iptables

安装iptables

yum install -y iptables
yum install -y iptables-services
# 查看iptable状态
systemctl  status  iptables
# 配置开机启动
systemctl  enable  iptables
# 关闭启动iptable
systemctl  start  iptables

# 关闭禁用firewalld
systemctl mask firewalld
systemctl stop firewalld

基本配置

#!/bin/bash
iptables -F     
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p icmp --icmp-type 8 -j ACCEPT

# 开放端口 
iptables -A INPUT -p tcp --dport 3306 -j ACCEPT
# 指定ip开放端口
iptables -A INPUT -p tcp -s 192.168.50.1 --dport 3306 -j ACCEPT

# 白名单模式
iptables -N whitelist
iptables -A whitelist -s 192.168.50.1 -j ACCEPT
iptables -A whitelist -s 192.168.1.244 -j ACCEPT
iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j whitelist
iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 6379 -j whitelist

# 其他输入拒绝
iptables -P INPUT DROP

# 保存
service iptables save
# 重启
systemctl restart iptables

# 查看配置
iptables -L -n

# 打开端口测试
# nc -lk 3306