记录iptables

最新推荐文章于 2022-12-03 17:56:40 发布

原创最新推荐文章于 2022-12-03 17:56:40 发布 · 244 阅读

0 ·

CC 4.0 BY-SA版权

本文提供了一个iptables防火墙配置示例，展示了如何设置默认策略、开放特定端口和服务、允许来自指定IP段的流量以及拒绝黑名单中的源地址。这对于理解iptables的基础用法非常有用。

# sample configuration for iptables service
# you can edit this manually or use system-config-firewall
# please do not ask us to add additional ports/services to this default configuration
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 60158 -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -s 10.10.0.0/16 -j ACCEPT
-A INPUT -s 10.20.0.0/16 -j ACCEPT
-A INPUT -s 10.30.0.0/16 -j ACCEPT
-A INPUT -s 10.40.0.0/16 -j ACCEPT
-A INPUT -s 10.50.0.0/16 -j ACCEPT
-A INPUT -s 10.60.0.0/16 -j ACCEPT
-A INPUT -s 10.100.0.0/16 -j ACCEPT
-A INPUT -s 103.235.226.0/25 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10002 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 143 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 993 -j ACCEPT
-A INPUT -m set --match-set banthis src -j DROP
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A INPUT -m set --match-set banthis src -j DROP
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT