chihood

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p tcp -m multiport --dports 25,465,110,143,443,995,993,80,10050 -j ACCEPT
iptables -A INPUT -p tcp -s 192.168.117.0/24 --destination-port 22 -j ACCEPT
iptables -A INPUT -p tcp -s 192.168.114.0/24 --destination-port 22 -j ACCEPT
iptables -A INPUT -p tcp -s 192.168.2.0/24 --destination-port 22 -j ACCEPT
iptables -A INPUT -p tcp -s 192.168.5.0/24 --destination-port 22 -j ACCEPT
iptables -A INPUT -p tcp -s 192.168.6.6/32 --destination-port 22 -j ACCEPT
iptables -A INPUT -p tcp -s 220.260.222.222/32 --destination-port 22 -j ACCEPT
iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited
iptables -A FORWARD -j REJECT --reject-with icmp-host-prohibited

分类:

技术点:

相关文章: