iptables

Documentation

Index

• Constants
• func MakeChainLine(chain string) string
• type Client
  • func New() (*Client, error)
  • func (c *Client) EnsureChain(table string, chain string) error
  • func (c *Client) EnsureRule(table string, chain string, ruleSpec []string) error
  • func (c *Client) Restore(data []byte, flush bool) error

Constants

const (
	NATTable    = "nat"
	FilterTable = "filter"
	MangleTable = "mangle"
	RawTable    = "raw"

	AcceptTarget     = "ACCEPT"
	MasqueradeTarget = "MASQUERADE"
	MarkTarget       = "MARK"
	ConnTrackTarget  = "CT"

	PreRoutingChain  = "PREROUTING"
	ForwardChain     = "FORWARD"
	PostRoutingChain = "POSTROUTING"
)

Functions

func MakeChainLine

func MakeChainLine(chain string) string

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

func New

func New() (*Client, error)

func (*Client) EnsureChain

func (c *Client) EnsureChain(table string, chain string) error

ensureChain checks if target chain already exists, creates it if not.

func (*Client) EnsureRule

func (c *Client) EnsureRule(table string, chain string, ruleSpec []string) error

ensureRule checks if target rule already exists, appends it if not.

func (*Client) Restore

func (c *Client) Restore(data []byte, flush bool) error

Restore calls iptable-restore to restore iptables with the provided content. If flush is true, all previous contents of the respective tables will be flushed. Otherwise only involved chains will be flushed.