iptables

centos下安装iptables

yum -y install iptables

 

iptables -L -n -v #查看定义规则的详细信息 

service iptables save

/etc/rc.d/init.d/iptables save

 

service iptables restart 重启服务

 

屏蔽单个IP的命令是

iptables -I INPUT -s 123.45.6.7 -j DROP

 

封整个段即从123.0.0.1到123.255.255.254的命令

iptables -I INPUT -s 123.0.0.0/8 -j DROP

 

封IP段即从123.45.0.1到123.45.255.254的命令

iptables -I INPUT -s 124.45.0.0/16 -j DROP

 

封IP段即从123.45.6.1到123.45.6.254的命令是

iptables -I INPUT -s 123.45.6.0/24 -j DROP

 

iptables安装配置

http://bigamekiller.blog.sohu.com/161702156.html

 

Linux禁止IP、解封IP的方法

http://blog.renhao.org/2010/01/linux-ban-unban-ip/

 

iptables用法简介

http://www.cnblogs.com/ggjucheng/archive/2012/08/19/2646476.html

 

 

iptables里面的dport和sport

http://www.2cto.com/os/201306/218238.html

 

Linux下利用iptables屏蔽IP段

http://os.51cto.com/art/201103/249792.htm