iptables用法
linux端口使用权限

fedora中iptables与firewall的关系

妙音 posted @ 2014年3月13日 16:09 in linux with tags 防火墙;firewall;iptables , 5506 阅读
fedora上有两个防火墙iptables和firewall.
 
它们间的关系
iptables用于过滤数据包,属于网络层防火墙.
firewall能够允许哪些服务可用,那些端口可用.... 属于更高一层的防火墙。
 
firewall的底层是使用iptables进行数据过滤,建立在iptables之上。
 
默认的iptables配置
[wyq@localhost ~]$ sudo iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination 
 
firewall启动后,查看iptables的配置
可以看到,firewall修改了iptables中链路
[wyq@localhost sysconfig]$ sudo iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           
INPUT_direct  all  --  0.0.0.0/0            0.0.0.0/0           
INPUT_ZONES_SOURCE  all  --  0.0.0.0/0            0.0.0.0/0           
INPUT_ZONES  all  --  0.0.0.0/0            0.0.0.0/0           
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           
REJECT     all  --  0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED

...........
 
 
firewall可以提供高层的防火墙。
 
所以fedora系统中的设置防火墙,最好使用firewall
 
Avatar_small
依云 说:
2014年3月13日 21:39

「在设置iptables后需要重启iptables」?难道你们在服务状态都不直接用 iptables 命令改而是通过另外的管理工具么?

Avatar_small
Pullman residences 说:
2020年12月19日 00:55

Extremely helpful post. This is my first time i visit here. I discovered such a large number of intriguing stuff in your blog particularly its exchange. Truly its extraordinary article. Keep it up. Pullman residences

Avatar_small
먹튀먹튀검증사이트 说:
2020年12月20日 19:53

Great article with excellent idea!Thank you for such a valuable article. I really appreciate for this great information.. 먹튀검증사이트

Avatar_small
سایت یلماس بت 说:
2020年12月25日 19:29

Most of the time I don’t make comments on websites, but I'd like to say that this article really forced me to do so. Really nice post! سایت یلماس بت

Avatar_small
agen idn poker 说:
2020年12月29日 17:18

I went to this website, and I believe that you have a plenty of excellent information, I have saved your site to my bookmarks. agen idn poker

Avatar_small
Toys Cyprus 说:
2021年1月04日 17:50

Toy Shop Cyprus | Toys Cyprus | Online Toy Shop Nicosia Toys Cyprus

Avatar_small
123 movies 说:
2021年1月06日 22:07

The article looks magnificent, but it would be beneficial if you can share more about the suchlike subjects in the future. Keep posting. 123 movies

Avatar_small
토토 说:
2021年1月10日 19:06

Positive site, where did u come up with the information on this posting? I'm pleased I discovered it though, ill be checking back soon to find out what additional posts you include. 토토

Avatar_small
hkseo 说:
2023年9月09日 17:59

Internet marketing is the treasure map to your digital success. Follow the path, visit here. 1on1 webmarketing

Avatar_small
hkseo 说:
2023年9月11日 16:17

Discover the allure of these intimate keepsakes that have captured the essence of passion. Savor the memories of desire and click here for an unforgettable journey. used pantys


登录 *


loading captcha image...
(输入验证码)
or Ctrl+Enter