Building a high Security ecommerce Web site: Linux Server iptables rules list full raiders

The security of the server has always been the primary consideration of the site. There are a variety of solutions for security. Linux Server firewall, the most commonly used to the number of iptables firewall. Iptables is commonly used in Linux firewall software, the rules are also very flexible, should be the most extensive.

Corresponding to the construction of a high security E-commerce site, any server without the security software, of course, is the iptables firewall. The rules are flexible, the function should be broad, this is the Linux system administrator preferred. The order of each rule in the Iptables chain is important, and if the first is accept all, then all packets will be allowed to pass through the firewall, so the order of the rules should be appropriately arranged. The usual rule is: Deny all allowed minorities.

The actual application of the total iptables rule applies to each server, as shown below.

But if you know more about the iptables firewall, you can configure it yourself, and you can achieve even more than the hardware firewall effect