/etc/iptables/rules.v6 for, wait for it, ipv6 rules.Since iptables-persistant will look for two dump files: Iptables-persistentautomatically loads your saved ip-tables rules after a reboot.įirst step will be to install iptables-persistent using sudo apt-get install iptables-persistent Next we will need to create an host file for our systemd service sudo vi /etc/systemd/system/rvice Description=runs iptables restore on boot ConditionFileIsExecutable=/etc/iptables/restore-iptables.sh After=network.target Type=forking ExecStart=/etc/iptables/restore-iptables.sh start TimeoutSec=0 RemainAfterExit=yes GuessMainPID=no WantedBy=multi-user.targetĪll left to do is to enable our service by running sudo systemctl enable rvice iptables-persistent (DEB)

Using systemdwe can run a script file after boot, that will restore our firewall rules and make it persistent without installing a 3rd party software.įirst let’s create the script that we wish to run to restore our firewall: sudo vi /etc/iptables-persistent/restore.sh #!/bin/sh /usr/bin/flock /run/.iptables-restore /sbin/iptables-restore < Systemd is a system and service manager for Linux operating systems.

using iptables-services for RPM-based Linux distributions, required 3rd party software Systemd using iptables-persistent mostly for DEB-based Linux distributions, required 3rd party softwareģ. using systemd my personal favorite, since it works for all Linux distributions and without requiring 3rd party software.Ģ. I’ll present here 3 ways to make your iptables persistent:ġ. If you are using iptables, it’s very likely that you wish to make it persistent, and restore your firewall rules after a reboot.

Restart iptables