Linux firewall(iptable) configure

最新推荐文章于 2025-08-21 17:38:46 发布

原创最新推荐文章于 2025-08-21 17:38:46 发布 · 835 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#linux #tcp #service #input #filter #output

System技术积累专栏收录该内容

124 篇文章

订阅专栏

博客介绍了Linux系统中iptables服务的操作，如重启、启动和停止。还展示了/etc/sysconfig/iptables文件内容，包含防火墙规则设置，如对不同网络接口、协议和端口的处理，其中屏蔽了从10.191.2.6主机过来的80端口数据包。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

service:

service iptable restart/start/stop

/etc/sysconfig/iptables:

# Firewall configuration written by redhat-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -s 10.191.2.6 -p tcp --dport 80 -i eth0 -j REJECT
-A RH-Firewall-1-INPUT -i eth1 -j ACCEPT
-A RH-Firewall-1-INPUT -i eth0 -j ACCEPT
-A RH-Firewall-1-INPUT -i eth3 -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 23 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
"/etc/sysconfig/iptables" 23L, 1038C