Moxa Technologies EM-1220 LX, User Manual, Page: 36 / 56

EM-1220 LX User’s Manual Configuring the EM-1220-LX
The EM-1240-LX supports the following sub-modules. Be sure to use the module that matches
your application. You must load a module before you can use it. Use the
insmod
command to load
a module.
x_tables xt_conntrack xt_helper xt_mark
xt_pkttype xt_state xt_tcpudp xt_CLASSIFY
xt_dccp xt_length xt_MARK xt_quota
xt_statistic xt_comment xt_dscp xt_multiport
xt_realm xt_string xt_connbytes xt_esp
xt_mac xt_NFQUEUE xt_sctp xt_tcpmss
xt_limit
arptable_filter ip_nat iptable_raw ipt_hashlimit
ipt_owner ipt_time arp_tables ip_nat_snmp_basic
ip_tables ipt_iprange
ipt_recent ipt_tos
arpt_mangle ip_nat_tftp ipt_addrtype ipt_layer7
ipt_REDIRECT ipt_TOS
ip_nat_amanda iptable_filter
ipt_ah ipt_LOG ipt_REJECT ipt_ttl
ip_nat_ftp iptable_mangle ipt_ecn ipt_MASQUERADE
ipt_SAME ipt_TTL ip_nat_irc iptable_nat
ipt_ECN ipt_NETMAP
ipt_TCPMSS ipt_ULONG
NOTE
The EM-1220-LX does NOT support IPV6 and ipchains.
IPTABLES supports packet filtering or NAT. Take care when setting up the IPTABLES rules. If
the rules are not correct, remote hosts that connect via a LAN or PPP may be denied access. We
recommend using the Serial Console to set up IPTABLES.
Click on the following links for more information about iptables.
http://www.linuxguruz.com/iptables/
http://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO.html
Since the IPTABLES command is very complex, to illustrate the IPTABLES syntax we have
divided our discussion of the various rules into three categories:
Observe and erase chain rules
,
Define policy rules
, and
Append or delete rules
.
Observe and erase chain rules
Usage:
# iptables [-t tables] [-L] [-n]
-t tables: Table to manipulate (default: ‘filter’); example: nat or filter.
-L [chain]: List List all rules in selected chains. If no chain is selected, all chains are listed.
-n:
Numeric output of addresses and ports.
# iptables [-t tables] [-FXZ]
-F: Flush the selected chain (all the chains in the table if none is listed).
-X: Delete the specified user-defined chain.
-Z: Set the packet and byte counters in all chains to zero.
4-5