{"id":45,"date":"2023-06-05T12:42:56","date_gmt":"2023-06-05T04:42:56","guid":{"rendered":"http:\/\/pro369.com\/linux\/?p=45"},"modified":"2019-07-08T00:52:00","modified_gmt":"2019-07-08T00:52:00","slug":"linux%e4%b8%bb%e6%a9%9f%e9%98%b2%e7%81%ab%e7%89%86%e8%a6%8f%e5%89%87%ef%bc%88linux%e4%b8%bb%e6%a9%9f%e4%bc%ba%e6%9c%8d%e5%99%a8%e6%9e%b6%e8%a8%ad%e6%8a%80%e8%a1%93%ef%bc%89","status":"publish","type":"post","link":"https:\/\/por.tw\/linux\/linux%e4%b8%bb%e6%a9%9f%e9%98%b2%e7%81%ab%e7%89%86%e8%a6%8f%e5%89%87%ef%bc%88linux%e4%b8%bb%e6%a9%9f%e4%bc%ba%e6%9c%8d%e5%99%a8%e6%9e%b6%e8%a8%ad%e6%8a%80%e8%a1%93%ef%bc%89\/","title":{"rendered":"Linux\u4e3b\u6a5f\u9632\u706b\u7246\u898f\u5247\uff08Linux\u4e3b\u6a5f\u4f3a\u670d\u5668\u67b6\u8a2d\u6280\u8853\uff09"},"content":{"rendered":"

Linux\u4e3b\u6a5f\u9632\u706b\u7246\u898f\u5247\uff08Linux\u4e3b\u6a5f\u4f3a\u670d\u5668\u67b6\u8a2d\u6280\u8853\uff09<\/strong><\/font><\/p>\n

Linux \u5b89\u88dd\u5b8c\u7562\uff0c\u4fbf\u5df2\u5167\u5efa\u57fa\u672c\u7684\u9632\u706b\u7246\u898f\u5247\uff0c\u5b83\u662f\u63a1 IPTABLES \u4f86\u9032\u884c\u5c01\u5305\u904e\u6ffe\u7684\u52d5\u4f5c\u3002
\u9810\u8a2d\u7684\u898f\u5247\u5217\u4e3b\u8981\u5728\u9632\u6b62\u5916\u9762\u4e3b\u6a5f\u9023\u7dda\u81f3\u4e3b\u6a5f\uff0c\u88ab\u963b\u64cb\u7684\u670d\u52d9\u6709 FTP, SSH, Samba\u7db2\u82b3\u7b49\u3002<\/p>\n

Linux\u4e3b\u6a5f\u9632\u706b\u7246\u57fa\u672c\u539f\u7406\uff1a<\/strong><\/font><\/p>\n

\u8a2d\u5b9a\u6a94<\/p>\n

\u8a2d\u5b9a\u898f\u5247\u5217\u4f4d\u7f6e\u53ca\u5957\u7528\u65b9\u5f0f\u662f Linux \u5c08\u7528\u7684\u65b9\u6cd5\uff0c\u8207\u5176\u4ed6 Debian OS \u4e0d\u540c\u3002<\/p>\n

    * \u4f7f\u7528\u5de5\u5177\uff1a iptables
    * \u898f\u5247\u5217\u4f4d\u7f6e\uff1a \/etc\/rc.local
    * \u4fee\u6539\u5f8c\u5957\u7528
      root@dns:~# service rc.local start
    * \u8a3b\uff1a rc.local \u539f\u672c\u8a2d\u8a08\u662f\u70ba\u958b\u6a5f\u5f8c\u8981\u624b\u52d5\u57f7\u884c\u7279\u5b9a\u5de5\u4f5c\u7684\u8a2d\u5b9a\u5340\uff0cLinux \u628a\u5b83\u501f\u4f86\u653e\u7f6e\u9632\u706b\u7246\u898f\u5247\u5217<\/p>\n

Linux\u4e3b\u6a5f\u9632\u706b\u7246\u57fa\u672c\u89c0\u5ff5\uff1a<\/strong><\/font><\/p>\n

