summaryrefslogtreecommitdiffstats
path: root/iptables-save.8
blob: 32b70ef24d32a6ceac6b79038e13e4b5baf562eb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
.TH IPTABLES-SAVE 8 "Jan 04, 2001" "" ""
.\"
.\" Man page written by Harald Welte <laforge@gnumonks.org>
.\" It is based on the ipptables man page.
.\"
.\"	This program is free software; you can redistribute it and/or modify
.\"	it under the terms of the GNU General Public License as published by
.\"	the Free Software Foundation; either version 2 of the License, or
.\"	(at your option) any later version.
.\"
.\"	This program is distributed in the hope that it will be useful,
.\"	but WITHOUT ANY WARRANTY; without even the implied warranty of
.\"	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
.\"	GNU General Public License for more details.
.\"
.\"	You should have received a copy of the GNU General Public License
.\"	along with this program; if not, write to the Free Software
.\"	Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
.\"
.\"
.SH NAME
iptables-save \- Save IP Tables
.SH SYNOPSIS
.BR "iptables-save " "[-c] [-t table]"
.br
.SH DESCRIPTION
.PP
.B iptables-save
is used to dump the contents of an IP Table in easily parseable format
to STDOUT. Use I/O-redirection provided by your shell to write to a file.
.TP
\fB\-c\fR, \fB\-\-counters\fR
include the current values of all packet and byte counters in the output
.TP
\fB\-t\fR, \fB\-\-table\fR \fBtablename\fR
.TP
restrict output to only one table. If not specified, output includes all
available tables.
.SH BUGS
.B iptables-save
doesn't order user-defined chains and builtin chains in any specific manner.
This raises some dependency problems when using the unmodified output of 
.B iptables-save
as input for
.B iptables-restore.
.PP
Expect this to be fixed in the next iptables release.
.PP
To make it work, reorder the output in a way that in every table, all 
user-defined chains are created before any other chain uses this chain
as target.
.SH AUTHOR
Harald Welte <laforge@gnumonks.org>
.SH SEE ALSO
.BR iptables-restore "(8), " iptables "(8) "
.PP
The iptables-HOWTO, which details more iptables usage, the NAT-HOWTO,
which details NAT, and the netfilter-hacking-HOWTO which details the
internals.