مسدود کردن شماره پورت با IPtables

1/sbin/iptables -A INPUT -p tcp --destination-port {PORT-NUMBER-HERE} -j DROP23### interface section - use eth1 ###45/sbin/iptables -A INPUT -i eth1 -p tcp --destination-port {PORT-NUMBER-HERE} -j DROP67### only drop port for given IP or Subnet ##89/sbin/iptables -A INPUT -i eth0 -p tcp --destination-port {PORT-NUMBER-HERE} -s {IP-ADDRESS-HERE} -j DROP1011/sbin/iptables -A INPUT -i eth0 -p tcp --destination-port {PORT-NUMBER-HERE} -s {IP/SUBNET-HERE} -j DROP

1# /sbin/iptables -A INPUT -p tcp --destination-port 80 -j DROP23# /sbin/service iptables save

1# /sbin/iptables -A INPUT -p tcp -i eth1 ! -s 1.2.3.4 --dport 80 -j DROP

1/sbin/iptables -A OUTPUT -p tcp --dport {PORT-NUMBER-HERE} -j DROP23### interface section use eth1 ###45/sbin/iptables -A OUTPUT -o eth1 -p tcp --dport {PORT-NUMBER-HERE} -j DROP67### only drop port for given IP or Subnet ##89/sbin/iptables -A OUTPUT -o eth0 -p tcp --destination-port {PORT-NUMBER-HERE} -s {IP-ADDRESS-HERE} -j DROP1011/sbin/iptables -A OUTPUT -o eth0 -p tcp --destination-port {PORT-NUMBER-HERE} -s {IP/SUBNET-HERE} -j DROP

1# /sbin/iptables -A OUTPUT -p tcp --dport 25 -j DROP23# /sbin/service iptables save

1# /sbin/iptables -A OUTPUT -p tcp -d 192.168.1.2 --dport 1234 -j DROP23# /sbin/service iptables save

1# Logging #23### If you would like to log dropped packets to syslog, first log it ###45/sbin/iptables -A INPUT -m limit --limit 5/min -j LOG --log-prefix "PORT 80 DROP: " --log-level 767### now drop it ###89/sbin/iptables -A INPUT -p tcp --destination-port 80 -j DROP

1/sbin/iptables -A INPUT -s 123.1.2.3 -i eth1 -p udp -m state --state NEW -m udp --dport 161 -j DROP23# drop students 192.168.1.0/24 subnet to port 8045/sbin/iptables -A INPUT -s 192.168.1.0/24 -i eth1 -p tcp -m state --state NEW -m tcp --dport 80 -j DROP

1# /sbin/iptables -L -n -v23# /sbin/iptables -L -n -v | grep port45# /sbin/iptables -L -n -v | grep -i DROP67# /sbin/iptables -L OUTPUT -n -v89# /sbin/iptables -L INPUT -n -v