代理之痛

只有这样了

sudo iptables -A OUTPUT -m udp -p udp --dport 53 -j ACCEPT
sudo iptables -A OUTPUT -m tcp -p tcp --dport 80 -j ACCEPT
sudo iptables -A OUTPUT -m tcp -p tcp --dport 443 -j ACCEPT
sudo iptables -A OUTPUT -o lo -m tcp -p tcp --dport 8000 -j ACCEPT
sudo iptables -A OUTPUT -m state --state NEW -m owner --gid-owner fwd -j DROP
sudo iptables -A OUTPUT -m state --state NEW -m owner --gid-owner www-data -j DROP

Over!

6 thoughts on “代理之痛”

Leave a Reply

Your email address will not be published. Required fields are marked *