![Moxa DA-662A-I-16-LX [38/63] Define policy for chain rules](/img/pdf.png)
Moxa DA-662A-I-16-LX [38/63] Define policy for chain rules
![Moxa DA-662A-I-8-LX [38/63] Define policy for chain rules](/views2/1199608/page38/bg26.png)
DA-662A Series Software Managing Communications
4-6
Observe and erase chain rules
Usage:
# iptables [-t tables] [-L] [-n]
-t tables: Table to manipulate (default: ‗filter‘); example: nat or filter.
-L [chain]: List List all rules in selected chains. If no chain is selected, all chains are listed.
-n: Numeric output of addresses and ports.
# iptables [-t tables] [-FXZ]
-F: Flush the selected chain (all the chains in the table if none is listed).
-X: Delete the specified user-defined chain.
-Z: Set the packet and byte counters in all chains to zero.
Examples:
# iptables -L -n
In this example, since we do not use the -t parameter, the system uses the default ‗filter‘ table. Three chains
are included: INPUT, OUTPUT, and FORWARD. INPUT chains are accepted automatically, and all connections
are accepted without being filtered.
#iptables –F
#iptables –X
#iptables -Z
Define policy for chain rules
Usage:
# iptables [-t tables] [-P] [INPUT, OUTPUT, FORWARD, PREROUTING, OUTPUT, POSTROUTING]
[ACCEPT, DROP]
-P: Set the policy for the chain to the given target.
INPUT: For packets coming into the DA-662A series.
OUTPUT: For locally-generated packets.
FORWARD: For packets routed out through the DA-662A series.
PREROUTING: To alter packets as soon as they come in.
POSTROUTING: To alter packets as they are about to be sent out.
Examples:
#iptables –P INPUT DROP
#iptables –P OUTPUT ACCEPT
#iptables –P FORWARD ACCEPT
#iptables –t nat –P PREROUTING ACCEPT
#iptables –t nat –P OUTPUT ACCEPT
#iptables -t nat –P POSTROUTING ACCEPT
In this example, the policy accepts outgoing packets and denies incoming packets.
Содержание
- Da 662a series software user s manual 1
- First edition august 2015 1
- Www moxa com product 1
- Copyright notice 2
- Da 662a series software user s manual 2
- Disclaimer 2
- Technical support contact information 2
- Trademarks 2
- Www moxa com support 2
- Table of contents 3
- Introduction 5
- Da 662a series software introduction 6
- Overview 6
- Software architecture 6
- Da 662a series software introduction 7
- Journaling flash file system jffs2 7
- Da 662a series software introduction 8
- Software package 8
- Getting started 9
- Connecting the da 662a series to a pc 10
- Da 662a series software getting started 10
- Login root password root 10
- Powering on the da 662a series 10
- Serial console 10
- Attention 11
- Da 662a series software getting started 11
- Login root password root 11
- Telnet console 11
- Configuring the ethernet interface 12
- Da 662a series software getting started 12
- Linux users 12
- Root moxa ssh 192 68 27 the authenticity of host 192 68 27 192 68 27 can t be established rsa key fingerprint is 8b ee ff 84 41 25 fc cd 2a f2 92 8f cb 1f 6b 2f are you sure you want to continue connection yes no yes_ 12
- Ssh 192 68 27 12
- Ssh console 12
- Windows users 12
- Da 662a series software getting started 13
- Modifying network settings with the serial console 13
- Root moxa cd etc network root moxa etc network 13
- We always want the loopback interface auto eth0 eth1 eth2 eth3 eth4 lo iface lo inet loopback embedded ethernet lan1 iface eth0 inet static address 192 68 27 network 192 68 netmask 255 55 55 broadcast 192 68 55 embedded ethernet lan2 iface eth1 inet static address 192 68 27 network 192 68 netmask 255 55 55 broadcast 192 68 55 embedded ethernet lan3 iface eth2 inet static address 192 68 27 network 192 68 13
- Auto eth0 eth1 lo iface lo inet loopback iface eth0 inet dhcp iface eth1 inet dhcp 14
