I've had the need for the same functionality, so I wrote the script
below. It takes one argument - the name of the chain for which you want
to delete any rules that reference it. It prints the iptables commands
to run to delete the respective rules.
#!/bin/bash
# unlink-chain.sh
# Erik Schorr 2010
# Permission to use, modify, and redistribute granted to anyone for any
purpose.
# Use this program at your own risk.
# Author disclaims any responsibility for quality or usefulness of this
program.
PATH=/sbin:/usr/sbin:$PATH
SEARCHCHAIN=$1
if [ "$SEARCHCHAIN" ]; then
for n in nat filter raw; do
iptables -t $n -S | grep -e "^-A.*-j $SEARCHCHAIN " | sed -e
"s/^-A/-D/g" -e "s/^/iptables -t $n /g"
done
else
echo "usage: $0 <target chain>"
fi
### snip
# ./unlink-chain.sh DROP_SPYWARE
iptables -t filter -D EGRESS_OUT -d x.x.x.x/32 -p tcp -m comment
--comment "SPYWARE 20110215" -j DROP_SPYWARE
Enjoy.
On 6/24/2011 3:12 PM, Jan Engelhardt wrote:
On Friday 2011-06-24 02:06, Jonathan Tripathy wrote:
On 24/06/2011 00:44, Jan Engelhardt wrote:
On Friday 2011-06-24 00:16, Jonathan Tripathy wrote:
Hi Everyone,
Is there any quick command that I can use with iptables to remove all links
to
a chain, as well as removing the chain itself?
No, -F would clean the chain, and -X would remove them, which are
currently two separate operations with the iptables(8) frontend.
Hi There,
Thanks for this, however I already knew those commands. I'm looking for a
command to clear the links to the chain (the commands above clear the chain
itself), however I'm guessing is there none?
Indeed there are none.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
