#清楚默认规则
iptables -F
iptables -X
iptables -Z
#默认操作
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
#INPUT基本规则
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -m state --state INVALID -j DROP
#放行所有通过lo的数据包
iptables -A INPUT -i lo -j ACCEPT
#icmp
iptables -A INPUT -p icmp --icmp-type any -s 192.168.200.0/24 -j ACCEPT
#nginx or httpd
iptables -A INPUT -s 192.168.200.0/24 -i eth1 -p tcp --dport 8888 -j ACCEPT
iptables -A INPUT -s 192.168.200.0/24 -i eth1 -p udp --dport 8888 -j ACCEPT
#端口重定向,httpd配置文件Listen 8889
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8888
iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-ports 8888
iptables -F
iptables -X
iptables -Z
#默认操作
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
#INPUT基本规则
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -m state --state INVALID -j DROP
#放行所有通过lo的数据包
iptables -A INPUT -i lo -j ACCEPT
#icmp
iptables -A INPUT -p icmp --icmp-type any -s 192.168.200.0/24 -j ACCEPT
#nginx or httpd
iptables -A INPUT -s 192.168.200.0/24 -i eth1 -p tcp --dport 8888 -j ACCEPT
iptables -A INPUT -s 192.168.200.0/24 -i eth1 -p udp --dport 8888 -j ACCEPT
#端口重定向,httpd配置文件Listen 8889
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8888
iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-ports 8888