    * IPTABLES = "\/sbin\/iptables"
      \u9019\u4e00\u884c\u662f\u6307\uff1a\u8a2d\u5b9a IPTABLES \u9019\u500b\u8b8a\u6578\uff0c\u4ee5\u5f8c\u53ea\u8981\u770b\u5230 $IPTABLES \u9019\u500b\u5b57\u4e32\uff0c\u5c31\u4ee3\u8868 \/sbin\/iptables \u9019\u500b\u6307\u4ee4<\/p>\n

    * $IPTABLES -F
      \u9019\u4e00\u884c\u662f\u6307\uff1a\u628a\u4e4b\u524d\u6240\u6709\u5df2\u8a2d\u904e\u7684\u898f\u5247\u6e05\u7a7a(flush)<\/p>\n

Linux\u4e3b\u6a5f\u9632\u706b\u7246\u5c01\u5305\u9032\u51fa\u4e3b\u6a5f\u65b9\u5411\uff1a<\/strong><\/font><\/p>\n

\u5728 \/etc\/rc.local \u5167\u4e4b\u300c\u8a2d\u5b9a filter table \u7684\u9810\u8a2d\u653f\u7b56\u300d\u6703\u770b\u5230\u4e09\u884c\u8a2d\u5b9a\u503c\uff0c\u5982\u4e0b\uff1a<\/p>\n

###—————————————————–###
# \u8a2d\u5b9a filter table \u7684\u9810\u8a2d\u653f\u7b56
###—————————————————–###
$IPTABLES -P INPUT ACCEPT
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -P FORWARD ACCEPT<\/p>\n

\u7b46\u8005\u5c07\u5176\u7c21\u5316\u8aaa\u660e\u5982\u4e0b\uff1a<\/p>\n

    * INPUT   –> \u5916\u9762\u8981\u9032\u5165\u4e3b\u6a5f\u7684\u7db2\u8def\u5c01\u5305\uff0c\u4e3b\u8981\u7528\u65bc\u898f\u7bc4\u5916\u9762\u5982\u4f55\u9023\u7dda\u81f3\u4e3b\u6a5f\u4e0a\u7684\u5404\u7a2e\u670d\u52d9\uff0c\u8207 NAT \u5167\u7db2\u7121\u95dc
    * OUTPUT  –> \u5f9e\u4e3b\u6a5f\u51fa\u53bb\u7684\u7db2\u8def\u5c01\u5305\u3002
    * FORWARD –> \u5f9e B \u7db2\u5361\u8f49\u81f3 A \u7db2\u5361\uff0c\u898f\u7bc4\u65bc\u6709 NAT \u4e3b\u6a5f\u6216\u900f\u901a\u5f0f\u9632\u706b\u7246\u7528\u9014\u6642\uff0c\u5167\u8f49\u5916\u7db2\u8def\u5c01\u5305\u4e4b\u63a7\u7ba1\u3002
    * \u4f9d\u4e0a\u4f8b\uff0c\u9810\u8a2d\u6240\u6709\u7684\u5c01\u5305\u7686\u958b\u653e\uff0c\u4e0d\u963b\u64cb<\/p>\n


INPUT\u898f\u5247\u5217\u7684\u5beb\u6cd5<\/strong><\/font><\/p>\n

\u898f\u5247\u5217\u7684\u5beb\u6cd5\uff0c\u662f\u628a\u9810\u8a2d\u653f\u7b56\u64fa\u5728\u6700\u4e0b\u9762\u4e00\u884c\uff0c\u4f8b\u5916\u898f\u5247\u64fa\u4e0a\u9762\uff0c\u5982\u4e0b\u6240\u4f8b<\/p>\n

# \u53ea\u6709\u672c\u4e3b\u6a5f\u6240\u5c6c\u7db2\u6bb5\u624d\u80fd\u9023\u5230\u9019\u53f0\u4e3b\u6a5f\u7684 ssh port 22
$IPTABLES -A INPUT -p tcp -s 163.26.182.0\/24 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 203.68.102.0\/24 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 220.130.230.76 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 127.0.0.1 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 22 -j DROP<\/p>\n

\u4e0a\u9762\u7684\u898f\u5247\u5217\u53ef\u4ee5\u7528\u4e0b\u9762\u9019\u5f35\u5716\u4f86\u8868\u9054\uff0c\u9810\u8a2d 22 \u57e0\u662f\u4e0d\u88ab\u9023\u7dda\u7684\uff0c\u4f46\u6709\u56db\u500b\u7da0\u9ede\u4f8b\u5916\u3002
Iptables sample.png<\/p>\n

