BBS水木清华站∶精华区

发信人: zixia (Do you zixia tonight), 信区: Linux
标  题: 5. Rusty's Really Quick Guide To Packet Filtering
发信站: BBS 水木清华站 (Wed Oct 11 01:17:33 2000) WWW-POST

Linux 2.4 Packet Filtering HOWTO: Rusty's Really Quick Guide To Packet
Filterin
   Next Previous Contents
Lin                                                                   here a
Ma
   mo----------------------------------------------------------------------o

5. Rusty's Really Quick Guide To Packet Filtering

3.1Most people just have a single PPP connection to the Internet, and don't
   want anyone coming back into their network, or the firewall:

## Insert connection-tracking modules (not needed if built into kernel).
# insmod ip_conntrack
# insmod ip_conntrack_ftp

## Create chain which blocks new connections, except if coming from inside.
# iptables -N block                                                      e,
# iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
# iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT            the
# iptables -A block -j DROP                                               e

on
## Jump to that chain from INPUT and FORWARD chains.
# iptables -A INPUT -j block
# iptables -A FORWARD -j block

     ----------------------------------------------------------------------

   Next Previous Contents

--
)))))))))))))))))))))))))))))))))))))))))))))))))))
        ((((((((((((生命的欢喜可以再影印一张吗?((((((((((((
        ))))))))))))老去的热情可以再拉皮整形吗?))))))))))))
        ((((((((((((病中的真理可以再传真校对吗?((((((((((((
        ))))))))))))死掉的爱情可以再输入键出吗?))))))))))))
        (((((((((((((((((((((((((((((((((((((((((((((((((((

※ 来源:·BBS 水木清华站 smth.org·[FROM: 202.112.45.49]