centos7防火墙iptables开放常用端口

iptables  -F

iptables  -I  INPUT  -p  tcp  -m  multiport  --dports 20,21,22,3690,80,443,4443,8023,8888,25,110,30000:30999  -j  ACCEPT
iptables  -I  OUTPUT  -p  tcp  -m  multiport  --sports 20,21,22,3690,80,443,4443,8023,8888,25,110,30000:30999  -j  ACCEPT

iptables  -I  INPUT  -p  udp  -m  multiport  --dports  8571,8888  -j  ACCEPT
iptables  -I  OUTPUT  -p  udp  -m  multiport  --sports  8571,8888  -j  ACCEPT

iptables  -I  INPUT  -p  udp  --sport  53  -j  ACCEPT
iptables  -I  OUTPUT  -p  udp  --dport  53  -j  ACCEPT

iptables  -A  OUTPUT  -p  icmp  -j  ACCEPT
iptables  -A  INPUT  -p  icmp  -j  ACCEPT

iptables  -I  INPUT  -p  tcp  -m  state  --state  RELATED,ESTABLISHED  -j  ACCEPT
iptables  -I  OUTPUT  -p  tcp  -m  state  --state  RELATED,ESTABLISHED  -j  ACCEPT

iptables  -P  FORWARD  DROP
iptables  -P  OUTPUT  DROP
iptables  -P  INPUT  DROP