Linux IP address commands

Command about linux IP address description single IP address command is iptables-IINPUT-s211.1.0.0-jDROPwww.2cto.com IP address segment command is iptables-IINPUT-s211.1.0.0/16-jDROPiptables-IINPUT-s211.2.0.0/16...
Commands for linux IP address encapsulation: the command for a single IP address is iptables-I input-s 211.1.0.0-j DROP www.2cto.com. the command for IP address encapsulation is iptables-I INPUT-s 211.1.0.0/16-j. DROP iptables-I input-s 211.2.0.0/16-j DROP iptables-I input-s 211.3.0.0/16-j DROP command for the entire segment is iptables-I INPUT-s 211.0.0.0/8 -the command for j DROP mails of several segments is iptables-I input-s 61.37.80.0/24-j DROP iptables-I INPUT-s 61.37.81.0/24-j DROP www.2cto.com. the server has three self-running commands. methods: 1. add it to/etc/rc. l In ocal, 2. iptables-save>;/etc/sysconfig/iptables can put your current iptables rules in/etc/sysconfig/iptables. The system will automatically execute iptables when it starts. 3. service iptables save can also put your current iptables rules in/etc/sysconfig/iptables. The system automatically runs iptables when it starts. The last two methods are better. Generally, the iptables service will be started before the network service. more secure unblocking: iptables-L INPUTiptables-L -- line-numbers and then the iptable-d input number author wlbbswl