发现日志里好多垃圾日志:如

013/05/20 23:48:23 kid12| WARNING: CONNECT method received on http Accelerator port 80

2013/05/20 23:48:23 kid12| WARNING: for request: CONNECT mxs.mail.ru:25 HTTP/1.0

2013/05/20 23:48:25 kid12| WARNING: CONNECT method received on http Accelerator port 80

2013/05/20 23:48:25 kid12| WARNING: for request: CONNECT proxylist.co:443 HTTP/1.1

Host: proxylist.co:443

Proxy-Connection: Keep-Alive

2013/05/20 23:48:56 kid12| WARNING: CONNECT method received on http Accelerator port 80

2013/05/20 23:48:56 kid12| WARNING: for request: CONNECT cas.sdo.com:443 HTTP/1.0

User-Agent: Mozilla/4.0

Host: cas.sdo.com:443

Content-Length: 0

上线那会,我把防火墙关闭了,限制只代理某些域名,这些用户访问其他的拒绝;

最近查日志,烦了,内容太多,只想放开80和22,161端口;备注(本人环境是DELL服务器,centos 6.2  需要各位注意网卡名)

iptables -F
iptables -X
iptables -Z
iptables -F INPUT
iptables -A INPUT -i em1 -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -i em1 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -i em1 -p udp --dport 161 -j ACCEPT
iptables -P INPUT DROP
/etc/init.d/iptables  save