iptables防火墙配置

1、iptables防火墙安装

# yum install iptables -y
# yum install iptables-service -y

2、配置文件

# /etc/sysconfig/iptables

3、示例

# sample configuration for iptables service
# you can edit this manually or use system-config-firewall
# please do not ask us to add additional ports/services to this default configuration
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]

-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -s 192.168.1.0/24 -p tcp -m multiport --dports 10001,10002,10003 -j ACCEPT
-A INPUT -m iprange --src-range 192.168.1.1-192.168.1.254 -j ACCEPT
-A INPUT -s 192.168.1.1/32 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 10004 -j ACCEPT
-A INPUT -p tcp -m tcp -j drop
-A INPUT -p udp -j drop
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
#禁用timestamp报文
-A INPUT -p ICMP --icmp-type timestamp-request -j DROP
-A INPUT -p ICMP --icmp-type timestamp-reply -j DROP
#禁用Time Exceeded报文
-A INPUT -p ICMP --icmp-type time-exceeded -j DROP
-A OUTPUT -p ICMP --icmp-type time-exceeded -j DROP

COMMIT