iptables 必须先拒绝全部,在容许

<pre name="code" class="html">[root@wx02 ~]# cat /etc/sysconfig/iptables # Generated by iptables-save v1.4.7 on Tue Sep 20 11:18:45 2016 *filter :INPUT ACCEPT [100:5792] :FORWARD ACCEPT [0:0] :OUTPUT

>>阅读原文<<