How to start/stop iptables?
Sophia Terry
While learning some new things about iptables I can't through this. While I am trying to start, its saying as
root@badfox:~# iptables -L -n -v
Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination
root@badfox:~# service iptables stop
iptables: unrecognized service
root@badfox:~# service iptables start
iptables: unrecognized serviceSource:
Why I am getting like this?
EDIT: So my firewall already started but why I am not getting the output as I mentioned in the link at source link in first workout.
Here is my output
root@badfox:~# sudo start ufw
start: Job is already running: ufw
root@badfox:~# iptables -L -n -v
Chain INPUT (policy ACCEPT 4882 packets, 2486K bytes) pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 5500 packets, 873K bytes) pkts bytes target prot opt in out source destination
root@badfox:~# 5 2 Answers
The Uncomplicated Firewall or ufw is the configuration tool for iptables that comes by default on Ubuntu. So if you wanted to start or stop the ufw service, you'd have to do something like this
#To stop
$ sudo service ufw stop
ufw stop/waiting
#To start
$ sudo service ufw start
ufw start/runningAbout why you are not receiving the output as shown in the source. It clearly states there that the output you are receiving is for an inactive firewall, that is, no rules have been set. So try setting up some rules in iptables. Here's the Ubuntu Wiki on iptables that shows you how to set, edit them and such.
the service command works on RedHat-based systems with iptables very well, even on Centos 7, which has adopted systemd.
So if Debian-based systems don't consider iptables a service per se, it still might be thought of as one. And the command "service iptables restart" is actually very useful, especially when you want iptables to restore the 'default' rule (meaning, to use the main script; in centos /etc/sysconfig/iptables, etc.)