linux禁用ftp和telnet,如何在Linux上过滤FTP和TELNET数据包

(135.1.7.0)7206eth1前置机1eth0eth0前置机2eth17206(135.1.9.0)

以下只在前置机2上做

1 vi /etc/rc.d/firewall

加入下面四条，过滤ftp和telnet包

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport ftp -i eth1 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport telnet -i eth1 -j REJECT

......

如何在Linux上过滤FTP和TELNET数据包(135.1.7.0)7206eth1前置机1eth0eth0前置机2eth17206(135.1.9.0)

以下只在前置机2上做

1 vi /etc/rc.d/firewall

加入下面四条，过滤ftp和telnet包

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport ftp -i eth1 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport telnet -i eth1 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport ftp -i eth0 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport telnet -i eth0 -j REJECT

2 更改firewall属性为可执行

chmod 755 firewall

(135.1.7.0)7206eth1前置机1eth0eth0前置机2eth17206(135.1.9.0)

以下只在前置机2上做

1 vi /etc/rc.d/firewall

加入下面四条，过滤ftp和telnet包

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport ftp -i eth1 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport telnet -i eth1 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport ftp -i eth0 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport telnet -i eth0 -j REJECT

2 更改firewall属性为可执行

chmod 755 firewall

3 vi /etc/rc.local

添加一条

/etc/rc.d/firewall

重起系统即可

完成

[root@cqqzj2 network-scripts]# more ifcfg-eth0

DEVICE=eth0

BOOTPROTO=none

BROADCAST=192.168.100.3

IPADDR=192.168.100.2

NETMASK=255.255.255.252

NETWORK=192.168.100.0

ONBOOT=yes

USERCTL=no

PEERDNS=no

TYPE=Ethernet[root@cqqzj2 network-scripts]# more ifcfg-eth1

DEVICE=eth1

BOOTPROTO=none

BROADCAST=135.1.9.15

IPADDR=135.1.9.4

NETMASK=255.255.255.240

NETWORK=135.1.9.0

ONBOOT=yes

USERCTL=no

PEERDNS=no

GATEWAY=135.1.9.14

TYPE=Ethernet

[root@cqqzj2 network-scripts]# [root@cqqzj2 etc]# more rc.local

#!/bin/sh

#

# This script will be executed *after* all the other init scripts.

# You can put your own initialization stuff in here if you don't

# want to do the full Sys V style init stuff.touch /var/lock/subsys/local

echo "1" > /proc/sys/net/ipv4/ip_forward

route add -net 135.1.7.0 netmask 255.255.255.0 gw 192.168.100.1

/etc/rc.d/firewall

[root@cqqzj2 etc]# [root@cqqzj2 etc]# cd rc.d

[root@cqqzj2 rc.d]# more firewall

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport ftp -i eth1 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport telnet -i eth1 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport ftp -i eth0 -j REJECT

iptables -A FORWARD -p tcp -s 0/0 -d 0/0 --dport telnet -i eth0 -j REJECTMengxuan'Blog版权，联系方式(Mail): mengxuan.cn@Gmail.com，转载请注明原作者及地址！