iptables.sh 初始化防火墙配置

#!/bin/bash
 
iptables -F
iptables -X
iptables -Z
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT
 
#---------------------------------------------------------------SMG start
 
#limit
#iptables -A INPUT -p tcp -m tcp --dport  --tcp-flags FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above  --connlimit-mask  -j DROP
#To ensure that the connection is normal
iptables -A INPUT -p all  -m state --state RELATED,ESTABLISHED -j ACCEPT
 
#nginx common access
iptables -A INPUT -p tcp --dport  -j ACCEPT
 
#iptables -A INPUT -p tcp --dport  -j ACCEPT
iptables -A INPUT -s 10.0.0.0/ -j ACCEPT
iptables -A INPUT -s SLB -j ACCEPT
 
#Yum
iptables -A INPUT -p tcp --sport  -j ACCEPT
iptables -A INPUT -p tcp --sport  -j ACCEPT
iptables -A INPUT -p tcp --sport  -j ACCEPT
 
#db slb
iptables -A INPUT -s XXXX -j ACCEPT
 
#for zabbix:
iptables -A INPUT -s XXXX -j ACCEPT
 
#for jump
iptables -A INPUT -s XXXX -j ACCEPT
iptables -A INPUT -s XXXX -j ACCEPT
 
##dns
iptables -A INPUT -p tcp --sport  -j ACCEPT
iptables -A INPUT -p udp --sport  -j ACCEPT
 
##for ping:
iptables -A INPUT -p icmp --icmp-type any -j ACCEPT
 
### end ###
iptables -A INPUT -p tcp -j REJECT --reject-with tcp-reset
iptables -A INPUT -j DROP