【LINUX】阿里云linux服务器上使用iptables设置安全策略的方法_status=$(grep -i ubuntu etc issue)(1)

then
if echo “KaTeX parse error: Expected 'EOF', got '&' at position 42: …5" >/dev/null2>&̲1 then os_r…os_release”
elif echo “KaTeX parse error: Expected 'EOF', got '&' at position 42: …6">/dev/null 2>&̲1 then os_r…os_release”
else
os_release=“”
echo “ o s r e l e a s e " f i b r e a k f i o s r e l e a s e = os_release" fi break fi os_release= osrelease"fibreakfiosrelease=(grep “Aliyun Linux release” /etc/issue2>/dev/null)
os_release_2= ( g r e p " A l i y u n L i n u x r e l e a s e " / e t c / a l i y u n − r e l e a s e 2 > / d e v / n u l l ) i f [ " (grep "Aliyun Linux release" /etc/aliyun-release2>/dev/null) if [ " (grep"AliyunLinuxrelease"/etc/aliyunrelease2>/dev/null)if["os_release” ] && [ “ o s r e l e a s e 2 " ] t h e n i f e c h o " os_release_2" ] then if echo " osrelease2"]thenifecho"os_release”|grep “release 5” >/dev/null2>&1
then
os_release=aliyun5
echo “ o s r e l e a s e " e l i f e c h o " os_release" elif echo " osrelease"elifecho"os_release”|grep “release 6”>/dev/null 2>&1
then
os_release=aliyun6
echo “ o s r e l e a s e " e l s e o s r e l e a s e = " " e c h o " os_release" else os_release="" echo " osrelease"elseosrelease=""echo"os_release”
fi
break
fi
os_release= ( g r e p " C e n t O S r e l e a s e " / e t c / i s s u e 2 > / d e v / n u l l ) o s r e l e a s e 2 = (grep "CentOS release" /etc/issue 2>/dev/null) os_release_2= (grep"CentOSrelease"/etc/issue2>/dev/null)osrelease2=(grep “CentOS release” /etc/*release2>/dev/null)
if [ “KaTeX parse error: Expected 'EOF', got '&' at position 15: os_release" ] &̲& [ "os_release_2” ]
then
if echo “KaTeX parse error: Expected 'EOF', got '&' at position 42: …5" >/dev/null2>&̲1 then os_r…os_release”
elif echo “KaTeX parse error: Expected 'EOF', got '&' at position 42: …6">/dev/null 2>&̲1 then os_r…os_release”
else
os_release=“”
echo “ o s r e l e a s e " f i b r e a k f i o s r e l e a s e = os_release" fi break fi os_release= osrelease"fibreakfiosrelease=(grep -i “ubuntu” /etc/issue 2>/dev/null)
os_release_2= ( g r e p − i " u b u n t u " / e t c / l s b − r e l e a s e 2 > / d e v / n u l l ) i f [ " (grep -i "ubuntu" /etc/lsb-release2>/dev/null) if [ " (grepi"ubuntu"/etc/lsbrelease2>/dev/null)if["os_release” ] && [ “ o s r e l e a s e 2 " ] t h e n i f e c h o " os_release_2" ] then if echo " osrelease2"]thenifecho"os_release”|grep “Ubuntu 10” >/dev/null2>&1
then
os_release=ubuntu10
echo “ o s r e l e a s e " e l i f e c h o " os_release" elif echo " osrelease"elifecho"os_release”|grep “Ubuntu 12.04”>/dev/null 2>&1
then
os_release=ubuntu1204
echo “ o s r e l e a s e " e l i f e c h o " os_release" elif echo " osrelease"elifecho"os_release”|grep “Ubuntu 12.10”>/dev/null 2>&1
then
os_release=ubuntu1210
echo “ o s r e l e a s e " e l s e o s r e l e a s e = " " e c h o " os_release" else os_release="" echo " osrelease"elseosrelease=""echo"os_release”
fi
break
fi
os_release= ( g r e p − i " d e b i a n " / e t c / i s s u e 2 > / d e v / n u l l ) o s r e l e a s e 2 = (grep -i "debian" /etc/issue 2>/dev/null) os_release_2= (grepi"debian"/etc/issue2>/dev/null)osrelease2=(grep -i “debian” /proc/version 2>/dev/null)
if [ “KaTeX parse error: Expected 'EOF', got '&' at position 15: os_release" ] &̲& [ "os_release_2” ]
then
if echo “KaTeX parse error: Expected 'EOF', got '&' at position 40: …6" >/dev/null2>&̲1 then os_r…os_release”
else
os_release=“”
echo “ o s r e l e a s e " f i b r e a k f i o s r e l e a s e = os_release" fi break fi os_release= osrelease"fibreakfiosrelease=(grep “openSUSE” /etc/issue 2>/dev/null)
os_release_2= ( g r e p " o p e n S U S E " / e t c / ∗ r e l e a s e 2 > / d e v / n u l l ) i f [ " (grep "openSUSE" /etc/*release 2>/dev/null) if [ " (grep"openSUSE"/etc/release2>/dev/null)if["os_release” ] && [ “ o s r e l e a s e 2 " ] t h e n i f e c h o " os_release_2" ] then if echo " osrelease2"]thenifecho"os_release”|grep"13.1" >/dev/null 2>&1
then
os_release=opensuse131
echo “ o s r e l e a s e " e l s e o s r e l e a s e = " " e c h o " os_release" else os_release="" echo " osrelease"elseosrelease=""echo"os_release”
fi
break
fi
break
done
}

