一時的
root@hostname:/home/shimizu# iptables -A INPUT -p icmp -j DROP root@hostname:/home/shimizu# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination DROP icmp -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination ### Firewall情報をすべて消去する ### root@hostname:/home/shimizu# iptables -F root@hostname:/home/shimizu# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination
恒久的
iptables-persistentを利用する
debian8から/etc/init.d/ではなく、netfilter-persistentコマンドで制御するため注意
root@hostname:/home/shimizu# aptitude install iptables-persistent 以下の新規パッケージがインストールされます: iptables-persistent netfilter-persistent{a} ... root@hostname:/home/shimizu# cat /etc/iptables/rules.v4 *filter -A INPUT -p icmp -j DROP COMMIT root@hostname:/home/shimizu# netfilter-persistent reload run-parts: executing /usr/share/netfilter-persistent/plugins.d/15-ip4tables start run-parts: executing /usr/share/netfilter-persistent/plugins.d/25-ip6tables start root@hostname:/home/shimizu# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination DROP icmp -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination