bash/shell Code復(fù)制內(nèi)容到剪貼板
- #!/bin/bash
-
- case "$1" in
-
- start)
- echo -n "Staring to write your Iptbales:..."
-
- /sbin/iptables -F
- /sbin/iptables -X
- /sbin/iptables -Z
- /sbin/iptables -A INPUT -i lo -j ACCEPT
- /sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
- /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 8 -j DROP
- /sbin/iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
- /sbin/iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
- /sbin/iptables -A INPUT -p tcp -m tcp --dport 3306 -j ACCEPT
- /sbin/iptables -P INPUT DROP
- echo "OK"
- ;;
-
- stop)
- echo -n "Stop iptables...."
-
- /sbin/iptables -P INPUT ACCEPT
- /sbin/iptables -F
- /sbin/iptables -X
- /sbin/iptables -Z
- echo "OK"
- ;;
-
- *)
- echo "Usage: $0 {start|stop}"
- ;;
-
- esac
