{"id":501184,"date":"2021-06-14T00:34:34","date_gmt":"2021-06-13T16:34:34","guid":{"rendered":"http:\/\/4563.org\/?p=501184"},"modified":"2021-06-14T00:34:34","modified_gmt":"2021-06-13T16:34:34","slug":"%e5%b1%8f%e8%94%bdbt%e4%b8%8b%e8%bd%bd-%e9%82%ae%e4%bb%b6%e6%bb%a5%e7%94%a8-%e9%98%b2%e8%ad%a6%e5%91%8a","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=501184","title":{"rendered":"\u5c4f\u853dBT\u4e0b\u8f7d\/\u90ae\u4ef6\u6ee5\u7528 \u9632\u8b66\u544a"},"content":{"rendered":"\n

\t\t\t\t\tKDE<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

\u5c4f\u853dBT\u4e0b\u8f7d\/\u90ae\u4ef6\u6ee5\u7528 \u9632\u8b66\u544a<\/h3>\n

\t\t\u6e05\u695a\u6240\u6709
iptables -F<\/p>\n

\u7981\u6b62\u6240\u6709\u8fdb\u7ad9\/\u8f6c\u53d1 \u5141\u8bb8\u6240\u6709\u51fa\u7ad9
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT<\/p>\n

\u5141\u8bb8\u5df2\u5efa\u7acb\u7684\u8fdb\u7ad9 \u5141\u8bb8PING \u5141\u8bb8\u672c\u673a\u5185\u90e8\u73af\u56de
iptables -A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p icmp –icmp-type echo-request -j ACCEPT
iptables -A INPUT -i lo -p all -j ACCEPT<\/p>\n

\u5141\u8bb8\u5df2\u5efa\u7acb\u7684\u8f6c\u53d1
iptables -A FORWARD -m state –state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -p udp –dport 2408 -d 162.159.192.1 -j ACCEPT
iptables -t nat -A PREROUTING -p udp –dport 8443 -j DNAT –to-destination 162.159.192.1:2408
iptables -t nat -A POSTROUTING -d 162.159.192.1 -p udp –dport 2408 -j MASQUERADE
sysctl -w net.ipv4.ip_forward=1<\/p>\n

\u5141\u8bb8\u8fdb\u7ad9\u7aef\u53e3
iptables -A INPUT -p tcp –dport 22 -j ACCEPT
iptables -A INPUT -p tcp –dport 80 -j ACCEPT
iptables -A INPUT -p tcp –dport 443 -j ACCEPT
iptables -A INPUT -p udp –dport 53 -j ACCEPT
iptables -A INPUT -p udp –dport 8443 -j ACCEPT
iptables -A INPUT -p udp –dport 2408 -j ACCEPT
iptables -A INPUT -p udp –dport 4000 -j ACCEPT<\/p>\n

\u5173\u952e\u8bcd\u5c01\u9501
iptables -A OUTPUT -m string –string "torrent" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string ".torrent" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "peer_id=" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "announce" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "info_hash" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "get_peers" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "find_node" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "BitTorrent" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "announce_peer" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "BitTorrent protocol" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "announce.php?passkey=" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "magnet:" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "xunlei" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "sandai" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "Thunder" –algo bm –to 65535 -j DROP
iptables -A OUTPUT -m string –string "XLLiveUD" –algo bm –to 65535 -j DROP<\/p>\n

https:\/\/i.loli.net\/2021\/06\/14\/m5lWCKZwpShbcUd.png \t\t\t\t<\/p>\n

\t\t\t\t\tlemonSSS<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u6536\u85cf\u4e86 yc010t\t\t\t\t<\/p>\n

\t\t\t\t\tKDE<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u53c2\u8003<\/p>\n

1 Security Guide Red Hat Enterprise Linux 6 _ Red Hat Customer Portal.html
https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/6\/html-single\/security_guide\/index#sect-Security_Guide-Firewalls-Using_IPTables<\/p>\n

2\u300e\u539f\u521b\u300fiptables \u5c01\u7981 BT_PT_SPAM(\u5783\u573e\u90ae\u4ef6)\u548c\u81ea\u5b9a\u4e49\u7aef\u53e3_\u5173\u952e\u8bcd \u4e00\u952e\u811a\u672c _ \u9017\u6bd4\u6839\u636e\u5730.html
https:\/\/doubibackup.com\/tfma58rb.html\t\t\t\t<\/p>\n

\t\t\t\t\tmicms<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u4f18\u79c0mark\u5927\u4f6c\u6559\u7a0bhttps:\/\/cdn.jsdelivr.net\/gh\/hishis\/forum-master\/public\/images\/patch.gif\t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

KDE \u5927\u4f6c\u6709\u8bdd\u8bf4 : \u5c4f\u853dBT\u4e0b…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/501184"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=501184"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/501184\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=501184"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=501184"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=501184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}