Proxy firewall: Linux system Configuration Instance method

&http://www.aliyun.com/zixun/aggregation/37954.html ">NBSP; First download the latest source code for iptables. Compile the installation, and then stop the iptables installed by the system, and use the latest installed iptables to use the newly installed Iptables tool.

Experiment One: Installation

1, download the latest Iptables source code package from http://www.netfilter.org/downloads.html#iptables-1.2.9, is currently iptables-1.2.9.tar.bz, download and save to/usr /LOCAL/SRC directory.

2, into the/USR/LOCAL/SRC directory, unpack the package, into the Iptables source code directory,

#cd/USR/LOCAL/SRC

#bunzip2 iptables-1.2.9.tar.bz

#tar XF Iptables-1.2.9.tar

#cd iptables-1.2.9

3, use the following locust command to compile and install the Iptables source code package

#make PREFIX=/USR

#make prefix=/usr Install

Note: Use the PREFIX=/USR parameter to specify iptables install related files with the/usr directory as the top-level directory, not the default USR, such as iptables files will be installed in/usr/sbin,/usr/lib,/usr/ Man directory, using the LS command to view these directories, can find iptabels related executables and library files,

4, installation complete, using the default installation of the Iptables command and the newly installed iptables command, compare view version information

#/sbin/iptables–v

5. In order to use the newly installed Iptables tool, you need to deactivate the Iptabels command that is executed when the system starts, and remove the firewall startup script from the system boot queue.

#chkconfig –level 2345 iptables off

#chkconfig –list iptables

Then reboot the system with reboot.