linux iptables 配置实例

# cat /etc/sysconfig/iptables
# Generated by iptables-save v1.4.7 on Thu Jun 13 23:13:48 2019
*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 111.266.218.68/32 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s 192.168.200.0/24 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8010 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j DROP
-A FORWARD -j ACCEPT
-A OUTPUT -j ACCEPT
COMMIT
# Completed on Thu Jun 13 23:13:48 2019

#service iptables save
#service iptables restart  执行两次
#service iptables status

开机自启iptables
# chkconfig iptables on
# chkconfig --list | grep iptables
iptables        0:off   1:off   2:on    3:on    4:on    5:on    6:off