我用rad hat 9.0想配置apache+mysql+php的服务器

Question

我用rad hat 9.0想配置apache+mysql+php的服务器，只想开通ftp(21),ssh(22),web(80)三个服务，其它的封闭，iptables角本怎么写？

Answer 1

mysql用的是3306端口
apache用80端口
ftp用21端口
ssh用22端口

# SSH
# allow all sshd incoming connections (including the port fw)
iptables -A INPUT -i eth0 -p tcp -d 0/0 --dport 22 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp -d 0/0 --dport 2222 -j ACCEPT

# HTTP
# allow all http/https incoming/return connections
iptables -A INPUT -i eth0 -p tcp -s 0/0 --sport 80 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth0 -p tcp -s 0/0 --sport 443 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth0 -p tcp -d 0/0 --dport 80 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp -d 0/0 --dport 443 -j ACCEPT

# FTP
# allow all ftpd incoming connections
iptables -A INPUT -i eth0 -p tcp -d 0/0 --dport 21 -j ACCEPT

# mysql
# allow all mysqld incoming connections
iptables -A INPUT -i eth0 -p tcp -d 0/0 --dport 3306 -j ACCEPT