测试环境
| 主机名 | IP地址 | 备注 |
|---|---|---|
| test1-iptables | 192.168.13.59 | iptables规则 |
| test2-iptables | 192.168.13.15 | 同网段机器1 |
| zhupengfei04-docker-centos7-shanghai-area2 | 192.168.13.39 | 同网段机器2 |
| DESKTOP-HRLQDMO | 192.168.0.254 | Windows 10 |
在 test1-iptables 配置iptables规则，使得位于同网段机器 test2-iptables 能够正常访问test1-iptables 上80端口的Nginx及22端口的SSH访问，但同网段内的zhupengfei04-docker-centos7-shanghai-area2 不能访问80端口的Nginx及22端口的SSH进行来自外部的端口扫描。
测试
[root@test1-iptables ~]# cat iptables_nginx.sh
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -P INPUT DROP
iptables -A INPUT -s 127.0.0.1 -p tcp -m tcp --dport 22 -j ACCEPT
iptables -A INPUT -s 127.0.0.1 -p tcp -m tcp --dport 80 -j ACCEPT
iptables -A INPUT -s 192.168.13.15 -p tcp -m tcp --dport 22 -j ACCEPT
iptables -A INPUT -s 192.168.13.15 -p tcp -m tcp --dport 80 -j ACCEPT
iptables -A INPUT -s 192.168.0.254 -p tcp -m tcp --dport 22 -j ACCEPT
[root@test2-iptables ~]# telnet 192.168.13.59 22
Trying 192.168.13.59...
Connected to 192.168.13.59.
Escape character is '^]'.
SSH-2.0-OpenSSH_8.5
[root@test2-iptables ~]# telnet 192.168.13.59 80
Trying 192.168.13.59...
Connected to 192.168.13.59.
Escape character is '^]'.[root@zhupengfei04-docker-centos7-shanghai-area2 ~]# telnet 192.168.13.59 22
Trying 192.168.13.59...
^C
[root@zhupengfei04-docker-centos7-shanghai-area2 ~]# telnet 192.168.13.59 80
Trying 192.168.13.59...
^C