# Generated by iptables-save v1.4.21 on Sun Jan 22 08:22:54 2017
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [37884:13843179]
-A INPUT -s 45.76.114.0/24 -j DROP
-A INPUT -s 45.76.74.0/24 -j DROP
-A INPUT -s 108.61.207.0/24 -j DROP
-A INPUT -s 45.76.74.43/32 -p tcp -j DROP
-A INPUT -s 108.61.207.136/32 -p tcp -j DROP
-A INPUT -s 45.76.114.163/32 -p tcp -j DROP
-A INPUT -d 108.61.207.0/24 -p tcp -j DROP
-A INPUT -d 108.61.207.0/24 -p tcp -j DROP
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 20000:20500 -m state --state NEW -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Sun Jan 22 08:22:54 2017
复制代码
-A INPUT -s 45.76.74.43/32 -p tcp -j DROP
-A INPUT -s 108.61.207.136/32 -p tcp -j DROP
-A INPUT -s 45.76.114.163/32 -p tcp -j DROP
这三条规则是通过wdcp后台添加的,可以显示
-A INPUT -s 45.76.114.0/24 -j DROP
-A INPUT -s 45.76.74.0/24 -j DROP
-A INPUT -s 108.61.207.0/24 -j DROP
这三条规则,如论我是通过wdcp后台添加还是通过sh添加都不显示,开始我还以为没有添加成功,后台通过ssh查看才发现已经添加成功,但是wdcp后台没有显示。