我的solaris10服務器開啟防火墻后，撰寫了ipfilter規則如下：
block in all
pass in log quick proto tcp from any to any port = 1521
pass in log quick proto tcp from xxxxxxxx to any port=ssh
pass in log quick proto tcp from xxxxxxxx to any port=ssh
pass in log quick proto tcp from xxxxxxxx to any port=telnet
pass in log quick proto tcp from xxxxxxxx to any port=22
啟用規則后，連接服務器正常，但是該服務器卻無法連接其它機器了，我對出去的包也沒限制啊
不知是什么原因，望大師們指點！
uj5u.com熱心網友回復：
一個回答的都沒有
uj5u.com熱心網友回復：
按我的理解，這種類似于ACL的策略，要把block in all 這條要放到所有策略的最后才行吧uj5u.com熱心網友回復：
man ipf.confThe default way in which filter rules are applied is for the last matching rule to be used as the decision maker. So even if the first rule to match a packet is a pass, if there is a later matching rule that is a block and no further rules match the packet, then it will be blocked
即 默認為block的
轉載請註明出處，本文鏈接：https://www.uj5u.com/caozuo/82263.html
標籤：Solaris