Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Iptables rules for DNS

2025-01-27 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

# cat / etc/sysconfig/iptables

# Generated by iptables-save v1.3.5 on Thu Oct 31 15:53:45 2013

* filter

: INPUT ACCEPT [0:0]

: FORWARD ACCEPT [0:0]

: OUTPUT ACCEPT [25144:3493694]

: RH-Firewall-1-INPUT-[0:0]

-An INPUT-p udp-m udp-- sport 53-j ACCEPT

-An INPUT-p tcp-m tcp-- sport 53-j ACCEPT

-An INPUT-j RH-Firewall-1-INPUT

-A FORWARD-j RH-Firewall-1-INPUT

-A RH-Firewall-1-INPUT-I lo-j ACCEPT

-A RH-Firewall-1-INPUT-p icmp- m icmp--icmp-type any-j ACCEPT

-A RH-Firewall-1-INPUT-p esp-j ACCEPT

-A RH-Firewall-1-INPUT-p ah-j ACCEPT

-A RH-Firewall-1-INPUT-d 224.0.0.251-p udp-m udp-- dport 5353-j ACCEPT

-A RH-Firewall-1-INPUT-m state-- state RELATED,ESTABLISHED-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-- state NEW-m tcp-- dport 22-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-- state NEW-m tcp-- dport 21-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-- state NEW-m tcp-- dport 80-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-- state NEW-m tcp-- dport 8080-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-- state NEW-m tcp-- dport 20000Vol 20500-j ACCEPT

-A RH-Firewall-1-INPUT-j REJECT-- reject-with icmp-host-prohibited

COMMIT

# Completed on Thu Oct 31 15:53:45 2013

# cat / etc/sysconfig/iptables.save

# Firewall configuration written by system-config-securitylevel

# Manual customization of this file is not recommended.

* filter

: FORWARD ACCEPT [0:0]

: INPUT ACCEPT [0:0]

: RH-Firewall-1-INPUT-[0:0]

: OUTPUT ACCEPT [0:0]

-An INPUT-j RH-Firewall-1-INPUT

-A FORWARD-j RH-Firewall-1-INPUT

-A RH-Firewall-1-INPUT-I lo-j ACCEPT

-A RH-Firewall-1-INPUT-p icmp--icmp-type any-j ACCEPT

-A RH-Firewall-1-INPUT-p 50-j ACCEPT

-A RH-Firewall-1-INPUT-p 51-j ACCEPT

-A RH-Firewall-1-INPUT-p udp-d 224.0.0.251-- dport 5353-j ACCEPT

-A RH-Firewall-1-INPUT-m state-- state ESTABLISHED,RELATED-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-m tcp-- dport 22-- state NEW-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-m tcp-- dport 21-- state NEW-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-m tcp-- dport 80-- state NEW-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-m tcp-- dport 8080-- state NEW-j ACCEPT

-A RH-Firewall-1-INPUT-p tcp-m state-m tcp-- dport 20000 state 20500-- state NEW-j ACCEPT

-A RH-Firewall-1-INPUT-j REJECT-- reject-with icmp-host-prohibited

COMMIT

#

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report