How to make IpTable Rules immutable in linux

[AmirSalimi]

I work on Linux and want to add rules to iptable. I want these rules to be immutable anyway (either changed or deleted). What should I do? Note that for me the rules that are running and kept in memory are important, not the rules that are stored in the iptable rules file.

I found a way to save the rules in a file and compare them with the rules backup file and detect the changes, but it's not a good way, I think it's too slow and there are ways to bypass this check.

 

[wizardfromoz]

Moving this to Linux Networking.

Good luck and welcome to the forum

Chris Turner
wizardfromoz

 

[AmirSalimi]

Moving this to Linux Networking.

Good luck and welcome to the forum

Chris Turner
wizardfromoz

I thought it must be in kernel because I saw ways to do it by writing a kernel module. Thanks for the help

 

[osprey]

You may have reasons for still using iptables, but it's really been supplanted by nftables, for example:
https://wiki.debian.org/nftables. YMMV.