Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Linux Network Management Firewall iptables

2025-01-19 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

1 ifconfig View Nic ip

Configuration file / etc/sysconfig/network-scripts/ifcfg-eth0

Restart the network card service network restart

Set multiple ip to a network card

Cd / etc/sysconfig/network-scripts

Cp ifcfg-eht0 ifcfg-eth0\: 1

Edit ifcfg-eth0\: 1 pay attention to device:eth0:1

Restart the network card after editing

two。 Check the link status of the network card mii-tool eth0

3 View hostname hostname

Change hostname (restore after restart)

Change configuration file / etc/sysconfig/network

4 set DNS (domain name resolution): resolve the URL to an IP

/ etc/resolv.conf

Temporarily resolve a domain name vi / etc/hosts

1) An IP can be followed by multiple domain names, which can be dozens or even hundreds.

2) each line can only have one IP, that is, a domain name cannot correspond to more than one IP

3) if the same domain name appears in multiple lines (the previous IP is different), the domain name will be resolved according to the record that appears first.

5.selinux shuts down selinux vim / etc/selinux/config

Set up SELINUX=DISABLED

Temporarily shut down selinux: setenforce 0

6 iptables

-nvl view rules

-F the current rule is cleared, but this is only temporary. Saved rules will be loaded after restarting the system or restarting the iptalbes service.

/ etc/init.d/iptables save save the rules

Three tables of 7iptalbes

Filter is used to filter packets, the system preset table built-in three chains INPUT, OUTPUT and FORWARD. INPUT acts on packets entering the machine; OUTPUT acts on packets sent by the machine; and FORWARD acts on packets that have nothing to do with the machine.

The main use of nat is network address translation the function of the PREROUTING chain is to change the destination address of a packet when it has just arrived at the firewall, if necessary. The OUTPUT chain changes the destination address of the locally generated packet. The POSTROUTING chain changes the source address of the packet before it leaves the firewall

Mangle is used to mark packets and then manipulate which packets according to the tag

2) basic syntax of iptables

a. View rules and clear rules iptables-t nat-nvL

-t contact surface-nvL view rule-n does not reverse resolve hostname for ip-L list-v list in detail

If you do not add-t, the relevant information of the filter table will be printed out.

Clear rules: iptables-F deletes all rules

Iptables-Z packet and flow counter setting

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report