Debian 防火墙备份与恢复技巧
一、iptables 原生规则备份与恢复
sudo iptables-save > /etc/iptables/rules.v4sudo ip6tables-save > /etc/iptables/rules.v6sudo rsync -avz /etc/iptables/rules.v4 /path/to/backup/sudo rsync -avz /etc/iptables/rules.v6 /path/to/backup/sudo iptables-restore < /etc/iptables/rules.v4sudo ip6tables-restore < /etc/iptables/rules.v6sudo rsync -avz /path/to/backup/rules.v4 /etc/iptables/ && sudo iptables-restore < /etc/iptables/rules.v4sudo rsync -avz /path/to/backup/rules.v6 /etc/iptables/ && sudo ip6tables-restore < /etc/iptables/rules.v6sudo iptables -L -n -v、sudo ip6tables -L -n -v二、持久化与自动化
sudo apt-get update && sudo apt-get install netfilter-persistentsudo netfilter-persistent savesudo netfilter-persistent reloadsudo nano /etc/network/if-pre-up.d/iptables#!/bin/sh
/sbin/iptables-restore < /etc/iptables/rules.v4
/sbin/ip6tables-restore < /etc/iptables/rules.v6
sudo chmod +x /etc/network/if-pre-up.d/iptables三、UFW 的备份与恢复
sudo cp /etc/ufw/user.rules ~/ufw_rules_backupsudo cp /etc/ufw/user6.rules ~/ufw6_rules_backupsudo cp ~/ufw_rules_backup /etc/ufw/user.rulessudo cp ~/ufw6_rules_backup /etc/ufw/user6.rulessudo ufw reload四、回滚与默认设置
sudo iptables-save > /etc/iptables/rules.v4.baksudo iptables -P INPUT ACCEPT
sudo iptables -P FORWARD ACCEPT
sudo iptables -P OUTPUT ACCEPT
sudo iptables -t nat -F
sudo iptables -t mangle -F
sudo iptables -F
sudo iptables -X
sudo iptables-save > /etc/iptables/rules.v4sudo ufw disable && sudo ufw reset,随后可按需 sudo ufw enable五、安全与运维建议
sudo ufw allow 22 或确保 iptables 中有对应 ACCEPT 规则。iptables -L -n -v、ufw status 等命令核对规则顺序与生效情况,必要时查看日志。