shell简单管理iptables脚本
2012-05-24 17:13
281 查看
#!/bin/bash while [ "1" == "1" ] do clear echo "----------------------menu----------------------" echo "(1) service iptables restart" echo "(2) iptables add" echo "(3) iptables delete" echo "(4) iptables stop" echo "(5) iptables save(输完ACL后要记得保存和查看)" echo "(6) iptables status" echo "(7) iptables ACL list" echo "(0) exit" echo "-------------------------------------------------" echo -n "enter you chose[0-7]:" read num if [ ${num} -lt 0 -o ${num} -gt 7 ] then echo "this is not between 0-7" else if [ "${num}" == "1" ] then service iptables restart& else if [ "${num}" == "2" ] ####################################################### then while [ "1" == "1" ] do clear echo "----------------------add ACL----------------------" echo "(1) 针对源IP放行添加" echo "(2) 针对服务器端口放行添加" echo "(3) 针对有端口和服务的ACL添加(这里要参数IP和端口 例如 0/0 80)" echo "(4) 自定义添加" echo "(5) 退回上一级" echo "-------------------------------------------------" echo -n "enter you chose[0-4]:" read aclnum if [ "${aclnum}" == "1" ] then read ip iptables -A INPUT -s ${ip} -p tcp --dport 22 -j ACCEPT service iptables save elif [ "${aclnum}" == "2" ] then read ip iptables -A INPUT -p tcp --dport ${IP} -j ACCEPT service iptables save elif [ "${aclnum}" == "3" ] then read ip port iptables -A INPUT -p tcp -s ${ip} --dport ${port} -j ACCEPT service iptables save elif [ "${aclnum}" == "4" ] then read addacl `${addacl}` service iptables save else break fi echo -n "是否想继续添加: [y/n]:" read contine if [ "${contine}" == "n" -o "${contine}" == "N" ] then break fi done ####################################################### else if [ "${num}" == "3" ] then while [ "1" == "1" ] do clear echo "---------------------delete ACL----------------------" echo "(1) 针对源ip删除" echo "(2) 针对端口删除" echo "(3) 针对有端口和服务的ACL删除" echo "(4) 自定义删除" echo "(5) 退回上一级" echo "-------------------------------------------------" echo -n "enter you chose[0-5]:" read aclnum if [ "${aclnum}" == "1" ] then read ip iptables -D INPUT -s ${ip} -p tcp --dport 22 -j ACCEPT service iptables save elif [ "${aclnum}" == "2" ] then read port iptables -D INPUT -p tcp --dport ${port} -j ACCEPT service iptables save elif [ "${aclnum}" == "3" ] then read ip port iptables -D INPUT -p tcp -s ${ip} --dport ${port} -j ACCEPT service iptables save elif [ "${aclnum}" == "4" ] then read deleteacl `${deleteacl}` service iptables save else break fi echo -n "是否想继续添加: [y/n]:" read contine if [ "${contine}" == "n" -o "${contine}" == "N" ] then break fi done ################################################################### else if [ "${num}" == "4" ] then echo -e "`service iptables stop&` " else if [ "${num}" == "5" ] then echo -e "`service iptables save&`" else if [ "${num}" == "6" ] then echo -e "`service iptables status&`" else if [ "${num}" == "7" ] then while [ "1" == "1" ] do clear echo "---------------------list ACL----------------------" echo "(1) 查看当前正在使用的规则集" echo "(2) 查看每个策略或每条规则、每条链的简单流量统计" echo "(3) 查看NAT表" echo "(4) 自定义查看" echo "(5) 退回上一级" echo "-------------------------------------------------" echo -n "enter you chose[0-5]:" read aclnum if [ "${aclnum}" == "1" ] then iptables -L elif [ "${aclnum}" == "2" ] then iptables -L -n -v elif [ "${aclnum}" == "3" ] then iptables -L -t nat elif [ "${aclnum}" == "4" ] then read listacl `${listacl}` else break fi echo -n "是否想继续添加: [y/n]:" read contine if [ "${contine}" == "n" -o "${contine}" == "N" ] then break fi done ################################################ else exit fi fi fi fi fi fi fi fi echo -n "Do you contine [y/n]:" read contine if [ "${contine}" == "n" -o "${contine}" == "N" ] then exit fi done
相关文章推荐
- shell简单管理iptables脚本
- shell简单管理iptables脚本
- shell简单管理iptables脚本
- Shell实现的iptables管理脚本分享
- Shell实现的iptables管理脚本分享
- shell脚本-简单的添加用户并统计总用户数
- python结合shell脚本实现简单的日常集中巡检
- 我的一些简单的shell脚本实例
- Linux脚本(shell)编程(一) 简单入门HelloWorld
- 一个备份MySQL数据库的简单Shell脚本
- shell脚本的使用---if变量编写lamp管理脚本
- shell脚本编程之“最简单的死循环”【转】
- 关于一个简单的python上传到linux服务器再经过shell脚本ftp传输的问题
- 简单的shell脚本学习
- 对wget简单封装shell脚本
- 我的一些简单的shell脚本实例
- Shell脚本安装:进程管理工具---htop
- 分享高通平台刷版本简单的一个shell脚本
- 简单的一些shell脚本学习--Unix命令行程序
- Shell脚本写的简单字符串hash函数