MRV Communications LX-4000 Series Informacje Techniczne Pobierz pdf (Strona 324)

100

101

12-12 Configuring Packet Filters Using the iptables and ip6tables Commands

LX Series Configuration Guide

X To create a rule that prevents Telnet requests from a

specific IP address

Use the

iptables

command. The following example creates a

rule that ignores Telnet requests from the IP address

143.114.56.104

Example Config:0 >>

iptables -A INPUT -s 143.114.56.104 -p tcp

--destination-port telnet -j DROP

Use the

ip6tables

command. The following example creates a

rule that ignores Telnet requests from the IP address

fe80::220:edff:febe:3cae

Example Config:0 >>

ip6tables -A INPUT -s fe80::220:edff:febe:3cae

-p tcp --destination-port telnet -j DROP

where

-A Appends the rule to the specified chain (in this

case, the INPUT chain). See “Using iptables and

ip6tables Command Options” on page 12-13 for

alternatives to the -A option.

-s Applies the rule to the specified destination IP

Address (in this case, 143.114.56.104).

-p Applies the rule applies to a specific protocol (in

this case, TCP). See “Using iptables and ip6tables

Command Options” on page 12-13 for a

description of the allowable values of the -p

option.

--destination-port Indicates the TCP destination port to which the

rule applies. (In this case, the destination port is

the Telnet port.)

-j Specifies the action that is to be taken when a

packet matching this criteria is received. In this

case, the packet is to be dropped. See “Using

iptables and ip6tables Command Options” on

page 12-13 for a description of all of the

allowable values (for example, ACCEPT, DENY, or

DROP) of the -j option.

1 2 ... 319 320 321 322 323 324 325 326 327 328 329 ... 691 692

Komentarze do niniejszej Instrukcji

Brak uwag

MRV Communications LX-4000 Series Informacje Techniczne Strona 324

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Serwery MRV Communications LX-4000 Series