iptables config

#! /Bin/sh # iptables start iptables firewall # chkconfig: 2345 08 92 # Description: starts, stops and saves iptables firewall # config:/etc/sysconfig/iptables # config: /etc/sysconfig/iptables-config #### begin init info # provides: iptables #

1. Show the status of the firewallRun the following command with root privileges: # iptables-l-n-v Parameter description: -L: Lists the rules. -V: Displays detailed information. This option displays the interface name,

========================================================== = ========================================================== = Common iptables firewall configuration problems: Author: kenduest) Last Updated: 8/18/2006 ====================================

Netfilter/iptables is an IP information packet filtering system integrated with the latest Linux kernel version 2.4.x. If the Linux system is connected to the Internet or LAN, server, or a proxy server connected to the LAN and Internet, the system

**************************************** * ************************ About firewall system recovery operations and startup methods ***** **************************************** **************************************** ********************************

0x00 iptables Introduction The package filtering function of linux is the linux firewall, which consists of netfilter and iptables. The netfilter component, also known as the kernel space, is a part of the kernel. It consists of information packet

1. in fact, the matching extension also needs to be added to the display extension of the-m reference module. the default value is implicit extension. do not use the-m status Detection Package to filter-mstate -- state {NEW, ESTATBLISHED, INVALID,

Firewall: Includes a software firewall (Iptables/netfilter-based packet filtering firewall) and hardware firewall, at the host or network edge of the message through the firewall to detect a certain conditions filtering a series of components.The

1. in fact, the matching extension also needs to be added to the display extension of the-m reference module. the default value is implicit extension. do not use the-m status Detection Package to filter-mstate -- state {NEW, ESTATBLISHED, INVALID,

Linux command: Compile and install iptablesFirst, compile and install iptables before preparing:Three documents to be backed up before uninstalling iptables : iptables startup script, Iptables-config configuration document, and established Iptables