[SOLVED] deleting iptables rules by matching mark

siddhiqbcs · 09-19-2012, 06:38 AM

Hi,

Is there any way to delete the IPtables rules which are match with the marking.

for example i've some four rules in the iptables and among those four rules two are set with the marking 0x1 and another are set with the marking 0x2.

Now how can i delete the rules which are set with the marking 0x1 alone...

iptables -t nat -I PREROUGING -p tcp -m mark --mark 0x1 -d www.google.com -j DROP
iptables -t nat -I PREROUGING -p tcp -m mark --mark 0x1 -d www.yahoo.com -j DROP

iptables -t nat -I PREROUGING -p tcp -m mark --mark 0x2 -d www.google.com-j DROP
iptables -t nat -I PREROUGING -p tcp -m mark --mark 0x2 -d www.yahoo.com -j DROP

The above for are my rules.. Now i want to delete the rules which are set with the mark 0x1 alone...

Thanks..

unSpawn · 09-19-2012, 08:12 AM

Code:

/sbin/iptables -n -t nat --line-numbers -L PREROUTING|tac| awk '/match 0x1/ {print "/sbin/iptables -t nat -D PREROUTING "$1}' #|/bin/sh