iptables will list packet and byte counters if you specify option -v for verbose, e.g. iptables -vL. Likewise iptables-save will list all entries including the mentioned counters for each chain, but not for each table entry (on some systems iptables-save requires option -c to include counters).
RedHat has a great doc about iptables (a little bit long), but the subject to cover is complex and there are so many different use cases that I don’t see how to avoid it. Here is the chapter about FORWARD and NAT Rules. As it states: For example, if you want to forward incoming HTTP … Read more
So after much searching around, I found the answer uses iptables, setting up a NAT, and using the built-ins PREROUTING and OUTPUT. First, you must have port forwarding enabled: echo “1” > /proc/sys/net/ipv4/ip_forward Then you have to add the following rules to your iptables NAT table, using your own values for ${P_src} and ${P_target}: iptables … Read more
Use iptables -L -n -t nat command Because PREROUTING chain is a part of NAT rules
Something has deleted the docker iptables entries. Docker will recreate them if you restart it (systemctl restart docker). You’ll want to disable anything else that manages iptables to prevent this from happening in the future.
iptables is available in Android source distribution. That version however only works with devices built with Linux kernel 2.6.29. Users of retail Android devices cannot access iptables binary. Even Android OS itself cannot access that binary. This is hard-coded in Android. Many devices also don’t have iptables at all. The only way to access iptables … Read more
Came across a similar issue, one thing I don’t see mentioned here is you need to start docker to listen to both the network and a unix socket. All regular docker (command-line) commands on the host assume the socket. sudo docker -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock -d & will start docker listening to any ip address … Read more
Although already over a year old, I stumbled across this question a couple of times on other Google search and I believe I can improve on the previous answer for the benefit of others. Short answer is you cannot combine both action in one line, but you can create a chain that does what you … Read more
Ubuntu (and Debian) offer the package iptables-persistent (Debian: http://packages.debian.org/wheezy/iptables-persistent , Ubuntu: http://packages.ubuntu.com/saucy/iptables-persistent) , which does exactly what you want. As root, or via sudo: apt-get install iptables-persistent iptables-save > /etc/iptables/rules.v4 If you’re working with ip6tables, you’ll want to also ip6tables-save > /etc/iptables/rules.v6. You must save the tables again (iptables-save > /etc/iptables/rules.v4, ip6tables-save > /etc/iptables/rules.v6) after … Read more
–privileged flag is not required anymore. Starting with Docker 1.2 you can now run your image with parameters –cap-add=NET_ADMIN and –cap-add=NET_RAW which will allow internal iptables.