防火墙iptables设置

iptables防火墙规则设置

iptables -A INPUT -s  源ip地址  -p  tcp   --dport 22  -j  ACCEPT

iptables  -A  INPUT  -p  tcp  --dport 22  -j  DROP

保存防火墙iptables配置 

[root@x112 ~]# service iptables save

iptables: Saving firewall rules to /etc/sysconfig/iptables:[ OK ]

[root@x112 ~]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited
ACCEPT     tcp  --  192.168.0.103        anywhere             tcp dpt:ssh
DROP       tcp  --  anywhere             anywhere             tcp dpt:ssh

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
[root@x112 ~]# ls /etc/sysconfig/iptables
/etc/sysconfig/iptables
[root@x112 ~]# cat /etc/sysconfig/iptables
# Generated by iptables-save v1.4.21 on Tue Jul 14 12:04:44 2020
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [73:18704]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A INPUT -s 192.168.0.103/32 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j DROP
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Tue Jul 14 12:04:44 2020
[root@x112 ~]# 

　　

安装防火墙服务端

 yum install -y  iptalbes.services 

rhel6 查看开机自启动

chkconfig --list

启动、关闭，设置开启自启动

service iptables start

service  iptables  stop

chkconfig --level 2345  iptables  on

rhel7防火墙查看开机自启动

systemctl   list-unit-files | grep  iptables

启动、关闭，设置开启自启动

systemctl start iptables

systemctl stop iptables

systemctl enable  iptables