Question

how to write iptable block rule in the /etc/iptables/rules.v4?

Posted January 23, 2015 6.1k views

I can block some ip to link my vps in command line :
sudo iptables -A INPUT -s [IP ADDRESS] -j DROP

how to write the iptable block rule in the /etc/iptables/rules.v4?

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
4 answers

It may not be the easiest way / best way, but I use iptables-persistent to do so
Once installed, launch sudo dpkg-reconfigure iptables-persistent to save your iptables

You can run the following command to save the current rules in /etc/iptables/rules.v4 and /etc/iptables/rules.v6:

sudo service iptables-persistent save

root@change:~# sudo iptables -A INPUT -s 193.201.224.186 -j DROP
root@change:~# cat /etc/iptables/rules.v4

Generated by iptables-save v1.4.14 on Fri Jan 23 12:42:00 2015

*filter
:INPUT ACCEPT [415:61359]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [398:101696]
COMMIT

Completed on Fri Jan 23 12:42:00 2015

root@change:~#

Why there is no 193.201.224.186 in the file /etc/iptables/rules.v4?

sudo dpkg-reconfigure iptables-persistent can do .

Submit an Answer