看板FreeBSD
標 題Re: [問題] 請問如何用防火牆限制telnet的登入ip?
發信站小鹿鹿 BBS (Thu Sep 29 15:41:19 2005)
轉信站ptt!ctu-reader!news.nctu!abpe.org
※ 引述《[email protected] (PP )》之銘言：
> /sbin/ipfw add pass tcp from IP to me 23
> /sbin/ipfw add deny all from any to any
翻一下任何一本講 TCP connection 連線過程的書，要知道 TCP connection
怎麼建立的，還有，要瞭解 TCP 是雙向傳輸...。
# allow local interface
${fwcmd} add allow ip from any to any via lo0
${fwcmd} add deny ip from 127.0.0.0/8 to any
# pass outgoing packet
${fwcmd} add allow ip from any to any out
# pass established
${fwcmd} add allow tcp from any to any established
# pass 140.113.27.50 to me (SYN)
${fwcmd} add allow tcp from 140.113.27.50 to me 23 setup
# deny telnet
${fwcmd} add deny tcp from any to me 23
--
Resistance is futile.
http://blog.gslin.org/ & <
[email protected]>
--
※ Origin: 邪惡小鹿鹿 <Deer.twbbs.org> ◆ From: 140.113.22.90