来一发用shell剧本把持增加删除检察iptables下令 - 仓酷云

#!/bin/bashwhiletruedoclearecho"----------------------menu----------------------"echo"(1)serviceiptablesrestart"echo"(2)iptablesadd"echo"(3)iptablesdelete"echo"(4)iptablesstop"echo"(5)iptablessave(不保举利用这类形式)"echo"(6)iptablesstatus"echo"(7)iptablesACLlist"echo"(0)exit"echo"会在以后的目次下天生一个fw.sh文件"echo"-------------------------------------------------"echo-n"enteryouchose[0-7]:"readnumif[${num}-lt0-o${num}-gt7]thenecho"thisisnotbetween0-7"elseif["${num}"=="1"]thenserviceiptablesrestart&elseif["${num}"=="2"]#######################################################thenwhile["1"=="1"]doclearecho"----------------------addACL----------------------"echo"(1)针对源IP放行增加"echo"(2)针对办事器端口放行增加"echo"(3)针对有端口和办事的ACL增加（这里要参数IP和端口比方0/080）"echo"(4)自界说增加"echo"(5)退回上一级"echo"-------------------------------------------------"echo-n"enteryouchose[0-4]:"readaclnumif["${aclnum}"=="1"]thenreadipiptables-AINPUT-s${ip}-ptcp--dport22-jACCEPTecho"iptables-AINPUT-s${ip}-ptcp--dport22-jACCEPT">>fw.sh#serviceiptablessaveelif["${aclnum}"=="2"]thenradipiptables-AINPUT-ptcp--dport${IP}-jACCEPTecho"iptables-AINPUT-ptcp--dport${IP}-jACCEPT">>fw.sh#serviceiptablessaveelif["${aclnum}"=="3"]thenreadipportiptables-AINPUT-ptcp-s${ip}--dport${port}-jACCEPTecho"iptables-AINPUT-ptcp-s${ip}--dport${port}-jACCEPT">>fw.sh#serviceiptablessaveelif["${aclnum}"=="4"]thenreadaddacl`${addacl}`serviceiptablessaveelsebreakfiecho-n"是不是想持续增加:[y/n]:"readcontineif["${contine}"=="n"-o"${contine}"=="N"]thenbreakfidone#######################################################elseif["${num}"=="3"]thenwhile["1"=="1"]doclearecho"---------------------deleteACL----------------------"echo"(1)针对源ip删除"echo"(2)针对端口删除"echo"(3)针对有端口和办事的ACL删除"echo"(4)自界说删除"echo"(5)退回上一级"echo"-------------------------------------------------"echo-n"enteryouchose[0-5]:"readaclnumif["${aclnum}"=="1"]thenreadipiptables-DINPUT-s${ip}-ptcp--dport22-jACCEPTecho"iptables-DINPUT-s${ip}-ptcp--dport22-jACCEPT">>fw.sh#serviceiptablessaveelif["${aclnum}"=="2"]thenreadportiptables-DINPUT-ptcp--dport${port}-jACCEPTecho"iptables-DINPUT-ptcp--dport${port}-jACCEPT">>fw.sh#serviceiptablessaveelif["${aclnum}"=="3"]thenreadipportiptables-DINPUT-ptcp-s${ip}--dport${port}-jACCEPTecho"iptables-DINPUT-ptcp-s${ip}--dport${port}-jACCEPT">>fw.sh#serviceiptablessaveelif["${aclnum}"=="4"]thenreaddeleteacl`${deleteacl}`serviceiptablessaveelsebreakfiecho-n"是不是想持续增加:[y/n]:"readcontineif["${contine}"=="n"-o"${contine}"=="N"]thenbreakfidone###################################################################elseif["${num}"=="4"]thenecho-e"`serviceiptablesstop&`"elseif["${num}"=="5"]thenecho-e"`serviceiptablessave&`"elseif["${num}"=="6"]thenecho-e"`serviceiptablesstatus&`"elseif["${num}"=="7"]thenwhile["1"=="1"]doclearecho"---------------------listACL----------------------"echo"(1)检察以后正在利用的划定规矩集"echo"(2)检察每一个战略或每条划定规矩、每条链的复杂流量统计"echo"(3)检察NAT表"echo"(4)自界说检察"echo"(5)退回上一级"echo"-------------------------------------------------"echo-n"enteryouchose[0-5]:"readaclnumif["${aclnum}"=="1"]theniptables-Lelif["${aclnum}"=="2"]theniptables-L-n-velif["${aclnum}"=="3"]theniptables-L-tnatelif["${aclnum}"=="4"]thenreadlistacl`${listacl}`elsebreakfiecho-n"是不是想持续增加:[y/n]:"readcontineif["${contine}"=="n"-o"${contine}"=="N"]thenbreakfidone################################################elseexitfifififififififiecho-n"Doyoucontine[y/n]:"readcontineif["${contine}"=="n"-o"${contine}"=="N"]thenexitfidone

复制代码