DEV Community

ChengLiang
ChengLiang

Posted on

Iptables使用

根据 ArchWiki 配置一个基础的防火墙: Simple_stateful_firewall

开启端口

切换 root 用户,提升权限."sudo"命令敲得很累

su
Enter fullscreen mode Exit fullscreen mode

忘记命令,看看之前怎么写的.

iptables -S
Enter fullscreen mode Exit fullscreen mode

部分结果如下,在根据 ArchWiki 配置了Simple_stateful_firewall之后就是这个效果,注意 TCP 链,这个是 ArchWiki 配置后增添了 TCP 和 UDP 链.

-A TCP -p tcp -m tcp --dport 22 -j ACCEPT
-A TCP -p tcp -m tcp --dport 80 -j ACCEPT
-A TCP -p tcp -m tcp --dport 443 -j ACCEPT
-A TCP -p tcp -m tcp --dport 53 -j ACCEPT
-A TCP -p tcp -m tcp --dport 3000 -j ACCEPT
-A TCP -p tcp -m tcp --dport 19000 -j ACCEPT
-A UDP -p udp -m udp --dport 53 -j ACCEPT
Enter fullscreen mode Exit fullscreen mode

想再开一个端口,依葫芦画瓢.

iptables -A TCP -p tcp -m tcp --dport 2222 -j ACCEPT
Enter fullscreen mode Exit fullscreen mode

关闭端口

查看相应链相应行数

iptables -nvL --line-numbers
Enter fullscreen mode Exit fullscreen mode

以行删除规则

iptables -D TCP 6
Enter fullscreen mode Exit fullscreen mode

Top comments (0)

Read next

tomeq34 profile image

Mastering Button Alignment in CSS: Tips and Tricks

Tomeq34 -

chandan_majhi_031cc55a3b0 profile image

SUPER AI MODEL CREATION BULLET

chandan majhi -

anogneva profile image

Let's check the qdEngine game engine, part three: 10 more bugs

Anastasiia Ogneva -

arunkrish11 profile image

GIT for newbie (PART 1)

ARUN KRISHNAN K -