{"id":3274,"date":"2014-08-11T22:29:11","date_gmt":"2014-08-11T14:29:11","guid":{"rendered":"http:\/\/www.heitao.me\/?p=3274"},"modified":"2014-08-14T21:34:46","modified_gmt":"2014-08-14T13:34:46","slug":"linux-vps%e6%95%99%e7%a8%8b-linux%e9%98%b2%e7%81%ab%e5%a2%99%ef%bc%9aiptables%e7%a6%81ip%e4%b8%8e%e8%a7%a3%e5%b0%81ip%e7%9a%84%e5%b8%b8%e7%94%a8%e5%91%bd%e4%bb%a4","status":"publish","type":"post","link":"https:\/\/heitao.me\/?p=3274","title":{"rendered":"#Linux VPS\u6559\u7a0b – Linux\u9632\u706b\u5899\uff1aiptables\u7981IP\u4e0e\u89e3\u5c01IP\u7684\u5e38\u7528\u547d\u4ee4"},"content":{"rendered":"

\u5728Linux\u670d\u52a1\u5668\u88ab\u653b\u51fb\u7684\u65f6\u5019\uff0c\u6709\u7684\u65f6\u5019\u4f1a\u6709\u51e0\u4e2a\u4e3b\u529bIP\u3002\u5982\u679c\u80fd\u62d2\u7edd\u6389\u8fd9\u51e0\u4e2aIP\u7684\u653b\u51fb\u7684\u8bdd\uff0c\u4f1a\u5927\u5927\u51cf\u8f7b\u670d\u52a1\u5668\u7684\u538b\u529b\uff0c\u8bf4\u4e0d\u5b9a\u670d\u52a1\u5668\u5c31\u80fd\u6062\u590d\u6b63\u5e38\u4e86\u3002 <\/span><\/p>\n

\u5728Linux\u4e0b\u5c01\u505cIP\uff0c\u6709\u5c01\u6740\u7f51\u6bb5\u548c\u5c01\u6740\u5355\u4e2aIP\u4e24\u79cd\u5f62\u5f0f\u3002\u4e00\u822c\u6765\u8bf4\uff0c\u73b0\u5728\u7684\u653b\u51fb\u8005\u4e0d\u4f1a\u4f7f\u7528\u4e00\u4e2a\u7f51\u6bb5\u7684IP\u6765\u653b\u51fb\uff08\u592a\u62db\u6447\u4e86\uff09\uff0cIP\u4e00\u822c\u90fd\u662f\u6563\u5217\u7684\u3002\u4e8e\u662f\u4e0b\u9762\u5c31\u8be6\u7ec6\u8bf4\u660e\u4e00\u4e0b\u5c01\u6740\u5355\u4e2aIP\u7684\u547d\u4ee4\uff0c\u548c\u89e3\u5c01\u5355\u4e2aIP\u7684\u547d\u4ee4\u3002 <\/span><\/p>\n

\"\" <\/span><\/p>\n

\u5728Linux\u4e0b\uff0c\u4f7f\u7528ipteables\u6765\u7ef4\u62a4IP\u89c4\u5219\u8868\u3002\u8981\u5c01\u505c\u6216\u8005\u662f\u89e3\u5c01IP\uff0c\u5176\u5b9e\u5c31\u662f\u5728IP\u89c4\u5219\u8868\u4e2d\u5bf9\u5165\u7ad9\u90e8\u5206\u7684\u89c4\u5219\u8fdb\u884c\u6dfb\u52a0\u64cd\u4f5c\u3002 <\/span><\/p>\n

\u8981\u5c01\u505c\u4e00\u4e2a<\/span>IP<\/span>\uff0c\u4f7f\u7528\u4e0b\u9762\u8fd9\u6761\u547d\u4ee4<\/span><\/span><\/p>\n

\n

iptables<\/a><\/span><\/span><\/a> -I INPUT -s ***.***.***.*** -j DROP<\/span><\/span><\/p>\n<\/div>\n

\u8981\u89e3\u5c01\u4e00\u4e2a<\/span>IP<\/span>\uff0c\u4f7f\u7528\u4e0b\u9762\u8fd9\u6761\u547d\u4ee4<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables<\/span><\/span><\/a><\/span>–<\/span><\/span>D INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>***.***.***.***<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u53c2\u6570<\/span>-I<\/span>\u662f\u8868\u793a<\/span>Insert<\/span>\uff08\u6dfb\u52a0\uff09\uff0c<\/span>-D<\/span>\u8868\u793a<\/span>Delete<\/span>\uff08\u5220\u9664\uff09\u3002\u540e\u9762\u8ddf\u7684\u662f\u89c4\u5219\uff0c<\/span>INPUT<\/span>\u8868\u793a\u5165\u7ad9\uff0c<\/span>***.***.***.***<\/span>\u8868\u793a\u8981\u5c01\u505c\u7684<\/span>IP<\/span>\uff0c<\/span>DROP<\/span>\u8868\u793a\u653e\u5f03\u8fde\u63a5<\/span>\u3002<\/span><\/span><\/p>\n

