64 lines
1.5 KiB
Bash
64 lines
1.5 KiB
Bash
#!/bin/bash
|
||
|
||
# 更新包管理器并安装 iptables-persistent 以便在重启后保存规则
|
||
install_iptables() {
|
||
echo "正在安装iptables..."
|
||
apt-get update
|
||
apt-get install -y iptables ip6tables iptables-persistent
|
||
}
|
||
|
||
# 配置 ufw
|
||
configure_ufw() {
|
||
echo "配置ufw规则"
|
||
|
||
# 允许所有IP访问2087, 2088, 2089端口，使用TCP和UDP协议
|
||
for port in 2087 2088 2089; do
|
||
ufw allow $port/tcp
|
||
ufw allow $port/udp
|
||
done
|
||
|
||
# 启用ufw
|
||
ufw reload
|
||
|
||
# 显示当前的ufw状态
|
||
ufw status verbose
|
||
}
|
||
|
||
# 配置 iptables
|
||
configure_iptables() {
|
||
echo "配置iptables规则"
|
||
|
||
# 允许所有IP访问2087, 2088, 2089端口，使用TCP和UDP协议
|
||
for port in 2087 2088 2089; do
|
||
iptables -A INPUT -p tcp --dport $port -j ACCEPT
|
||
iptables -A INPUT -p udp --dport $port -j ACCEPT
|
||
ip6tables -A INPUT -p tcp --dport $port -j ACCEPT
|
||
ip6tables -A INPUT -p udp --dport $port -j ACCEPT
|
||
done
|
||
|
||
# 保存iptables规则
|
||
iptables-save > /etc/iptables/rules.v4
|
||
ip6tables-save > /etc/iptables/rules.v6
|
||
|
||
# 使规则在重启后生效
|
||
netfilter-persistent save
|
||
netfilter-persistent reload
|
||
}
|
||
|
||
# 检查是否安装了ufw或iptables
|
||
if command -v ufw &> /dev/null
|
||
then
|
||
configure_ufw
|
||
|
||
elif command -v iptables &> /dev/null
|
||
then
|
||
configure_iptables
|
||
|
||
else
|
||
echo "没有安装ufw或iptables，正在安装iptables..."
|
||
install_iptables
|
||
configure_iptables
|
||
fi
|
||
|
||
echo "防火墙规则配置完成"
|