有时候我们服务器可能是开放的服务比较多,所以我们要写好多条差不多的规则,只不过是端口号不一样,这样就会让匹配的效率下降很多
例如:
iptables -A INPUT -p tcp –syn -m state –state NEW –dport 22 -j ACCEPT
iptables -A INPUT -p tcp –syn -m state –state NEW –dport 21 -j ACCEPT
iptables -A INPUT -p tcp –syn -m state –state NEW –dport 25 -j ACCEPT
iptables -A INPUT -p tcp –syn -m state –state NEW –dport 80 -j ACCEPT
iptables -A INPUT -p tcp –syn -m state –state NEW –dport 110 -j ACCEPT
这个时候,我们就可以使用模块multiport
iptables -A INPUT -p tcp –syn -m state –state NEW -m multiport –dports 21,22,25,80,110 -j ACCEPT
iptables -A INPUT -p all -m state –state ESTABLISHED,RELATED -j ACCEPT
Latest posts by Zhiming Zhang (see all)
- aws eks node 自动化扩展工具 Karpenter - 8月 10, 2022
- ReplicationController and ReplicaSet in Kubernetes - 12月 20, 2021
- public key fingerprint - 5月 27, 2021