Personal tools
Skip to content. | Skip to navigation
This package provides the service ipset that is split out of the base package since it is not active by default.
This package only exists to help transition iptables users to the new package split. It will be removed after one distribution release cycle, please do not reference it or depend on it in any way.
The iptables utility controls the network packet filtering code in the Linux kernel. This package contains the legacy tools which are obsoleted by nft-variants in iptables-nft package for backwards compatibility reasons. If you need to set up firewalls and/or IP masquerading, you should not install this package but either nftables or iptables-nft instead.
iptables libraries. Please remember that libip*tc libraries do neither have a stable API nor a real so version. For more information about this, please have a look at http://www.netfilter.org/documentation/FAQ/netfilter-faq-4.html#ss4.5
libxtables and associated shared object files Libxtables provides unified access to iptables extensions in userspace. Data and logic for those is kept in per-extension shared object files.
nftables compatibility for iptables, arptables and ebtables.
iptables services for IPv4 and IPv6 This package provides the services iptables and ip6tables that have been split out of the base package since they are not active by default anymore.
Utils for iptables This package provides nfnl_osf with the pf.os database and nfbpf_compile, a bytecode generator for use with xt_bpf. Also included is iptables-apply, a safer way to update iptables remotely.
IPTraf-ng is a console-based network monitoring utility. IPTraf gathers data like TCP connection packet and byte counts, interface statistics and activity indicators, TCP/UDP traffic breakdowns, and LAN station packet and byte counts. IPTraf-ng features include an IP traffic monitor which shows TCP flag information, packet and byte counts, ICMP details, OSPF packet types, and oversize IP packet warnings; interface statistics showing IP, TCP, UDP, ICMP, non-IP and other IP packet counts, IP check sum errors, interface activity and packet size counts; a TCP and UDP service monitor showing counts of incoming and outgoing packets for common TCP and UDP application ports, a LAN statistics module that discovers active hosts and displays statistics about their activity; TCP, UDP and other protocol display filters so you can view just the traffic you want; logging; support for Ethernet, FDDI, ISDN, SLIP, PPP, and loop back interfaces; and utilization of the built-in raw socket interface of the Linux kernel, so it can be used on a wide variety of supported network cards.
IP Tables State (iptstate) was originally written to implement the "state top" feature of IP Filter in IP Tables. "State top" displays the states held by your stateful firewall in a top-like manner. Since IP Tables doesn't have a built in way to easily display this information even once, an option was added to just have it display the state table once. Features include: - Top-like realtime state table information - Sorting by any field - Reversible sorting - Single display of state table - Customizable refresh rate - Display filtering - Color-coding - Open Source - much more...