090-Firewall whitelist rule configuration for a certain port

 Restart the firewall after the /etc/sysconfig/iptables setting is complete service iptables restart

# Firewall configuration written by system-config-firewall
*filter
:INPUT ACCEPT [28:4060]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [33:5665]
-A INPUT -p tcp -m state --state NEW -m tcp --dport 5667 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 5666 -j ACCEPT
COMMIT
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [5:356]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [6:544]
#-A INPUT -s 10.0.67.223/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.67.148/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.1.92/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.1.80/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.3.12/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.1.61/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.3.11/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.3.13/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.2.32/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.1.39/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.4.129/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.4.124/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.4.131/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.2.208/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 37017 -j DROP

-A INPUT -s 10.0.67.148/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.1.92/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.1.80/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.3.12/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.1.61/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.3.11/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.3.13/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.2.32/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.1.39/32 -p tcp -m tcp --dport 27018 -j ACCEPT
-A INPUT -s 10.0.4.129/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.4.124/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.4.131/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.2.208/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 37018 -j DROP

-A INPUT -s 10.0.67.148/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.1.92/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.1.80/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.3.12/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.1.61/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.3.11/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.3.13/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.2.32/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.1.39/32 -p tcp -m tcp --dport 27019 -j ACCEPT
-A INPUT -s 10.0.4.129/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.4.124/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.4.131/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -s 10.0.2.208/32 -p tcp -m tcp --dport 27017 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 37019 -j DROP
COMMIT

 

Guess you like

Origin http://43.154.161.224:23101/article/api/json?id=325650716&siteId=291194637