免费视频淫片aa毛片_日韩高清在线亚洲专区vr_日韩大片免费观看视频播放_亚洲欧美国产精品完整版

下面的代碼是一段設(shè)置 iptable 的腳本，copy 下來(lái)，存為一個(gè)腳本文件，修改可以執(zhí)行，再執(zhí)行一下
Code:

---

echo 1 >/proc/sys/net/ipv4/icmp_echo_ignore_broadcasts    
echo 0 >/proc/sys/net/ipv4/conf/all/accept_source_route    
echo 0 >/proc/sys/net/ipv4/conf/all/accept_redirects    
echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses    
echo 1 >/proc/sys/net/ipv4/conf/all/log_martians    
    
iptables -F    
iptables -X    
iptables -Z    
    
#iptables -A INPUT -i eth0 -s 10.0.0.0/8 -j DROP    
#iptables -A INPUT -i eth0 -s 192.168.0.0/16 -j DROP    
    
##    
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT    
    
## Loopback    
iptables -A INPUT -i lo -j ACCEPT    
iptables -A OUTPUT -o lo -j ACCEPT    
    
## SYN-Flooding    
iptables -N syn-flood    
iptables -A INPUT -i eth0 -p tcp --syn -j syn-flood    
iptables -A syn-flood -m limit --limit 30/s --limit-burst 4 -j RETURN    
iptables -A syn-flood -j DROP    
    
## Make sure that new TCP connections are SYN packets    
iptables -A INPUT -i eth0 -p tcp ! --syn -m state --state NEW -j DROP    
    
## HTTP    
iptables -A INPUT -i eth0 -p tcp -d 0/0 --dport 80 -j ACCEPT    
    
    
## CVS    
iptables -A INPUT -i eth0 -p tcp -d 0/0 --dport 2401 -j ACCEPT    
    
## IP packets limit    
iptables -A INPUT -f -m limit --limit 100/s --limit-burst 5 -j ACCEPT    
# LOG --log-level INFO --log-prefix "IPT INPUT packet died: "    
    
iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 3 -j ACCEPT    
    
## FTP service    
iptables -A INPUT -i eth0 -p tcp --dport 21 -j ACCEPT    
iptables -A INPUT -i eth0 -p tcp --dport 20 -j ACCEPT    
iptables -A INPUT -p tcp --dport 30001:50000 -j ACCEPT    
    
## SSH login    
iptables -A INPUT -i eth0 -m tcp -p tcp --dport 22 -j ACCEPT    
iptables -A INPUT -i eth0 -p tcp --dport 22 -j DROP    
    
## Anything else not allowed    
iptables -A INPUT -i eth0 -j DROP    

---

上面是打開(kāi)了 www / ftp / ssh2 / cvs 服務(wù)，如果你不想打開(kāi)，請(qǐng)刪除相應(yīng)項(xiàng)
限制一個(gè) ip 不能同時(shí)有 30 以上訪問(wèn)