Home

Welcome to iptables_converter.py

We're on linux.

We're root.

Always there is somthing left to be done:

Change netfilter tables within the running kernel.

As iptables are done as an atomic operation each, it takes long time to insert a lot of commands into the kernel. Using iptables-restore, which is an atomic operation as well, we can transfer a complete ruleset into the kernel at once. This saves a lot of time and cpu-load. Finally it does have the same result. And here comes the news:

iptables_converter.py reads a shell-script, f.e. firewall-commands, which contains iptables commands. Default filename is rules. Output is done to stdout. redirect it to a file, f.e. ruleset.

iptables_converter -s firewall-commands > ruleset

iptables-restore < ruleset

Have fun! sl0