|
Packit Service |
d1fe03 |
.TH IPTABLES-RESTORE 8 "" "@PACKAGE_STRING@" "@PACKAGE_STRING@"
|
|
Packit Service |
d1fe03 |
.\"
|
|
Packit Service |
d1fe03 |
.\" Man page written by Harald Welte <laforge@gnumonks.org>
|
|
Packit Service |
d1fe03 |
.\" It is based on the iptables man page.
|
|
Packit Service |
d1fe03 |
.\"
|
|
Packit Service |
d1fe03 |
.\" This program is free software; you can redistribute it and/or modify
|
|
Packit Service |
d1fe03 |
.\" it under the terms of the GNU General Public License as published by
|
|
Packit Service |
d1fe03 |
.\" the Free Software Foundation; either version 2 of the License, or
|
|
Packit Service |
d1fe03 |
.\" (at your option) any later version.
|
|
Packit Service |
d1fe03 |
.\"
|
|
Packit Service |
d1fe03 |
.\" This program is distributed in the hope that it will be useful,
|
|
Packit Service |
d1fe03 |
.\" but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit Service |
d1fe03 |
.\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
Packit Service |
d1fe03 |
.\" GNU General Public License for more details.
|
|
Packit Service |
d1fe03 |
.\"
|
|
Packit Service |
d1fe03 |
.\" You should have received a copy of the GNU General Public License
|
|
Packit Service |
d1fe03 |
.\" along with this program; if not, write to the Free Software
|
|
Packit Service |
d1fe03 |
.\" Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
Packit Service |
d1fe03 |
.\"
|
|
Packit Service |
d1fe03 |
.\"
|
|
Packit Service |
d1fe03 |
.SH NAME
|
|
Packit Service |
d1fe03 |
iptables-restore \(em Restore IP Tables
|
|
Packit Service |
d1fe03 |
.P
|
|
Packit Service |
d1fe03 |
ip6tables-restore \(em Restore IPv6 Tables
|
|
Packit Service |
d1fe03 |
.SH SYNOPSIS
|
|
Packit Service |
d1fe03 |
\fBiptables\-restore\fP [\fB\-chntvV\fP] [\fB\-w\fP \fIsecs\fP]
|
|
Packit Service |
d1fe03 |
[\fB\-W\fP \fIusecs\fP] [\fB\-M\fP \fImodprobe\fP] [\fB\-T\fP \fIname\fP]
|
|
Packit Service |
d1fe03 |
[\fBfile\fP]
|
|
Packit Service |
d1fe03 |
.P
|
|
Packit Service |
d1fe03 |
\fBip6tables\-restore\fP [\fB\-chntvV\fP] [\fB\-w\fP \fIsecs\fP]
|
|
Packit Service |
d1fe03 |
[\fB\-W\fP \fIusecs\fP] [\fB\-M\fP \fImodprobe\fP] [\fB\-T\fP \fIname\fP]
|
|
Packit Service |
d1fe03 |
[\fBfile\fP]
|
|
Packit Service |
d1fe03 |
.SH DESCRIPTION
|
|
Packit Service |
d1fe03 |
.PP
|
|
Packit Service |
d1fe03 |
.B iptables-restore
|
|
Packit Service |
d1fe03 |
and
|
|
Packit Service |
d1fe03 |
.B ip6tables-restore
|
|
Packit Service |
d1fe03 |
are used to restore IP and IPv6 Tables from data specified on STDIN or in
|
|
Packit Service |
d1fe03 |
\fIfile\fP. Use I/O redirection provided by your shell to read from a file or
|
|
Packit Service |
d1fe03 |
specify \fIfile\fP as an argument.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-c\fR, \fB\-\-counters\fR
|
|
Packit Service |
d1fe03 |
restore the values of all packet and byte counters
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-h\fP, \fB\-\-help\fP
|
|
Packit Service |
d1fe03 |
Print a short option summary.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-n\fR, \fB\-\-noflush\fR
|
|
Packit Service |
d1fe03 |
don't flush the previous contents of the table. If not specified,
|
|
Packit Service |
d1fe03 |
both commands flush (delete) all previous contents of the respective table.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-t\fP, \fB\-\-test\fP
|
|
Packit Service |
d1fe03 |
Only parse and construct the ruleset, but do not commit it.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-v\fP, \fB\-\-verbose\fP
|
|
Packit Service |
d1fe03 |
Print additional debug info during ruleset processing.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-V\fP, \fB\-\-version\fP
|
|
Packit Service |
d1fe03 |
Print the program version number.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-w\fP, \fB\-\-wait\fP [\fIseconds\fP]
|
|
Packit Service |
d1fe03 |
Wait for the xtables lock.
|
|
Packit Service |
d1fe03 |
To prevent multiple instances of the program from running concurrently,
|
|
Packit Service |
d1fe03 |
an attempt will be made to obtain an exclusive lock at launch. By default,
|
|
Packit Service |
d1fe03 |
the program will exit if the lock cannot be obtained. This option will
|
|
Packit Service |
d1fe03 |
make the program wait (indefinitely or for optional \fIseconds\fP) until
|
|
Packit Service |
d1fe03 |
the exclusive lock can be obtained.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-W\fP, \fB\-\-wait-interval\fP \fImicroseconds\fP
|
|
Packit Service |
d1fe03 |
Interval to wait per each iteration.
|
|
Packit Service |
d1fe03 |
When running latency sensitive applications, waiting for the xtables lock
|
|
Packit Service |
d1fe03 |
for extended durations may not be acceptable. This option will make each
|
|
Packit Service |
d1fe03 |
iteration take the amount of time specified. The default interval is
|
|
Packit Service |
d1fe03 |
1 second. This option only works with \fB\-w\fP.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-M\fP, \fB\-\-modprobe\fP \fImodprobe_program\fP
|
|
Packit Service |
d1fe03 |
Specify the path to the modprobe program. By default, iptables-restore will
|
|
Packit Service |
d1fe03 |
inspect /proc/sys/kernel/modprobe to determine the executable's path.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-T\fP, \fB\-\-table\fP \fIname\fP
|
|
Packit Service |
d1fe03 |
Restore only the named table even if the input stream contains other ones.
|
|
Packit Service |
d1fe03 |
.SH BUGS
|
|
Packit Service |
d1fe03 |
None known as of iptables-1.2.1 release
|
|
Packit Service |
d1fe03 |
.SH AUTHORS
|
|
Packit Service |
d1fe03 |
Harald Welte <laforge@gnumonks.org> wrote iptables-restore based on code
|
|
Packit Service |
d1fe03 |
from Rusty Russell.
|
|
Packit Service |
d1fe03 |
.br
|
|
Packit Service |
d1fe03 |
Andras Kis-Szabo <kisza@sch.bme.hu> contributed ip6tables-restore.
|
|
Packit Service |
d1fe03 |
.SH SEE ALSO
|
|
Packit Service |
d1fe03 |
\fBiptables\-save\fP(8), \fBiptables\fP(8)
|
|
Packit Service |
d1fe03 |
.PP
|
|
Packit Service |
d1fe03 |
The iptables-HOWTO, which details more iptables usage, the NAT-HOWTO,
|
|
Packit Service |
d1fe03 |
which details NAT, and the netfilter-hacking-HOWTO which details the
|
|
Packit Service |
d1fe03 |
internals.
|