iptables示例

[root@iZ23um2lv3tZ ~]# more /etc/sysconfig/iptables
# Generated by iptables-save v1.4.7 on Mon Oct  ::
*filter
:INPUT ACCEPT [:]
:FORWARD ACCEPT [:]
:OUTPUT ACCEPT [:]
-A INPUT -s 219.85.158.148/ -j DROP
-A INPUT -s 58.213.122.115/ -j DROP
-A INPUT -s 61.180.64.196/ -j DROP
-A INPUT -s 42.62.65.236/ -j DROP
-A INPUT -s 58.217.192.54/ -j DROP
-A INPUT -s 58.213.122.115/ -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport  -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport  -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Mon Oct  :: 

命令：

#iptables -I INPUT -s 58.217.192.54 -j DROP

#service iptables save