NAT: masquerade outbound

Enable IP masquerading for outbound traffic (router/NAT)

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
tool
iptables10 commands
tags
iptableslinuxnetwork

More iptables commands

  • Save and restore rules
    iptables-save > /etc/iptables/rules.v4 iptables-restore < /etc/iptables/rules.v4

    Persist rules across reboots

  • Delete a rule by number
    iptables -D INPUT 3

    Remove rule number 3 from the INPUT chain

  • Rate-limit connections
    iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m limit --limit 3/min --limit-burst 5 -j ACCEPT

    Allow max 3 new SSH connections per minute

  • nftables: list all rules
    nft list ruleset

    Show complete nftables configuration

  • nftables: add accept rule
    nft add rule inet filter input tcp dport 8080 accept

    Accept inbound TCP traffic on port 8080 in nftables

all 10 iptables commands