我想封掉10.10.16.38.和10.10.16.41段(我也在同一个段上:10..10.16.36),现在的iptables如下: 美容
# Generated by iptab.les-save v.1.2.8 on Wed Dec 1 12:30:39 2004 健康
*mangle
REROUTING ACCEPT [1049041]http://upload.bbs.csuboy.com/Mon_1004/126_6736_e3d115ab71927ac.gif[/img].
:INPUT. ACCEPT [98678]电脑
:FORWARD ACCEPT [9.50078]服务器
:OUTPUT ACCEPT [50.315] 鲜花
OSTROUTING ACCEPT [783258]http://upload.bbs.csuboy.com/Mon_1004/126_6736_e3d115ab71927ac.gif[/img]学习
COMMIT
# Completed on Wed. Dec 1 12:30:3.9 2004 外汇
# Generated by iptables-sav.e v1.2.8 on Wed Dec 1 12:3.0:39 2004.
*nat
REROUTING ACCEPT [616878]http://upload.bbs.csuboy.com/Mon_1004/126_6736_e3d115ab71927ac.gif[/img]
OSTROUTING ACCEPT [26]http://upload.bbs.csuboy.com/Mon_1004/126_6736_e3d115ab71927ac.gif[/img]投资
:OUTPUT ACCEPT [1010.] 建材
-A PRER.OUTING -s 192.168.0.0./255.255.255.0 -p t.cp -m tcp --dport 80 -j REDIRECT --to-ports 3128 美容
-A POSTROUTING. -o eth0 -j SNAT --to-source 10.10.16..36 学习
COMMIT
# Completed on W.ed Dec 1 12:30:39 20.04电脑
# Generated by iptables-save v1.2.8 on Wed De.c 1 12:30:39 .2004域名
*filter
:INP.UT ACCEPT [3868] 乙肝
:FORW.ARD ACCEPT [24898]外贸
:OUTPUT ACCEPT [1.757]教育
-A INPUT -m state --state RELATED,ESTA.BL.ISHED -j ACCEPT 服务器
-A .INPUT -s 10.10.16.41 -j. DROP 域名
-A I.NPUT -s 10.10.16.38. -j DROP 杀毒
-A FORWARD -s .10.10.16..41 -j DROP学习
-A FORWA.RD .-s 10.10.16.38 -j DROP.
COMMIT
# Comp.leted on Wed .Dec 1 12:30:39 2004虚拟主机
不知道这样写对不对,我.测试.了,好像没.起作用,10.10.16.38和10.10.16.41依然可以在他们的网关里写上我的IP,然后上网!!!!!怎么才能封掉那两个IP?????投资
