linux iptables 屏蔽IP段
Submitted by on 2008, March 1, 6:31 PM. 技术
# iptables -F
# iptables -P INPUT ACCEPT
# iptables -P OUTPUT ACCEPT
# iptables -P FORWARD ACCEPT
# iptables -A FORWARD -s 124.115.0.0/24 -j DROP
# iptables -I FORWARD -d 202.96.170.164 -j DROP
补充：： 

单个IP的命令是 
iptables -I INPUT -s 124.115.0.199 -j DROP 

封IP段的命令是 
iptables -I INPUT -s 124.115.0.0/16 -j DROP 
iptables -I INPUT -s 124.115.3.0/16 -j DROP 
iptables -I INPUT -s 124.115.4.0/16 -j DROP 

封整个段的命令是 
iptables -I INPUT -s 124.115.0.0/8 -j DROP 

封几个段的命令是 
iptables -I INPUT -s 61.37.80.0/24 -j DROP 
iptables -I INPUT -s 61.37.81.0/24 -j DROP