I. Overview:

This Iptables course covers every major topic related to Netfilter and Iptables including Ipset, advanced matches and targets, NAT, Fort Forwarding, user-defined chains, and many more!

II. Duration: 24 hours (3 days)

III. Objectives:

• Acquire an in-depth understanding of the Netfilter/Iptables Linux Firewall (chains, tables, matches, targets).
• Acquire the skills to build Advanced Iptables Firewalls. Hands-on experience with Iptables.
• Learn to work efficiently with IPSET to drop large collections of IPs and Networks (like entire Countries).
• Understand Iptables best practices for creating custom Firewalls.
• Acquire the skills to configure Linux as a NAT Router.
• Acquire the skills to configure Port Forwarding on Linux Routers.
• See practical examples for EACH Iptables Command, Match or Target.
• Use Shell Scripts to automate tasks like blocking or permitting a service, an IP/Network or a MAC address.
• Apply the skills to secure servers, networks, routers or Linux Operating Systems.
• Hundreds of hands-on exercises with solutions and quizzes.

IV. Prerequisites:

• Local root access to a Linux distribution like Ubuntu or CentOS. No paid software required.
• Linux basics like commands, file permissions, text editors etc.
• Basic knowledge of TCP/IP stack (how clients and servers typically communicate, TCP, UDP, ICMP, IP's, ports, etc).
• Very basic knowledge of other Networking concepts like NAT or Routing.

V. Course outlines:

• Course introduction
• Netfilter/Iptables Basics
• The Iptables command
• Challenges - The Iptables Command
• Iptables basic matches
• Challenges - Basic Matches
• Iptables advanced matches
• Challenges - Advanced Matches
• Advanced firewall configuration with Ipset
• Iptables targets
• Challenges - TARGETS
• NAT and Port Forwarding
• User-defined Chains
• Netfilter/Iptables chain traversal in depth
• Firewall automation using Shell scripts
• Bash Shell scripting
• Challenges Bash Scripting
• Basic network configuration