iptables 必須先拒絕全部,在容許

<pre name="code" class="html">[root@wx02 ~]# cat /etc/sysconfig/iptables # Generated by iptables-save v1.4.7 on Tue Sep 20 11:18:45 2016 *filter :INPUT ACCEPT [100:5792] :FORWARD ACCEPT [0:0] :OUTPUT

>>阅读原文<<