1、查看白名单列表
sudo iptables -nL
2、开启白名单(替换IP和端口号即可)
sudo iptables -I INPUT -m state --state NEW -m tcp -p tcp -s 10.100.4.8 --dport 3915 -j ACCEPT
3、查看结果
[root@sta-bigdatatmy-06 ~]
[root@sta-bigdatatmy-06 ~]
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- 10.200.77.74 0.0.0.0/0 state NEW tcp dpt:3915
ACCEPT tcp -- 10.100.4.8 0.0.0.0/0 state NEW tcp dpt:3915
ACCEPT tcp -- 10.200.73.8 0.0.0.0/0 tcp dpt:10050
ACCEPT tcp -- 10.100.63.216 0.0.0.0/0 tcp dpt:10050
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:52000
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
target prot opt source destination