iptables-配置文件添加内容

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [626295:43656927]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A INPUT -p icmp -j ACCEPT 
-A INPUT -i lo -j ACCEPT 
-A INPUT -s  47.88.193.232 -j ACCEPT 
-A INPUT -s  101.95.167.238 -j ACCEPT 
-A INPUT -s  115.236.16.131 -j ACCEPT 
-A INPUT -s  43.225.36.110 -j ACCEPT 
-A INPUT -s 192.168.100.0/24 -j ACCEPT 
-A INPUT -s 180.168.107.74/32 -j ACCEPT 
-A INPUT -s 174.37.208.226/32 -j ACCEPT 
-A INPUT -s 208.43.107.164/32 -j ACCEPT 

-A INPUT -s s1.gametrees.com -j ACCEPT 

-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT

-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 3690 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8080:8100 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 11211 -j DROP

-A INPUT -j REJECT --reject-with icmp-host-prohibited 
-A FORWARD -j REJECT --reject-with icmp-host-prohibited 
COMMIT