{"id":17407,"date":"2020-02-03T15:02:39","date_gmt":"2020-02-03T07:02:39","guid":{"rendered":"http:\/\/4563.org\/?p=17407"},"modified":"2020-02-03T15:02:39","modified_gmt":"2020-02-03T07:02:39","slug":"%e6%9c%89%e4%b8%aaiptables%e9%98%b2%e7%81%ab%e5%a2%99%e7%96%91%e9%97%ae%ef%bc%8c%e5%92%a8%e8%af%a2%e4%b8%80%e4%b8%8b%e9%ab%98%e6%89%8b","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=17407","title":{"rendered":"\u6709\u4e2aiptables\u9632\u706b\u5899\u7591\u95ee\uff0c\u54a8\u8be2\u4e00\u4e0b\u9ad8\u624b"},"content":{"rendered":"\n

\t\t\t\t\tzhou0911<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

\u6709\u4e2aiptables\u9632\u706b\u5899\u7591\u95ee\uff0c\u54a8\u8be2\u4e00\u4e0b\u9ad8\u624b<\/h3>\n

\u6211\u7684\u5c0fjj\u5b89\u88c5\u4e86 centos6 \u7cfb\u7edf\uff0c\u53ea\u8981\u9632\u706b\u5899iptables\u4e00\u5f00\uff0cwget yum \u7edf\u7edf\u7528\u4e0d\u4e86\u4e86\uff0cdns\u4e3a8.8.8.8\/8.8.4.4<\/p>\n

\u9632\u706b\u5899\u4e00\u5173\uff0c\u5565\u4e8b\u90fd\u6ca1\u6709\u4e86\u4e00\u5207\u6b63\u5e38<\/p>\n

\u4e0b\u8fb9\u662f\u9632\u706b\u5899\u89c4\u5219\uff0c\u9ad8\u624b\u5e2e\u5fd9\u770b\u770b\u5565\u60c5\u51b5<\/p>\n

@server ~]# iptables -L
Chain INPUT (policy DROP)
target   prot opt source               destination         
ACCEPT   all–anywhere             anywhere            
ACCEPT   all–anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT   tcp–anywhere             anywhere            state NEW tcp dpt:22
ACCEPT   tcp–anywhere             anywhere            state NEW tcp dpt:ftp
ACCEPT   tcp–anywhere             anywhere            state NEW tcp dpts:dnp:30000
ACCEPT   tcp–anywhere             anywhere            state NEW tcp dpt:http
ACCEPT   tcp–anywhere             anywhere            state NEW tcp dpt:https
ACCEPT   icmp –anywhere             anywhere            icmp echo-request <\/p>\n

Chain FORWARD (policy ACCEPT)
target   prot opt source               destination         <\/p>\n

Chain OUTPUT (policy ACCEPT)
target   prot opt source               destination         <\/p>\n

Chain syn-flood (0 references)
target   prot opt source               destination         
# <\/p>\n

\t\t\t\t\tzhou0911<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u5927\u4f6c\u5feb\u51fa\u6765\uff0c\u5feb\u51fa\u6765\t\t\t\t<\/p>\n

\t\t\t\t\t\u5927\u795e<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u628a\u4f60\u7684\u9510\u901f\u5173\u95ed <\/p>\n

\u95ee\u9898\u89e3\u51b3 \t\t\t\t<\/p>\n

\t\t\t\t\tzhou0911<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u5927\u795e \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-2-3 14:57
\u628a\u4f60\u7684\u9510\u901f\u5173\u95ed <\/p>\n

\u95ee\u9898\u89e3\u51b3<\/p>\n

\u6211\u52d2\u4e2a\u53bb\uff0c\u6211\u8fd8\u771f\u5b89\u88c5\u4e86\u9510\u901f\u3002\u6709\u4ec0\u4e48\u548c\u5e73\u5171\u5904\u7684\u89e3\u51b3\u529e\u6cd5\u6ca1\uff1f\t\t\t\t<\/p>\n

\t\t\t\t\t\u5927\u795e<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\tzhou0911 \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-2-3 15:01
\u6211\u52d2\u4e2a\u53bb\uff0c\u6211\u8fd8\u771f\u5b89\u88c5\u4e86\u9510\u901f\u3002\u6709\u4ec0\u4e48\u548c\u5e73\u5171\u5904\u7684\u89e3\u51b3\u529e\u6cd5\u6ca1\uff1f<\/p>\n

\u6bcf\u6b21\u9510\u901f\u542f\u52a8\u540e \uff0c \u6267\u884c\u4e00\u6b21iptables -F\t\t\t\t<\/p>\n

\t\t\t\t\tkzklot<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 kzklot \u4e8e 2020-2-3 15:09 \u7f16\u8f91 <\/p>\n

iptables -P OUTPUT ACCEPT<\/p>\n

\u5b89\u88ddufw<\/p>\n

apt-get install ufw
ufw default allow outgoing<\/p>\n

yc022t\t\t\t\t<\/p>\n

\t\t\t\t\tzhou0911<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u5927\u795e \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-2-3 15:04
\u6bcf\u6b21\u9510\u901f\u542f\u52a8\u540e \uff0c \u6267\u884c\u4e00\u6b21iptables -F<\/p>\n

\u8fd9\u4e0d\u5c31\u662f\u628a\u6240\u6709\u89c4\u5219\u90fd\u6e05\u7a7a\u4e86\u4e48\uff0c\u4e00\u4e0d\u5c0f\u5fc3\u5c31\u628a\u81ea\u5df1\u4e5f\u62e6\u95e8\u5916\u8fb9\u4e86:lol\t\t\t\t<\/p>\n

\t\t\t\t\tzhou0911<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\tkzklot \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-2-3 15:08
\u5b89\u88ddufw<\/p>\n

\u5927\u4f6c\u6211\u4e00\u4f1a\u513f\u8bd5\u8bd5\u4f60\u8fd9\u4e2a\u529e\u6cd5\uff0c\u54c8\u54c8\u54c8:lol\t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

zhou0911 \u5927\u4f6c\u6709\u8bdd\u8bf4 : …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/17407"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=17407"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/17407\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17407"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17407"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}