Fedora core 2服务器平台安全设置揭密1

#touch /etc/rc.d/firewall
#chmod u+x /etc/rc.d/firewall
#vi /etc/rc.d/rc.local
写入一行：/etc/rc.d/firewall

#!/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
#防止syn flood攻击
echo "1" > /proc/sys/net/ipv4/tcp_syncookies
iptables -F
iptables -X
iptables –Z

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

iptables –A INPUT -i lo -p all -j ACCEPT
iptables -A OUTPUT -o lo -p all -j ACCEPT

iptables -A INPUT -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT

iptables -A INPUT -f -m limit --limit 100/s --limit-burst 100 -j ACCEPT

iptables -A INPUT -p tcp -m tcp --sport 80 -j ACCEPT
iptables -A OUTPUT -p tcp -m tcp --dport 80 -j ACCEPT

iptables –A OUTPUT-p icmp --icmp-type echo-request –j ACCEPT
iptables –A INPUT –p icmp --icmp-type echo-reply –j ACCEPT