sunOs下设置(/etc/ipf/ipf.conf ipf.rules):
pass in quick from 10.218.101.23 to any
pass out quick from any to 10.218.101.23
pass in quick from 10.218.101.22 to any
pass out quick from any to 10.218.101.22
pass in quick from 10.218.101.21 to any
pass out quick from any to 10.218.101.21
pass in quick from 10.218.101.20 to any
pass out quick from any to 10.218.101.20
pass in quick from 10.218.101.10 to any
pass out quick from any to 10.218.101.10
pass in quick from 10.218.101.11 to any
pass out quick from any to 10.218.101.11
pass in quick from 10.218.101.13 to any
pass out quick from any to 10.218.101.13
pass in quick from 10.218.101.14 to any
pass out quick from any to 10.218.101.14
pass in quick from 10.218.101.15 to any
pass out quick from any to 10.218.101.15
block in quick all
block out quick all
重启防火墙:
svcadm disable ipfilter
svcadm enable ipfilter
liux设置(/etc/sysconfig/iptables):
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -s 10.218.101.20 -j ACCEPT
-A INPUT -s 10.218.101.21 -j ACCEPT
-A INPUT -s 10.218.101.22 -j ACCEPT
-A INPUT -s 10.218.101.23 -j ACCEPT
-A INPUT -s 10.218.101.24 -j ACCEPT
-A INPUT -s 10.218.101.10 -j ACCEPT
-A INPUT -s 10.218.101.11 -j ACCEPT
-A INPUT -s 10.218.101.13 -j ACCEPT
-A INPUT -s 10.218.101.14 -j ACCEPT
-A INPUT -s 10.218.101.15 -j ACCEPT
-A INPUT -s 123.57.184.78 -j ACCEPT
-A INPUT -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT --这句要加上，不然127.0.0.1无法使用(ping也不通)
-A OUTPUT -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT-这句要加上，不然127.0.0.1无法使用(ping也不通)
-A INPUT -j DROP
COMMIT
重启防火墙:
service iptables restart
上面的功能是只允许配置的ip访问本机,其它机器一概进行拦截
