|
NAME | SYNOPSIS | DESCRIPTION | BUGS | AUTHORS | SEE ALSO | COLOPHON |
|
|
|
IPTABLES-RESTORE(8) iptables 1.8.11 IPTABLES-RESTORE(8)
iptables-restore — Restore IP Tables
ip6tables-restore — Restore IPv6 Tables
iptables-restore [-chntvV] [-w seconds] [-M modprobe] [-T name]
[file]
ip6tables-restore [-chntvV] [-w seconds] [-M modprobe] [-T name]
[file]
iptables-restore and ip6tables-restore are used to restore IP and
IPv6 Tables from data specified on STDIN or in file. Use I/O
redirection provided by your shell to read from a file or specify
file as an argument.
-c, --counters
Restore the values of all packet and byte counters.
-h, --help
Print a short option summary.
-n, --noflush
Don't flush the previous contents of the table. If not
specified, both commands flush (delete) all previous
contents of the respective table.
-t, --test
Only parse and construct the ruleset, but do not commit it.
-v, --verbose
Print additional debug info during ruleset processing.
Specify multiple times to increase debug level.
-V, --version
Print the program version number.
-w, --wait [seconds]
Wait for the xtables lock. To prevent multiple instances
of the program from running concurrently, an attempt will
be made to obtain an exclusive lock at launch. By default,
the program will exit if the lock cannot be obtained. This
option will make the program wait (indefinitely or for
optional seconds) until the exclusive lock can be obtained.
-M, --modprobe modprobe
Specify the path to the modprobe(8) program. By default,
iptables-restore will inspect /proc/sys/kernel/modprobe to
determine the executable's path.
-T, --table name
Restore only the named table even if the input stream
contains other ones.
--compat (nft-variants only)
When creating a rule, attach compatibility data to the
rule's userdata section for use as aid in parsing the rule
by an older version of the program. The old version
obviously needs to support this, though. Specifying this
option a second time instructs the program to default to
the rule's compatibility data when parsing, which is mostly
useful for debugging or testing purposes.
The XTABLES_COMPAT environment variable can be used to
override the default setting. The expected value is a
natural number representing the number of times --compat
was specified.
None known as of iptables-1.2.1 release
Harald Welte <[email protected]> wrote iptables-restore based
on code from Rusty Russell.
Andras Kis-Szabo <[email protected]> contributed ip6tables-restore.
iptables-apply(8), iptables-save(8), iptables(8)
The iptables-HOWTO, which details more iptables usage, the NAT-
HOWTO, which details NAT, and the netfilter-hacking-HOWTO which
details the internals.
This page is part of the iptables (administer and maintain packet
filter rules) project. Information about the project can be found
at ⟨http://www.netfilter.org/⟩. If you have a bug report for this
manual page, see ⟨http://bugzilla.netfilter.org/⟩. This page was
obtained from the project's upstream Git repository
⟨git://git.netfilter.org/iptables⟩ on 2025-08-11. (At that time,
the date of the most recent commit that was found in the
repository was 2025-07-22.) If you discover any rendering
problems in this HTML version of the page, or you believe there is
a better or more up-to-date source for the page, or you have
corrections or improvements to the information in this COLOPHON
(which is not part of the original manual page), send a mail to
[email protected]
iptables 1.8.11 IPTABLES-RESTORE(8)
Pages that refer to this page: iptables-xml(1), iptables(8), iptables-apply(8), iptables-save(8)