zoukankan      html  css  js  c++  java
  • iptables FTP脚本

    #!/bin/sh
    echo " enable ip forward...."
    echo 1 >/proc/sys/net/ipv4/ip_forward
    modprobe ip_tables
    modprobe iptable_nat
    modprobe ip_conntrack
    modprobe ip_conntrack_ftp
    modprobe ip_nat_ftp
    echo " firwall starting...."

    iptables -F
    iptables -X
    iptables -Z
    iptables -t nat -F
    iptables -t nat -X
    iptables -t nat -Z

    iptables -P INPUT DROP
    iptables -A INPUT -i lo -j ACCEPT
    iptables -A INPUT -i eth0 -s 192.168.0.0/24 -j ACCEPT
    iptables -A INPUT -p tcp --dport 21 -j ACCEPT
    iptables -A INPUT -p tcp --dport 20 -j ACCEPT
    iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    iptables -A INPUT -p tcp --dport 22 -j ACCEPT

    echo "disable forwarding...."
    iptables -P FORWARD DROP
    echo " enable lan to internet...."
    iptables -A FORWARD -s 192.168.0.0/24 -p tcp -d 0/0 -i eth0 -j ACCEPT
    echo " enable internet to lan ftp server...."
    iptables -A FORWARD -s 0/0 -p tcp -d 192.168.0.7/24 --dport ftp -i eth1 -j ACCEPT
    iptables -A FORWARD -p tcp -d 192.168.0.0/24 ! --syn -i eth0 -j ACCEPT
    iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE 
  • 相关阅读:
    vim 配合管道过滤多行记录
    SpringBoot自动配置原理
    SpringBoot零XML配置的Spring Boot Application
    SpringBoot快速开始Hello World
    Java反射机制
    Java网络编程
    Java JDBC
    Java泛型
    Java I/O
    Java集合
  • 原文地址:https://www.cnblogs.com/lixuebin/p/10814363.html
Copyright © 2011-2022 走看看