iptables简介

airarara

iptables -i INPUT -s 61.184.128.235 -j REJECT

iptables -L
Service iptables status

端口转发

/etc/sysctl.conf 配置文件的 net.ipv4.ip_forward = 1
echo 1 > /proc/sys/net/ipv4/ip_forward 设置IPTables 转发标记
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080 本机80转8080
或者改Iptables配置文件：
*nat
:PREROUTING ACCEPT [7:364]
:POSTROUTING ACCEPT [4:275]
:OUTPUT ACCEPT [4:275]
-A PREROUTING -p tcp -m tcp --dport 8380 -j REDIRECT --to-ports 8189
COMMIT



其他端口转发
iptables -t nat -A PREROUTING -d 192.168.0.6 -p tcp --dport 3389 -j DNAT --to-destination 192.168.122.2:3389
iptables -t nat -A POSTROUTING -d 192.168.122.2 -p tcp --dport 3389 -j SNAT --to 192.168.122.1
iptables -A FORWARD -o virbr0 -d 192.168.122.2 -p tcp --dport 3389 -j ACCEPT
iptables -A FORWARD -i virbr0 -s 192.168.122.2 -p tcp --sport 3389 -j ACCEPT
service iptables save
将当前规则保存到 /etc/sysconfig/iptables
若你对这个文件很熟悉直接修改这里的内容也等于命令行方式输入规则。
4、 启动iptables 服务, service iptables restart