{"id":18578,"date":"2014-11-03T06:40:51","date_gmt":"2014-11-02T22:40:51","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/11\/03\/archlinux-%e5%9f%b7%e8%a1%8c-iptables-firewall\/"},"modified":"2021-03-18T17:24:09","modified_gmt":"2021-03-18T09:24:09","slug":"archlinux-%e5%9f%b7%e8%a1%8c-iptables-firewall","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/11\/03\/archlinux-%e5%9f%b7%e8%a1%8c-iptables-firewall\/","title":{"rendered":"ArchLinux \u57f7\u884c iptables Firewall"},"content":{"rendered":"<p>\u53c3\u8003\u7db2\u7ad9\uff1a<a href=\"https:\/\/wiki.archlinux.org\/index.php\/iptables\" target=\"_blank\" rel=\"noopener noreferrer\">iptables &#8211; ArchWiki<\/a><br \/>\u555f\u52d5 iptables &amp; ip6tables<br \/># <span style=\"color: #ff0000\">systemctl start iptables<\/span><br \/># <span style=\"color: #ff0000\">systemctl start ip6tables<\/span><\/p>\n<p>\u5efa\u7acb iptables\u00a0\u898f\u5247<br \/># <span style=\"color: #ff0000\">cp \/etc\/iptables\/empty.rules \/etc\/iptables\/iptables.rules<br \/><\/span># <span style=\"color: #ff0000\">touch \/etc\/iptables\/ip6tables.rules<\/span><\/p>\n<p>\u958b\u6a5f\u6642\u555f\u52d5 iptables &amp; ip6tables<br \/># <span style=\"color: #ff0000\">systemctl enable iptables<\/span><br \/><span style=\"color: #0000ff\">ln -s &#8216;\/usr\/lib\/systemd\/system\/iptables.service&#8217; &#8216;\/etc\/systemd\/system\/multi-user.target.wants\/iptables.service&#8217;<br \/><\/span># <span style=\"color: #ff0000\">systemctl enable ip6tables<\/span><br \/>[@more@]\u5e95\u4e0b\u4ee5 IPv4 \u70ba\u4f8b<br \/>\u8a2d\u5b9a\u9632\u706b\u7246\u898f\u5247<br \/># <span style=\"color: #ff0000\">iptables -nvL &#8211;line-numbers<\/span><br \/><span style=\"color: #0000ff\">Chain INPUT (policy DROP 18 packets, 1042 bytes)<\/span><br \/><span style=\"color: #0000ff\">num\u00a0\u00a0 pkts bytes target\u00a0\u00a0\u00a0\u00a0 prot opt in\u00a0\u00a0\u00a0\u00a0 out\u00a0\u00a0\u00a0\u00a0 source\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 destination<\/span><br \/><span style=\"color: #0000ff\">1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 ACCEPT\u00a0\u00a0\u00a0\u00a0 all\u00a0 &#8212;\u00a0 lo\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0<\/span><br \/><span style=\"color: #0000ff\">2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 all\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 state INVALID<\/span><br \/><span style=\"color: #0000ff\">3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:!0x17\/0x02 state NEW<\/span><br \/><span style=\"color: #0000ff\">4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x3F\/0x00<\/span><br \/><span style=\"color: #0000ff\">5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x03\/0x03<\/span><br \/><span style=\"color: #0000ff\">6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x06\/0x06<\/span><br \/><span style=\"color: #0000ff\">7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x05\/0x05<\/span><br \/><span style=\"color: #0000ff\">8\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x11\/0x01<\/span><br \/><span style=\"color: #0000ff\">9\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x30\/0x20<\/span><br \/><span style=\"color: #0000ff\">10\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x18\/0x08<\/span><br \/><span style=\"color: #0000ff\">11\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x3F\/0x29<\/span><br \/><span style=\"color: #0000ff\">12\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x3F\/0x37<\/span><br \/><span style=\"color: #0000ff\">13\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x3F\/0x3F<\/span><br \/><span style=\"color: #0000ff\">14\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp flags:0x3F\/0x01<\/span><br \/><span style=\"color: #0000ff\">15\u00a0\u00a0\u00a0\u00a0 107\u00a0 7340 ACCEPT\u00a0\u00a0\u00a0\u00a0 all\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 state RELATED,ESTABLISHED<\/span><br \/><span style=\"color: #0000ff\">16\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 ACCEPT\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp dpt:22<\/span><br \/><span style=\"color: #0000ff\">17\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 ACCEPT\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp dpt:80<\/span><br \/><span style=\"color: #0000ff\">18\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 ACCEPT\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp dpt:443<\/span><br \/><span style=\"color: #0000ff\">19\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 ACCEPT\u00a0\u00a0\u00a0\u00a0 icmp &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 icmptype 8<\/span><br \/><span style=\"color: #0000ff\">20\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 ACCEPT\u00a0\u00a0\u00a0\u00a0 icmp &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 icmptype 0<\/span><\/p>\n<p><span style=\"color: #0000ff\">Chain FORWARD (policy DROP 0 packets, 0 bytes)<\/span><br \/><span style=\"color: #0000ff\">num\u00a0\u00a0 pkts bytes target\u00a0\u00a0\u00a0\u00a0 prot opt in\u00a0\u00a0\u00a0\u00a0 out\u00a0\u00a0\u00a0\u00a0 source\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 destination<\/span><\/p>\n<p><span style=\"color: #0000ff\">Chain OUTPUT (policy ACCEPT 1 packets, 64 bytes)<\/span><br \/><span style=\"color: #0000ff\">num\u00a0\u00a0 pkts bytes target\u00a0\u00a0\u00a0\u00a0 prot opt in\u00a0\u00a0\u00a0\u00a0 out\u00a0\u00a0\u00a0\u00a0 source\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 destination<\/span><br \/><span style=\"color: #0000ff\">1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 