Cyclades AlterPath ACS, Command Reference Manual

Page: 139 / 420

AlterPath ACS Command Reference Guide
123
Network
•
chain - Is one of the following:
for filter table: INPUT, OUTPUT, FORWARD or a user-created chain.
for nat table: PREROUTING, OUTPUT, POSTROUTING or a user-created chain.
Command
Only one command can be specified on the command line unless otherwise specified
below. For all the long versions of the command and option names, you need to use only
enough letters to ensure that iptables can differentiate it from all other options.
Command Description
-A - - append Append one or more rules to the end of the selected chain. When the
source and/or destination names resolve to more than one address, a rule
will be added for each possible address combination.
-D - - delete Delete one or more rules from the selected chain. There are two versions
of this command. The rule can be specified as a number in the chain
(starting at 1 for the first rule) or as a rule to match.
-R - - replace Replace a rule in the selected chain. If the source and/or destination
names resolve to multiple addresses, the command will fail. Rules are
numbered starting at 1.
-I - - insert Insert one or more rules in the selected chain as the given rule number.
Thus if the rule number is 1, the rule or rules are inserted at the head of
the chain. This is also the default if no rule number is specified.
-L - - list List all rules in the selected chain. If no chain is selected, all chains are
listed. It is legal to specify the -Z (zero) option as well, in which case the
chain(s) will be atomically listed and zeroed. The exact output is affected
by the other arguments given.
-F - - flush Flush the selected chain. This is equivalent to deleting all the rules one-
by-one.
-Z - - zero Zero the packet and byte counters in all chains. It is legal to specify the -
L, --list (list) option as well, to see the counters immediately before they
are cleared. (See above.)
-N - - new-chain New chain. Create a new user-defined chain by the given name. There
must be no target of that name already.
-X - - delete-chain Delete the specified user-defined chain. There must be no references to
the chain. If there are, you must delete or replace the referring rules
before the chain can be deleted. If no argument is given, it will attempt to
delete every non-built-in chain in the table.
Table 4.3: iptables commands options