【LINUX】阿里云linux服务器上使用iptables设置安全策略的方法_status=$(grep -i ubuntu etc issue)(3)

先自我介绍一下,小编浙江大学毕业,去过华为、字节跳动等大厂,目前在阿里

深知大多数程序员,想要提升技能,往往是自己摸索成长,但自己不成体系的自学效果低效又漫长,而且极易碰到天花板技术停滞不前!

因此收集整理了一份《2024年最新Linux运维全套学习资料》,初衷也很简单,就是希望能够帮助到想自学提升又不知道该从何学起的朋友。
img
img
img
img
img

既有适合小白学习的零基础资料,也有适合3年以上经验的小伙伴深入学习提升的进阶课程,涵盖了95%以上运维知识点,真正体系化!

由于文件比较多,这里只是将部分目录截图出来,全套包含大厂面经、学习笔记、源码讲义、实战项目、大纲路线、讲解视频,并且后续会持续更新

需要这份系统化的资料的朋友,可以点击这里获取!

else
os_release=“”
echo “ o s r e l e a s e " f i b r e a k f i o s r e l e a s e = os_release" fi break fi os_release= osrelease"fibreakfiosrelease=(grep “Aliyun Linux release” /etc/issue2>/dev/null)
os_release_2= ( g r e p " A l i y u n L i n u x r e l e a s e " / e t c / a l i y u n − r e l e a s e 2 > / d e v / n u l l ) i f [ " (grep "Aliyun Linux release" /etc/aliyun-release2>/dev/null) if [ " (grep"AliyunLinuxrelease"/etc/aliyunrelease2>/dev/null)if["os_release” ] && [ “ o s r e l e a s e 2 " ] t h e n i f e c h o " os_release_2" ] then if echo " osrelease2"]thenifecho"os_release”|grep “release 5” >/dev/null2>&1
then
os_release=aliyun5
echo “ o s r e l e a s e " e l i f e c h o " os_release" elif echo " osrelease"elifecho"os_release”|grep “release 6”>/dev/null 2>&1
then
os_release=aliyun6
echo “ o s r e l e a s e " e l s e o s r e l e a s e = " " e c h o " os_release" else os_release="" echo " osrelease"elseosrelease=""echo"os_release”
fi
break
fi
os_release= ( g r e p " C e n t O S r e l e a s e " / e t c / i s s u e 2 > / d e v / n u l l ) o s r e l e a s e 2 = (grep "CentOS release" /etc/issue 2>/dev/null) os_release_2= (grep"CentOSrelease"/etc/issue2>/dev/null)osrelease2=(grep “CentOS release” /etc/*release2>/dev/null)
if [ “KaTeX parse error: Expected 'EOF', got '&' at position 15: os_release" ] &̲& [ "os_release_2” ]
then
if echo “KaTeX parse error: Expected 'EOF', got '&' at position 42: …5" >/dev/null2>&̲1 then os_r…os_release”
elif echo “KaTeX parse error: Expected 'EOF', got '&' at position 42: …6">/dev/null 2>&̲1 then os_r…os_release”
else
os_release=“”
echo “ o s r e l e a s e " f i b r e a k f i o s r e l e a s e = os_release" fi break fi os_release= osrelease"fibreakfiosrelease=(grep -i “ubuntu” /etc/issue 2>/dev/null)
os_release_2= ( g r e p − i " u b u n t u " / e t c / l s b − r e l e a s e 2 > / d e v / n u l l ) i f [ " (grep -i "ubuntu" /etc/lsb-release2>/dev/null) if [ " (grepi"ubuntu"/etc/lsbrelease2>/dev/null)if["os_release” ] && [ “ o s r e l e a s e 2 " ] t h e n i f e c h o " os_release_2" ] then if echo " osrelease2"]thenifecho"os_release”|grep “Ubuntu 10” >/dev/null2>&1
then
os_release=ubuntu10
echo “ o s r e l e a s e " e l i f e c h o " os_release" elif echo " osrelease"elifecho"os_release”|grep “Ubuntu 12.04”>/dev/null 2>&1
then
os_release=ubuntu1204
echo “ o s r e l e a s e " e l i f e c h o " os_release" elif echo " osrelease"elifecho"os_release”|grep “Ubuntu 12.10”>/dev/null 2>&1
then
os_release=ubuntu1210
echo “ o s r e l e a s e " e l s e o s r e l e a s e = " " e c h o " os_release" else os_release="" echo " osrelease"elseosrelease=""echo"os_release”
fi
break
fi
os_release= ( g r e p − i " d e b i a n " / e t c / i s s u e 2 > / d e v / n u l l ) o s r e l e a s e 2 = (grep -i "debian" /etc/issue 2>/dev/null) os_release_2= (grepi"debian"/etc/issue2>/dev/null)osrelease2=(grep -i “debian” /proc/version 2>/dev/null)
if [ “KaTeX parse error: Expected 'EOF', got '&' at position 15: os_release" ] &̲& [ "os_release_2” ]
then
if echo “KaTeX parse error: Expected 'EOF', got '&' at position 40: …6" >/dev/null2>&̲1 then os_r…os_release”
else
os_release=“”
echo “ o s r e l e a s e " f i b r e a k f i o s r e l e a s e = os_release" fi break fi os_release= osrelease"fibreakfiosrelease=(grep “openSUSE” /etc/issue 2>/dev/null)
os_release_2= ( g r e p " o p e n S U S E " / e t c / ∗ r e l e a s e 2 > / d e v / n u l l ) i f [ " (grep "openSUSE" /etc/*release 2>/dev/null) if [ " (grep"openSUSE"/etc/release2>/dev/null)if["os_release” ] && [ “ o s r e l e a s e 2 " ] t h e n i f e c h o " os_release_2" ] then if echo " osrelease2"]thenifecho"os_release”|grep"13.1" >/dev/null 2>&1
then
os_release=opensuse131
echo “ o s r e l e a s e " e l s e o s r e l e a s e = " " e c h o " os_release" else os_release="" echo " osrelease"elseosrelease=""echo"os_release”
fi
break
fi
break
done
}