- Da 662a series software getting started 14
- Etc init d networking restart 14
- Modifying network settings over the network 14
- Root moxa ifconfig eth0 192 68 root moxa etc network 14
- Test program developing hello c 14
- Cd example hello make 15
- Cd tmp mkdir example cp r mnt cdrom example tmp example 15
- Checking the flash memory space 15
- Compiling hello c 15
- Da 662a series software getting started 15
- Export path usr local arm linux 4 v4 bin path 15
- Installing the tool chain linux 15
- Mount dev cdrom mnt cdrom mnt cdrom toolchain arm linux_4 vx x x_build_yymmddhh sh 15
- Root moxa df h filesystem size used available use mounted on dev root 12 m 9 m 2 m 77 devtmpfs 61 m 0 61 m 0 dev dev ram0 1003 k 22 k 930 k 2 var dev cfa1 1 g 1021 m 509 m 67 var cf dev mtdblock3 16 m 860 k 15 m 5 tmp dev mtdblock3 16 m 860 k 15 m 5 home dev mtdblock3 16 m 860 k 15 m 5 etc root moxa 15
- Chmod x hello release hello release 16
- Da 662a series software getting started 16
- Developing your first application 16
- Ftp 192 68 27 16
- Put hello release 16
- Root localhost hello make prefix arm none linux gnueabi arm none linux gnueabi gcc o hello release hello c arm none linux gnueabi strip s hello release arm none linux gnueabi gcc ggdb o hello debug hello c root localhost hello _ 16
- Root moxa hello release hello 16
- Uploading and running the hello program 16
- Compiling tcps2 c 17
- Da 662a series software getting started 17
- Mount dev cdrom mnt cdrom cp mnt cdrom example tcpserver2 tcps2 c home 1st_application tcps2 c cp mnt cdrom example tcpserver2 tcpsp c home 1st_application tcpsp c cp mnt cdrom example tcpserver2 makefile c home 1st_application makefile c 17
- Root server11 1st_application pwd home da661 662663 1st_application root server11 1st_application 11 total 20 rw r r 1 root root 514 nov 27 11 52 makefile rw r r 1 root root 4554 nov 27 11 52 tcps2 c rw r r 1 root root 6164 nov 27 11 55 tcps2 c root server11 1st_application make_ arm none linux gnueabi gcc o tcps2 release tcps2 c arm none linux gnueabi strip s tcps2 release arm none linux gnueabi gcc o tcpsp release tcpsp c arm none linux gnueabi strip s tcpsp release arm none linux gnueabi gcc ggdb o tcps2 debug tcps2 c 17
- Root server11 home 1st_application 17
- Testing environment 17
- Uploading and running the tcps2 release program 18
- Da 662a series software getting started 20
- Root 4044 s usr sbin snmpd s l dev null 106 root 2832 s usr sbin snmptrapd s 135 root 1364 s sbin cardmgr 139 root 1756 s usr sbin rpc nfsd 141 root 1780 s usr sbin rpc mountd 148 root 2960 s usr sbin sshd 156 root 1272 s bin reportip 157 root 1532 s sbin getty 115200 ttys0 158 root 1532 s sbin getty 115200 ttys1 162 root 3652 s usr sbin sshd 163 root 2208 s bash 169 root 2192 s ftpd 192 68 10 root idle 187 root 1264 s tcps2 release 188 root 1592 s ps root moxa 20
- Tcps2 release 20
- Telnet 192 68 27 400 20
- Testing procedure summary 20
- Da 662a series software getting started 21
- Managing embedded linux 22
- Attention 23
- System version information 23
- Upgrading the firmware 23
- 68 27 putty 25
- Da 662a series software managing embedded linux 25
- Enabling and disabling daemons 25
- Loading factory defaults 25
- Mtd device dev mtd0 erase 128 kibyte 60000 100 complete wait to write file completed 100 now upgrade the file kernel format mtd device dev mtd1 mtd device dev mtd1 erase 128 kibyte 1a0000 100 complete wait to write file completed 100 now upgrade the file root file system format mtd device dev mtd2 mtd device dev mtd2 erase 128 kibyte e00000 100 complete wait to write file completed 100 now upgrade the file directory format mtd device dev mtd5 mtd device dev mtd5 erase 128 kibyte 20000 100 complete wait to write file completed 100 now upgrade the new configuration file upgrade the firmware is ok rebooting 25