\u6b64\u5916\uff0c\u8fd8\u53ef\u4ee5\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u6765\u67e5\u770b\u5f53\u524d\u7684<\/span>IP<\/span>\u89c4\u5219\u8868<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>list<\/span><\/span><\/span><\/p>\n<\/div>\n

\u6bd4\u5982\u73b0\u5728\u8981\u5c06<\/span>123.44.55.66<\/span>\u8fd9\u4e2a<\/span>IP<\/span>\u5c01\u6740\uff0c\u5c31\u8f93\u5165<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>123.44<\/span><\/span>.<\/span><\/span>55.66<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u8981\u89e3\u5c01\u5219\u5c06<\/span>-I<\/span>\u6362\u6210<\/span>-D<\/span>\u5373\u53ef\uff0c\u524d\u63d0\u662f<\/span>iptables<\/span>\u5df2\u7ecf\u6709\u8fd9\u6761\u8bb0\u5f55\u3002\u5982\u679c\u8981\u60f3\u6e05\u7a7a\u5c01\u6389\u7684<\/span>IP<\/span>\u5730\u5740\uff0c\u53ef\u4ee5\u8f93\u5165<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>flush<\/span><\/span><\/span><\/p>\n<\/div>\n

\u8981\u6dfb\u52a0<\/span>IP<\/span>\u6bb5\u5230\u5c01\u505c\u5217\u8868\u4e2d\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>121.0<\/span><\/span>.<\/span><\/span>0.0<\/span><\/span>\/<\/span><\/span>8<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5176\u5b9e\u4e5f\u5c31\u662f\u5c06\u5355\u4e2a<\/span>IP<\/span>\u5c01\u505c\u7684<\/span>IP<\/span>\u90e8\u5206\u6362\u6210\u4e86<\/span><\/span>Linux<\/span><\/span><\/a><\/span>\u7684<\/span>IP<\/span>\u6bb5\u8868\u8fbe\u5f0f\u3002\u5173\u4e8e<\/span>IP<\/span>\u6bb5\u8868\u8fbe\u5f0f\u7f51\u4e0a\u6709\u5f88\u591a\u8be6\u7ec6\u89e3\u8bf4\u7684\uff0c\u8fd9\u91cc\u5c31\u4e0d\u63d0\u4e86<\/span><\/span>\u3002<\/span><\/span><\/span><\/p>\n

\u76f8\u4fe1\u6709\u4e86<\/span>iptables<\/span>\u7684\u5e2e\u52a9\uff0c\u89e3\u51b3\u5c0f\u7684<\/span>DDoS<\/span>\u4e4b\u7c7b\u7684\u653b\u51fb\u4e5f\u4e0d\u5728\u8bdd\u4e0b<\/span>\uff01<\/span><\/span><\/p>\n

\u9644\uff1a\u5176\u4ed6\u5e38\u7528\u7684\u547d<\/span><\/b>\u4ee4<\/span><\/b><\/span><\/p>\n

\u7f16\u8f91<\/span> iptables <\/span>\u6587<\/span>\u4ef6<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>vi <\/span><\/span>\/<\/span><\/span>etc<\/span><\/span>\/<\/span><\/span>sysconfig<\/span><\/span>\/<\/span><\/span>iptables<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5173\u95ed<\/span>\/<\/span>\u5f00\u542f<\/span>\/<\/span>\u91cd\u542f\u9632\u706b<\/span>\u5899<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>\/etc\/<\/span><\/span>init<\/span><\/span>.<\/span><\/span>d<\/span><\/span>\/<\/span><\/span>iptables stop<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>#start <\/span>\u5f00<\/span>\u542f<\/span><\/span><\/span><\/p>\n

4.<\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n

5.<\/span><\/span><\/span>#restart <\/span>\u91cd<\/span>\u542f<\/span><\/span><\/span><\/p>\n<\/div>\n

\u9a8c\u8bc1\u4e00\u4e0b\u662f\u5426\u89c4\u5219\u90fd\u5df2\u7ecf\u751f\u6548<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>L<\/span><\/span><\/span><\/p>\n<\/div>\n

\u4fdd\u5b58\u5e76\u91cd\u542f<\/span>iptables<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>\/etc\/<\/span><\/span>rc<\/span><\/span>.<\/span><\/span>d<\/span><\/span>\/<\/span><\/span>init<\/span><\/span>.<\/span><\/span>d<\/span><\/span>\/<\/span><\/span>iptables save<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>service iptables restart<\/span><\/span><\/span><\/p>\n<\/div>\n

linux<\/span>\u4e0b\u5b9e\u7528<\/span>iptables<\/span>\u5c01<\/span>ip<\/span>\u6bb5\u7684\u4e00\u4e9b\u5e38\u89c1\u547d\u4ee4<\/span>\uff1a<\/span><\/span><\/p>\n

