适用于DNS的iptables规则

# cat /etc/sysconfig/iptables
# Generated by iptables-save v1.3.5 on Thu Oct 31 15:53:45 2013    
*filter    
:INPUT ACCEPT [0:0]    
:FORWARD ACCEPT [0:0]    
:OUTPUT ACCEPT [25144:3493694]    
:RH-Firewall-1-INPUT - [0:0]    
-A INPUT -p udp -m udp --sport 53 -j ACCEPT    
-A INPUT -p tcp -m tcp --sport 53 -j ACCEPT
-A INPUT -j RH-Firewall-1-INPUT    
-A FORWARD -j RH-Firewall-1-INPUT    
-A RH-Firewall-1-INPUT -i lo -j ACCEPT    
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT    
-A RH-Firewall-1-INPUT -p esp -j ACCEPT    
-A RH-Firewall-1-INPUT -p ah -j ACCEPT    
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT    
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 8080 -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 20000:20500 -j ACCEPT    
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited    
COMMIT    
# Completed on Thu Oct 31 15:53:45 2013    
# cat /etc/sysconfig/iptables.save
# Firewall configuration written by system-config-securitylevel    
# Manual customization of this file is not recommended.    
*filter    
:FORWARD ACCEPT [0:0]    
:INPUT ACCEPT [0:0]    
:RH-Firewall-1-INPUT - [0:0]    
:OUTPUT ACCEPT [0:0]    
-A INPUT -j RH-Firewall-1-INPUT    
-A FORWARD -j RH-Firewall-1-INPUT    
-A RH-Firewall-1-INPUT -i lo -j ACCEPT    
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT    
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT    
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT    
-A RH-Firewall-1-INPUT -p udp -d 224.0.0.251 --dport 5353 -j ACCEPT    
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 22 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 21 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 80 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 8080 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 20000:20500 --state NEW -j ACCEPT    
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited    
COMMIT    
#

创新互联公司专注为客户提供全方位的互联网综合服务，包含不限于成都做网站、成都网站设计、重庆网络推广、成都小程序开发、重庆网络营销、重庆企业策划、重庆品牌公关、搜索引擎seo、人物专访、企业宣传片、企业代运营等，从售前售中售后，我们都将竭诚为您服务，您的肯定，是我们最大的嘉奖；创新互联公司为所有大学生创业者提供重庆建站搭建服务，24小时服务热线：18982081108，官方网址：www.cdcxhl.com