|
服务器上有安装zijidelu,需要开FTP,80,以及8999 可以参考如下规则设置  vi /etc/sysconfig/iptables Generated by iptables-save v1.4.7 on Tue May 6 19:41:01 2014 *filter :INPUT ACCEPT [112:548256] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [246:693710] :RH-Firewall-1-INPUT - [0:0] -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -p tcp -m tcp --dport 21 -j ACCEPT -A INPUT -p tcp -m tcp --dport 20 -j ACCEPT -A INPUT -p tcp -m tcp --dport 8999 -j ACCEPT -A OUTPUT -d 4.2.2.2/32 -p udp -m udp --dport 53 -j ACCEPT -A OUTPUT -d 8.8.8.8/32 -p udp -m udp --dport 53 -j ACCEPT -A OUTPUT -d 209.11.240.36/32 -p udp -m udp --dport 53 -j ACCEPT -A OUTPUT -d 209.11.240.35/32 -p udp -m udp --dport 53 -j ACCEPT -A OUTPUT -p udp -j DROP -A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 8999 -j ACCEPT -A OUTPUT -p tcp -m tcp --dport 21 -j REJECT --reject-with icmp-port-unreachable COMMIT # Completed on Tue May 6 19:41:01 2014 (责任编辑：IT) |