0 ACCEPT\u00a0\u00a0\u00a0\u00a0 all\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 lo\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0<\/span><br \/><span style=\"color: #0000ff\">2\u00a0\u00a0\u00a0\u00a0\u00a0 100 16760 ACCEPT\u00a0\u00a0\u00a0\u00a0 all\u00a0 &#8212;\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0 *\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 state RELATED,ESTABLISHED<\/span><\/p>\n<p>\u5c07\u76ee\u524d\u7684\u898f\u5247\u5beb\u5165\u5230 <span style=\"color: #0000ff\">\/etc\/iptables\/iptables.rules<\/span><br \/># <span style=\"color: #ff0000\">iptables-save &gt; \/etc\/iptables\/iptables.rules<\/span><\/p>\n<p>\u91cd\u65b0\u8f09\u5165\u9632\u706b\u7246\u898f\u5247<br \/># <span style=\"color: #ff0000\">systemctl reload iptables<\/span><br \/># <span style=\"color: #ff0000\">iptables-restore &lt; \/etc\/iptables\/iptables.rules<\/span><\/p>\n<p># <span style=\"color: #ff0000\">cat \/etc\/iptables\/iptables.rules<\/span><br \/><span style=\"color: #0000ff\"># Generated by iptables-save v1.4.21 on Mon Sep 29 23:06:35 2014<\/span><br \/><span style=\"color: #0000ff\">*mangle<\/span><br \/><span style=\"color: #0000ff\">:PREROUTING ACCEPT [49:3160]<\/span><br \/><span style=\"color: #0000ff\">:INPUT ACCEPT [49:3160]<\/span><br \/><span style=\"color: #0000ff\">:FORWARD ACCEPT [0:0]<\/span><br \/><span style=\"color: #0000ff\">:OUTPUT ACCEPT [51:7732]<\/span><br \/><span style=\"color: #0000ff\">:POSTROUTING ACCEPT [51:7732]<\/span><br \/><span style=\"color: #0000ff\">COMMIT<\/span><br \/><span style=\"color: #0000ff\"># Completed on Mon Sep 29 23:06:35 2014<\/span><br \/><span style=\"color: #0000ff\"># Generated by iptables-save v1.4.21 on Mon Sep 29 23:06:35 2014<\/span><br \/><span style=\"color: #0000ff\">*filter<\/span><br \/><span style=\"color: #0000ff\">:INPUT DROP [4:124]<\/span><br \/><span style=\"color: #0000ff\">:FORWARD DROP [0:0]<\/span><br \/><span style=\"color: #0000ff\">:OUTPUT ACCEPT [0:0]<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -i lo -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -m state &#8211;state INVALID -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp ! &#8211;tcp-flags FIN,SYN,RST,ACK SYN -m state &#8211;state NEW -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags FIN,SYN FIN,SYN -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags SYN,RST SYN,RST -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags FIN,RST FIN,RST -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags FIN,ACK FIN -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags ACK,URG URG -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags PSH,ACK PSH -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,ACK,URG -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,PSH,ACK,URG -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN -j DROP<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -m state &#8211;state RELATED,ESTABLISHED -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -s 192.168.1.0\/24 -p tcp -m tcp &#8211;dport 22 -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;dport 80 -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p tcp -m tcp &#8211;dport 443 -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p icmp -m icmp &#8211;icmp-type 8 -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">-A INPUT -p icmp -m icmp &#8211;icmp-type 0 -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">-A OUTPUT -o lo -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">-A OUTPUT -m state &#8211;state RELATED,ESTABLISHED -j ACCEPT<\/span><br \/><span style=\"color: #0000ff\">COMMIT<\/span><br \/><span style=\"color: #0000ff\"># Completed on Mon Sep 29 23:06:35 2014<\/span><br \/><span style=\"color: #0000ff\"># Generated by iptables-save v1.4.21 on Mon Sep 29 23:06:35 2014<\/span><br \/><span style=\"color: #0000ff\">*nat<\/span><br \/><span style=\"color: #0000ff\">:PREROUTING ACCEPT [4:124]<\/span><br \/><span style=\"color: #0000ff\">:INPUT ACCEPT [0:0]<\/span><br \/><span style=\"color: #0000ff\">:OUTPUT ACCEPT [0:0]<\/span><br \/><span style=\"color: #0000ff\">:POSTROUTING ACCEPT [0:0]<\/span><br \/><span style=\"color: #0000ff\">COMMIT<\/span><br \/><span style=\"color: #0000ff\"># Completed on Mon Sep 29 23:06:35 2014<\/span><\/p>\n<p>\u4f7f\u7528 LEMP for Raspberry Pi\u00a0\u7248\u6703\u51fa\u73fe\u4e0b\u9762\u7684\u932f\u8aa4\u8a0a\u606f<br \/><span style=\"color: #0000ff\">iptables v1.4.21: can&#8217;t initialize iptables table `filter&#8217;: Table does not exist (do you need to insmod?)<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u53c3\u8003\u7db2\u7ad9\uff1aiptables &#8211; ArchWiki\u555f\u52d5 iptables &amp; ip6tabl &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/11\/03\/archlinux-%e5%9f%b7%e8%a1%8c-iptables-firewall\/\" class=\"more-link\">\u95b1\u8b80\u5168\u6587<span class=\"screen-reader-text\">\u3008ArchLinux \u57f7\u884c iptables Firewall\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[167,113],"tags":[],"class_list":["post-18578","post","type-post","status-publish","format-standard","hentry","category-c-84386","category-c-77170"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["520421"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18578"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18578"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18578\/revisions"}],"predecessor-version":[{"id":20206,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18578\/revisions\/20206"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18578"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}