Ubuntu 配置防火墙

###

iptables -L
iptables -S
iptables -F

• sudo iptables -P INPUT ACCEPT
• sudo iptables -P OUTPUT ACCEPT
• sudo iptables -F

iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -L

• iptables -A INPUT -p tcp --dport 22 -j ACCEPT
• sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT

iptables -I INPUT 1 -i lo -j ACCEPT
iptables -S
iptables -P INPUT DROP
iptables -A INPUT -j DROP



iptables-save > /etc/iptables-rules
vim /etc/network/interfaces
add following entries at bottom
pre-up iptables-restore < /etc/iptables-rules
post-down iptables-save > /etc/iptables-rules