iptables

Documentation

Index

• type Error
  • func (e *Error) Error() string
  • func (e *Error) ExitStatus() int
  • func (e *Error) IsNotExist() bool
• type IPTables
  • func New() (*IPTables, error)
  • func NewWithProtocol(proto Protocol) (*IPTables, error)
  • func (ipt *IPTables) Append(table, chain string, rulespec ...string) error
  • func (ipt *IPTables) AppendUnique(table, chain string, rulespec ...string) error
  • func (ipt *IPTables) ChangePolicy(table, chain, target string) error
  • func (ipt *IPTables) ClearChain(table, chain string) error
  • func (ipt *IPTables) Delete(table, chain string, rulespec ...string) error
  • func (ipt *IPTables) DeleteChain(table, chain string) error
  • func (ipt *IPTables) Exists(table, chain string, rulespec ...string) (bool, error)
  • func (ipt *IPTables) Insert(table, chain string, pos int, rulespec ...string) error
  • func (ipt *IPTables) List(table, chain string) ([]string, error)
  • func (ipt *IPTables) ListChains(table string) ([]string, error)
  • func (ipt *IPTables) ListWithCounters(table, chain string) ([]string, error)
  • func (ipt *IPTables) NewChain(table, chain string) error
  • func (ipt *IPTables) Proto() Protocol
  • func (ipt *IPTables) RenameChain(table, oldChain, newChain string) error
  • func (ipt *IPTables) Stats(table, chain string) ([][]string, error)
• type Protocol
• type Unlocker

Types

type Error

type Error struct {
	exec.ExitError
	// contains filtered or unexported fields
}

Adds the output of stderr to exec.ExitError

func (*Error) Error

func (e *Error) Error() string

func (*Error) ExitStatus

func (e *Error) ExitStatus() int

func (*Error) IsNotExist

func (e *Error) IsNotExist() bool

IsNotExist returns true if the error is due to the chain or rule not existing

type IPTables

type IPTables struct {
	// contains filtered or unexported fields
}

func New

func New() (*IPTables, error)

New creates a new IPTables. For backwards compatibility, this always uses IPv4, i.e. "iptables".

func NewWithProtocol

func NewWithProtocol(proto Protocol) (*IPTables, error)

New creates a new IPTables for the given proto. The proto will determine which command is used, either "iptables" or "ip6tables".

func (*IPTables) Append

func (ipt *IPTables) Append(table, chain string, rulespec ...string) error

Append appends rulespec to specified table/chain

func (*IPTables) AppendUnique

func (ipt *IPTables) AppendUnique(table, chain string, rulespec ...string) error

AppendUnique acts like Append except that it won't add a duplicate

func (*IPTables) ChangePolicy

func (ipt *IPTables) ChangePolicy(table, chain, target string) error

ChangePolicy changes policy on chain to target

func (*IPTables) ClearChain

func (ipt *IPTables) ClearChain(table, chain string) error

ClearChain flushed (deletes all rules) in the specified table/chain. If the chain does not exist, a new one will be created

func (*IPTables) Delete

func (ipt *IPTables) Delete(table, chain string, rulespec ...string) error

Delete removes rulespec in specified table/chain

func (*IPTables) DeleteChain

func (ipt *IPTables) DeleteChain(table, chain string) error

DeleteChain deletes the chain in the specified table. The chain must be empty

func (*IPTables) Exists

func (ipt *IPTables) Exists(table, chain string, rulespec ...string) (bool, error)

Exists checks if given rulespec in specified table/chain exists

func (*IPTables) Insert

func (ipt *IPTables) Insert(table, chain string, pos int, rulespec ...string) error

Insert inserts rulespec to specified table/chain (in specified pos)

func (*IPTables) List

func (ipt *IPTables) List(table, chain string) ([]string, error)

List rules in specified table/chain

func (*IPTables) ListChains

func (ipt *IPTables) ListChains(table string) ([]string, error)

ListChains returns a slice containing the name of each chain in the specified table.

func (*IPTables) ListWithCounters

func (ipt *IPTables) ListWithCounters(table, chain string) ([]string, error)

List rules (with counters) in specified table/chain

func (*IPTables) NewChain

func (ipt *IPTables) NewChain(table, chain string) error

NewChain creates a new chain in the specified table. If the chain already exists, it will result in an error.

func (*IPTables) Proto

func (ipt *IPTables) Proto() Protocol

Proto returns the protocol used by this IPTables.

func (*IPTables) RenameChain

func (ipt *IPTables) RenameChain(table, oldChain, newChain string) error

RenameChain renames the old chain to the new one.

func (*IPTables) Stats

func (ipt *IPTables) Stats(table, chain string) ([][]string, error)

Stats lists rules including the byte and packet counts

type Protocol

type Protocol byte

Protocol to differentiate between IPv4 and IPv6

const (
	ProtocolIPv4 Protocol = iota
	ProtocolIPv6
)

type Unlocker

type Unlocker interface {
	Unlock() error
}