Iptables is basically a powerful firewall, which can allow a user to set specific rules to control incoming and outgoing traffic. You can use it to block the specific port, IP addresses, and much more. In this article, we present the most common uses of iptables.

The iptables rules can be specified with 3 blocks, which are used for a specific purpose (called Chains):

INPUT – All packets destined for the host computer.
​OUTPUT – All packets originating from the host computer.
​FORWARD – All packets neither destined for nor originating from the host computer, but passing through (routed by) the host computer. This chain is used if you are using your computer as a router.

The first command we present is used to flush the existing iptables rules, this can be useful if we want to start with new rules or if we have accidentally blocked ourselves (Our Clients Area has a button for this case specifically – “Flush iptables“):

Note. If you want to flush a single Chain, specific rules. You can use this:

Next commands are used to check current rules that are active within your server:

Note. You can add specific words, like INPUT, FORWARD OR OUTPUT. For example:

This will let you specify the rules by their purpose (Chains).

Note. You can also add “-v” to your command (iptables -L -v), this will let you check the packets and their size matched with each rule.

Now we can continue with more specific rules to make some simple rules. Usually, Firewall is used to block something first, and only then to allow something. So here are some rules which help you to block the connections.

In order to block a connection from a specific IP address you can use this:

Note. REJECT is used to give a response that the connection is not blocked and sends a message “connection refused”.

If you want to block a specific port, for example SMTP port 25, you can use this:

Allow Incoming SSH connection only from a specific IP:

This actually allows only specific IP to connect to the server using 22 ports. Also, every time it happens, it establishes a status, which will be used in the second rule to allow the same IP for the outgoing traffic.

The following sets of rules are for HTTP and HTTPS connections:

The first set of rules allows HTTP and the second set of rules allows HTTPS connection using the default ports 80 and 443

The next rules allow outside users to ping to your server:

The same applies to blocking it:

To allow loopback access to your server, for example using localhost:

Allowing MySQL connection from specific IP address:

Allowing POP3 or IMAP traffic:

Also, this can be applied for POP3/IMAP using a secure connection:

Note. When you describe network interface in the rules, for example, venet0, do not forget to change it, if your server uses a different network interface, for example eth0 or other.

One last use of iptables is that it can be used to prevent the DDoS as well, by limiting the connections per minute:

More details about this one:

-m limit: This uses the limit iptables extension
–limit 25/minute: This limits only a maximum of 10 connections per minute.
–limit-burst 100: This value indicates that the limit/minute will be enforced only after the total number of connection have reached the limit-burst level.

You can change the details based on your requirements, to prevent some attacks.