#!/bin/bash
iptables -t filter -F
iptables -t nat -F
iptables -t filter -X
iptables -t nat -X
iptables -t filter -Z
iptables -t nat -Z
MYMAC=“00:0c:29:7e:6e:2f”
MYIP=“192.168.31.7”
########### Policy Set #############
iptables -t filter -P INPUT DROP
iptables -t filter -P OUTPUT ACCEPT
########### INPUT #################
iptables -t filter -A INPUT -p tcp -m state --state INVALID -j DROP
iptables -t filter -A INPUT -p tcp --dport 80 -m state --state NEW -m limit --limit 20/s --limit-burst 200 -j ACCEPT
iptables -t filter -A INPUT -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -t filter -A INPUT -p icmp --icmp-type 0 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 22 -s $MYIP -m mac --mac-source $MYMAC -j ACCEPT
########### OUTPUT #################
iptables -A OUTPUT -p tcp --sport 31337:31340 -j DROP
iptables -A OUTPUT -p tcp --dport 31337:31340 -j DROP
service iptables save > /dev/null
————————————————
版權(quán)聲明：本文為CSDN博主「‘我最帥’」的原創(chuàng)文章，遵循CC 4.0 by-sa版權(quán)協(xié)議，轉(zhuǎn)載請(qǐng)附上原文出處鏈接及本聲明。
原文鏈接：https://blog.csdn.net/weixin_43165872/article/details/82750370
? ? 有服務(wù)器需求請(qǐng)加QQ1911624872咨詢
