运行此脚本后
!/斌/庆典
iptables -F
iptables -X
将默认策略设置为删除
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
接受所有内容,无论localhost上的端口
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
允许在端口22上输入(已建立的连接自动接受
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
允许流量转到指定的出站端口
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 53 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 6667 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 6697 -j ACCEPT
删除任何与上述规则不符的内容
iptables -A INPUT -j DROP
iptables -A OUTPUT -j DROP
然后当我输入终端yum -y update
或我使用yum时的任何内容时,我收到了此消息
Loaded plugins: langpacks, product-id, rhui-lb, search-disabled-repos
Could not contact CDS load balancer southeastasia-cds2.cloudapp.net, tring others.
Could not contact CDS load balancer southeastasia-cds3.cloudapp.net, tring others.
Could not contact CDS load balancer southeastasia-cds1.cloudapp.net, tring others.
Could not contact any CDS load balancers: southeastasia-cds2.cloudapp.net, southeastasia-cds3.cloudapp.net, southeastasi
a-cds1.cloudapp.net, eastasia-cds4.cloudapp.net.
这些负载均衡器的端口是什么让我在redhat上的防火墙中允许这个?