#!/bin/bash

#data 2015-01-19

#autoer  lrm

iptables -F

iptables -F -t nat

iptables -X


iptables -P INPUT DROP

iptables -P OUTPUT ACCEPT

iptables -P FORWARD ACCEPT


######################load connection-tracking modules

modprobe iptable_nat

modprobe ip_conntrack_ftp

modprobe ip_nat_ftp

#####################access

iptables -A INPUT -f -m limit --limit 100/sec --limit-burst 100 -j ACCEPT

iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s --limit-burst 10 -j ACCEPT

#####################gz_IDC

iptables -A INPUT -s 1.1.1.x -j ACCEPT

iptables -A INPUT -s 2.2.2.x -j ACCEPT

#####################gz_lanhai_IDC_end

#####################gz_office_IP

iptables -A INPUT -s 1.1.1.x -j ACCEPT

#####################

iptables -A INPUT -i lo -j ACCEPT

iptables -A OUTPUT -o lo -j ACCEPT

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A INPUT -p tcp -m multiport --dport 80 -j ACCEPT