iptables

Documentation

Index

• Constants
• Variables
• func Exists(table Table, chain string, rule ...string) bool
• func FirewalldInit()
• func OnReloaded(callback func())
• func Passthrough(ipv IPV, args ...string) ([]byte, error)
• func Raw(args ...string) ([]byte, error)
• func RemoveExistingChain(name string, table Table) error
• type Action
• type Chain
  • func NewChain(name, bridge string, table Table) (*Chain, error)
  • func (c *Chain) Forward(action Action, ip net.IP, port int, proto, destAddr string, destPort int) error
  • func (c *Chain) Link(action Action, ip1, ip2 net.IP, port int, proto string) error
  • func (c *Chain) Output(action Action, args ...string) error
  • func (c *Chain) Prerouting(action Action, args ...string) error
  • func (c *Chain) Remove() error
• type ChainError
  • func (e ChainError) Error() string
• type Conn
• type IPV
• type Table

Constants

const (
	Append Action = "-A"
	Delete Action = "-D"
	Insert Action = "-I"
	Nat    Table  = "nat"
	Filter Table  = "filter"
	Mangle Table  = "mangle"
)

Variables

var (
	ErrIptablesNotFound = errors.New("Iptables not found")
)

Functions

func Exists

func Exists(table Table, chain string, rule ...string) bool

Check if a rule exists

func FirewalldInit

func FirewalldInit()

func OnReloaded

func OnReloaded(callback func())

add callback

func Passthrough

func Passthrough(ipv IPV, args ...string) ([]byte, error)

Firewalld's passthrough method simply passes args through to iptables/ip6tables

func Raw

func Raw(args ...string) ([]byte, error)

Call 'iptables' system command, passing supplied arguments

func RemoveExistingChain

func RemoveExistingChain(name string, table Table) error

Types

type Action

type Action string

type Chain

type Chain struct {
	Name   string
	Bridge string
	Table  Table
}

func NewChain

func NewChain(name, bridge string, table Table) (*Chain, error)

func (*Chain) Forward

func (c *Chain) Forward(action Action, ip net.IP, port int, proto, destAddr string, destPort int) error

Add forwarding rule to 'filter' table and corresponding nat rule to 'nat' table

func (*Chain) Link

func (c *Chain) Link(action Action, ip1, ip2 net.IP, port int, proto string) error

Add reciprocal ACCEPT rule for two supplied IP addresses. Traffic is allowed from ip1 to ip2 and vice-versa

func (*Chain) Output

func (c *Chain) Output(action Action, args ...string) error

Add linking rule to an OUTPUT chain

func (*Chain) Prerouting

func (c *Chain) Prerouting(action Action, args ...string) error

Add linking rule to nat/PREROUTING chain.

func (*Chain) Remove

func (c *Chain) Remove() error

type ChainError

type ChainError struct {
	Chain  string
	Output []byte
}

func (ChainError) Error

func (e ChainError) Error() string

type Conn

type Conn struct {
	// contains filtered or unexported fields
}

Conn is a connection to firewalld dbus endpoint.

type IPV

type IPV string

const (
	Iptables  IPV = "ipv4"
	Ip6tables IPV = "ipv6"
	Ebtables  IPV = "eb"
)

type Table

type Table string