iptables-save(8)

iptables-save8

Dump iptables rules ip6tables-save — dump iptables rules

Usage

iptables-save [-M modprobe] [-c] [-t table] [-f filename]

ip6tables-save [-M modprobe] [-c] [-t table] [-f filename]

Overview

iptables-save and ip6tables-save are used to dump the contents of IP or IPv6 Table in easily parseable format either to STDOUT or to a specified file.

-M, --modprobe modprobe

Specify the path to the modprobe(8) program. By default, iptables-save will inspect /proc/sys/kernel/modprobe to determine the executable's path.

-f, --file filename

Specify a filename to log the output to. If not specified, iptables-save will log to STDOUT.

-c, --counters

Include the current values of all packet and byte counters in the output.

-t, --table tablename

Restrict output to only one table. If the kernel is configured with automatic module loading, an attempt will be made to load the appropriate module for that table if it is not already there.
If not specified, output includes all available tables. No module loading takes place, so in order to include a specific table in the output, the respective module (something like iptable_mangle or ip6table_raw) must be loaded first.

Releases

13 releases since Debian 3.0 (Woody); the text changed 11 times.

  1. 3.0
  2. 3.1
  3. 4.0
  4. 5.0
  5. 6.0–7
  6. 8
  7. 9
  8. 10
  9. 11
  10. 12
  11. 13
  12. Arch

--file since Debian 10 (Buster); --modprobe since Debian 9 (Stretch); -M since Debian 6.0 (Squeeze); -f since Debian 10 (Buster).

Bugs

None known as of iptables-1.2.1 release

Authors

Harald Welte <[email protected]>
Rusty Russell <[email protected]>
Andras Kis-Szabo <[email protected]> contributed ip6tables-save.

From iptables 1:1.8.13-1 in Arch Linux 2026-11-01. Also shipped by iptables-legacy. Parsed by carta from the page's man source.