리눅스 iptables

1 개요

iptables, ip6tables

• 리눅스 OS 방화벽
• 방화벽, 라우터 역할을 함
• 패킷 필터링, 네트워크 주소 변환(NAT)기능 설정
• 여러 개의 Netfilter모듈로 구현됨

[root@jmnote ~]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     icmp --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

2 같이 보기

• 고급 보안이 포함된 Windows 방화벽

4 참고 자료

• http://en.wikipedia.org/wiki/Iptables