\u5c01\u5355\u4e2a<\/span>IP<\/span>\u7684\u547d\u4ee4\u662f<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>211.1<\/span><\/span>.<\/span><\/span>0.0<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5c01<\/span>IP<\/span>\u6bb5\u7684\u547d\u4ee4\u662f<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>211.1<\/span><\/span>.<\/span><\/span>0.0<\/span><\/span>\/<\/span><\/span>16<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>211.2<\/span><\/span>.<\/span><\/span>0.0<\/span><\/span>\/<\/span><\/span>16<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>211.3<\/span><\/span>.<\/span><\/span>0.0<\/span><\/span>\/<\/span><\/span>16<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5c01\u6574\u4e2a\u6bb5\u7684\u547d\u4ee4\u662f<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>\u00a0<\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>211.0<\/span><\/span>.<\/span><\/span>0.0<\/span><\/span>\/<\/span><\/span>8<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5c01\u51e0\u4e2a\u6bb5\u7684\u547d\u4ee4\u662f<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>61.37<\/span><\/span>.<\/span><\/span>80.0<\/span><\/span>\/<\/span><\/span>24<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>61.37<\/span><\/span>.<\/span><\/span>81.0<\/span><\/span>\/<\/span><\/span>24<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u60f3\u5728\u670d\u52a1\u5668\u542f\u52a8\u81ea\u8fd0\u884c\u7684\u8bdd\u6709\u4e09\u4e2a\u65b9\u6cd5<\/span><\/b>\uff1a<\/span><\/b><\/span><\/p>\n

1<\/span>\u3001\u628a\u5b83\u52a0\u5230<\/span>\/etc\/rc.local<\/span>\u4e2d<\/span><\/span><\/p>\n

2<\/span>\u3001<\/span>iptables-save >;\/etc\/sysconfig\/iptables<\/span>\u53ef\u4ee5\u628a\u4f60\u5f53\u524d\u7684<\/span>iptables<\/span>\u89c4\u5219\u653e\u5230<\/span>\/etc\/sysconfig\/iptables<\/span>\u4e2d\uff0c\u7cfb\u7edf\u542f\u52a8<\/span>iptables<\/span>\u65f6\u81ea\u52a8\u6267\u884c<\/span>\u3002<\/span><\/span><\/p>\n

3<\/span>\u3001<\/span>service iptables save <\/span>\u4e5f\u53ef\u4ee5\u628a\u4f60\u5f53\u524d\u7684<\/span>iptables<\/span>\u89c4\u5219\u653e<\/span>\/etc\/sysconfig\/iptables<\/span>\u4e2d\uff0c\u7cfb\u7edf\u542f\u52a8<\/span>iptables<\/span>\u65f6\u81ea\u52a8\u6267\u884c<\/span>\u3002<\/span><\/span><\/p>\n

\u540e\u4e24\u79cd\u66f4\u597d\u6b64\uff0c\u4e00\u822c<\/span>iptables<\/span>\u670d\u52a1\u4f1a\u5728<\/span>network<\/span>\u670d\u52a1\u4e4b\u524d\u542f\u6765\uff0c\u66f4\u5b89\u5168<\/span>\u3002<\/span><\/span><\/p>\n

\u89e3\u5c01\u7684\u8bdd\uff1a<\/span><\/span><\/b>
\niptables -D INPUT -s IP<\/span><\/span>\u5730\u5740<\/span><\/span> -j REJECT
\niptables -F <\/span>\u5168\u6e05\u6389<\/span>\u4e86<\/span><\/span><\/span><\/p>\n

Linux<\/span><\/a><\/span>\u9632\u706b\u5899<\/span>Iptable<\/span>\u5982\u4f55\u8bbe\u7f6e\u53ea\u5141\u8bb8\u67d0\u4e2a<\/span>ip<\/span>\u8bbf\u95ee<\/span>80<\/span>\u7aef\u53e3\uff0c\u53ea\u5141\u8bb8\u7279\u5b9a<\/span>ip<\/span>\u8bbf\u95ee\u67d0\u7aef\u53e3\uff1f\u53c2\u8003\u4e0b\u9762\u547d\u4ee4\uff0c\u53ea\u5141\u8bb8<\/span>46.166.150.22<\/span>\u8bbf\u95ee\u672c\u673a\u7684<\/span>80<\/span>\u7aef\u53e3\u3002\u5982\u679c\u8981\u8bbe\u7f6e\u5176\u4ed6<\/span>ip<\/span>\u6216\u7aef\u53e3\uff0c\u6539\u6539\u5373\u53ef<\/span>\u3002<\/span><\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>p TCP <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>46.166<\/span><\/span>.<\/span><\/span>150.22<\/span><\/span>–<\/span><\/span>p TCP <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5728<\/span>root<\/span>\u7528\u6237\u4e0b\u6267\u884c\u4e0a\u9762<\/span>2<\/span>\u884c\u547d\u4ee4\u540e\uff0c\u91cd\u542f<\/span>iptables<\/span>\uff0c<\/span> service iptables restart<\/span><\/span><\/p>\n

