{"id":563420,"date":"2023-04-07T08:29:59","date_gmt":"2023-04-07T00:29:59","guid":{"rendered":"http:\/\/4563.org\/?p=563420"},"modified":"2023-04-07T08:29:59","modified_gmt":"2023-04-07T00:29:59","slug":"debian%e6%9c%892ip-eth0-eth01-%e5%a6%82%e6%9e%9c%e7%a6%81%e6%ad%a2%e8%bf%9e%e5%85%a5eth0-%e6%80%8e%e4%b9%88%e8%ae%be%e7%bd%ae%ef%bc%9f","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=563420","title":{"rendered":"Debian\u67092IP eth0 eth0:1 \u5982\u679c\u7981\u6b62\u8fde\u5165eth0 \u600e\u4e48\u8bbe\u7f6e\uff1f"},"content":{"rendered":"\n

\t\t\t\t\tfat00119<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

Debian\u67092IP eth0 eth0:1 \u5982\u679c\u7981\u6b62\u8fde\u5165eth0 \u600e\u4e48\u8bbe\u7f6e\uff1f<\/h3>\n

\t\t\u5c0f\u9e21\u6709iptables\u548cufw
eth0\u7981\u6b62\u8fde\u5165 \u4f46\u53ef\u4ee5\u6b63\u5e38\u51fa
\u8c22\u8c22\u5927\u4f6c\u4eec \t\t\t\t<\/p>\n

\t\t\t\t\tonetown<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\teth0:1\u662fvlan\u5b50\u63a5\u53e3?
\u4f60\u8fd9\u4e2a\u8981\u914d\u5408ebtable\u7ed9\u6240\u6709eth0:1\u7684\u6d41\u91cf\u6253\u6807\u7b7e, \u7136\u540eiptables\u653e\u884ceth0:1\u6216\u8005drop\u4e0d\u5e26\u6807\u7b7e\u7684<\/p>\n

\t\t\t\t<\/p>\n

\t\t\t\t\tkimigao<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u7981\u6b62\u6240\u6709\u8fdb\u5165eth0\u63a5\u53e3\u7684\u8fde\u63a5\uff1a
iptables -A INPUT -i eth0 -j DROP
\u5141\u8bb8\u6240\u6709\u51fa\u7ad9\u8fde\u63a5\uff1a
iptables -A OUTPUT -o eth0 -j ACCEPT<\/p>\n

\t\t\t\t\tfat00119<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\tkimigao \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2023-4-5 02:21
\u7981\u6b62\u6240\u6709\u8fdb\u5165eth0\u63a5\u53e3\u7684\u8fde\u63a5\uff1a
iptables -A INPUT -i eth0 -j DROP
\u5141\u8bb8\u6240\u6709\u51fa\u7ad9\u8fde\u63a5\uff1a<\/p>\n

iptables -A INPUT -i eth0 -j DROP
\u6267\u884c\u8fd9\u4e2a\u547d\u4ee4\u540e 2\u4e2aIP\u90fd\u8fde\u4e0d\u8fdb\u4e86\t\t\t\t<\/p>\n

\t\t\t\t\tHOH<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\tfat00119 \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2023-4-6 20:18
\u6267\u884c\u8fd9\u4e2a\u547d\u4ee4\u540e 2\u4e2aIP\u90fd\u8fde\u4e0d\u8fdb\u4e86<\/p>\n

\u7b11\u6b7b\u4e86\uff0c\u8fd9\u662f\u6b63\u5e38\u7684\uff0c\u4f60\u4eec\u4e0d\u4f1a\u7684\u8bdd\u5c31\u4e0d\u8981\u4e71\u6559\u4eba\uff0c\u51c0\u7ed9\u522b\u4eba\u6dfb\u9ebb\u70e6\t\t\t\t<\/p>\n

\t\t\t\t\tonetown<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\tfat00119 \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2023-4-6 20:18
\u6267\u884c\u8fd9\u4e2a\u547d\u4ee4\u540e 2\u4e2aIP\u90fd\u8fde\u4e0d\u8fdb\u4e86<\/p>\n

\u521a\u56de\u590d\u9519\u4e86\uff0c \u5982\u679ceth0 eth0:1\u90fd\u6709ip\u5730\u5740\u7684\u8bdd
iptables -I INPUT -d 1.1.1.1 -j DROP
1.1.1.1\u662feth0\u7684\u5730\u5740 \t\t\t\t<\/p>\n

\t\t\t\t\tfat00119<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\tonetown \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2023-4-6 20:41
\u521a\u56de\u590d\u9519\u4e86\uff0c \u5982\u679ceth0 eth0:1\u90fd\u6709ip\u5730\u5740\u7684\u8bdd
iptables -I INPUT -d 1.1.1.1 -j DROP
1.1.1.1\u662feth0\u7684\u5730 …<\/p>\n

iptables -I INPUT -d 1.1.1.1 -j DROP
\u8fd9\u4e2a\u8bd5\u8fc7\u4e86 \u6ca1\u6548\u679c<\/p>\n

\u6211\u5728\u9694\u58c1\u4e5f\u95ee\u4e86
https:\/\/www.v2ex.com\/t\/930370
iptables -A INPUT -d 1.1.1.1 -p tcp –dport 80 -j DROP
\u8fd9\u4e2a\u547d\u4ee4\u6267\u884c\u540e80\u7aef\u53e3\u6709\u6548 \u6211\u60f3\u5168\u90e8\u90fd\u4e0d\u80fd\u8fde\u5165 \u5c1d\u8bd5\u628a –dport 80 \u53bb\u6389 \u7ed3\u679c\u5c0f\u9e21\u4e0d\u80fd\u8bbf\u95ee\u5916\u7f51\u4e86\t\t\t\t<\/p>\n

\t\t\t\t\tfat00119<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\tHOH \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2023-4-6 20:40
\u7b11\u6b7b\u4e86\uff0c\u8fd9\u662f\u6b63\u5e38\u7684\uff0c\u4f60\u4eec\u4e0d\u4f1a\u7684\u8bdd\u5c31\u4e0d\u8981\u4e71\u6559\u4eba\uff0c\u51c0\u7ed9\u522b\u4eba\u6dfb\u9ebb\u70e6<\/p>\n

\u522b\u8fd9\u4e48\u8bf4 \u5927\u5bb6\u63a2\u8ba8\u4ea4\u6d41yc010t\t\t\t\t<\/p>\n

\t\t\t\t\tNebula<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 Nebula \u4e8e 2023-4-7 02:36 \u7f16\u8f91 <\/p>\n

iptables -I INPUT -d IP1 -j REJECT \t\t\t\t<\/p>\n

\t\t\t\t\tdiocat<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\tiptables -A INPUT -d -m state –state NEW -j DROP\t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

fat00119 \u5927\u4f6c\u6709\u8bdd\u8bf4 : …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/563420"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=563420"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/563420\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=563420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=563420"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=563420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}