linux防火墙脚本，一键解决防火墙规则带来的痛苦。

脚本如下：

#1.
echo "1 ------------------------------------------------------------------------------------"
service iptables start
#2.
echo "2 ------------------------------------------------------------------------------------"
#3.
echo "3 ------------------------------------------------------------------------------------"
iptables -t filter -F
iptables -t filter -Z
iptables -t filter -X
#4.
echo "4 ------------------------------------------------------------------------------------"
iptables -t filter -P INPUT DROP
iptables -t filter -P OUTPUT ACCEPT
iptables -t filter -P FORWARD ACCEPT
#5.
echo "5 ------------------------------------------------------------------------------------"
iptables -A     INPUT  -i lo -j ACCEPT
iptables -A     OUTPUT -o lo -j ACCEPT
#6.
echo "6 ------------------------------------------------------------------------------------"
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#7.
echo "7 ------------------------------------------------------------------------------------"
#icmp-ping
iptables -A INPUT -p icmp -j ACCEPT

#sshd
iptables -A INPUT -p tcp --dport 22   -j ACCEPT

#zabbix
iptables -A INPUT -p tcp --dport 10050 -j ACCEPT

#mysql
iptables -A INPUT -p tcp --dport 3306   -j ACCEPT


#redis
iptables -A INPUT -p tcp --dport 6379   -j ACCEPT

#8.
echo "8 ------------------------------------------------------------------------------------"
service iptables save
service iptables restart
#9.
echo "9 ------------------------------------------------------------------------------------"
cat /etc/sysconfig/iptables

新建文件firewall_rule.sh

然后放入linux文件目录下

使用命令赋权限，linux下执行shell脚本是需要权限的：chmod +x firewall_rule.sh

然后更改上述脚本，比如需要ssh，我们就要开放22端口规则：

iptables -A INPUT -p tcp --dport 22   -j ACCEPT

要开放tomcat规则如下，默认8080端口：

iptables -A INPUT -p tcp --dport 8080   -j ACCEPT

把你需要的开放的端口补充上述脚本，然后执行
./firewall_rule.sh
大功完成！