iptables question

[Tom H]

On Wed, Dec 31, 2014 at 6:33 PM, Noah <noah-list at enabled.com> wrote:
>
> Ive read this page and still not understanding something
> https://help.ubuntu.com/community/IptablesHowTo
>
> I am using Solution #2 for saving and installing iptables rules on reboot:
> /etc/network/if-pre-up.d and ../if-post-down.d
>
> I am trying to figure out the best method for adding "--log-prefix "iptables
> denied: " --log-level 7" to my log line
>
> so this line is:
> -A block-and-log -m limit --limit 1/sec --limit-burst 20 -j LOG
>
> should be this:
> -A block-and-log -m limit --limit 1/sec --limit-burst 20 -j LOG --log-prefix
> "iptables denied: " --log-level 7
>
> How do I change that upon reboot.

You can print your rules with "iptables -nL --line-numbers", note the
line number of the rule that you want to change, and replace it with
"iptables -R ...".

(You can also use the iptables-persistent package to load iptables
rules at boot.)