I used to have my own set of iptables rules on my Ubuntu 14.04 LTS installation. This was residing in /etc/network/if-pre-up.d/iptables
.
Now, apparently after another apt-get dist-upgrade
it looks like my rules are overridden: when I run iptables -L
I see stuff which seems to be originating from libvirt
or something else but not me.
I am therefore looking for a way to find out where those rules come from so that I could edit/control them. The way I am after needs to be smarter than the one I am trying now — simply searching all system config files for unique strings appearing in the iptables -L
output.
UPDATE:
After running virsh net-autostart default --disable
and rebooting all those weird iptables rules have gone. Now that I have clean iptables I know — they were previously polluted by libvirt/kvm.
Still, the question remains: is there a general way of finding out where iptables rules come from? Something more intelligent than guessing and turning stuff off one by one to see if it affects iptables?