netfilter-persistent - load, flush and save netfilter rule sets
uses a set of plugins to load, flush and save
netfilter rules at boot and halt time. Plugins can be written in any suitable
language and stored in /usr/share/netfilter-persistent/plugins.d
- Calls all plugins with the start argument, causing them to load
their rules into netfilter.
- If the configuration FLUSH_ON_STOP is enabled, calls all plugins
with the flush argument, causing them to remove their rules from
netfilter. Otherwise, emits a warning only.
- Calls all plugins with the flush argument, causing them to remove
their rules from netfilter.
- Calls all plugins with the save argument, causing them to save the
currently-loaded rules to persistent storage.
Plugins can be written in any language and are merely executed by
with a single argument. All plugins are stored in
Plugins must implement the start flush
and must not rely on additional arguments for other functionality.
Plugins must return 0 on success and any other code on failure.
Plugins are free to use and extend the configuration in
and to implement their own
- Main configuration file
- Plugin directory
Copyright (C) 2009 Simon Richter <email@example.com>
Copyright (C) 2010, 2014 Jonathan Wiltshire <firstname.lastname@example.org>
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the Free Software
Foundation, either version 3 of the License, or (at your option) any later
Jonathan Wiltshire <email@example.com>