To see what you have and what you want to change you first need to do some examination.

1. Check for counters and write these somewhere so you can enter them later.

   iptables-save -c

2. Check for the line you want to replace / reposition using

   iptables -L -v -n --line-n

3. Write the rule in the designated CHAIN and add the counters explained in step on. For example.

   iptables -R INPUT 5 -i virbr0 -p udp -m udp -c 3441 472271 --dport 53 -j ACCEPT -m comment --comment "Some comment"

Meaning of -c

-c [packets:bytes]

The above iptables rule will be entered on line 5.

You can save the current iptables (and counters) by doing iptables-save -c -f /somepath/iptrules-$(date +%F).

To see what you have and what you want to change you first need to do some examination.

1. Check for counters and write these somewhere so you can enter them later.

   iptables-save -c
   

2. Check for the line you want to replace / reposition using

   iptables -L -v -n --line-n
   

3. Write the rule in the designated CHAIN and add the counters explained in step on. For example.

   iptables -R INPUT 5 -i virbr0 -p udp -m udp -c 3441 472271 --dport 53 -j ACCEPT -m comment --comment "Some comment"
   

Meaning of -c

-c [packets:bytes]

The above iptables rule will be entered on line 5.

You can save the current iptables (and counters) by doing

iptables-save -c -f /somepath/iptrules-$(date +%F)

To see what you have and what you want to change you first need to do some examination.

1. Check for counters and write these somewhere so you can enter them later.

   iptables-save -c

2. Check for the line you want to replace / reposition using

   iptables -L -v -n --line-n

3. Write the rule in the designated CHAIN and add the counters explained in step on. For example.

   iptables -R INPUT 5 -i virbr0 -p udp -m udp -c 3441 472271 --dport 53 -j ACCEPT -m comment --comment "Some comment"

Meaning of -c

-c [packets:bytes]

The above iptables rule will be entered on line 5.

Note. Save iptables rules using iptables-save -c /somepath/iptrules-$(date +%F) which will preserve counters.

To see what you have and what you want to change you first need to do some examination.

1. Check for counters and write these somewhere so you can enter them later.

   iptables-save -c

2. Check for the line you want to replace / reposition using

   iptables -L -v -n --line-n

3. Write the rule in the designated CHAIN and add the counters explained in step on. For example.

   iptables -R INPUT 5 -i virbr0 -p udp -m udp -c 3441 472271 --dport 53 -j ACCEPT -m comment --comment "Some comment"

Meaning of -c

-c [packets:bytes]

The above iptables rule will be entered on line 5.

You can save the current iptables (and counters) by doing iptables-save -c -f /somepath/iptrules-$(date +%F).