\u67e5\u770b<\/span>iptables<\/span>\u662f\u5426\u751f\u6548<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>[<\/span><\/span>root@www<\/span><\/span>.<\/span><\/span>xxx<\/span><\/span>.<\/span><\/span>com<\/span><\/span>]<\/span><\/span># iptables -L<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>Chain<\/span><\/span> INPUT <\/span><\/span>(<\/span><\/span>policy ACCEPT<\/span><\/span>)<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>target\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 prot opt source\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 destination<\/span><\/span><\/span><\/p>\n

4.<\/span><\/span><\/span>ACCEPT\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 <\/span><\/span>\u2013<\/span><\/span>\u00a0 <\/span><\/span>46.166<\/span><\/span>.<\/span><\/span>150.22<\/span><\/span>\u00a0\u00a0\u00a0 anywhere\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp dpt<\/span><\/span>:<\/span><\/span>http<\/span><\/span><\/span><\/p>\n

5.<\/span><\/span><\/span>DROP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp\u00a0 <\/span><\/span>\u2013<\/span><\/span>\u00a0 anywhere\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 anywhere\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tcp dpt<\/span><\/span>:<\/span><\/span>http<\/span><\/span><\/span><\/p>\n

6.<\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n

7.<\/span><\/span><\/span>Chain<\/span><\/span> FORWARD <\/span><\/span>(<\/span><\/span>policy ACCEPT<\/span><\/span>)<\/span><\/span><\/span><\/p>\n

8.<\/span><\/span><\/span>target\u00a0\u00a0\u00a0\u00a0 prot opt source\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 destination<\/span><\/span><\/span><\/p>\n

9.<\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n

10.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span><\/span>Chain<\/span><\/span> OUTPUT <\/span><\/span>(<\/span><\/span>policy ACCEPT<\/span><\/span>)<\/span><\/span><\/span><\/p>\n

11.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span><\/span>target\u00a0\u00a0\u00a0\u00a0 prot opt source\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 destination<\/span><\/span><\/span><\/p>\n<\/div>\n

\u4e0a\u9762\u547d\u4ee4\u662f\u9488\u5bf9\u6574\u4e2a\u670d\u52a1\u5668\uff08\u5168\u90e8<\/span>ip<\/span>\uff09\u7981\u6b62<\/span>80<\/span>\u7aef\u53e3\uff0c\u5982\u679c\u53ea\u662f\u9700\u8981\u7981\u6b62\u670d\u52a1\u5668\u4e0a\u67d0\u4e2a<\/span>ip<\/span>\u5730\u5740\u7684<\/span>80<\/span>\u7aef\u53e3\uff0c\u600e\u4e48\u529e<\/span>\uff1f<\/span><\/span><\/p>\n

\u4e0b\u9762\u7684\u547d\u4ee4\u662f\u53ea\u5141\u8bb8\u6765\u81ea<\/span>174.140.3.190<\/span>\u7684<\/span>ip<\/span>\u8bbf\u95ee\u670d\u52a1\u5668\u4e0a<\/span>216.99.1.216<\/span>\u7684<\/span>80<\/span>\u7aef<\/span>\u53e3<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A FORWARD <\/span><\/span>–<\/span><\/span>s <\/span><\/span>174.140<\/span><\/span>.<\/span><\/span>3.190<\/span><\/span>–<\/span><\/span>d <\/span><\/span>216.99<\/span><\/span>.<\/span><\/span>1.216<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>m tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A FORWARD <\/span><\/span>–<\/span><\/span>d <\/span><\/span>216.99<\/span><\/span>.<\/span><\/span>1.216<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>m tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u66f4\u591a<\/span>iptables<\/span>\u53c2\u8003\u547d\u4ee4\u5982\u4e0b<\/span>\uff1a<\/span><\/span><\/p>\n

1.<\/span>\u5148\u5907\u4efd<\/span>iptables<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span># cp \/etc\/sysconfig\/iptables \/var\/tmp<\/span><\/span><\/span><\/p>\n<\/div>\n

\u9700\u8981\u5f00<\/span>80<\/span>\u7aef\u53e3\uff0c\u6307\u5b9a<\/span>IP<\/span>\u548c\u5c40\u57df<\/span>\u7f51<\/span><\/span><\/p>\n

