针对portmap 的DDOS攻击

1. iptables -I INPUT -p tcp --dport 111 -j DROP
2. iptables -I INPUT -s 10.171.254.221 -p tcp --dport 111 -j ACCEPT
3. iptables -I INPUT -s 10.175.197.98 -p tcp --dport 111 -j ACCEPT
4. iptables -I INPUT -s 115.236.160.xx -p tcp --dport 111 -j ACCEPT
6. [root@nfs01 ~]# netstat -nap | grep rpcbind
7. tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 909/rpcbind
8. udp 0 0 0.0.0.0:111 0.0.0.0:* 909/rpcbind
9. udp 0 0 0.0.0.0:656 0.0.0.0:* 909/rpcbind
10. unix 2 [ ACC ] STREAM LISTENING 8778 909/rpcbind /var/run/rpcbind.sock
11. unix 2 [ ] DGRAM 87

复制代码