- Root moxa cd etc root moxa ps pid user vsz stat command 1 root 1632 s init 3 2 root 0 sw kthreadd 3 root 0 sw ksoftirqd 0 5 root 0 sw kworker u 0 6 root 0 sw rcu_kthread 7 root 0 sw khelper 155 root 0 sw sync_supers 157 root 0 sw bdi default 158 root 0 sw kintegrityd 160 root 0 sw kblockd 25
- 68 27 putty 27
- Bin sh add you want to run daemon root tcps2 release 27
- Da 662a series software managing embedded linux 27
- 68 27 putty 28
- Cd etc rc d init d 28
- Cd etc rc d rc3 d ln s etc rc d init d tcps2 s60tcps2 28
- Da 662a series software managing embedded linux 28
- Rm f etc rc d rc3 d s60tcps2 28
- Root moxa ect rc d rc3 d ls s20snmpd s55ssh s99showreadyled 28
- Root moxa etc rc d rc3 d 28
- S25nfs server s99rmnologin root moxa ect rc d rc3 d ln s root tcps2 release s60tcps2 root moxa ect rc d rc3 d ls s20snmpd s55ssh s99showreadyled 28
- S25nfs server s99rmnologin root moxa etc rc d rc3 d 28
- S25nfs server s99rmnologin s60tcps2 28
- Setting the run level 28
- 68 27 putty 29
- Adjusting the system time 29
- Da 662a series software managing embedded linux 29
- Date mmddhhmmyyyy 29
- Hwclock 29
- Hwclock w 29
- Root moxa date fri jun 23 23 30 31 cst 2000 root moxa hwclock fri jun 23 23 30 35 2000 0 57748 seconds root moxa date 070910002006 sun jul 9 10 00 00 cst 2006 root moxa hwclock w root moxa date hwclock sun jul 9 10 01 07 cst 2006 sun jul 9 10 01 08 2006 0 33547 seconds root moxa 29
- Setting the time manually 29
- Ntp client 30
- Updating the time automatically 30
- 8 root home fixtime sh 31
- Bin sh ntpdate time nist gov hwclock systohc exit 0 31
- Chmod 755 fixtime sh 31
- Cron daemon for executing scheduled commands 31
- Da 662a series software managing embedded linux 31
- Etc init d cron start 31
- How to use cron to update the system time and rtc time every day at 8 00 31
- Attention 32
- Cf mass storage 32
- Connecting peripherals 32
- Da 662a series software managing embedded linux 32
- Usb mass storage 32
- Managing communications 33
- 3 00 putty 34
- Cd etc rc d rc3 d ln s etc rc d init d pure ftpd s99pure ftpd 34
- Da 662a series software managing communications 34
- Disabling the ftp server 34
- Discard dgram udp wait root bin discard discard stream tcp nowait root bin discard ftp stream tcp6 nowait root sbin pure ftpd h g var run ftpd pid telnet stream tcp6 nowait root bin telnetd 34
- Enabling the ftp server 34
- Etc hosts 34
- Etc resolv conf 34
- Nameserver 168 5 34
- Rm f etc rc d rc3 d s99pure ftpd 34
- Root moxa etc cat resolv conf resolv conf this file is the resolver configuration file see resolver 5 nameserver 192 68 6 nameserver 168 5 34
- Telnet ftp 34
- 68 27 putty 35
- Da 662a series software managing communications 35
- Etc nsswitch conf 35
- Home httpd cgi bin 35
- Home httpd html 35
- Nameserver 140 15 1 nameserver 140 15 36 0 root moxa etc 35
- Root moxa home httpd cgi bin ls al drwxr xr x 2 root root 0 aug 24 1999 drwxr xr x 5 root root 0 nov 5 16 16 rwxr xr x 1 root root 757 aug 24 1999 test cgi root moxa home httpd cgi bin 35
- Web service apache 35
- Da 662a series software managing communications 36
- Iptables 36
- Da 662a series software managing communications 37
- Da 662a series software managing communications 38
- Define policy for chain rules 38
- Examples 38
- Iptables f iptables x iptables z 38
- Iptables l n 38
- Iptables p input drop iptables p output accept iptables p forward accept iptables t nat p prerouting accept iptables t nat p output accept iptables t nat p postrouting accept 38
- Iptables t tables fxz 38
- Iptables t tables l n 38
