linux防火墙 限制端口,Linux开启防火墙并限制开放端口

1、编辑/etc/sysconfig/iptables，若不存在则创建

vi /etc/sysconfig/iptables

2、开启端口1022的iptables内容如下

# Firewall configuration written by system-config-firewall

# Manual customization of this file is not recommended.

*filter

:INPUT ACCEPT [0:0]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [0:0]

-A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT

-A INPUT -p icmp -j ACCEPT

-A INPUT -i lo -j ACCEPT

-A INPUT -m state –state NEW -m tcp -p tcp –dport 1022 -j ACCEPT

-A INPUT -j REJECT –reject-with icmp-host-prohibited

-A FORWARD -j REJECT –reject-with icmp-host-prohibited

COMMIT

3、重启iptables服务

service iptables restart

原创内容转载请保留出处GEEK笔记(http://www.geekapp.cn/)。