当前位置:网站首页>iptables只允许指定ip地址访问指定端口
iptables只允许指定ip地址访问指定端口
2022-07-07 14:01:00 【格格巫 MMQ!!】
首先,清除所有预设置
iptables -F#清除预设表filter中的所有规则链的规则 iptables -X#清除预设表filter中使用者自定链中的规则
1.
其次,设置只允许指定ip地址访问指定端口
iptables -A INPUT -s xxx.xxx.xxx.xxx -p tcp --dport 22 -j ACCEPT iptables -A OUTPUT -d xxx.xxx.xxx.xxx -p tcp --sport 22 -j ACCEPT iptables -A INPUT -s xxx.xxx.xxx.xxx -p tcp --dport 3306 -j ACCEPT iptables -A OUTPUT -d xxx.xxx.xxx.xxx -p tcp --sport 3306 -j ACCEPT
1.
上面这两条,请注意–dport为目标端口,当数据从外部进入服务器为目标端口;反之,数据从服务器出去则为数据源端口,使用 --sport
同理,-s是指定源地址,-d是指定目标地址。
然后,关闭所有的端口
iptables -P INPUT DROP iptables -P OUTPUT DROP iptables -P FORWARD DROP
1.
最后,保存当前规则
/etc/rc.d/init.d/iptables save service iptables restart
1.
这种iptables的规则设定适用于只充当MySQL服务器的管理和维护,外部地址不提供任何服务。
如果你希望yum可以运行的话,还需要添加以下内容,允许DNS请求的53端口,允许下载随机产生的高端口
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A INPUT -p udp --s
以开放8080端口为例:
方式一:
登录后复制
1、开启防火墙
systemctl start firewalld
2、开放指定端口
firewall-cmd --zone=public --add-port=1935/tcp --permanent
命令含义:
–zone #作用域
–add-port=1935/tcp #添加端口,格式为:端口/通讯协议
–permanent #永久生效,没有此参数重启后失效
3、重启防火墙
firewall-cmd --reload
4、查看端口号
netstat -ntlp //查看当前所有tcp端口·
netstat -ntulp |grep 8080 //查看所有8080端口使用情况
方式二:
/sbin/iptables -I INPUT -p tcp --dport 8080 -j ACCEPT
方式三:
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8080 -j ACCEPT
service iptables restart
边栏推荐
- After UE4 is packaged, mesh has no material problem
- U3D_ Infinite Bessel curve
- C4D learning notes 2- animation - timeline and time function
- Particle effect for ugui
- C4D learning notes 3- animation - animation rendering process case
- Annexb and avcc are two methods of data segmentation in decoding
- Streaming end, server end, player end
- Three. JS introductory learning notes 04: external model import - no material obj model
- Spin animation of Cocos performance optimization
- AB package details in unity (super detail, features, packaging, loading, manager)
猜你喜欢
Syntax of generator function (state machine)
Apache Doris刚“毕业”:为什么应关注这种SQL数据仓库?
JS array foreach source code parsing
How does geojson data merge the boundaries of regions?
PyTorch 中的乘法:mul()、multiply()、matmul()、mm()、mv()、dot()
C4D learning notes 3- animation - animation rendering process case
Apache Doris just "graduated": why should we pay attention to this kind of SQL data warehouse?
Step by step monitoring platform ZABBIX
分步式监控平台zabbix
Strengthen real-time data management, and the British software helps the security construction of the medical insurance platform
随机推荐
Aerospace Hongtu information won the bid for the database system research and development project of a unit in Urumqi
Use moviepy Editor clips videos and intercepts video clips in batches
Three. JS introductory learning notes 19: how to import FBX static model
Three. JS introductory learning notes 13: animation learning
Unity的三种单例模式(饿汉,懒汉,MonoBehaviour)
numpy--疫情数据分析案例
Unity3D_ Class fishing project, bullet rebound effect is achieved
Webcodecs parameter settings -avc1.42e01e meaning
Enterprise log analysis system elk
航運船公司人工智能AI產品成熟化標准化規模應用,全球港航人工智能/集裝箱人工智能領軍者CIMC中集飛瞳,打造國際航運智能化標杆
深度之眼(六)——矩阵的逆(附:logistic模型一些想法)
强化实时数据管理,英方软件助力医保平台安全建设
Eye of depth (VII) -- Elementary Transformation of matrix (attachment: explanation of some mathematical models)
Is it reliable to open an account on Tongda letter with your mobile phone? Is there any potential safety hazard in such stock speculation
过度依赖补助,大客户收款难,冲刺“国产数据库第一股”的达梦后劲有多足?
Simple understanding and application of TS generics
Use of SVN
Asynchronous application of generator function
Three. JS introductory learning notes 10:three JS grid
Application example of infinite list [uigridview]