zoukankan      html  css  js  c++  java
  • shell简单管理iptables脚本 枯木

    #!/bin/bash
    while [ "1" == "1" ]
    do
    clear
    echo "----------------------menu----------------------"
    echo "(1) service iptables restart"
    echo "(2) iptables add"
    echo "(3) iptables delete"
    echo "(4) iptables stop"
    echo "(5) iptables save(输完ACL后要记得保存和查看)"
    echo "(6) iptables status"
    echo "(7) iptables ACL list"
    echo "(0) exit"
    echo "-------------------------------------------------"
    echo -n "enter you chose[0-7]:"
    read num
    if [ ${num} -lt 0 -o ${num} -gt 7 ]
        then
          echo "this is not between 0-7"
    else
       if [ "${num}" == "1" ]
          then
          service iptables restart&
    else
       if [ "${num}" == "2" ]
    #######################################################
           then
              while [ "1" == "1" ]
              do
              clear
              echo "----------------------add ACL----------------------"
              echo "(1) 针对源IP放行添加"
              echo "(2) 针对服务器端口放行添加"
              echo "(3) 针对有端口和服务的ACL添加(这里要参数IP和端口 例如 0/0 80)"
              echo "(4) 自定义添加"
              echo "(5) 退回上一级"
              echo "-------------------------------------------------"
              echo -n "enter you chose[0-4]:"
              read aclnum
              if [ "${aclnum}" == "1" ]
                 then
                 read ip
                 iptables -A INPUT -s ${ip} -p tcp --dport 22 -j ACCEPT
                 service iptables save
              elif [ "${aclnum}" == "2" ]
                 then
                 read ip
                 iptables -A INPUT -p tcp --dport ${IP}  -j ACCEPT
                 service iptables save
              elif [ "${aclnum}" == "3" ]
                 then
                 read ip port
                 iptables -A INPUT -p tcp -s ${ip} --dport ${port} -j ACCEPT
                 service iptables save
              elif [ "${aclnum}" == "4" ]
                 then
                 read addacl
                 `${addacl}`
                 service iptables save
              else
                 break
              fi
              echo -n "是否想继续添加: [y/n]:"
              read contine
              if [ "${contine}" == "n" -o "${contine}" == "N" ]
                 then
                 break
                 fi
              done
    #######################################################
    else
       if [ "${num}" == "3" ]
              then
              while [ "1" == "1" ]
              do
              clear
              echo "---------------------delete ACL----------------------"
              echo "(1) 针对源ip删除"
              echo "(2) 针对端口删除"
              echo "(3) 针对有端口和服务的ACL删除"
              echo "(4) 自定义删除"
              echo "(5) 退回上一级"
              echo "-------------------------------------------------"
              echo -n "enter you chose[0-5]:"
              read aclnum
              if [ "${aclnum}" == "1" ]
                 then
                 read ip
                 iptables -D INPUT -s ${ip} -p tcp --dport 22 -j ACCEPT
                 service iptables save
              elif [ "${aclnum}" == "2" ]
                 then
                 read port
                 iptables -D INPUT -p tcp --dport ${port}  -j ACCEPT
                 service iptables save
              elif [ "${aclnum}" == "3" ]
                 then
                 read ip port
                 iptables -D INPUT -p tcp -s ${ip} --dport ${port} -j ACCEPT
                 service iptables save
              elif [ "${aclnum}" == "4" ]
                 then
                 read deleteacl
                 `${deleteacl}`
                 service iptables save
              else
                 break
              fi
              echo -n "是否想继续添加: [y/n]:"
              read contine
              if [ "${contine}" == "n" -o "${contine}" == "N" ]
                 then
                 break
                 fi
              done
    ###################################################################  
    else
       if [ "${num}" == "4" ]
           then
           echo -e "`service iptables stop&` "
    else
       if [ "${num}" == "5" ]
           then
           echo -e "`service iptables save&`"
    else
       if [ "${num}" == "6" ]
           then
           echo -e "`service iptables status&`"
    else
       if [ "${num}" == "7" ]
           then
             while [ "1" == "1" ]
           do
           clear
           echo "---------------------list ACL----------------------"
           echo "(1) 查看当前正在使用的规则集"
           echo "(2) 查看每个策略或每条规则、每条链的简单流量统计"
           echo "(3) 查看NAT表"
           echo "(4) 自定义查看"
           echo "(5) 退回上一级"
           echo "-------------------------------------------------"
           echo -n "enter you chose[0-5]:"
           read aclnum
           if [ "${aclnum}" == "1" ]
              then
              iptables -L
           elif [ "${aclnum}" == "2" ]
              then
              iptables -L -n -v
           elif [ "${aclnum}" == "3" ]
              then
              iptables -L -t nat
           elif [ "${aclnum}" == "4" ]
              then
              read listacl
              `${listacl}`
           else
            break
             fi
           echo -n "是否想继续添加: [y/n]:"
              read contine
              if [ "${contine}" == "n" -o "${contine}" == "N" ]
                 then
                 break
              fi
           done
    ################################################
    else     
       exit
    fi
      fi
        fi
         fi
          fi
           fi
            fi
             fi
    echo -n "Do you contine [y/n]:"
    read contine
    if [ "${contine}" == "n" -o "${contine}" == "N" ]
       then
       exit
    fi
    done
    


  • 相关阅读:
    __weak
    c++界面设计皮肤工具
    执行游戏时出现0xc000007b错误的解决方法
    2.4.1-Java语言基础(常量)
    句法模式识别(一)-串文法
    一步一步写算法(之hash表)
    LaTeX新人教程,30分钟从全然陌生到基本入门
    初次当面试官的经历和感触
    Android入门第八篇之GridView(九宫图)
    Android-Cannot merge new index 66195 into a non-jumbo instruction的解决的方法
  • 原文地址:https://www.cnblogs.com/kumulinux/p/2808756.html
Copyright © 2011-2022 走看看