标签：文件 sys highlight eject enable strong tput container accept
一、防火墙配置
1、检测并关闭firewall
|
1
2
3
4
5
|
systemctl status firewalld.service #检测是否开启了firewallsystemctl stop firewalld.service #关闭firewallsytsemctl disable firewalld.service #禁止firewall开机自启 |
2、检测并安装iptables
|
1
|
yum install iptables-services |
将规则写入iptables配置文件
|
1
|
vi /etc/sysconfig/iptables |
|
1
|
iptables文件内容： |
|
1
2
3
4
5
6
7
8
9
10
11
12
|
*filter:INPUT ACCEPT [0:0]:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [0:0]-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT-A INPUT -p icmp -j ACCEPT-A INPUT -i lo -j ACCEPT-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT-A INPUT -j REJECT --reject-with icmp-host-prohibited-A FORWARD -j REJECT --reject-with icmp-host-prohibitedCOMMIT |
systemctl restart iptables.service
systemctl enable iptables.service
标签：文件 sys highlight eject enable strong tput container accept
原文地址：http://www.cnblogs.com/hixiaowei/p/7878470.html
