centos7卸载自带防火墙改用iptables安装使用

yum -y install iptables-services
modprobe ip_tables
modprobe iptable_filter
modprobe iptable_nat
modprobe ip_conntrack
modprobe ip_conntrack_ftp
modprobe ip_nat_ftp
modprobe ipt_state
systemctl stop firewalld 
systemctl disable firewalld
systemctl start iptables.service
systemctl enable iptables.service                         #安装iptables，卸载自带firewalld

iptables -nL                  #查询配置

iptables -F   #清除规则

iptables -A INPUT -s 103.210.70.241/29 -j ACCEPT
iptables -A INPUT -s 103.90.201.128/26 -j ACCEPT
iptables -A INPUT -s 125.60.70.0/24 -j ACCEPT
iptables -A INPUT -s 125.61.69.0/24 -j ACCEPT
iptables -A INPUT -s 10.111.0.0/20 -j ACCEPT                      #允许连接的ip段

iptables -A INPUT -p tcp -m multiport --dport 80,443,20,21,22 -j DROP                 #拒绝部分端口连接

iptables-save                                  #保存规则