最終更新:2012-04-24 (火) 14:53:58 (4376d)  

iptables/メモ
Top / iptables / メモ

メモ 

iptables -L
↑

設定前 

# Firewall configuration written by system-config-firewall                                                                           
# Manual customization of this file is not recommended.                                                                              
*filter                                                                                                                              
:INPUT ACCEPT [0:0]                                                                                                                  
:FORWARD ACCEPT [0:0]                                                                                                                
:OUTPUT ACCEPT [0:0]                                                                                                                 
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT                                                                              
-A INPUT -p icmp -j ACCEPT                                                                                                           
-A INPUT -i lo -j ACCEPT                                                                                                             
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT                                                                     
-A INPUT -j REJECT --reject-with icmp-host-prohibited                                                                                
-A FORWARD -j REJECT --reject-with icmp-host-prohibited                                                                              
COMMIT
↑

HTTPとHTTPSを許可してみた 

# Firewall configuration written by system-config-firewall                                                                           
# Manual customization of this file is not recommended.                                                                              
*filter                                                                                                                              
:INPUT ACCEPT [0:0]                                                                                                                  
:FORWARD ACCEPT [0:0]                                                                                                                
:OUTPUT ACCEPT [0:0]                                                                                                                 
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT                                                                              
-A INPUT -p icmp -j ACCEPT                                                                                                           
-A INPUT -i lo -j ACCEPT                                                                                                             
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT                                                                     
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT                                                                     
-A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT                                                                    
-A INPUT -j REJECT --reject-with icmp-host-prohibited                                                                                
-A FORWARD -j REJECT --reject-with icmp-host-prohibited                                                                              
COMMIT
↑

コマンドの意味 

-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
  • A <rule> : ルールの追加
    • -m state : stateモジュールで処理
    • --state NEW :
    • -m tcp : tcpモジュールで処理
    • -p tcp : プロトコルtcp
    • --dport 80 : 送信先ポートは80
    • -j ACCEPT : 処理方法



検索：