1、NEW 2、ESTABLISHED 3、RELATED 4、INVALID iptables -t filter -I INPUT 1 -p all -m state --state INVALID -j DROP