\u9032\u968e\u8655\u7406<\/font>
\u53d6\u6d88\u67d0\u500b\u901a\u8a0a\u57e0\u7684\u963b\u64cb<\/strong><\/font><\/p>\n

\u53ea\u8981\u628a\u6240\u6709\u8a72 port \uff08–dport\uff09\u7684\u898f\u5247\u5217\u524d\u9762\u52a0\u4e0a # \u8b8a\u6210\u8a3b\u89e3\uff0c\u6216\u76f4\u63a5\u522a\u9664\u5373\u53ef\uff0c\u4ee5 FTP \u793a\u4f8b\u5982\u4e0b\uff1a<\/p>\n

# \u53ea\u6709\u672c\u4e3b\u6a5f\u6240\u5c6c\u7db2\u6bb5\u624d\u80fd\u9023\u5230\u9019\u53f0\u4e3b\u6a5f\u7684 FTP SERVER port 21
# $IPTABLES -A INPUT -p tcp -s 163.26.182.0\/24 –dport 21 -j ACCEPT
# $IPTABLES -A INPUT -p tcp -s 127.0.0.1 –dport 21 -j ACCEPT
# $IPTABLES -A INPUT -p tcp –dport 21 -j DROP<\/p>\n

# \u53ea\u6709\u672c\u4e3b\u6a5f\u6240\u5c6c\u7db2\u6bb5\u624d\u80fd\u9023\u5230\u9019\u53f0\u4e3b\u6a5f\u7684 ssh port 22
$IPTABLES -A INPUT -p tcp -s 163.26.182.0\/24 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 203.68.102.0\/24 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 220.130.230.76 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 127.0.0.1 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 22 -j DROP<\/p>\n

\u65b0\u589e\u4f8b\u5916\u9023\u7dda\u7bc4\u570d<\/strong><\/font><\/p>\n

\u82e5\u8981\u65b0\u589e\u4f8b\u5916\u9023\u7dda\u9ede\uff0c\u4e00\u5b9a\u8981\u52a0\u5728\u76f8\u540c\u57e0\u503c\u5340\u584a\u6700\u5f8c\u4e00\u884c\u4e4b\u524d\uff08\u5efa\u8b70\u7b2c\u4e00\u884c\uff09\uff0c\u5047\u8a2d\u6211\u5011\u8981\u52a0\u4e2d\u83ef\u96fb\u4fe1\u67d0\u500b\u7db2\u6bb5 59.127.0.0\/16 \u81f3 Port 22 \u7684\u4f8b\u5916\u9ede\u4e0a\uff0c\u505a\u6cd5\u5982\u4e0b\uff1a<\/p>\n

    * \u7de8\u8f2f \/etc\/rc.local \uff08\u7d05\u5b57\u70ba\u65b0\u589e\u90e8\u5206\uff09
      root@dns:~# vi \/etc\/rc.local<\/p>\n

# \u53ea\u6709\u672c\u4e3b\u6a5f\u6240\u5c6c\u7db2\u6bb5\u624d\u80fd\u9023\u5230\u9019\u53f0\u4e3b\u6a5f\u7684 ssh port 22
$IPTABLES -A INPUT -p tcp -s 59.127.0.0\/16 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 163.26.182.0\/24 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 203.68.102.0\/24 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 220.130.230.76 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 127.0.0.1 –dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 22 -j DROP<\/p>\n

    * \u5957\u7528\u65b0\u898f\u5247
      root@dns:~# service rc.local start<\/p>\n

\u65b0\u589e\u67d0\u500b\u901a\u8a0a\u57e0\u9023\u7dda\u9650\u5236
\u4ee5 TCP 1723 \u70ba\u4f8b<\/p>\n

