iptables 入门（iptables入门）.docVIP

iptables 入门（iptables入门） The instructions in iptables are case sensitive. The major differences in syntax between ipchains and iptables are noted below: 1. in ipchains, such as input chains, use lower case chains names, and in iptables, use uppercase INPUT. 2. in iptables, you specify that the rule is intended to be on that rule table (using -t to specify, such as -t, NAT), and if not specified, the default is to act on the filter table. 3. in ipchains, -i refers to the interface (Interface), but in iptables, -i refers to the direction of entry, and more than -o, which represents the direction of going out. 4. in iptables, the source port uses the keyword --sport or --source-port 5. in iptables, the purpose of port is to use the keyword --dport or --destination-port 6. in iptables, the discard disposition is no longer using the DENY target, instead of DROP. 7. in ipchainss logging function, -l, has been changed to target -j LOG, and the heading of the record file can be specified. 8. in ipchains, in iptables, you can use --syn or --tcp-flag SYN, ACK, FIN, -y, SYN 9. in iptables, the IMCP messages type adds the keyword --icmp-type, such as: Iptables, -A, OUTPUT, -o, eth0, -p, ICMP, -s, $FW_IP, --icmp-type,, -d,, any/0, -j, ACCEPT Examples of iptables usage When setting the rules of packet filtering in iptables, there are several examples. If you are familiar with them first, you can apply them later, and so on, you will soon be able to enter this world. ############################################## ##--------## Dead work ##--------## First, check the settings for the iptables on the machine As follows: Iptables -L -n Iptablse, -t, NAT, -L, -n Define the variable IP referenced in the following example $FW_IP= Open the core forward functionality as follows: ###-----------------------------------------------------### # open forward function ###-----------------------------------------------------### Echo 1 /proc/sys/net/ipv4/ip_forward Or add it in /etc/sysconfig/netw