\u4e0b\u9762\u4e09\u884c\u7684\u610f\u601d<\/span>\uff1a<\/span><\/span><\/p>\n

\u5148\u5173\u95ed\u6240\u6709\u7684<\/span>80<\/span>\u7aef<\/span>\u53e3<\/span><\/span><\/p>\n

\u5f00\u542f<\/span>ip<\/span>\u6bb5<\/span>192.168.1.0\/24<\/span>\u7aef\u7684<\/span>80<\/span>\u53e3<\/span><\/span><\/p>\n

\u5f00\u542f<\/span>ip<\/span>\u6bb5<\/span>211.123.16.123\/24<\/span>\u7aef<\/span>ip<\/span>\u6bb5\u7684<\/span>80<\/span>\u53e3<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span># iptables -I INPUT -p tcp \u2013dport 80 -j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span># iptables -I INPUT -s 192.168.1.0\/24 -p tcp \u2013dport 80 -j ACCEPT<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span># iptables -I INPUT -s 211.123.16.123\/24 -p tcp \u2013dport 80 -j ACCEPT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u4ee5\u4e0a\u662f\u4e34\u65f6\u8bbe\u7f6e<\/span>\u3002<\/span><\/span><\/p>\n

2.<\/span>\u7136\u540e\u4fdd\u5b58<\/span>iptables<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span># service iptables save<\/span><\/span><\/span><\/p>\n<\/div>\n

3.<\/span>\u91cd\u542f\u9632\u706b<\/span>\u5899<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>#service iptables restart<\/span><\/span><\/span><\/p>\n<\/div>\n

===============<\/span>\u4ee5\u4e0b\u662f\u8f6c\u8f7d<\/span>================================================<\/span><\/span><\/p>\n

\u4ee5\u4e0b\u662f\u7aef\u53e3\uff0c\u5148\u5168\u90e8\u5c01\u518d\u5f00\u67d0\u4e9b\u7684<\/span>IP<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>9889<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I INPUT <\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.0<\/span><\/span>\/<\/span><\/span>24<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>9889<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5982\u679c\u7528\u4e86<\/span>NAT<\/span>\u8f6c\u53d1\u8bb0\u5f97\u914d\u5408\u4ee5\u4e0b\u624d\u80fd\u751f<\/span>\u6548<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I FORWARD <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I FORWARD <\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.0<\/span><\/span>\/<\/span><\/span>24<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5e38\u7528\u7684<\/span><\/span>IPTABLES<\/span>\u89c4\u5219\u5982\u4e0b\uff1a<\/span>
\n<\/span>\u53ea\u80fd\u6536\u53d1\u90ae\u4ef6\uff0c\u522b\u7684\u90fd\u5173<\/span><\/span>\u95ed<\/span><\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>0F<\/span><\/span>:<\/span><\/span>EA<\/span><\/span>:<\/span><\/span>25<\/span><\/span>:<\/span><\/span>51<\/span><\/span>:<\/span><\/span>37<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>0F<\/span><\/span>:<\/span><\/span>EA<\/span><\/span>:<\/span><\/span>25<\/span><\/span>:<\/span><\/span>51<\/span><\/span>:<\/span><\/span>37<\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>53<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>0F<\/span><\/span>:<\/span><\/span>EA<\/span><\/span>:<\/span><\/span>25<\/span><\/span>:<\/span><\/span>51<\/span><\/span>:<\/span><\/span>37<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>25<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

4.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>0F<\/span><\/span>:<\/span><\/span>EA<\/span><\/span>:<\/span><\/span>25<\/span><\/span>:<\/span><\/span>51<\/span><\/span>:<\/span><\/span>37<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>110<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n<\/div>\n

IPSEC NAT <\/span>\u7b56<\/span>\u7565<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>PFWanPriv<\/span><\/span>–<\/span><\/span>d <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>100.2<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>100.2<\/span><\/span>:<\/span><\/span>80<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n

4.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>1723<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>100.2<\/span><\/span>:<\/span><\/span>1723<\/span><\/span><\/span><\/p>\n

5.<\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n

6.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>1723<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>100.2<\/span><\/span>:<\/span><\/span>1723<\/span><\/span><\/span><\/p>\n

7.<\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n

8.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>500<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>100.2<\/span><\/span>:<\/span><\/span>500<\/span><\/span><\/span><\/p>\n

9.<\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n

10.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>4500<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>100.2<\/span><\/span>:<\/span><\/span>4500<\/span><\/span><\/span><\/p>\n

11.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span><\/span>\u00a0<\/span><\/span><\/span><\/p>\n<\/div>\n