\u5047\u8a2d\u4e3b\u6a5f\u6709\u67b6 VPN \u670d\u52d9\uff0c\u7d93\u7531\u300cnetstat -nlp\u300d\u67e5\u8a62\u5f8c\u5f97\u77e5\u5176\u4f7f\u7528\u7684\u57e0\u503c\u70ba TCP 1723\u3002\u56e0\u6b64\uff0c\u70ba\u907f\u514d\u4e0d\u5177\u5584\u610f\u7684\u7db2\u5ba2\u96a8\u4fbf\u4e82\u6e2c\u5bc6\u78bc\uff0c\u6211\u5011\u53ef\u4ee5\u5728 \/etc\/rc.loal\u52a0\u4e0a\u5176\u9023\u7dda\u9650\u5236\u3002<\/p>\n

\u5047\u8a2d\u5141\u8a31\u7684\u7db2\u6bb5\u70ba<\/p>\n

   1. \u6821\u5167\uff1a 163.26.182.0\/24
   2. \u6821\u5916\u67d0\u9ede\uff1a 220.130.230.76<\/p>\n

    * \u7de8\u8f2f \/etc\/rc.local\uff0c\u5728 IPv4 \u7684\u8a2d\u5b9a\u5340(\u5c31\u662f \/sbin\/ip6tables -F \u4e4b\u4e0a)\uff0c\u4f9d port \u503c\u6392\u5e8f\uff0c\u5927\u7d04\u5728\u7db2\u82b3\u5340\u584a\u5f8c\u9762\u52a0\u4e0a\u3002
      root@dns:~# vi \/etc\/rc.local\uff08\u7d05\u5b57\u70ba\u65b0\u589e\u90e8\u5206\uff09<\/p>\n

 ……<\/p>\n

$IPTABLES -A INPUT -p tcp –dport 139 -j DROP
$IPTABLES -A INPUT -p tcp –dport 445 -j DROP
$IPTABLES -A INPUT -p udp –dport 137 -j DROP
$IPTABLES -A INPUT -p udp –dport 138 -j DROP<\/p>\n

$IPTABLES -A INPUT -p tcp -s 163.26.182.0\/24 –dport 1723 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 220.130.230.76 –dport 1723 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 127.0.0.1 –dport 1723 -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 1723 -j DROP<\/p>\n

\/sbin\/ip6tables -F
\/sbin\/ip6tables -A INPUT -p tcp –dport 21 -j DROP
\/sbin\/ip6tables -A INPUT -p tcp –dport 22 -j DROP
\/sbin\/ip6tables -A INPUT -p tcp –dport 23 -j DROP
 ……<\/p>\n

    * \u5957\u7528\u65b0\u898f\u5247\u5217
      root@dns:~# service rc.local start<\/p>\n

\u4ee5 ICMP \u70ba\u4f8b<\/p>\n

\u9810\u8a2d\u4e0d\u8b93\u5916\u9762\u7db2\u8def\u4efb\u610f\u9ede\u53ef\u4ee5 PING \u672c\u4e3b\u6a5f\uff0c\u9020\u5c31\u672c\u4e3b\u6a5f\u4e0d\u5b58\u5728\u7684\u5047\u8c61\uff0c\u4f46\u9078\u5b9a\u6578\u9ede\u958b\u653e\u5075\u6e2c\u3002\u5047\u8a2d\u5141\u8a31\u7684\u7db2\u6bb5\u70ba<\/p>\n

   1. \u6559\u7db2\u4e2d\u5fc3\uff1a163.26.200.0\/24
   2. \u6821\u5167\uff1a 163.26.182.0\/24
   3. \u6821\u5916\u67d0\u9ede\uff1a 220.130.230.76<\/p>\n

    * \u7de8\u8f2f \/etc\/rc.local\uff0c\u5728 IPv4 \u7684\u8a2d\u5b9a\u5340\uff0cPort 21 \u898f\u5247\u5217\u4e0a\u65b9\u3002
      root@dns:~# vi \/etc\/rc.local\uff08\u7d05\u5b57\u70ba\u65b0\u589e\u90e8\u5206\uff09<\/p>\n

 ……<\/p>\n

$IPTABLES -A INPUT -p icmp -s 163.26.182.0\/24 -j ACCEPT
$IPTABLES -A INPUT -p icmp -s 163.26.200.0\/24 -j ACCEPT
$IPTABLES -A INPUT -p icmp -j DROP<\/p>\n

