linux防暴力白名单怎么添加,Linux防火墙--iptables--白名单配置

1.服务器22端口和1521端口开通给指定IP

[root@node2 sysconfig]# iptables -t filter -nL INPUT

Chain INPUT (policy ACCEPT)

target prot opt source destination

ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED

ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0

ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22

REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

[root@node2 sysconfig]# iptables -F

[root@node2 sysconfig]# iptables -t filter -nL INPUT

Chain INPUT (policy ACCEPT)

target prot opt source destination

[root@node2 sysconfig]# iptables -I INPUT -s 192.168.222.1 -p tcp -m tcp --dport 22 -j ACCEPT

[root@node2 sysconfig]# iptables -t filter -nL INPUT

Chain INPUT (policy ACCEPT)

target prot opt source destination

ACCEPT tcp -- 192.168.222.1 0.0.0.0/0 tcp dpt:22

[root@node2 sysconfig]# iptables -A INPUT -j REJECT

[root@node2 sysconfig]# iptables -I INPUT -s 192.168.222.1 -p tcp -m tcp --dport 1521 -j ACCEPT

[root@node2 sysconfig]# iptables -t filter -nL INPUT

Chain INPUT (policy ACCEPT)

target prot opt source destination

ACCEPT tcp -- 192.168.222.1 0.0.0.0/0 tcp dpt:1521