exit_script()
{
echo -e “\033[1;40;31mInstall $1 error,will exit.\n\033[0m”
rm-f $LOCKfile
exit 1
}

config_iptables()
{
iptables -I OUTPUT 1 -p tcp -m multiport --dport21,22,23,25,53,80,135,139,443,445 -j DROP
iptables -I OUTPUT 2 -p tcp -m multiport --dport 1433,1314,1521,2222,3306,3433,3389,4899,8080,18186-j DROP
iptables -I OUTPUT 3 -p udp -j DROP
iptables -nvL
}

ubuntu_config_ufw()
{
ufwdeny out proto tcp to any port 21,22,23,25,53,80,135,139,443,445
ufwdeny out proto tcp to any port 1433,1314,1521,2222,3306,3433,3389,4899,8080,18186
ufwdeny out proto udp to any
ufwstatus
}

####################Start###################
#check lock file ,one time only let thescript run one time
LOCKfile=/tmp/.$(basename 0 ) i f [ − f " 0) if [ -f " 0)if[f"LOCKfile" ]
then
echo -e “\033[1;40;31mThe script is already exist,please next timeto run this script.\n\033[0m”
exit
else
echo -e “\033[40;32mStep 1.No lock file,begin to create lock fileand continue.\n\033[40;37m”
touch $LOCKfile
fi

#check user
if [ $(id -u) != “0” ]
then
echo -e “\033[1;40;31mError: You must be root to run this script,please use root to execute this script.\n\033[0m”
rm-f $LOCKfile
exit 1
fi

echo -e “\033[40;32mStep 2.Begen tocheck the OS issue.\n\033[40;37m”
os_release= ( c h e c k o s r e l e a s e ) i f [ " X (check_os_release) if [ "X (checkosrelease)if["Xos_release" ==“X” ]
then
echo -e “\033[1;40;31mThe OS does not identify,So this script isnot executede.\n\033[0m”
rm-f $LOCKfile
exit 0
else
echo -e “\033[40;32mThis OS is $os_release.\n\033[40;37m”
fi

echo -e “\033[40;32mStep 3.Begen toconfig firewall.\n\033[40;37m”
case “$os_release” in
redhat5|centos5|redhat6|centos6|aliyun5|aliyun6)
service iptables start
config_iptables
;;
debian6)
config_iptables
;;
ubuntu10|ubuntu1204|ubuntu1210)
ufwenable <<EOF
y
EOF
ubuntu_config_ufw
;;
opensuse131)
config_iptables
;;
esac

echo -e “\033[40;32mConfig firewallsuccess,this script now exit!\n\033[40;37m”
rm -f $LOCKfile


 


上述文件下载到机器内部直接执行即可。





**网上学习资料一大堆,但如果学到的知识不成体系,遇到问题时只是浅尝辄止,不再深入研究,那么很难做到真正的技术提升。**

**[需要这份系统化的资料的朋友,可以点击这里获取!](https://bbs.csdn.net/forums/4f45ff00ff254613a03fab5e56a57acb)**

**一个人可以走的很快,但一群人才能走的更远!不论你是正从事IT行业的老鸟或是对IT行业感兴趣的新人,都欢迎加入我们的的圈子(技术交流、学习资源、职场吐槽、大厂内推、面试辅导),让我们一起学习成长!**

提升。**

**[需要这份系统化的资料的朋友,可以点击这里获取!](https://bbs.csdn.net/forums/4f45ff00ff254613a03fab5e56a57acb)**

**一个人可以走的很快,但一群人才能走的更远!不论你是正从事IT行业的老鸟或是对IT行业感兴趣的新人,都欢迎加入我们的的圈子(技术交流、学习资源、职场吐槽、大厂内推、面试辅导),让我们一起学习成长!**

  • 19
    点赞
  • 12
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值