- Iptables t tables p input output forward prerouting output postrouting accept drop 38
- Observe and erase chain rules 38
- Append or delete rules 39
- Da 662a series software managing communications 39
- Examples 39
- Iptables a input i eth0 p all m mac mac source 01 02 03 04 05 06 j drop 39
- Iptables a input i eth0 p tcp dport 21 j drop 39
- Iptables a input i eth0 p tcp dport 25 j log 39
- Iptables a input i eth0 p tcp s 192 68 24 j accept 39
- Iptables a input i eth0 p tcp s 192 68 4 dport 137 139 j accept 39
- Iptables a input i eth0 p tcp s 192 68 5 j drop 39
- Iptables a input i eth0 p tcp s 192 68 j accept 39
- Iptables a input i lo j accept 39
- Iptables t table ai input output forward io interface p tcp udp icmp all s ip network sport ports d ip network dport ports j accept drop 39
- Enabling nat at bootup 40
- Nat example 40
- Atdt5551212 41
- Connect 41
- Connect chat etc 41
- Connection 41
- Da 662a series software managing communications 41
- Dial up service ppp 41
- Example 1 connecting to a ppp server over a simple dial up 41
- Ogin username word password 41
- Pppd connect chat v atdt5551212 connect ogin username word password dev ttym0 115200 debug crtscts modem defaultroute 41
- Pppd connect chat v atdt5551212 connect user username password password dev ttym0 115200 crtscts modem 41
- Crtscts 42
- Da 662a series software managing communications 42
- Defaultroute 42
- Example 2 connecting to a ppp server over a hard wired link 42
- How to check the connection 42
- Pppd connect chat v noipdefault dev ttym0 19200 crtscts 42
- Pppd connect chat v user root password root noipdefault dev ttym0 19200 crtscts 42
- Sbin ifconfig 42
- Da 662a series software managing communications 43
- Netstat nr 43
- Ping z z z z 43
- Pppd dev ttym0 115200 crtscts modem 192 68 6 192 68 6 43
- Pppd dev ttym0 115200 crtscts modem 192 68 6 192 68 6 login auth 43
- Setting up a machine for incoming ppp connections 43
- 68 27 putty 45
- Da 662a series software managing communications 45
- Name username hinet net mtu 1492 mru 1492 defaultroute noipdefault 45
- Nameserver 168 5 nameserver 139 75 0 0 45
- Nameserver ip_addr_of_first_dns_server nameserver ip_addr_of_second_dns_server 45
- Nfs network file system 45
- Pppd eth0 45
- Pppd eth1 45
- Da 662a series software managing communications 46
- Example 46
- Mkdir p home nfs public 46
- Mount t nfs 192 68 00 home public home nfs public 46
- Mount t nfs nfs_server ip directory mount point 46
- Setting up the da 662a series as an nfs client 46
- Step 2 46
- Steps 1 46
- Da 662a series software managing communications 47
- Programmer s guide 48
- Big endian to little endian 49
- Da 662a series software programmer s guide 49
- Notes on migrating your application from the da 660 662 to the da 662a series 49
- Be careful when developing migrating programs 50
- Char char e4 50
- Conversion example 50
- Da 662a series software programmer s guide 50
- Long long d 50
- Short short b 50
- Short short c 50
- Struct data_struct int a 50
- The difference between big endian and little endian 50
- Useful apis for converting big endian and little endian 50
- Da 662a series software programmer s guide 51
- Export path usr local arm linux 4 v4 bin path export manpath usr local arm linux 4 v4 man manpath 51
- Linux tool chain introduction 51
- Man arm none linux gnueabi gcc 51
- Mount dev cdrom mnt cdrom sh mnt cdrom toolchain linux arm linux_x x x vx_build_yymmddhh sh 51
- Obtaining help 51
- Steps for migrating to the da 662a 51
- Arm none linux gnueabi gcc o example wall g o2 example c arm none linux gnueabi strip s example arm none linux gnueabi gcc ggdb o example debug example c 52
