linux share anti complaints server

1) After the restart to take effect
Open： chkconfig iptables on
shut down： chkconfig iptables off

2) With immediate effect，After the restart failure
Open： service iptables start
shut down： service iptables stop

vi /etc/sysconfig/iptables

-A INPUT -m state –state NEW -m tcp -p tcp –dport 80 -j ACCEPT (allow 80 port through the firewall)
-A INPUT -m state –state NEW -m tcp -p tcp –dport 3306 -j ACCEPT (allow port 3306 through the firewall)
Special Note：Many users add these two rules to the last line of firewall configuration，Cause the firewall fails to start，Right should be added to the default port 22. This rule below

After adding a good firewall rules are as follows：

######################################
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state –state NEW -m tcp -p tcp –dport 22 -j ACCEPT
-A INPUT -m state –state NEW -m tcp -p tcp –dport 80 -j ACCEPT
-A INPUT -m state –state NEW -m tcp -p tcp –dport 3306 -j ACCEPT
-A INPUT -j REJECT –reject-with icmp-host-prohibited
-A FORWARD -j REJECT –reject-with icmp-host-prohibited
COMMIT
#####################################

/etc/init.d/iptables restart
#Finally, reboot the firewall configuration to take effect

systemctl stop iptables firewall service iptables save systemctl restart iptables

#写入以下内容

DEVICE=eth0                   //绑定IP段的网卡名称
ONBOOT=yes                    //开机启用此网卡
BOOTPROTO=static              //协议为静态
IPADDR_START=192.168.0.101    //网段的起始IP
IPADDR_END=192.168.0.120      //网段的截止IP
NETMASK=255.255.255.255       //子网掩码
CLONENUM_START=0              //这个数字是网卡别名的开始位置，For example, here eth0 refers 3:0,And IP192.168.0.101 will IPADDR_START set bound to eth0:0on,以此类推
NO_ALIASROUTING=yes           //这个参数的作用是数据包始终通过eth0进出，Do not take the card aliases (such as eth0:0），Setting this parameter can speed up the response of the route，It is strongly recommended that you configure。