{"id":156,"date":"2015-08-27T14:02:23","date_gmt":"2015-08-27T06:02:23","guid":{"rendered":"http:\/\/cn.hostease.com\/xueyuan\/?p=156"},"modified":"2015-11-10T14:18:06","modified_gmt":"2015-11-10T06:18:06","slug":"iptables%e4%b9%8b%e7%ab%af%e5%8f%a3%e5%bc%80%e6%94%be","status":"publish","type":"post","link":"https:\/\/cn.hostease.com\/xueyuan\/jishu\/shujuku\/iptables%e4%b9%8b%e7%ab%af%e5%8f%a3%e5%bc%80%e6%94%be\/","title":{"rendered":"Iptables\u4e4b\u7aef\u53e3\u5f00\u653e"},"content":{"rendered":"

\u4e00\u3001\u5f00\u653e80\u7aef\u53e3<\/h1>\n

WEB\u670d\u52a1\u5668IP 172.16.100.1<\/p>\n\n\n\n
\n
\n
iptables\u00a0-A\u00a0INPUT\u00a0-d\u00a0172.16.100.1\u00a0-p\u00a0tcp\u00a0--dport\u00a080\u00a0-j\u00a0ACCEPT<\/code><\/div>\n
iptables\u00a0-A\u00a0OUTPUT\u00a0-s\u00a0172.16.100.1\u00a0-p\u00a0tcp\u00a0--sport\u00a080\u00a0-j\u00a0ACCEPT<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u5982\u679c\u4e0d\u662f\u5f00\u653e\u768480\u7aef\u53e3\u800c\u662f\u5176\u4ed6\u7aef\u53e3\u8bf7\u5c0680\u7aef\u53e3\u6539\u53d8\u6210\u4f60\u9700\u8981\u7684\u7aef\u53e3<\/p>\n

\u4e8c\u3001\u5173\u4e8eicmp\u534f\u8bae\u7684\u89c4\u5219<\/h1>\n\n\n\n
\n
\n
\u5141\u8bb8\u672c\u673a\u00a0<\/code>ping<\/code>\u00a0\u901a\u5916\u7f51\uff0c\u4f46\u4e0d\u5141\u8bb8\u5916\u7f51\u00a0<\/code>ping<\/code>\u00a0\u672c\u673a<\/code><\/div>\n
\u00a0<\/code>iptables\u00a0-A\u00a0OUTPUT\u00a0-p\u00a0icmp\u00a0--icmp-<\/code>type<\/code>\u00a08\u00a0-j\u00a0ACCEPT<\/code><\/div>\n
iptables\u00a0-A\u00a0INPUT\u00a0-p\u00a0icmp\u00a0--icmp-<\/code>type<\/code>\u00a00\u00a0-j\u00a0ACCEPT<\/code><\/div>\n
\u5141\u8bb8\u5916\u7f51\u00a0<\/code>ping<\/code>\u00a0\u672c\u673a<\/code><\/div>\n
\u00a0<\/code>iptables\u00a0-A\u00a0OUTPUT\u00a0-p\u00a0icmp\u00a0--icmp-<\/code>type<\/code>\u00a00\u00a0-j\u00a0ACCEPT<\/code><\/div>\n
\u00a0<\/code>iptables\u00a0-A\u00a0INPUT\u00a0-p\u00a0icmp\u00a0--icmp-<\/code>type<\/code>\u00a08\u00a0-j\u00a0ACCEPT<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u4e09\u3001\u5f00\u653eFTP\u670d\u52a1<\/h1>\n

\u5927\u5bb6\u90fd\u77e5\u9053ftp\u8fd4\u56de\u6570\u636e\u7684\u65f6\u5019\u7aef\u53e3\u4e0d\u662f\u56fa\u5b9a\u7684\uff0c\u6240\u4ee5\u6211\u4eec\u4e0d\u80fd\u50cf\u5f00\u653eweb\u670d\u52a1\u7684\u90a3\u6837\u76f4\u63a5\u5f00\u653e\u67d0\u4e2a\u7aef\u53e3\uff0c\u6240\u4ee5\u5f88\u591a\u4eba\u5f00\u653e\u4e8621\u7aef\u53e3\u4e4b\u540e\u90fd\u4e0d\u80fd\u6b63\u5e38\u7684\u8bbf\u95eeftp\u670d\u52a1\u5668\uff0c\u5728\u91cc\u6211\u4eec\u5c31\u4f7f\u7528Iptables\u7684\u6269\u5c55\u6a21\u5757\u6765\u5f00\u653eftp<\/p>\n

3.1\u3001\u5f00\u542f\u88ab\u52a8\u6a21\u5f0fFTP\u652f\u6301<\/h2>\n\n\n\n
\n
\n
\u5728<\/code>\/etc\/sysconfig\/iptables-config<\/code>\u91cc\u9762\u6dfb\u52a0ip_nat_ftp\u3001ip_conntrack_ftp\u6a21\u5757\uff0c\u5982\u4e0b\uff1a<\/code><\/div>\n
vim\u00a0<\/code>\/etc\/sysconfig\/iptables-config<\/code><\/div>\n
IPTABLES_MODULES=<\/code>\"ip_nat_ftp\"<\/code><\/div>\n
IPTABLES_MODULES=<\/code>\"ip_conntrack_ftp\"<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

3.2\u3001\u7136\u540e\u91cd\u542fiptables\u6216\u8005\u6267\u884c\u5982\u4e0b\u547d\u4ee4<\/h2>\n\n\n\n
\n
\n
lsmod\u00a0|\u00a0<\/code>grep<\/code>\u00a0ftp<\/code>\u00a0\uff08\u67e5\u770b\u662f\u5426\u52a0\u8f7d<\/code>ftp<\/code>\u6a21\u5757\uff09<\/code><\/div>\n
modprobe\u00a0ip_nat_ftp\uff08\u52a0\u8f7d<\/code>ftp<\/code>\u6a21\u5757\uff09<\/code><\/div>\n
lsmod\u00a0|\u00a0<\/code>grep<\/code>\u00a0ftp<\/code>\u00a0(\u67e5\u770b\u6a21\u5757\u662f\u5426\u88ab\u52a0\u8f7d)<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

3.3\u3001\u4e4b\u540e\u53ea\u9700\u8981\u6dfb\u52a0\u89c4\u5219<\/h2>\n
\n
iptables\u00a0-I\u00a0INPUT\u00a0-m\u00a0state\u00a0--state\u00a0ESTABLISHED,RELATED\u00a0-j\u00a0ACCEPT<\/code><\/div>\n
iptables\u00a0-A\u00a0INPUT\u00a0-m\u00a0state\u00a0--state\u00a0NEW\u00a0-p\u00a0tcp\u00a0--dport\u00a021\u00a0-j\u00a0ACCEPT<\/code><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

\u4e00\u3001\u5f00\u653e80\u7aef\u53e3 WEB\u670d\u52a1\u5668IP 172.16.100.1 iptables\u00a0-A\u00a0INPUT\u00a0-d\u00a0172 … \u9605\u8bfb\u66f4\u591a<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[10],"tags":[86,87,88],"class_list":["post-156","post","type-post","status-publish","format-standard","hentry","category-shujuku","tag-iptebles","tag-port","tag-88"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/156","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/comments?post=156"}],"version-history":[{"count":1,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/156\/revisions"}],"predecessor-version":[{"id":157,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/156\/revisions\/157"}],"wp:attachment":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/media?parent=156"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/categories?post=156"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/tags?post=156"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}