- Cross compiling applications and libraries 52
- Da 662a series software programmer s guide 52
- Device api 52
- Int ioctl int d int request input int d open device node return file handle int request argument in or out 52
- Man ioctl 52
- Tools available in the host environment 52
- Buzzer 53
- Da 662a series software programmer s guide 53
- Int ioctl fd rtc_rd_time struct rtc_time time 53
- Int ioctl fd rtc_set_time struct rtc_time time 53
- Rtc real time clock 53
- Wdt watchdog timer 53
- All arm none linux gnueabi gcc o xxxx xxxx c lmoxalib 54
- Da 662a series software programmer s guide 54
- Int swtd_disable int fd 54
- Int swtd_enable int fd unsigned long time 54
- Int swtd_get int fd int mode unsigned long time 54
- Int swtd_open void 54
- Da 662a series software programmer s guide 55
- Fd swtd_open if fd 0 printf open swatchdog device fail n exit 1 swtd_enable fd 5000 enable it and set it 5 seconds while 1 do user application want to do swtd_ack fd swtd_close fd exit 0 55
- Int main int argc char argv int fd 55
- Int swtd_ack int fd 55
- Int swtd_close int fd 55
- Example for setting the baudrate 57
- You must use 57
- Baudrate inaccuracy 58
- Da 662a series software programmer s guide 58
- Example for getting the baudrate 58
- Examples 58
- Int ioctl fd ioctl_lcm_clean_line null 58
- Int ioctl fd ioctl_lcm_cls null 58
- Int ioctl fd ioctl_lcm_get_xy lcm_xy_t pos 58
- Int ioctl fd ioctl_lcm_goto_xy lcm_xy_t pos 58
- Int y raw value the arrange is 0 1 int y raw value the arrange is 0 1 58
- Lcm_xy_t 58
- Special note 58
- Struct termios term int fd speed fd open dev ttym0 o_rdwr tcgetattr fd term if term c_cflag cbaud cbaudex b4000000 follow the standard termios baudrate define else ioctl fd moxa_get_special_baud_rate speed 58
- Typedef struct lcm_xy int x col value the arrange is 0 15 58
- All hello 59
- Cc arm none linux gnueabi gcc cpp arm none linux gnueabi gcc sources hello c 59
- Clean rm f objs hello core gdb 59
- Da 662a series software programmer s guide 59
- Example 59
- Hello objs cc o ldflags libs 59
- Int ioctl fd ioctl_keypad_get_key int key 59
- Int ioctl fd ioctl_keypad_has_press int flag 59
- Int ioctl fd ioctl_lcm_back_ligh_on null 59
- Int ioctl fd ioctl_lcm_back_light_off null 59
- Keypad 59
- Make file example 59
- Objs sources c o 59
- Product s n 59
- Root moxa cat proc driver serid tabc0123456789 59
- Special note 59
- Linux normal command utility collection 60
- System commands 60
- Da 662a series software system commands 61
- Moxa special utilities 61
- Network 61
- Process 61
- Screen 62
- Using the push buttons to operate the lcd 62
- Da 662a series software using the push buttons to operate the lcd screen 63
Похожие устройства
- Moxa DA-662A-I-16-LX Руководство по аппаратной части
- Moxa DA-662A-I-16-LX Руководство по быстрой установке
- Moxa DA-662A-I-16-LX Технические характеристики
- Moxa DA-662A-16-DP-LX Инструкция по эксплуатации
- Moxa DA-662A-16-DP-LX Руководство по аппаратной части
- Moxa DA-662A-16-DP-LX Руководство по быстрой установке
- Moxa DA-662A-16-DP-LX Технические характеристики
- Moxa MAR-2001-T Инструкция по эксплуатации
- Moxa MAR-2001-T Технические характеристики
- Moxa MAR-2002-T Инструкция по эксплуатации
- Moxa MAR-2002-T Технические характеристики
- Moxa UC-7101-LX Инструкция по эксплуатации
- Moxa UC-7101-LX Руководство по программной части
- Moxa UC-7101-LX Руководство по аппаратной части
- Moxa UC-7101-LX Технические характеристики
- Moxa UC-7101-LX Руководство по быстрой установке
- Moxa UC-7101-T-LX Инструкция по эксплуатации
- Moxa UC-7101-T-LX Руководство по аппаратной части
- Moxa UC-7101-T-LX Технические характеристики
- Moxa UC-7101-T-LX Руководство по программной части