)

Feb 27 11:14:12 svr10 iptables.init[7938]: iptables: Applying firewall rules: [  OK  ]
Feb 27 11:14:12 svr10 systemd[1]: Started IPv4 firewall with iptables.<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; color: #555555; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ2VipFy4QxSQUQ8Chyphenhyphenc_kXJDhqJ0gdaTbekB1BVNL7aDj-nzBVatnpVMwsEYzYU7Ws-tlMuavy5zeJaIQPpKuFWHpwhlP5-8YAG37KpxVpRwCckickkCcN0Hbdb5qpkpZWXHz0GN51ioZ/s1600/firewalld-vs-iptables_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="348" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ2VipFy4QxSQUQ8Chyphenhyphenc_kXJDhqJ0gdaTbekB1BVNL7aDj-nzBVatnpVMwsEYzYU7Ws-tlMuavy5zeJaIQPpKuFWHpwhlP5-8YAG37KpxVpRwCckickkCcN0Hbdb5qpkpZWXHz0GN51ioZ/s640/firewalld-vs-iptables_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">To list iptables rules use following command.</span></div>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div style="border: 0px; color: #555555; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="single-post-ad" style="border: 0px; clear: both; color: #555555; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<br />
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"># <orange style="color: orange;">iptables -L</orange>

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination<span style="font-size: 0.9em;">
</span></pre>
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"><a href="http://www.hackthesec.co.in/">http://www.hackthesec.co.in</a>
<a href="http://www.twitter.com/hackthesecurity">http://www.twitter.com/hackthesecurity</a>
<a href="https://www.facebook.com/htsecu">https://www.facebook.com/htsecu</a>
</pre>
</div>
</div>

How do I Install and Use Iptables on CentOS/RHEL 7

How do I Install and Use Iptables on CentOS/RHEL 7 Latest Linux operating systems like CentOS/RedHat 7 and Fedora 21 has stop using ip...