远方蔚蓝
一刹那情真,相逢不如不见

文章数量 126

访问次数 199895

运行天数 1437

最近活跃 2024-10-04 23:36:48

进入后台管理系统

Linux Centos7的ipables文件记录


# sample configuration for iptables service
# you can edit this manually or use system-config-firewall
# please do not ask us to add additional ports/services to this default configuration
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
#Oracle
-A INPUT -m state --state NEW -m tcp -p tcp --dport 1521 -j ACCEPT
#MySQL
-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
#redis
-A INPUT -m state --state NEW -m tcp -p tcp --dport 6379 -j ACCEPT
#activeMQ
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8161 -j ACCEPT
#activeMQ
-A INPUT -m state --state NEW -m tcp -p tcp --dport 61616 -j ACCEPT
#tomcat
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8080 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8180 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8280 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8380 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8480 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8580 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8680 -j ACCEPT
#eurake
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8761 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT