Linux Manuals

iptraf – Interactive Colorful IP LAN Monitor Synopsis iptraf { [ -f ] [ -q ] [ -u ] [ { -i iface | -g | -d iface | -s iface | -z iface | -l iface } [ -t timeout ] [ -B [ -L logfile ] ] ] | [ -h ] }…

iptables_selinux – Security Enhanced Linux Policy for the iptables processes Description Security-Enhanced Linux secures the iptables processes via flexible mandatory access control. The iptables processes execute with the iptables_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…

iptables/ip6tables — administration tool for IPv4/IPv6 packet filtering and NAT Synopsis iptables [-t table] {-A|-C|-D} chain rule-specification ip6tables [-t table] {-A|-C|-D} chain rule-specification iptables [-t table] -I chain [rulenum] rule-specification iptables [-t table] -R chain rulenum rule-specification iptables [-t table] -D chain rulenum iptables [-t table] -S [chain [rulenum]] iptables [-t table] {-F|-L|-Z} [chain [rulenum]]…

iptables-xml — Convert iptables-save format to XML Synopsis iptables-xml [-c] [-v] Description iptables-xml is used to convert the output of iptables-save into an easily manipulatable XML format to STDOUT. Use I/O-redirection provided by your shell to write to a file. -c, –combine combine consecutive rules with the same matches but different targets. iptables does not…

iptables-translate — translation tool to migrate from iptables to nftables ip6tables-translate — translation tool to migrate from ip6tables to nftables Description There is a set of tools to help the system administrator translate a given ruleset from iptables(8) and ip6tables(8) to nftables(8). The available commands are: • iptables-translate • iptables-restore-translate • ip6tables-translate • ip6tables-restore-translate Usage…

iptables-save — dump iptables rules ip6tables-save — dump iptables rules Synopsis iptables-save [-M modprobe] [-c] [-t table] [-f filename] ip6tables-save [-M modprobe] [-c] [-t table] [-f filename] Description iptables-save and ip6tables-save are used to dump the contents of IP or IPv6 Table in easily parseable format either to STDOUT or to a specified file. -M,…

iptables-restore — Restore IP Tables ip6tables-restore — Restore IPv6 Tables Synopsis iptables-restore [-chntvV] [-w secs] [-W usecs] [-M modprobe] [-T name] [file] ip6tables-restore [-chntvV] [-w secs] [-W usecs] [-M modprobe] [-T name] [file] Description iptables-restore and ip6tables-restore are used to restore IP and IPv6 Tables from data specified on STDIN or in file. Use I/O…

iptables-translate — translation tool to migrate from iptables to nftables ip6tables-translate — translation tool to migrate from ip6tables to nftables Description There is a set of tools to help the system administrator translate a given ruleset from iptables(8) and ip6tables(8) to nftables(8). The available commands are: • iptables-translate • iptables-restore-translate • ip6tables-translate • ip6tables-restore-translate Usage…

xtables-nft — iptables using nftables kernel api Description xtables-nft are versions of iptables that use the nftables API. This is a set of tools to help the system administrator migrate the ruleset from iptables(8), ip6tables(8), arptables(8), and ebtables(8) to nftables(8). The xtables-nft set is composed of several commands: • iptables-nft • iptables-nft-save • iptables-nft-restore •…

xtables-nft — iptables using nftables kernel api Description xtables-nft are versions of iptables that use the nftables API. This is a set of tools to help the system administrator migrate the ruleset from iptables(8), ip6tables(8), arptables(8), and ebtables(8) to nftables(8). The xtables-nft set is composed of several commands: • iptables-nft • iptables-nft-save • iptables-nft-restore •…

xtables-nft — iptables using nftables kernel api Description xtables-nft are versions of iptables that use the nftables API. This is a set of tools to help the system administrator migrate the ruleset from iptables(8), ip6tables(8), arptables(8), and ebtables(8) to nftables(8). The xtables-nft set is composed of several commands: • iptables-nft • iptables-nft-save • iptables-nft-restore •…

