Iptables configuration management,

Iptables configuration management,
Iptables rules

Kernel netfilter rules:

 

Iptables rules:

Basic operations

 

 

Practice: Insert a rule to iptables to disable access from all clients based on port 22 (equivalent to disabling SSH-based client connections ).

Before insertion:

 

After insertion:

Command:

[Root @ rabbitmq01 ~] # Iptables-I INPUT 1-p tcp -- dport 22-j REJECT

 

INPUT and OUTPUT

FORWARD

NAT Network Address Translation

 

Configuration files and precautions

By default, rules added using the iptables command are not permanently saved.

 

The simplest way is to run the command iptables-F first, and then run the Command service iptables save to write back the configuration file.