blocks|key|4494214|text|我也偶然发现了OP的问题(然后是他的问题)；在查看package+description+for+iptables-persistent时找到了解决方案。新的接口似乎是netfilter持久化的，即使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4494215|#+invoke-rc.d+netfilter-persistent+save|code-block|syntax|javascript|4494216|至少这对我是有效的。|4494217|entityMap|0|LINK|mutability|MUTABLE|url|https://packages.debian.org/jessie/iptables-persistent^0|P|17|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|C|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

I just stumbled over OP's problem, too (and then his question); found the solution when looking at the <a href="https://packages.debian.org/jessie/iptables-persistent" rel="noreferrer">package description for iptables-persistent</a>. The new interface seems to be netfilter-persistent, that is use e.g.:

<pre><code># invoke-rc.d netfilter-persistent save
</code></pre>

At least that is what worked for me, HTH ...

blocks|key|4494255|text|问题出在firewalld服务中。这是一种新的防火墙守护程序，它与netfilter(iptables)-persistent冲突。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4494256|chkconfig+firewalld+off|code-block|syntax|javascript|4494257|现在一切都很好。|4494258|免责声明:这不是最佳实践，只是临时的变通方法。|4494259|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

The problem was in firewalld service. This is some kind of new firewall daemon which conflicts with netfilter(iptables)-persistent. 

<pre><code>chkconfig firewalld off
</code></pre>

and now all is working fine. 

Disclaimer: this is not best practice, just a temporary wworkaround.

blocks|key|4494348|text|更新8/7/16:这取决于发行版。下面的评论内容是在不知道OP发行版是否有netfilter-persistent包的情况下输入的。我很抱歉。我的笔记本电脑发行版(Mint)不包含netfilter-persistent包，而我的服务器发行版(Ubuntu+15%2B)包含。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4494349|原始答案:正如Oliver所说的那样，netfilter-persistent取代了Ubuntu中的iptables-persistent。Ubuntu+15.04的工作原理如下：|4494350|安装它，然后确保它作为服务运行：service+--status-all+%7C+grep+netfilter-persistent|offset|length|style|CODE|4494351|如果不是作为服务运行，请使用：invoke-rc.d+netfilter-persistent+start一次性启动它|4494352|然后，您必须将脚本放在网络或其接口停止时将运行的某个位置。重要的脚本内容很简单：invoke-rc.d+netfilter-persistent+save|4494353|我将脚本放在/etc/network/if-post-down.d目录中。不要忘记将其chmod为可执行文件。如果可能出现断电，您可以为save命令创建一个cron条目。|4494354|entityMap^0|0|0|G|1C|0|F|12|0|14|11|0|6|R|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|T|8|@$F|U|G|V|H|I]]|9|@]|A|$]]|$1|J|3|K|5|6|7|W|8|@$F|X|G|Y|H|I]]|9|@]|A|$]]|$1|L|3|M|5|6|7|Z|8|@$F|10|G|11|H|I]]|9|@]|A|$]]|$1|N|3|O|5|6|7|12|8|@$F|13|G|14|H|I]]|9|@]|A|$]]|$1|P|3|-4|5|6|7|15|8|@]|9|@]|A|$]]]|Q|$]]

Update 8/7/16: It depends on the distro. The following comment content was entered in ignorance of whether the OP distro has a netfilter-persistent package. My apologies. My laptop distro (Mint) does not contain the netfilter-persistent package while my servers distros (Ubuntu 15+) do.

Original answer:
As Oliver correctly says, netfilter-persistent replaces iptables-persistent in Ubuntu. What worked with Ubuntu 15.04 was as follows:

Install it, then make sure it is running as a service:
 <code>service --status-all | grep netfilter-persistent</code>

If not running as a service, start it once for all time with:
 <code>invoke-rc.d netfilter-persistent start</code>

Then you must place a script someplace that will run when the network or its interfaces stop. The important script content is simply:
 <code>invoke-rc.d netfilter-persistent save</code>

I put the script in <code>/etc/network/if-post-down.d</code> directory. Don't forget to chmod it to executable. If power outages are any likelihood, you could make a cron entry for the save command.

blocks|key|4493293|text|iptables-persistent已经在debian+wiki上被推荐了很多次。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4493294|要安装它，请执行以下操作：|4493295|apt+install+iptables-persistent+|code-block|syntax|javascript|4493296|iptables-persistent创建配置文件，并使用包netfilter-persistent重新加载或保存iptables规则|4493297|iptables配置文件位于文件夹中|4493298|/etc/iptables/rules.v4
/etc/iptables/rules.v6|4493299|主要的管理工具是：|4493300|/usr/sbin/netfilter-persistent+#+you+should+be+root+or+call+sudo+to+use+it|4493301|如果要更改iptable规则，请编辑配置文件，然后重新装载iptables规则|4493302|netfilter-persistent+reload|4493303|或者您可以使用iptables+-I输入...首先更改iptables规则，然后将其保存到配置文件|4493304|netfilter-persistent+save|4493305|如果要清除iptables规则，可以使用flush命令|4493306|netfilter-persistent+flush+|4493307|entityMap^0|0|0|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|17|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|18|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|19|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|1A|8|@]|9|@]|A|$]]|$1|M|3|N|5|F|7|1B|8|@]|9|@]|A|$G|H]]|$1|O|3|P|5|6|7|1C|8|@]|9|@]|A|$]]|$1|Q|3|R|5|F|7|1D|8|@]|9|@]|A|$G|H]]|$1|S|3|T|5|6|7|1E|8|@]|9|@]|A|$]]|$1|U|3|V|5|F|7|1F|8|@]|9|@]|A|$G|H]]|$1|W|3|X|5|6|7|1G|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|F|7|1H|8|@]|9|@]|A|$G|H]]|$1|10|3|11|5|6|7|1I|8|@]|9|@]|A|$]]|$1|12|3|13|5|F|7|1J|8|@]|9|@]|A|$G|H]]|$1|14|3|-4|5|6|7|1K|8|@]|9|@]|A|$]]]|15|$]]

iptables-persistent has been recommand on debian wiki many times . 

to install it:

<pre><code>apt install iptables-persistent 
</code></pre>

iptables-persistent create the config files and use the package netfilter-persistent to reload or save iptables rules now 

the iptables config files are at folder

<pre><code>/etc/iptables/rules.v4
/etc/iptables/rules.v6
</code></pre>

the main manage tool is:

<pre><code>/usr/sbin/netfilter-persistent # you should be root or call sudo to use it
</code></pre>

when you want to change iptable rules , edit the config files then reload iptables rules

<pre><code>netfilter-persistent reload
</code></pre>

or you can use iptables -I INPUT ... to change iptables rules first then save it to config files

<pre><code>netfilter-persistent save
</code></pre>

if you want to clear the iptables rules ,you can use flush command

<pre><code>netfilter-persistent flush 
</code></pre>

i have VPS Debian 8 jessie x64 stable release. After installation im trying to configure iptables (like in debian 7). 

<pre><code>apt-get install iptables-persistent
</code></pre>

executed succesefully, some packets were installed. but when im trying

<pre><code>service iptables-persistent start
</code></pre>

im getting an error that says thar service iptables-persistent unrecognized

halp!

debian 8 iptables-persistent

我有VPS Debian8杰西x64稳定发布。安装之后，我尝试配置iptables (就像在debian 7中一样)。apt-get install iptables-persistent成功执行，安装了一些数据包。但当我试着service iptables-persistent start我收到一个错误，显示服务ip...

问debian 8 iptables-持久性
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问debian 8 iptables-持久性EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问debian 8 iptables-持久性
EN