-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT 转载于:https://www.cnblogs.com/hidam/p/8383641.html