iptables-persistent
"iptables-persistent" takes over the automatic loading of the saved iptables rules.
This is a fork of Debian's iptables-persistent package that loads iptables rules using rules specified at /etc/iptables/rules
Configuration variables
Edit /etc/iptables/iptables-persistent.conf
to set the following parameters:
SAVE_NEW_RULES (default: 0) - if set different than 0 then the current iptables ruleset will be saved with iptables-save when iptables-persistent is stopped (or restarted)
MODULES (default: "") - a space-separated list of the modules that iptables-persistent should load/unload. Useful to activate FTP connection tracking for example.
IPV6 (default: 0) - if set different than 0 it will additionnaly use ip6tables to handle the loading/unloading of the ruleset stored at
/etc/iptables/ipv6_rules
ENABLE_ROUTING (default: 0) – if set different than 0 then routing is enabled (in
/proc/sys/net/ipv4/ip_forward
and/proc/sys/net/ipv6/conf/all/forwarding
), otherwise it’s not.