Linux IP address commands

Commands for linux IP address encapsulation: the command for a single IP address is iptables-I input-s 211.1.0.0-j DROP www.2cto.com. The command for IP address encapsulation is iptables-I INPUT-s 211.1.0.0/16-j. DROP iptables-I input-s 211.2.0.0/16-j DROP iptables-I input-s 211.3.0.0/16-j DROP command for the entire segment is iptables-I INPUT-s 211.0.0.0/8 -The command for j DROP mails of several segments is iptables-I input-s 61.37.80.0/24-j DROP iptables-I INPUT-s 61.37.81.0/24-j DROP www.2cto.com. The server has three self-running commands. methods: 1. Add it to/etc/rc. l In ocal, 2. iptables-save>;/etc/sysconfig/iptables can put your current iptables rules in/etc/sysconfig/iptables. The system will automatically execute iptables when it starts. 3. service iptables save can also put your current iptables rules in/etc/sysconfig/iptables. The system automatically runs iptables when it starts. The last two methods are better. Generally, the iptables service will be started before the network service. More secure unblocking: iptables-L INPUTiptables-L -- line-numbers and then the iptable-d input number author wlbbswl