# \u53ea\u6709\u672c\u4e3b\u6a5f\u6240\u5c6c\u7db2\u6bb5\u624d\u80fd\u9023\u5230\u9019\u53f0\u4e3b\u6a5f\u7684 FTP server port 21
$IPTABLES -A INPUT -p tcp -s 163.26.182.0\/24 –dport 21 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 127.0.0.1 –dport 21 -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 21 -j DROP
 ……<\/p>\n

    * \u5957\u7528\u65b0\u898f\u5247\u5217
      root@dns:~# service rc.local start<\/p>\n

\u9632\u6b62 DoS \u653b\u64ca<\/strong><\/font><\/p>\n

\u7b46\u8005\u670b\u53cb\u4e3b\u6a5f\u6700\u8fd1\u906d\u5230 DoS \u653b\u64ca\uff0c\u6211\u672c\u4f86\u4ee5 iptables -m limit \u4f86\u8655\u7406\uff0c\u4f46\u767c\u73fe\u5b83\u6703\u4e0d\u5206\u4f86\u6e90\u4e00\u5f8b\u963b\u64cb\uff0c\u9019\u6a23\u7121\u8f9c\u7684 IP Address \u4e5f\u53d7\u5230\u9650\u5236\uff0c\u975e\u5e38\u4e0d\u516c\u5e73\uff0c\u601d\u8003\u4e26\u641c\u5c0b\u4e86\u4e00\u500b\u665a\u4e0a\uff0c\u5f8c\u4f86\u6c7a\u5b9a\u4ee5\u9650\u5236\u55ae\u4e00 IP \u540c\u6642\u9023\u7dda\u6578\uff08connlimit\uff09\uff0c\u4f86\u8655\u7406\u6b64\u985e\u653b\u64ca\uff0c\u5b83\u6703\u628a\u55ae\u4e00 IP \u4f86\u6e90\u540c\u6642\u8981\u6c42\u670d\u52d9\uff08–syn\uff09\u7684\u9023\u7dda\u6578\uff0c\u9650\u5236\u5728\u4e00\u5b9a\u7684\u6578\u91cf\u4ee5\u5167\uff0c\u6b63\u5e38\u7528\u4eba\u5de5\u624b\u52d5\u9ede\u7db2\u9801\uff0c\u5c31\u7b97\u8a72\u7db2\u9801\u6709 FrameSet \uff0c\u61c9\u4e5f\u4e0d\u81f4\u65bc\u5927\u904e 12\uff08\u81ea\u5df2\u7528\u624b\u62fc\u547d\u9ede\u5f97\u5230\u7684\u7d50\u8ad6\uff09\u624d\u5c0d\u3002\u56e0\u6b64\u5728\u8a2d\u5b9a\u6b64\u9650\u5236\u6642\uff0c\u4ee5\u6bcf\u4e00\u500b IP \u540c\u6642\u9023\u7dda\u6578\u4e0d\u5f97\u8d85\u904e 15 \u70ba\u53c3\u6578\uff0c\u4e26\u9032\u884c\u5f8c\u7e8c\u7684\u89c0\u5bdf\u3002\u5728\u8a2d\u5b9a\u5f8c\uff0c\u7d93\u904e\u4e00\u6bb5\u6642\u9593\u7684\u89c0\u5bdf\uff0cCPU \u518d\u4e5f\u4e0d\u6703\u4e00\u76f4\u7dad\u6301\u5728 90-100% \u9ad8\u6a94\u4e86\uff0c\u5927\u7d04\u53ea\u6703\u5076\u800c\u8df3\u81f3 60-70% \uff0c\u4e00\u822c\u7686\u5728 10 % \u4ee5\u5167\u3002\u91cd\u9ede\u662f\u5b83\u53ea tcp-reset \u6709\u554f\u984c\u7684\u4f86\u6e90\uff0c\u7121\u8f9c\u7684\u4eba\u4ecd\u53ef\u4eab\u53d7\u61c9\u6709\u7684\u901f\u5ea6\u3002<\/p>\n

\u8a2d\u5b9a\u65b9\u5f0f\uff1a<\/p>\n

    * \u8acb\u78ba\u8a8d syslog \u6709\u4e0b\u5217\u53c3\u6578
          o Linux \u5728 \/etc\/syslog.conf
          o Ubuntu \u5728 \/etc\/rsyslog.d\/50-default.conf<\/p>\n

