FreeBSD如何配置IPFW防火墙

IPFW是FreeBSD上一个非常强大的防火墙软件，通过一些简单的配置，可以帮助用户在FreeBSD系统上实现防火墙保护。本示例代码介绍如何在FreeBSD上安装并配置IPFW防火墙。

1. 安装IPFW软件

# cd /usr/ports/security/ipfw
# make && make install

2. 配置IPFW规则

# cat >> /etc/rc.conf << EOF
firewall_enable="YES"
firewall_type="open"
firewall_quiet="YES"
firewall_logging="YES"
firewall_script="/etc/ipfw.rules"
EOF

# cat > /etc/ipfw.rules << EOF
#!/bin/sh
# 定义变量
IPLIST="10.0.0.1, 192.168.0.1"   # IP地址列表
ALLOW_PORTS="22, 80, 443"         # 允许的端口
DENY_PORTS="icmp"                 # 拒绝的端口

# 清空默认规则
ipfw -q -f flush

# 允许回环
ipfw add allow all from any to any via lo0

# 允许的端口
for port in `echo $ALLOW_PORTS | sed -e s/,/\ /g`; do
  ipfw add allow tcp from $IPLIST to any $port in
  ipfw add allow tcp from any $port to $IPLIST out
done

# 拒绝的端口
for port in `echo $DENY_PORTS | sed -e s/,/\ /g`; do
  ipfw add deny all from any to any $port in
  ipfw add deny all from any $port to any out
done
EOF

3. 启动IPFW

# /etc/rc.d/ipfw start

免责申明：文章和图片全部来源于公开网络，如有侵权，请通知删除 server@dude6.com