iptables

Documentation

Index

• Constants
• func Lock(lockFilePath string, timeout time.Duration) (func() error, error)
• func MakeChainLine(chain string) string
• type Client
  • func New(enableIPV4, enableIPV6 bool) (*Client, error)
  • func (c *Client) ChainExists(table string, chain string) (bool, error)
  • func (c *Client) DeleteChain(table string, chain string) error
  • func (c *Client) DeleteRule(table string, chain string, ruleSpec []string) error
  • func (c *Client) EnsureChain(table string, chain string) error
  • func (c *Client) EnsureRule(table string, chain string, ruleSpec []string) error
  • func (c *Client) InsertRule(protocol Protocol, table string, chain string, ruleSpec []string) error
  • func (c *Client) ListRules(table string, chain string) ([]string, error)
  • func (c *Client) Restore(data []byte, flush bool, useIPv6 bool) error
  • func (c *Client) Save() ([]byte, error)
• type Protocol

Constants

const (
	NATTable    = "nat"
	FilterTable = "filter"
	MangleTable = "mangle"
	RawTable    = "raw"

	AcceptTarget     = "ACCEPT"
	MasqueradeTarget = "MASQUERADE"
	MarkTarget       = "MARK"
	ConnTrackTarget  = "CT"
	NoTrackTarget    = "NOTRACK"
	SNATTarget       = "SNAT"

	PreRoutingChain  = "PREROUTING"
	ForwardChain     = "FORWARD"
	PostRoutingChain = "POSTROUTING"
	OutputChain      = "OUTPUT"
)

const (
	XtablesLockFilePath = "/var/run/xtables.lock"
)

Functions

func Lock

func Lock(lockFilePath string, timeout time.Duration) (func() error, error)

Lock acquires the provided file lock. It's thread-safe. It will block until the lock is acquired or the timeout is reached.

func MakeChainLine

func MakeChainLine(chain string) string

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

func New

func New(enableIPV4, enableIPV6 bool) (*Client, error)

func (*Client) ChainExists

func (c *Client) ChainExists(table string, chain string) (bool, error)

ChainExists checks if a chain already exists in a table

func (*Client) DeleteChain

func (c *Client) DeleteChain(table string, chain string) error

DeleteChain deletes all rules from a chain in a table and then delete the chain

func (*Client) DeleteRule

func (c *Client) DeleteRule(table string, chain string, ruleSpec []string) error

DeleteRule checks if target rule already exists, deletes the rule if found.

func (*Client) EnsureChain

func (c *Client) EnsureChain(table string, chain string) error

EnsureChain checks if target chain already exists, creates it if not.

func (*Client) EnsureRule

func (c *Client) EnsureRule(table string, chain string, ruleSpec []string) error

EnsureRule checks if target rule already exists, appends it if not.

func (*Client) InsertRule

func (c *Client) InsertRule(protocol Protocol, table string, chain string, ruleSpec []string) error

InsertRule checks if target rule already exists, inserts it if not.

func (*Client) ListRules

func (c *Client) ListRules(table string, chain string) ([]string, error)

ListRules lists all rules from a chain in a table

func (*Client) Restore

func (c *Client) Restore(data []byte, flush bool, useIPv6 bool) error

Restore calls iptable-restore to restore iptables with the provided content. If flush is true, all previous contents of the respective tables will be flushed. Otherwise only involved chains will be flushed. Restore supports "ip6tables-restore" for IPv6.

func (*Client) Save

func (c *Client) Save() ([]byte, error)

Save calls iptables-saves to dump chains and tables in iptables.

type Protocol

type Protocol byte

const (
	ProtocolDual Protocol = iota
	ProtocolIPv4
	ProtocolIPv6
)