看板FreeBSD
标 题Re: [问题] 请问如何用防火墙限制telnet的登入ip?
发信站小鹿鹿 BBS (Thu Sep 29 15:41:19 2005)
转信站ptt!ctu-reader!news.nctu!abpe.org
※ 引述《[email protected] (PP )》之铭言：
> /sbin/ipfw add pass tcp from IP to me 23
> /sbin/ipfw add deny all from any to any
翻一下任何一本讲 TCP connection 连线过程的书，要知道 TCP connection
怎麽建立的，还有，要了解 TCP 是双向传输...。
# allow local interface
${fwcmd} add allow ip from any to any via lo0
${fwcmd} add deny ip from 127.0.0.0/8 to any
# pass outgoing packet
${fwcmd} add allow ip from any to any out
# pass established
${fwcmd} add allow tcp from any to any established
# pass 140.113.27.50 to me (SYN)
${fwcmd} add allow tcp from 140.113.27.50 to me 23 setup
# deny telnet
${fwcmd} add deny tcp from any to me 23
--
Resistance is futile.
http://blog.gslin.org/ & <
[email protected]>
--
※ Origin: 邪恶小鹿鹿 <Deer.twbbs.org> ◆ From: 140.113.22.90