Netplan
Ubuntu18.04使用的网络管理是netplan, 配置文件在/etc/netplan/下
刚安装完成的配置是这样的(设置成了静态IP, 添加了DNS)
| network: |
| ethernets: |
| ens3: |
| addresses: |
| - 192.168.13.25/24 |
| dhcp4: false |
| gateway4: 192.168.13.1 |
| nameservers: |
| addresses: |
| - 114.114.114.114 |
| search: [] |
| version: 2 |
添加静态路由
| network: |
| ethernets: |
| ens3: |
| addresses: |
| - 192.168.13.25/24 |
| dhcp4: false |
| gateway4: 192.168.13.1 |
| nameservers: |
| addresses: |
| - 114.114.114.114 |
| search: [] |
| routes: |
| - to: 10.8.0.0/24 |
| via: 192.168.13.15 |
| version: 2 |
测试配置(并应用), 如果回车则应用新配置
应用配置
查看配置结果
| sudo networkctl status -a |
Update 2023-05-15
在Ubuntu22.04中, gateway4 已经deprecated, 需要使用 default route
| routes: |
| - to: default |
| via: 192.168.10.1 |
完整的配置例子为
| network: |
| version: 2 |
| renderer: networkd |
| ethernets: |
| eno1: |
| dhcp4: false |
| dhcp6: false |
| addresses: |
| - 192.168.10.10/24 |
| routes: |
| - to: default |
| via: 192.168.10.1 |
| nameservers: |
| addresses: [192.168.10.1] |
UFW
Ubuntu18.04自带了一个简单防火墙工具 UFW(Uncomplicated Firewall), 职能与firewalld类似, UFW实际上底层起作用的还是是iptables.
默认情况下UFW 阻止所有传入连接并允许所有传出连接. 任何尝试访问当前机器的请求都无法连接, 但当前机器上运行的应用能对外访问.
| |
| sudo ufw enable |
| sudo ufw disable |
| |
| |
| sudo ufw status verbose |
| |
| |
| sudo ufw app list |
| |
| sudo ufw app info OpenSSH |
添加开放端口的几种方式
| |
| sudo ufw allow OpenSSH |
| |
| sudo ufw allow http |
| |
| |
| sudo ufw allow 80 |
| |
| sudo ufw allow 80/tcp |
| |
| sudo ufw allow 'Nginx HTTP' |
| |
| |
| sudo ufw allow https |
| |
| sudo ufw allow 443/tcp |
| |
| sudo ufw allow 'Nginx HTTPS' |
| |
| |
| ufw allow 11200:11299/tcp |
| |
| |
| ufw allow from 192.168.0.0/16 to any port 5001 |
| |
| ufw allow proto tcp from 10.0.0.0/8 to 192.168.0.1 port 25 |
| |
| |
| sudo ufw allow from 192.168.0.0/16 |
添加拒绝端口
| |
| sudo ufw deny 53 |
| |
| sudo ufw deny 53/tcp |
删除存在的规则
| sudo ufw delete deny 80/tcp |
| |
| sudo ufw delete allow 53/udp |
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】凌霞软件回馈社区,博客园 & 1Panel & Halo 联合会员上线
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】博客园社区专享云产品让利特惠,阿里云新客6.5折上折
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步