FTP<\/span>\u670d\u52a1\u5668\u7684<\/span>NAT<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>PFWanPriv<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>21<\/span><\/span>–<\/span><\/span>d <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>21<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>:<\/span><\/span>21<\/span><\/span><\/span><\/p>\n<\/div>\n

\u53ea\u5141\u8bb8\u8bbf\u95ee\u6307\u5b9a\u7f51<\/span>\u5740<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>53<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>53<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>d www<\/span><\/span>.<\/span><\/span>ctohome<\/span><\/span>.<\/span><\/span>com <\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

4.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>d www<\/span><\/span>.<\/span><\/span>guowaivps<\/span><\/span>.<\/span><\/span>com <\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

5.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5f00\u653e\u4e00\u4e2a<\/span>IP<\/span>\u7684\u4e00\u4e9b\u7aef\u53e3\uff0c\u5176\u5b83\u90fd\u5c01<\/span>\u95ed<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>–<\/span><\/span>d www<\/span><\/span>.<\/span><\/span>pconline<\/span><\/span>.<\/span><\/span>com<\/span><\/span>.<\/span><\/span>cn <\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>25<\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>109<\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

4.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>110<\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

5.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>53<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

6.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>53<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

7.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u591a\u4e2a\u7aef<\/span>\u53e3<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>m multiport <\/span><\/span>\u2013<\/span><\/span>destination<\/span><\/span>–<\/span><\/span>port <\/span><\/span>22<\/span><\/span>,<\/span><\/span>53<\/span><\/span>,<\/span><\/span>80<\/span><\/span>,<\/span><\/span>110<\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>20.3<\/span><\/span>–<\/span><\/span>j REJECT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u8fde\u7eed\u7aef<\/span>\u53e3<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>m multiport <\/span><\/span>\u2013<\/span><\/span>source<\/span><\/span>–<\/span><\/span>port <\/span><\/span>22<\/span><\/span>,<\/span><\/span>53<\/span><\/span>,<\/span><\/span>80<\/span><\/span>,<\/span><\/span>110<\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>20.3<\/span><\/span>–<\/span><\/span>j REJECT iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>source<\/span><\/span>–<\/span><\/span>port <\/span><\/span>2<\/span><\/span>:<\/span><\/span>80<\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>20.3<\/span><\/span>–<\/span><\/span>j REJECT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u6307\u5b9a\u65f6\u95f4\u4e0a<\/span>\u7f51<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>s <\/span><\/span>10.10<\/span><\/span>.<\/span><\/span>10.253<\/span><\/span>–<\/span><\/span>m time <\/span><\/span>\u2013<\/span><\/span>timestart <\/span><\/span>6<\/span><\/span>:<\/span><\/span>00<\/span><\/span>\u2013<\/span><\/span>timestop <\/span><\/span>11<\/span><\/span>:<\/span><\/span>00<\/span><\/span>\u2013<\/span><\/span>days <\/span><\/span>Mon,Tue,Wed,Thu,Fri,Sat,Sun<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m time <\/span><\/span>\u2013<\/span><\/span>timestart <\/span><\/span>12<\/span><\/span>:<\/span><\/span>00<\/span><\/span>\u2013<\/span><\/span>timestop <\/span><\/span>13<\/span><\/span>:<\/span><\/span>00<\/span><\/span>\u2013<\/span><\/span>days <\/span><\/span>Mon,Tue,Wed,Thu,Fri,Sat,Sun<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m time <\/span><\/span>\u2013<\/span><\/span>timestart <\/span><\/span>17<\/span><\/span>:<\/span><\/span>30<\/span><\/span>\u2013<\/span><\/span>timestop <\/span><\/span>8<\/span><\/span>:<\/span><\/span>30<\/span><\/span>\u2013<\/span><\/span>days <\/span><\/span>Mon,Tue,Wed,Thu,Fri,Sat,Sun<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u6b62\u591a\u4e2a\u7aef\u53e3\u670d<\/span>\u52a1<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m multiport <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>21<\/span><\/span>,<\/span><\/span>23<\/span><\/span>,<\/span><\/span>80<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5c06<\/span>WAN <\/span>\u53e3<\/span>NAT<\/span>\u5230<\/span>PC<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>i $INTERNET_IF <\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>0.1<\/span><\/span><\/span><\/p>\n<\/div>\n

\u5c06<\/span>WAN<\/span>\u53e3<\/span>8000<\/span>\u7aef\u53e3<\/span>NAT<\/span>\u5230<\/span>192<\/span>\u3002<\/span>168<\/span>\u3002<\/span>100<\/span>\u3002<\/span>200<\/span>\u7684<\/span>80<\/span>\u7aef<\/span>\u53e3<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>8000<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>:<\/span><\/span>80<\/span><\/span><\/span><\/p>\n<\/div>\n

