"리눅스 iptables"의 두 판 사이의 차이

2015년 2월 12일 (목) 00:46 판

1 개요

iptables, ip6tables^[1]
IP테이블스

리눅스 OS 방화벽
방화벽, 라우터 역할을 함
IP패킷 필터링, NAT 관리도구
여러 개의 Netfilter모듈로 구현됨

2 예시

[root@zetawiki ~]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     icmp --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

[root@zetawiki ~]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22 
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

3 같이 보기

4 주석

↑ IPv6용

5 참고 자료

http://en.wikipedia.org/wiki/Iptables

[1] IPv6용

[1]

@@ 10번째 줄: / 10번째 줄: @@
 ==예시==
 <source lang='cli'>
-[root@jmnote ~]# iptables -L
+[root@zetawiki ~]# iptables -L
 Chain INPUT (policy ACCEPT)
 target     prot opt source               destination
@@ 27번째 줄: / 27번째 줄: @@
 </source>
 <source lang='cli'>
-[root@jmnote ~]# iptables -L -n
+[root@zetawiki ~]# iptables -L -n
 Chain INPUT (policy ACCEPT)
 target     prot opt source               destination