#!/bin/bash
#run iptables service
service iptables stop
service iptables start
#add iptables kernal
modprobe ip_tables
modprobe iptable_nat
modprobe ip_nat_ftp
modprobe ip_conntrack
#clear and default iptables
iptables -F
iptables -X
iptables -Z
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
#set iptables policy
#1
iptables -A INPUT -p icmp --icmp-type 8 -j DROP
iptables -A INPUT -p icmp --icmp-type 0 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
转载于:https://blog.51cto.com/laozhangjacky/731829