# iptables \u7684\u8a18\u9304\u53ef\u4ee5\u5beb\u5165 \/var\/log\/kern.log
kern.*                          -\/var\/log\/kern.log<\/p>\n

    * \u5148\u628a\u53ef\u80fd\u653b\u64ca\u7684 ip \u5beb\u5165 \/var\/log\/kern.log \uff0c\u518d\u628a\u5b83\u7684\u5c01\u5305\u7121\u8072\u7684\u4e1f\u6389\uff1b\u4ee5\u540c\u6642 15 \u500b\u9023\u7dda\u70ba\u9650\u3002<\/p>\n

$IPTABLES -A INPUT -p tcp –syn –dport 80 -m connlimit –connlimit-above 15 -j LOG –log-level 4
$IPTABLES -A INPUT -p tcp –syn –dport 80 -m connlimit –connlimit-above 15 -j REJECT –reject-with tcp-reset<\/p>\n

    * \u5206\u6790\u653b\u64ca\u53ef\u80fd\u4f86\u6e90
          o \u87a2\u5e55\u89c0\u770b(\u4ee5 tab \u9375\u5206\u9694\u6b04\u4f4d)
            root@dns:~# cat \/var\/log\/kern.log |awk '{print $1 " " $2 " " $9}'
          o \u8f49\u81f3\u7d14\u6587\u5b57\uff0c\u4ee5\u4f9b\u4e0b\u8f09\u81f3\u8a66\u7b97\u8868\u7d71\u8a08
            root@dns:~# cat \/var\/log\/kern.log |awk '{print $1 " " $2 " " $9}' > \/root\/dosatt.txt
            \u5448\u73fe\u7684\u7d50\u679c\u90e8\u5206\u622a\u53d6\u5982\u4e0b\uff1a<\/p>\n

May    10    SRC=60.250.181.66
May    10    SRC=60.250.181.66
May    10    SRC=60.250.181.66
May    10    SRC=60.251.81.94
May    10    SRC=60.251.81.94
May    10    SRC=60.251.81.94
May    10    SRC=60.251.81.94
May    10    SRC=60.251.81.94
May    10    SRC=60.251.81.94
May    10    SRC=60.251.81.94
May    10    SRC=60.251.81.94
May    10    SRC=60.251.81.94
May    10    SRC=60.250.181.66
May    10    SRC=60.250.181.66<\/p>\n

    * \u9396\u4e86\u5427\uff0c\u53ef\u7591\u8005\uff01<\/font>
      \u82e5\u67d0\u500b IP \u4f86\u6e90\u60a8\u4e0d\u8a8d\u8b58\uff0c\u4f46\u6bcf\u5929\u5e38\u5e38\u8d85\u904e\uff0c\u4eba\u5de5\u9ede\u7db2\u9801\u7684\u6975\u9650\uff08\u540c\u6642\u8d85\u904e 15 \u500b\u9023\u7dda\u6578\uff09\uff0c\u53ef\u4ee5\u518d\u52a0\u4ee5\u4e0b\u898f\u5247\uff0c\u628a\u5b83\u9396\u4e86\u5427\uff01<\/strong><\/p>\n

$IPTABLES -A INPUT -i eth0 -p tcp -s 60.250.xxx.xx –dport 80 -j DROP<\/p>\n","protected":false},"excerpt":{"rendered":"

Linux\u4e3b\u6a5f\u9632\u706b\u7246\u898f\u5247\uff08Linux\u4e3b\u6a5f\u4f3a\u670d\u5668\u67b6\u8a2d\u6280\u8853\uff09 Linux \u5b89\u88dd\u5b8c\u7562\uff0c\u4fbf\u5df2\u5167\u5efa\u57fa\u672c\u7684\u9632\u706b\u7246\u898f\u5247\uff0c\u5b83\u662f […]<\/p>\n","protected":false},"author":1,"featured_media":535,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[20],"class_list":["post-45","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-linux"],"_links":{"self":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts\/45"}],"collection":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/comments?post=45"}],"version-history":[{"count":0,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts\/45\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/media\/535"}],"wp:attachment":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/media?parent=45"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/categories?post=45"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/tags?post=45"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}