zeaslity/shell-scripts
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

xray update

Browse Source
This commit is contained in:
zeaslity
2024-11-12 14:50:44 +08:00
parent a1ce13fa13
commit 4ed7ea8d2d
4 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
v2ray示例/firewalld防火墙规则/搬瓦工防火墙.txt
View File

@@ -1,7 +1,6 @@
# 默认禁止所有其他端口
firewall-cmd --set-default-zone=drop
# 允许从任何源访问 22333、443、80 端口的 TCP 和 UDP 流量
firewall-cmd --permanent --add-port=22333/tcp
firewall-cmd --permanent --add-port=22333/udp
@@ -11,10 +10,14 @@ firewall-cmd --permanent --add-port=80/tcp
firewall-cmd --permanent --add-port=80/udp
# 允许来自20000-30000的tcp udp端口
firewall-cmd --zone=drop --add-port=20000-30000/tcp --permanent
firewall-cmd --zone=drop --add-port=20000-30000/udp --permanent
sudo firewall-cmd --zone=drop --add-port=20000-30000/tcp --permanent
sudo firewall-cmd --zone=drop --add-port=20000-30000/udp --permanent
sudo firewall-cmd --reload
# 允许icmp的ping请求
firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="0.0.0.0/0" protocol value="icmp" accept'
firewall-cmd --zone=drop --add-icmp-block-inversion --permanent
firewall-cmd --zone=public --add-icmp-block-inversion --permanent
firewall-cmd --reload
# 重新载入防火墙规则
firewall-cmd --reload