firehol-iptables(5)

📦
version 3.1.8 · 4 versions
, in debian trixie, ubuntu resolute, ubuntu stonking

💖 firehol-iptables — the firehol-iptables(5) glow-up 💖

okay bestie, so this is the page for firehol-iptables from the FireHOL fam (that's FireHOL Reference, version 3.1.8 if you're keeping receipts), and it's literally just: how to sneak your own raw iptables commands into your FireHOL setup without everything going sideways. no cap. ✨

🌸 NAME 🌸

firehol-iptables — include custom iptables commands

like. that's the whole vibe. you get to inject your own firewall rules. 💅

🎀 SYNOPSIS 🎀

iptables argument...

ip6tables argument...

yep that's it. you pass argument... and it just… goes. 🦋

✨ DESCRIPTION ✨

so the iptables and ip6tables helper commands are little messengers 🧚 — they take all of their arguments and hand them straight to the real iptables(8) or ip6tables(8) at the exact right moment during run-time. timing is everything, iykyk.

Note 👑 when you use these inside an interface or a router, the result will not have a direct relationship to the enclosing definition — because the parameters passed are only the ones you supply. it's giving "you brought your own stuff, so you own the outcome". 🙈

do NOT use /sbin/iptables or /sbin/ip6tables directly in a FireHOL configuration, bestie, i am begging 😭. here's why: they will run before FireHOL activates its firewall. which means the commands get applied to the previously running firewall, not the new one — and then they get completely lost the moment the new firewall activates. poof. gone. 💀

that's literally the whole reason the iptables and ip6tables helpers exist: so you can hook in commands safely instead of rage-quitting. 🫶

one more thing, and it's important — when you use the -t option to specify a table, make sure it's the first option you give to iptables. otherwise "fast activation" will fail with an error message that looks something like this:

iptables-restore: The -t option cannot be used in iptables-restore

not cute. put -t first. periodt. 💅

🌈 EXAMPLES 🌈

Fix LXC DHCP on same host 🍓

iptables -t mangle -A POSTROUTING -p udp --dport 68 -j CHECKSUM --checksum-fill

ate. no crumbs. 🔥

👑 SEE ALSO 👑

  • firehol(1) — FireHOL program
  • firehol.conf(5) — FireHOL configuration
  • iptables(8) — administration tool for IPv4 firewalls
  • ip6tables(8) — administration tool for IPv6 firewalls
  • FireHOL Website
  • FireHOL Online PDF Manual
  • FireHOL Online Documentation

go read them. main character research era. ⭐

💜 AUTHORS 💜

FireHOL Team.

and that's the whole page, bestie 🎀 — brought to you by the FireHOL Reference, version 3.1.8, built 13 Apr 2025. go forth and hook in your commands safely. mwah. 💖✨

📦 where this page comes from