Use the built-in firewall of CENTOS to disable access from an IP address to the system. The following is the/etc/sysconfig/iptables screenshot to reject 211.154.137.45 access. remember that the location cannot be written incorrectly. # Firewallconfigurationwrittenbysystem-config-securitylevel # manu1c
Use the built-in firewall of CENTOS to disable access from an IP address to the system.
The following is a screenshot of/etc/sysconfig/iptables.
Take 211.154.137.45 access denied as an example. remember that the location cannot be written incorrectly.
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
* Filter
: Input accept [0: 0]
: Forward accept [0: 0]
: Output accept [0: 0]
: RH-Firewall-1-INPUT-[0: 0]
-A input-I eth0-s 211.154.137.45-j DROP
-A input-j RH-Firewall-1-INPUT
-A forward-j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT-I lo-j ACCEPT
-A RH-Firewall-1-INPUT-p icmp -- icmp-type any-j ACCEPT
-An RH-Firewall-1-INPUT-p 50-j ACCEPT