{"id":513254,"date":"2021-07-05T21:59:44","date_gmt":"2021-07-05T13:59:44","guid":{"rendered":"http:\/\/4563.org\/?p=513254"},"modified":"2021-07-05T21:59:44","modified_gmt":"2021-07-05T13:59:44","slug":"%e5%9d%9b%e5%ad%90%e9%87%8c%e6%9c%89%e4%ba%ba%e7%94%a8freebsd%e5%90%97%e5%8f%97%e5%a4%9flinux%e4%ba%86","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=513254","title":{"rendered":"\u575b\u5b50\u91cc\u6709\u4eba\u7528freebsd\u5417?\u53d7\u591flinux\u4e86"},"content":{"rendered":"\n

\t\t\t\t\tKDE<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

\u575b\u5b50\u91cc\u6709\u4eba\u7528freebsd\u5417?\u53d7\u591flinux\u4e86<\/h3>\n

\t\t\u7f16\u8bd1\u5b89\u88c5
linux\u52a8\u4e0d\u52a8\u5c31\u662f\u7f3a\u5c11XX\u8fd0\u884c
\u7f16\u8bd1\u5b89\u88c5\u641e\u5934\u5927
\u5305\u7ba1\u7406\u7684\u53c8\u592a\u8001
\u8fd0\u884c\u67d0\u4e9b\u8f6f\u4ef6\u53c8\u8981\u5347\u7ea7\u5185\u6838<\/p>\n

\u6253\u7b97\u8f6cfreebsd\u4e86
zfs\u5feb\u7167\u6a21\u5f0f
\u5305\u7ba1\u7406\u4e00\u6d41
\u9632\u706b\u5899\u6bd4iptables firewall-cmd\u7b80\u5355\u591a\u4e86<\/p>\n

\u6700\u8fd1\u518d\u770b\u9632\u706b\u5899
https:\/\/docs.freebsd.org\/doc\/13.0-RELEASE\/usr\/local\/share\/doc\/freebsd\/zh_CN\/books\/handbook\/firewalls-ipfw.html<\/p>\n

——————<\/p>\n

#!\/bin\/sh<\/p>\n

\u6e05\u9664\u6240\u6709
ipfw -q -f flush<\/p>\n

\u5141\u8bb8\u73af\u56de
ipfw -q add 00020 allow        all        from any to any via lo0<\/p>\n

\u5141\u8bb8ping
ipfw -q add 00030 allow        icmp        from any to any<\/p>\n

\u5141\u8bb8 tcp 22 80 443 8443 \u8fdb\u51fa
ipfw -q add 00100 allow tcp         from any to any 22         setup keep-state
ipfw -q add 00110 allow tcp         from any to any 80         setup keep-state
ipfw -q add 00120 allow tcp         from any to any 443         setup keep-state
ipfw -q add 00130 allow tcp         from any to any 8443         setup keep-state<\/p>\n

\u5141\u8bb8DNS 53\u89e3\u6790
ipfw -q add 00200 allow tcp         from any to any 53        setup keep-state
ipfw -q add 00210 allow udp         from any to any 53        keep-state<\/p>\n

\u5141\u8bb8UDP 4000 5000\u7aef\u53e3
ipfw -q add 00300 allow udp         from any to any 4000        keep-state
ipfw -q add 00310 allow udp         from any to any 5000        keep-state \t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

KDE \u5927\u4f6c\u6709\u8bdd\u8bf4 : \u575b\u5b50\u91cc\u6709\u4eba…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/513254"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=513254"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/513254\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=513254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=513254"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=513254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}