CentOS防火墙用法浅析
<p>本文实例讲述了CentOS防火墙用法。分享给大家供大家参考，具体如下：</p>
<p>
<strong>关闭：</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_612447">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">/etc/init</code><code class="bash plain">.d</code><code class="bash plain">/iptables</code> <code class="bash plain">stop</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>开启：</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_494457">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">/etc/init</code><code class="bash plain">.d</code><code class="bash plain">/iptables</code> <code class="bash plain">start</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>重启：</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_471864">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">/etc/init</code><code class="bash plain">.d</code><code class="bash plain">/iptables</code> <code class="bash plain">restart</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>查看：</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_711955">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">/etc/init</code><code class="bash plain">.d</code><code class="bash plain">/iptables</code> <code class="bash plain">status</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>保存：</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_451574">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">/etc/init</code><code class="bash plain">.d</code><code class="bash plain">/iptables</code> <code class="bash plain">save</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>打开8080端口：</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_506440">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">/sbin/iptables</code> <code class="bash plain">-I INPUT -p tcp --dport 8080 -j ACCEPT</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>删除 -D</strong></p>
<p>
规则将会阻止来自某一特定IP范围内的数据包</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_316519">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash comments"># iptables -t filter -A INPUT -s 123.456.789.0/24 -j DROP</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
也可以很轻易地阻止所有流向攻击者IP地址的数据包，该命令稍有不同：</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_345538">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash comments"># iptables -t filter -A OUTPUT -d 123.456.789.0/24 -j DROP</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
希望本文所述对大家CentOS服务器维护有所帮助。</p>
頁:
[1]