iptables

Documentation

Overview

Package iptables implements iptables firewall agent.

Index

• func FilterSupportedIPTables(supportedIPTables []string) []string
• type IPTables
  • func New(stateModule string, stateFlag string, chainPrefix string, ...) *IPTables
  • func (ipt *IPTables) Add(rule firewall.Rule) error
  • func (ipt *IPTables) Delete(rule firewall.Rule) error
  • func (ipt *IPTables) Flush() error
• type PortRange
  • func PortsToPortRanges(ports []int) []PortRange

Functions

func FilterSupportedIPTables

func FilterSupportedIPTables(supportedIPTables []string) []string

FilterSupportedIPTables filter supported versions based on what exists in the system

Types

type IPTables

type IPTables struct {
	sync.Mutex
	// contains filtered or unexported fields
}

@TODO upgrade to netfilter library. for now we use both ipv4, ipv6 because we disable ipv6 IPTables handles all firewall changes with iptables

func New

func New(stateModule string, stateFlag string, chainPrefix string, supportedIPTables []string) *IPTables

New is a default constructor for IPTables firewall

func (*IPTables) Add

func (ipt *IPTables) Add(rule firewall.Rule) error

func (*IPTables) Delete

func (ipt *IPTables) Delete(rule firewall.Rule) error

func (*IPTables) Flush

func (ipt *IPTables) Flush() error

type PortRange

type PortRange struct {
	Min int
	Max int
}

func PortsToPortRanges

func PortsToPortRanges(ports []int) []PortRange

PortsToPortRanges groups ports into ranges