MAIL<\/span>\u670d\u52a1\u5668\u8981\u8f6c\u7684\u7aef<\/span>\u53e3<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>110<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>:<\/span><\/span>110<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>t nat <\/span><\/span>–<\/span><\/span>A PREROUTING <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>25<\/span><\/span>–<\/span><\/span>d $INTERNET_ADDR <\/span><\/span>–<\/span><\/span>j DNAT <\/span><\/span>\u2013<\/span><\/span>to<\/span><\/span>–<\/span><\/span>destination <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>:<\/span><\/span>25<\/span><\/span><\/span><\/p>\n<\/div>\n

\u53ea\u5141\u8bb8<\/span>PING 202<\/span>\u3002<\/span>96<\/span>\u3002<\/span>134<\/span>\u3002<\/span>133,<\/span>\u522b\u7684\u670d\u52a1\u90fd\u7981<\/span>\u6b62<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p icmp <\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>–<\/span><\/span>d <\/span><\/span>202.96<\/span><\/span>.<\/span><\/span>134.133<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u7528<\/span>BT<\/span>\u914d<\/span>\u7f6e<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>\u2013<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>\u2013<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>6000<\/span><\/span>:<\/span><\/span>20000<\/span><\/span>\u2013<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u7528<\/span>QQ<\/span>\u9632\u706b\u5899\u914d<\/span>\u7f6e<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>!<\/span><\/span>53<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>d <\/span><\/span>218.17<\/span><\/span>.<\/span><\/span>209.0<\/span><\/span>\/<\/span><\/span>24<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>d <\/span><\/span>218.18<\/span><\/span>.<\/span><\/span>95.0<\/span><\/span>\/<\/span><\/span>24<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

4.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>d <\/span><\/span>219.133<\/span><\/span>.<\/span><\/span>40.177<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u57fa\u4e8e<\/span>MAC<\/span>\uff0c\u53ea\u80fd\u6536\u53d1\u90ae\u4ef6\uff0c\u5176\u5b83\u90fd\u62d2<\/span>\u7edd<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>0A<\/span><\/span>:<\/span><\/span>EB<\/span><\/span>:<\/span><\/span>97<\/span><\/span>:<\/span><\/span>79<\/span><\/span>:<\/span><\/span>A1 <\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>0A<\/span><\/span>:<\/span><\/span>EB<\/span><\/span>:<\/span><\/span>97<\/span><\/span>:<\/span><\/span>79<\/span><\/span>:<\/span><\/span>A1 <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>25<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>0A<\/span><\/span>:<\/span><\/span>EB<\/span><\/span>:<\/span><\/span>97<\/span><\/span>:<\/span><\/span>79<\/span><\/span>:<\/span><\/span>A1 <\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>110<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u7528<\/span>MSN<\/span>\u914d<\/span>\u7f6e<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>9<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>1863<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

3.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>d <\/span><\/span>207.68<\/span><\/span>.<\/span><\/span>178.238<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

4.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>d <\/span><\/span>207.46<\/span><\/span>.<\/span><\/span>110.0<\/span><\/span>\/<\/span><\/span>24<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u53ea\u5141\u8bb8<\/span>PING 202<\/span>\u3002<\/span>96<\/span>\u3002<\/span>134<\/span>\u3002<\/span>133 <\/span>\u5176\u5b83\u516c\u7f51<\/span>IP<\/span>\u90fd\u4e0d\u8bb8<\/span>PING<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p icmp <\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>1.22<\/span><\/span>–<\/span><\/span>d <\/span><\/span>202.96<\/span><\/span>.<\/span><\/span>134.133<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p icmp <\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u6b62\u67d0\u4e2a<\/span>MAC<\/span>\u5730\u5740\u8bbf\u95ee<\/span>internet:<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>20<\/span><\/span>:<\/span><\/span>18<\/span><\/span>:<\/span><\/span>8F<\/span><\/span>:<\/span><\/span>72<\/span><\/span>:<\/span><\/span>F8 <\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u6b62\u67d0\u4e2a<\/span>IP<\/span>\u5730\u5740\u7684<\/span>PING:<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>\u2013<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>\u2013<\/span><\/span>p icmp <\/span><\/span>\u2013<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>0.1<\/span><\/span>\u2013<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u6b62\u67d0\u4e2a<\/span>IP<\/span>\u5730\u5740\u670d\u52a1<\/span>\uff1a<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>\u2013<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>0.1<\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>\u2013<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p udp <\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>0.1<\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>53<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u53ea\u5141\u8bb8\u67d0\u4e9b\u670d\u52a1\uff0c\u5176\u4ed6\u90fd\u62d2\u7edd<\/span>(2<\/span>\u6761\u89c4\u5219<\/span>)<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>0.1<\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>1000<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u6b62\u67d0\u4e2a<\/span>IP<\/span>\u5730\u5740\u7684\u67d0\u4e2a\u7aef\u53e3\u670d<\/span>\u52a1<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>s <\/span><\/span>10.10<\/span><\/span>.<\/span><\/span>10.253<\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j ACCEPT<\/span><\/span><\/span><\/p>\n

