iptables multiport

Kubernetes version number of this analysis: v1.2.1-beta.0. The Kube-proxy component in Kubernetes is responsible for maintaining firewall rules and routing rules on node nodes, kube-proxy two implementations, one through Iptables, the other through userspace, Using Iptables as a first choice in 1.2 can dramatically improve performance, and here's how the Kube-proxy component operates

Here are my iptables settings. Copy Code code as follows: *filter : INPUT DROP [0:0] : FORWARD ACCEPT [0:0] : OUTPUT ACCEPT [49,061:9,992,130] -A input-i lo-j ACCEPT does not open a lot of services can not be used, open loopback address -A input-p icmp-j ACCEPT allows ICMP packets to pass, which means allowing others to ping themselves -A input-m state--state related,established-j ACCEPT -A input-p tcp-m tcp--dport 21-j AC

A useful iptables script for IPCop (written by a friend), do not remember which one is written, please mail (ayihu@qq.com) under the Tell me: #!/bin/sh## Firewall Starting Firewall## chkconfig:2345 98 01# description:setting Firewall########################################################################### Set parameters##########################################################################INNER_NET=192.168.0.0/24 # LAN LAN free setfwall_ip=192.16

This section describes iptables concepts and usage instructions in iptables, which must be case sensitive. The main syntax differences between ipchains and iptables are as follows: 1. in ipchains, for example, the input chain uses lower-case chains. in iptables, use upper-case INPUT instead. 2. in IptablesGetting start

" IN_ETH_IP = "10.10.11.110" # Set the IP address segment of the firewall internal server # Internal ip range SERVER_IP = "10.10.11.0/24" 1. the system initializes the configuration file for ip packet forwarding. if the input value is 0, it indicates no forwarding. 1. enable the forwarding function. in this case, the value needs to be initialized to 0. # Disable forwarding Echo 0>/proc/sys/net/ipv4/ip_forward # Initialization IptablesRule list. # Reset default policies

Linux under Iptables configuration detailed-A rh-firewall-1-input-p tcp-m State--state new-m TCP--dport 24000-j ACCEPT-A rh-firewall-1-input-s 121.10.120.24-p tcp-m tcp--dport 18612-j ACCEPTIf your iptables basic knowledge is not yet known, it is recommended to take a look first.Start ConfigurationLet's configure a firewall for the filter table.(1) Check the setting of this institution in

A few days ago the micro-demon tribe was once again subjected to attacks by individual ulterior motives, by the way to recharge their own electricity, a review of the common Linux firewall iptables some of the content, but helpless online many of the tutorials are more cumbersome, in the concise learning purposes, the micro-demon for everyone to eliminate a lot of redundant content, Extract as many of the best part of the written, and common learning,

The method for starting and stopping iptables depends on the Linux release version in use. you can view the documentation of the Linux version in use. In RedHat, start iptables with: # serviceiptablesstart. generally, iptables is already included in the Linux release. you can run iptables -- version to check whether ip

#! /Bin/sh # iptables start iptables firewall # chkconfig: 2345 08 92 # Description: starts, stops and saves iptables firewall # config:/etc/sysconfig/iptables # config: /etc/sysconfig/iptables-config #### begin init info # provides: ipt