设为主页 销售咨询 客服电话  
   
 
 
 
 
LINUX网络防火墙配置
2020-07-01

 文件位置  /etc/sysconfig/network-scripts/ifcfg-eth0

vim /etc/sysconfig/network-scripts/ifcfg-eth0
 
DEVICE=eth0
HWADDR=00:22:15:5E:9F:B1
TYPE=Ethernet
UUID=d2f74e0a-0f5e-45af-a698-95e41f8713d9
ONBOOT=YES
NM_CONTROLLED=yes
OOTPROTO=STATIC
DNS1=38.49.32.3
IPV6INIT=NO
USERCTL=NO
IPADDR=38.49.32.190
NETMASK=255.255.255.0
GATEWAY=38.49.32.3
修改完成后保存 :Q
 
service network stop/start 关闭 or 启动
service network restart 重启
 
配置防火墙
文件位置  /etc/sysconfig/iptables
vim /etc/sysconfig/ iptables
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8080 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2181 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 20880 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
启动: service iptables start
关闭: service iptables stop
查看状态: service iptables status
 
   
 
   
 
安徽鸿奥软件有限公司
版权所有,翻版必究 ◎2007-2008copyright
皖ICP备17008567号-1
皖公网安备 34030002020793号