2.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>s <\/span><\/span>10.10<\/span><\/span>.<\/span><\/span>10.253<\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u6b62\u67d0\u4e2a<\/span>MAC<\/span>\u5730\u5740\u7684\u67d0\u4e2a\u7aef\u53e3\u670d<\/span>\u52a1<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>p tcp <\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>20<\/span><\/span>:<\/span><\/span>18<\/span><\/span>:<\/span><\/span>8F<\/span><\/span>:<\/span><\/span>72<\/span><\/span>:<\/span><\/span>F8 <\/span><\/span>\u2013<\/span><\/span>dport <\/span><\/span>80<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u6b62\u67d0\u4e2a<\/span>MAC<\/span>\u5730\u5740\u8bbf\u95ee<\/span>internet:<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>–<\/span><\/span>I <\/span><\/span>Filter<\/span><\/span>–<\/span><\/span>m mac <\/span><\/span>\u2013<\/span><\/span>mac<\/span><\/span>–<\/span><\/span>source <\/span><\/span>00<\/span><\/span>:<\/span><\/span>11<\/span><\/span>:<\/span><\/span>22<\/span><\/span>:<\/span><\/span>33<\/span><\/span>:<\/span><\/span>44<\/span><\/span>:<\/span><\/span>55<\/span><\/span>–<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u7981\u6b62\u67d0\u4e2a<\/span>IP<\/span>\u5730\u5740\u7684<\/span>PING:<\/span><\/span><\/p>\n

\n

1.<\/span><\/span><\/span>iptables <\/span><\/span>\u2013<\/span><\/span>A <\/span><\/span>Filter<\/span><\/span>\u2013<\/span><\/span>p icmp <\/span><\/span>\u2013<\/span><\/span>s <\/span><\/span>192.168<\/span><\/span>.<\/span><\/span>0.1<\/span><\/span>\u2013<\/span><\/span>j DROP<\/span><\/span><\/span><\/p>\n<\/div>\n

\u6ce8\uff1a\u4ee5\u4e0a\u8d44\u6599\u6536\u96c6\u4e8e\u7f51\u7edc\uff0c\u6682\u4e0d\u77e5\u51fa\u5904\uff0c\u4ec5\u7528\u4e8e\u5b66\u4e60\u3002<\/span><\/span><\/p>\n

\u9ed1\u6843Mark\uff1a<\/span><\/p>\n

\n\t\t\t\t\t
\u4e03\u725b\u4e91\u5b58\u50a8:\u5916\u94fe\u4e13\u5bb6\uff0c\u514d\u8d3910G\u7a7a\u95f4+10G\u6d41\u91cf\/\u6708\uff0c\u53ef\u7528\u4e8e\u56fe\u7247\u53ca\u97f3\u4e50\u6587\u4ef6\u5916\u94fe\u3002<\/a><\/div><\/div><\/span><\/p>\n

\n\t\t\t\t\t
\u7f51\u7ad9\u6570\u636e\u8d35\u91cd\u65e0\u6bd4\uff0c\u4fdd\u969c\u6570\u636e\u5b89\u5168\uff0c\u65b0\u4eba\u5fc5\u5907\uff0cLinuxVPS\u6bcf\u65e5\u81ea\u52a8\u5907\u4efd\u811a\u672c\u3002<\/a><\/div><\/div>
\n<\/span><\/p>\n
\n","protected":false},"excerpt":{"rendered":"

\u5728Linux\u670d\u52a1\u5668\u88ab\u653b\u51fb\u7684\u65f6\u5019\uff0c\u6709\u7684\u65f6\u5019\u4f1a\u6709\u51e0\u4e2a\u4e3b\u529bIP\u3002\u5982\u679c\u80fd\u62d2\u7edd\u6389\u8fd9\u51e0\u4e2aIP\u7684\u653b\u51fb\u7684\u8bdd\uff0c\u4f1a\u5927\u5927\u51cf\u8f7b\u670d\u52a1\u5668\u7684 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[118,117],"tags":[484,404,483,149],"_links":{"self":[{"href":"https:\/\/heitao.me\/index.php?rest_route=\/wp\/v2\/posts\/3274"}],"collection":[{"href":"https:\/\/heitao.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/heitao.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/heitao.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/heitao.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3274"}],"version-history":[{"count":0,"href":"https:\/\/heitao.me\/index.php?rest_route=\/wp\/v2\/posts\/3274\/revisions"}],"wp:attachment":[{"href":"https:\/\/heitao.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3274"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/heitao.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3274"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/heitao.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3274"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}