iptables
2018-01-02 本文已影响7人
AEGQ
参考:
示例:
- iptables -I 和 -A的区别
-A 参数： 将规则写到现有规则链的最后
-I 参数： 默认将规则添加到现有规则链的最前面
- 查看filter表规则
iptables -L -n --line-number
- 删除INPUT 链第七条规则
iptables -D INPUT 7
- 删除FORWARD链第14条规则
iptables -D FORWARD 14
- 图例:
XXXXXXXXXXXXXXXXXX
XXX Network XXX
XXXXXXXXXXXXXXXXXX
+
|
v
+-------------+ +------------------+
|table: filter| <---+ | table: nat |
|chain: INPUT | | | chain: PREROUTING|
+-----+-------+ | +--------+---------+
| | |
v | v
[local process] | **************** +--------------+
| +---------+ Routing decision +------> |table: filter |
v **************** |chain: FORWARD|
**************** +------+-------+
Routing decision |
**************** |
| |
v **************** |
+-------------+ +------> Routing decision <---------------+
|table: nat | | ****************
|chain: OUTPUT| | +
+-----+-------+ | |
| | v
v | +-------------------+
+--------------+ | | table: nat |
|table: filter | +----+ | chain: POSTROUTING|
|chain: OUTPUT | +--------+----------+
+--------------+ |
v
XXXXXXXXXXXXXXXXXX
XXX Network XXX
XXXXXXXXXXXXXXXXXX
