Iptables – Where Netfilter-Persistent Saves Iptables Rules

iptables

Been looking where does netfilter-persistent store its rules but could not find any documentation about it on help.ubuntu.com.

Does anybody know where does netfilter-persistent in Ubuntu save its rules so it survives a reboot?

Best Answer

Found it only works if you install 'iptables-persistent' package as well.

sudo apt-get install iptables-persistent netfilter-persistent

It will be saved in /etc/iptables/rules.v[4-6]

If you only install netfilter-persistent, it wont save any configuration

Related Solutions

Ubuntu – iptables-persistent and netfilter-persistent don’t actually work on Ubuntu Server 16.04.3 x86_64

So it turns out that my server has a file named /etc/iptables.firewall.rules, and rules were being restored from it in /etc/network/if-pre-up.d/firewall:

#!/bin/sh
/sbin/iptables-restore < /etc/iptables.firewall.rules

/etc/iptables.firewall.rules seems to be an old file that I created back in 2015, following an old tutorial to persist iptables rules.

All I had to do, then, was to add my new rule to that file.

I guess the lesson is that, after checking the usual ufw and iptables-persistent/netfilter-persistent stuff, I should just grep -rn iptables-restore /etc/. If that doesn't find anything, there's also the possiblity of rules being added dynamically via dbus, if firewalld is enabled.

Best Answer

Related Solutions

Ubuntu – iptables-persistent and netfilter-persistent don’t actually work on Ubuntu Server 16.04.3 x86_64

Related Question