exit_script()
{
echo -e “\033[1;40;31mInstall $1 error,will exit.\n\033[0m”
rm-f $LOCKfile
exit 1
}

config_iptables()
{
iptables -I OUTPUT 1 -p tcp -m multiport --dport21,22,23,25,53,80,135,139,443,445 -j DROP
iptables -I OUTPUT 2 -p tcp -m multiport --dport 1433,1314,1521,2222,3306,3433,3389,4899,8080,18186-j DROP
iptables -I OUTPUT 3 -p udp -j DROP
iptables -nvL
}

ubuntu_config_ufw()
{
ufwdeny out proto tcp to any port 21,22,23,25,53,80,135,139,443,445
ufwdeny out proto tcp to any port 1433,1314,1521,2222,3306,3433,3389,4899,8080,18186
ufwdeny out proto udp to any
ufwstatus
}

####################Start###################
#check lock file ,one time only let thescript run one time
LOCKfile=/tmp/.$(basename 0 ) i f [ − f " 0) if [ -f " 0)if[f"LOCKfile" ]
then
echo -e “\033[1;40;31mThe script is already exist,please next timeto run this script.\n\033[0m”
exit
else
echo -e “\033[40;32mStep 1.No lock file,begin to create lock fileand continue.\n\033[40;37m”
touch $LOCKfile
fi

#check user
if [ $(id -u) != “0” ]
then
echo -e “\033[1;40;31mError: You must be root to run this script,please use root to execute this script.\n\033[0m”
rm-f $LOCKfile
exit 1
fi

echo -e “\033[40;32mStep 2.Begen tocheck the OS issue.\n\033[40;37m”
os_release= ( c h e c k o s r e l e a s e ) i f [ " X (check_os_release) if [ "X (checkosrelease)if["Xos_release" ==“X” ]
then
echo -e “\033[1;40;31mThe OS does not identify,So this script isnot executede.\n\033[0m”
rm-f $LOCKfile
exit 0
else
echo -e “\033[40;32mThis OS is $os_release.\n\033[40;37m”
fi

echo -e “\033[40;32mStep 3.Begen toconfig firewall.\n\033[40;37m”
case “$os_release” in
redhat5|centos5|redhat6|centos6|aliyun5|aliyun6)
service iptables start
config_iptables
;;
debian6)
config_iptables
;;
ubuntu10|ubuntu1204|ubuntu1210)
ufwenable <<EOF
y
EOF
ubuntu_config_ufw
;;
opensuse131)
config_iptables
;;
esac

echo -e “\033[40;32mConfig firewallsuccess,this script now exit!\n\033[40;37m”
rm -f $LOCKfile

最全的Linux教程,Linux从入门到精通

======================

  1. linux从入门到精通(第2版)

  2. Linux系统移植

  3. Linux驱动开发入门与实战

  4. LINUX 系统移植 第2版

  5. Linux开源网络全栈详解 从DPDK到OpenFlow

华为18级工程师呕心沥血撰写3000页Linux学习笔记教程

第一份《Linux从入门到精通》466页

====================

内容简介

====

本书是获得了很多读者好评的Linux经典畅销书**《Linux从入门到精通》的第2版**。本书第1版出版后曾经多次印刷,并被51CTO读书频道评为“最受读者喜爱的原创IT技术图书奖”。本书第﹖版以最新的Ubuntu 12.04为版本,循序渐进地向读者介绍了Linux 的基础应用、系统管理、网络应用、娱乐和办公、程序开发、服务器配置、系统安全等。本书附带1张光盘,内容为本书配套多媒体教学视频。另外,本书还为读者提供了大量的Linux学习资料和Ubuntu安装镜像文件,供读者免费下载。

华为18级工程师呕心沥血撰写3000页Linux学习笔记教程

本书适合广大Linux初中级用户、开源软件爱好者和大专院校的学生阅读,同时也非常适合准备从事Linux平台开发的各类人员。

需要《Linux入门到精通》、《linux系统移植》、《Linux驱动开发入门实战》、《Linux开源网络全栈》电子书籍及教程的工程师朋友们劳烦您转发+评论

网上学习资料一大堆,但如果学到的知识不成体系,遇到问题时只是浅尝辄止,不再深入研究,那么很难做到真正的技术提升。

需要这份系统化的资料的朋友,可以点击这里获取!

一个人可以走的很快,但一群人才能走的更远!不论你是正从事IT行业的老鸟或是对IT行业感兴趣的新人,都欢迎加入我们的的圈子(技术交流、学习资源、职场吐槽、大厂内推、面试辅导),让我们一起学习成长!

  • 8
    点赞
  • 12
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值