侧边栏壁纸
博主头像
落叶人生博主等级

走进秋风,寻找秋天的落叶

  • 累计撰写 130562 篇文章
  • 累计创建 28 个标签
  • 累计收到 9 条评论
标签搜索

目 录CONTENT

文章目录

适用于DNS的iptables规则

2023-05-16 星期二 / 0 评论 / 0 点赞 / 81 阅读 / 3202 字

# cat /etc/sysconfig/iptables# Generated by iptables-save v1.3.5 on Thu Oct 31 15:53:45 2013 *filte

.

# cat /etc/sysconfig/iptables
# Generated by iptables-save v1.3.5 on Thu Oct 31 15:53:45 2013    
*filter    
:INPUT ACCEPT [0:0]    
:FORWARD ACCEPT [0:0]    
:OUTPUT ACCEPT [25144:3493694]    
:RH-Firewall-1-INPUT - [0:0]    
-A INPUT -p udp -m udp --sport 53 -j ACCEPT    
-A INPUT -p tcp -m tcp --sport 53 -j ACCEPT

-A INPUT -j RH-Firewall-1-INPUT    
-A FORWARD -j RH-Firewall-1-INPUT    
-A RH-Firewall-1-INPUT -i lo -j ACCEPT    
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT    
-A RH-Firewall-1-INPUT -p esp -j ACCEPT    
-A RH-Firewall-1-INPUT -p ah -j ACCEPT    
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT    
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 8080 -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 20000:20500 -j ACCEPT    
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited    
COMMIT    
# Completed on Thu Oct 31 15:53:45 2013    
# cat /etc/sysconfig/iptables.save
# Firewall configuration written by system-config-securitylevel    
# Manual customization of this file is not recommended.    
*filter    
:FORWARD ACCEPT [0:0]    
:INPUT ACCEPT [0:0]    
:RH-Firewall-1-INPUT - [0:0]    
:OUTPUT ACCEPT [0:0]    
-A INPUT -j RH-Firewall-1-INPUT    
-A FORWARD -j RH-Firewall-1-INPUT    
-A RH-Firewall-1-INPUT -i lo -j ACCEPT    
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT    
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT    
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT    
-A RH-Firewall-1-INPUT -p udp -d 224.0.0.251 --dport 5353 -j ACCEPT    
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 22 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 21 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 80 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 8080 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 20000:20500 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited    
COMMIT    
#

.

广告 广告

评论区