ubuntu linux 防火墙

iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp --dport ssh -j ACCEPT
iptables -A INPUT -p tcp --dport 3000 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -j DROP


root@xx:/home/xxxx# more /etc/iptables.rules
# Generated by iptables-save v1.3.8 on Sun Feb 8 04:00:54 2009
*filter
:INPUT ACCEPT [81:9554]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [697:71968]
[0:0] -A INPUT -i lo -j ACCEPT
[727:62440] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
[0:0] -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
[0:0] -A INPUT -p tcp -m tcp --dport 3000 -j ACCEPT
[0:0] -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
[4:413] -A INPUT -j DROP
COMMIT
# Completed on Sun Feb 8 04:00:54 2009


###: more /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp
pre-up iptables-restore < /etc/iptables.rules