linux 防火墙配置

vi /etc/sysconfig/iptables 

# Generated by iptables-save v1.4.7 on Mon Feb   ::
*nat
:PREROUTING ACCEPT [:]
:POSTROUTING ACCEPT [:]
:OUTPUT ACCEPT [:]
-A PREROUTING -p tcp -m tcp --dport  -j REDIRECT --to-ports
COMMIT
# Completed on Mon Feb   :: 

# Generated by iptables-save v1.4.7 on Tue Jan  ::
*filter
:INPUT ACCEPT [:]
:FORWARD ACCEPT [:]
:OUTPUT ACCEPT [:]

-A INPUT -m state --state NEW -m tcp -p tcp --dport  -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport  -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport  -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport  -j ACCEPT

COMMIT
# Completed on Tue Jan  :: 

service iptables restart