xtables-legacy — iptables using old getsockopt/setsockopt-based kernel api Description xtables-legacy are the original versions of iptables that use old getsockopt/setsockopt-based kernel interface. This kernel interface has some limitations, therefore iptables can also be used with the newer nf_tables based API. See xtables-nft(8) for information about the xtables-nft variants of iptables. Usage The xtables-legacy-multi binary can…

xtables-legacy — iptables using old getsockopt/setsockopt-based kernel api Description xtables-legacy are the original versions of iptables that use old getsockopt/setsockopt-based kernel interface. This kernel interface has some limitations, therefore iptables can also be used with the newer nf_tables based API. See xtables-nft(8) for information about the xtables-nft variants of iptables. Usage The xtables-legacy-multi binary can…

xtables-legacy — iptables using old getsockopt/setsockopt-based kernel api Description xtables-legacy are the original versions of iptables that use old getsockopt/setsockopt-based kernel interface. This kernel interface has some limitations, therefore iptables can also be used with the newer nf_tables based API. See xtables-nft(8) for information about the xtables-nft variants of iptables. Usage The xtables-legacy-multi binary can…

iptables-extensions — list of extensions in the standard iptables distribution Synopsis ip6tables [-m name [module-options…]] [-j target-name [target-options…] iptables [-m name [module-options…]] [-j target-name [target-options…] Match Extensions iptables can use extended packet matching modules with the -m or –match options, followed by the matching module name; after these, various extra command line options become available,…

iptables-apply – a safer way to update iptables remotely Synopsis iptables-apply [-hV] [-t timeout] [-w savefile] {[rulesfile]|-c [runcmd]} Description iptables-apply will try to apply a new rulesfile (as output by iptables-save, read by iptables-restore) or run a command to configure iptables and then prompt the user whether the changes are okay. If the new iptables…

ipset — administration tool for IP sets Synopsis ipset [ OPTIONS ] COMMAND [ COMMAND-OPTIONS ] COMMANDS := { create | add | del | test | destroy | list | save | restore | flush | rename | swap | help | version | – } OPTIONS := { -exist | -output { plain…

ipsec_pluto, ipsec_whack, pluto – ipsec whack : IPsec IKE keying daemon and control interface Synopsis ipsec pluto [–help] [–version] [–leak-detective] [–config filename] [–vendorid VID] [–nofork] [–stderrlog] [—-plutostderrlogtime] [–logfile filename] [–use-klips] [–use-mast] [–use-netkey] [–use-nostack] [–uniqueids] [–virtual-private network_list] [–keep-alive delay_sec] [–force-busy] [–nocrsend] [–strictcrlpolicy] [–crlcheckinterval] [–interface interfacename] [–listen ipaddr] [–ikeport portnumber] [–natikeport portnumber] [–ctlbase path] [–secretsfile secrets-file] [–nhelpers number] [–seedbits numbits] [–perpeerlog] [–perpeerlogbase dirname] [–ipsecdir dirname] [–nssdir dirname] [–coredir dirname] [–statsbin filename] [–secctx-attr-type number] ipsec whack [–help]…

ipsec_verify – see if the IPsec subsystem has been installed correctly Synopsis ipsec verify Description The ipsec verify examines the local system for a number of common system faults and configuration mistakes. History Written originally for the Linux FreeS/WAN project <m[blue]http://www.freeswan.orgm[]> by Michael Richardson. Rewritten in python by Paul Wouters Bugs Verify was converted from…

ipsec_tncfg – manipulate KLIPS virtual interfaces Synopsis ipsec tncfg ipsec tncfg –create virtual ipsec tncfg –delete virtual ipsec tncfg –attach –virtual virtual –physical physical ipsec tncfg –detach –virtual virtual ipsec tncfg –clear ipsec tncfg –version ipsec tncfg –help Klips Note that tncfg is only supported on the KLIPS stack which uses ipsecX interfaces bound to…