iptables Firewall Security Configuration

Iptables-f Clear all rule chains

Iptables-x Delete specific manually-set chains

Iptables-z Empty counter

Iptables-p input drop//default input rule Discard

Iptables-p output drop//default output rule Discard

Iptables-p FORWARD drop//default FORWARD rule Discard

Iptables-a input-d 192.168.10.250-p tcp-m tcp--dport 22-j//Open SSH Service inbound port

Iptables-a input-d 192.168.10.250-p tcp-m tcp--dport 80-j//Open Web Service Inbound port

Iptables-a input-s 127.0.0.1-d 127.0.0.1-j ACCEPT//allow local loopback data

Iptables-a input-p udp-m UDP--sport 53-j ACCEPT//Data packets from remote DNS server port 53 inbound through

Iptables-a input-p udp-m UDP--dport 53-j ACCEPT/Inbound packets into local server port 53

Iptables-a input-d 192.168.10.250-p icmp-j ACCEPT Packet access to local server

Iptables-a output-s 192.168.10.250-p tcp-m TCP--sport 22-m State--state established-j ACCEPT//access to SSH service packets open Outbound port

Iptables-a output-s 192.168.10.250-p tcp-m TCP--sport 80-m State--state established-j ACCEPT//data packets entered into the Web service open outbound port

Iptables-a output-s 127.0.0.1-d 127.0.0.1-j ACCEPT//allow local loopback data

Iptables-a output-p udp-m UDP--sport 53-j ACCEPT/Outbound data packets from local 53 ports out of the station through

Iptables-a output-p udp-m UDP--dport 53-j ACCEPT//Go to Remote DNS server port 53 packets outbound through

Iptables-a output-s 192.168.10.250-p icmp-j ACCEPT//ICMP packet response to each other (ping command response packet)

Service Iptables save//Save configuration information

Service iptables start//Open Firewall services

This column more highlights: http://www.bianceng.cnhttp://www.bianceng.cn/Network/Firewall/