netfilter-persistent8

Usage

Overview

netfilter-persistent uses a set of plugins to load, flush and save netfilter rules at boot and halt time. Plugins can be written in any suitable language and stored in /usr/share/netfilter-persistent/plugins.d

Options

start

Calls all plugins with the start argument, causing them to load their rules into netfilter.

stop

If the configuration FLUSH_ON_STOP is enabled, calls all plugins with the flush argument, causing them to remove their rules from netfilter. Otherwise, emits a warning only.

flush

Calls all plugins with the flush argument, causing them to remove their rules from netfilter.

save

Calls all plugins with the save argument, causing them to save the currently-loaded rules to persistent storage.

Plugins

Plugins can be written in any language and are merely executed by netfilter-persistent with a single argument. All plugins are stored in /usr/share/netfilter-persistent/plugins.d

Plugins must implement the start flush and save arguments and must not rely on additional arguments for other functionality.
Plugins must return 0 on success and any other code on failure.

Plugins are free to use and extend the configuration in /etc/default/netfilter-persistent and to implement their own configuration files.

Files

/etc/default/netfilter-persistent

Main configuration file

/usr/share/netfilter-persistent/plugins.d

Plugin directory