In general, we adopt some powerful anti-Black software and firewall to ensure the security of our system. This article proposes a simple method to help you prevent illegal intrusion by limiting ports.
Illegal intrusionIn short, illegal intrusion can be roughly divided into four types:1. Scan the port to attack the host through known System bugs.2. Planting Trojans and using backdoors opened by Trojans to a
Open ports of Linux Firewall
I. Linux firewall configuration files and commands
1. RedHat Linux System
This type of system contains various derivatives and related versions of red hat, including RHEL, CentOS, and Fedrora.
Firewall Configuration File:/etc/sysconfig/iptables-config
Service Operation Command: etc/ini
1. Open port (take Port 7777 as an example)Vi/etc/sysconfig/iptables Open the configuration file by adding the following statement:-A input-p tcp-m state--state new-m TCP--dport 7777-j ACCEPTRestarting the firewall/etc/init.d/iptables restartModify Complete2. Close the port (take Port 7777 as an example)Vi/etc/sysconfig/iptables Open the configuration file by adding the following statement:-A input-p tcp-m state--state new-m TCP--dport 7777-j DROPRest
Before I was busy setting up the environment, I didn't have time to write it, now fill it up.On Linux, when we use the one-click installation package to build the environment, the firewall automatically releases. For example, sometimes it is convenient to use tools to remotely connect to Redis for the time being.Obviously the environment has been set up, the corresponding changes in the configuration is not even, at this time, we should see if our
A firewall (iptables) is a system service located at:/etc/init.d/iptablesFirewall configuration information, saved in this file:/etc/sysconfig/iptablesThe Firewall service start, stop, restart, query status, save configuration and other commands as follows:# Service iptables start/stop/restart/status/saveLinux Firewall Open specific
View Status:Iptables-l-NAdd the following methods for opening a specific port:Use Iptables to open the following ports/sbin/iptables-i input-p TCP--dport 8000-j ACCEPTSave/etc/rc.d/init.d/iptables SaveRestart ServiceService Iptables RestartSee if the port you want to open takes effect?/etc/init.d/iptables statusAct 2:or edit/etc/sysconfig/iptables directly-A input-p tcp-m tcp--dport 4000-j ACCEPTSave in the previous sectionReboot again:Service Iptable
Article Title: redhat5) add and force close ports on the firewall. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
# Cd/etc/sysconfig
# Ls
# Vi iptables (gedit iptables)
Add
-A RH-Firewall-1-INPUT-m state -- state NEW-m t
In many projects, NetScaler is generally placed in the DMZ, and NS is isolated from the backend infrastructure network, and the general bank and securities customers only open ports for VDI access, and here's the Citrix NetScaler ports that I previously organized in a project ...Firewall Open port:650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6D/E8/w
When we use the new server to set up a new host, often encounter the site can not access the situation, when asked about customer service, often told that the operating system does not open the default 80 port, please first determine whether 80 is open and determined not to be occupied. So, how do we open port 80?Method/Step
1Click: Start-Control Panel
2Select Firewall entry in the Control Panel, select Advanced Settings from the left menu
Our firewall default rules are as follows:If the firewall releases the port but still cannot access it, it may be because the rule is added with the IPTABLES-A option, so that the added rule is arranged after the 6th rule, although the service Iptables status shows that the port is released, but in fact, As a result of rule sixth, the new addition does not work.Instead, use iptables-i to insert the rule, an
View Status:Iptables-l-NAdd the following methods for opening a specific port:Use Iptables to open the following ports/sbin/iptables-i input-p TCP--dport 8000-j ACCEPTSave/etc/rc.d/init.d/iptables SaveRestart ServiceService Iptables RestartSee if the port you want to open takes effect?/etc/init.d/iptables statusAct 2:or edit/etc/sysconfig/iptables directly-A input-p tcp-m tcp--dport 4000-j ACCEPTSave in the previous sectionReboot again:Service Iptable
View Status:Iptables-l-NAdd the following methods for opening a specific port:Use Iptables to open the following ports/sbin/iptables-i input-p TCP--dport 8000-j ACCEPTSave/etc/rc.d/init.d/iptables SaveRestart ServiceService Iptables RestartSee if the port you want to open takes effect?/etc/init.d/iptables statusAct 2:or edit/etc/sysconfig/iptables directly-A input-p tcp-m tcp--dport 4000-j ACCEPTSave in the previous sectionReboot again:Service Iptable
Tags: file input close Linux server sysconf off style body colorHow to take effect after reboot:1. Open: Chkconfig iptables on2. Off: Chkconfig iptables offImmediate effect, failure after reboot:1. Open: Service iptables start2. Close: Service iptables stopWhen the firewall is turned on, do the following to selectively open the relevant port: you need to modify the/etc/sysconfig/iptables file, add the following to open port access:-A input-m state--st
First of all, to declare this function, personal feeling is not very useful, because most of the time we have to bring the system from the firewall closed. Like small series is certainly closed, because small weave sometimes in the local area network and other people connected to the net, if no matter the system with the firewall then I have no way to play. So the following is about the use of Win7
Iptables is a firewall under Linux and is also the service name. Service iptables Status View firewall stateService iptables start to turn on the firewallService iptables Stop shutting down the firewallService iptables Restart Restart firewallFirewalls Open specific ports:① file/etc/sysconfig/iptables② Add:-A rh-firewall
In the previous 9 articles to share with you the construction of the 2008 DC and the core mode of some applications, when we have to deploy infrastructure services for the enterprise to be safe to start Windows Server 2008 with Windows Firewall, and many enterprises will also Deploy some security-resolution products (such as ISA) separately. So, to do a good job of the deployment of these products, we need to understand the Active Directory services a
Tags:/etc tables Linux edit IV part sysconfig style sbinView Status:Iptables-l-NAdd the following methods for opening a specific port:Use Iptables to open the following ports/sbin/iptables-i input-p TCP--dport 8000-j ACCEPTSave/etc/rc.d/init.d/iptables SaveRestart ServiceService Iptables RestartSee if the port you want to open takes effect?/etc/init.d/iptables statusAct 2:or edit /etc/sysconfig/iptables directly-A input-p tcp-m tcp--dport 4000-j ACCEP
Recently in the construction of lamp environment, configure a variety of environments need to open the port, always in Baidu too troublesome, record
Original address: http://m.blog.csdn.net/sherwin/article/details/49562667
-------------------------------------------------------------------------
#/sbin/iptables-i input-p TCP--dport 80-j ACCEPT
#/sbin/iptables-i input-p TCP--dport 22-j ACCEPT#/sbin/iptables-i input-p TCP--dport 3306-j ACCEPTAnd then Save:#/etc/rc.d/init.d/iptables Save
To view
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.