vim /etc/sysconfig/iptables-A INPUT -p icmp -m icmp --icmp-type time-exceeded -j DROP-A OUTPUT -p icmp -m icmp --icmp-type time-exceeded -j IPtables服务重启DROP:systemctl restart 检查iptables新添加的规则是否有效,检查命令:iptables -L -n
vim /etc/sysconfig/iptables-A INPUT -p icmp -m icmp --icmp-type time-exceeded -j DROP-A OUTPUT -p icmp -m icmp --icmp-type time-exceeded -j IPtables服务重启DROP:systemctl restart 检查iptables新添加的规则是否有效,检查命令:iptables -L -n