开放权限

sudo -i

卸载重装防火墙

apt purge -y iptables-persistent

iptables -L

apt update -y && apt install -y iptables-persistent

编辑文件

nano /etc/iptables/rules.v4

编辑的内容

*filter

:INPUT DROP [0:0]

:FORWARD DROP [0:0]

:OUTPUT ACCEPT [0:0]

-A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT

-A OUTPUT -m state –state ESTABLISHED,RELATED -j ACCEPT

-A INPUT -p tcp –dport 22 -j ACCEPT

-A INPUT -i lo -j ACCEPT

COMMIT

加载规则

iptables-restore < /etc/iptables/rules.v4（这里有个坑，要先用官网版一键脚本处理完成后再搞iptables才正常。）

systemctl enable netfilter-persistent

查看链与规则

iptables -L

官网版一键脚本

curl -sS -O http://wp.2008.in/MyUpload/kejilion.sh && chmod +x kejilion.sh && ./kejilion.sh