From: Mart Frauenlob <mart.frauenlob@chello.at>
To: netfilter@vger.kernel.org
Subject: Re: iptable: obtaining list of tables?
Date: Fri, 26 Feb 2010 15:24:06 +0100 [thread overview]
Message-ID: <4B87D986.5040006@chello.at> (raw)
In-Reply-To: <C7232BDB534C6241BE85C96D129205D002F40F7BFD@BLRINMSMBX01.bglrodc.lntinfotech.com>
On 26.02.2010 14:14, Karthik Venkateswaran wrote:
> I agree with you George, atleast it seems there is no mechanism to list the tables.
>
> Apologies for my ignorance, but could you tell me the reason why you would need to list the tables. As far as I know netfilter provides a static list of tables - filter, mangle & nat.
no, that's not quite right.
In the early days iptables had mangle, nat and filter tables.
Then the raw table was introduced to circumvent connection tracking.
Now we also have the security table for SELinux context, hocked right
after the filter table.
And there is the rawpost table, available if you install the
xtables-addons (used for RAWSNAT and RAWDNAT - static nat without
connection tracking).
If the kernel was built with the tables compiled as modules, you can
load/unload them. i.e output of lsmod:
ip_tables 7551 6
iptable_security,iptable_nat,iptable_mangle,iptable_raw,iptable_filter,iptable_rawpost
Usually the currently active tables are listed in:
/proc/net/ip_tables_names
This list is empty until you load the modules.
But there is no way afaik to tell what tables are supported without
knowing their names and try to load them.
Best regards
Mart
> -----Original Message-----
> From: netfilter-owner@vger.kernel.org [mailto:netfilter-owner@vger.kernel.org] On Behalf Of U. George
> Sent: Thursday, February 25, 2010 6:46 PM
> To: andy thomas
> Cc: netfilter@vger.kernel.org
> Subject: Re: iptable: obtaining list of tables?
>
> As far as I can tell - no. Docs says it just list chains. sample try,
> suggests that only the default table is used to list a -t "" .
>
> BTW: if u dont use -L -n, the chain is silently ignored - ;-(
>
[...]
prev parent reply other threads:[~2010-02-26 14:24 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-02-25 21:38 iptable: obtaining list of tables? U. George
2010-02-25 22:15 ` andy thomas
2010-02-25 23:45 ` U. George
2010-02-26 13:14 ` Karthik Venkateswaran
2010-02-26 14:24 ` Mart Frauenlob [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4B87D986.5040006@chello.at \
--to=mart.frauenlob@chello.at \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.