UltraVPS 锐速&防火墙优化设置

2022 年 7 月 17 日 14:49

—

由

坑爹的UltraVPS，PPTP和SS一键安装后都出现问题，要么连不上，要么连上无法上网，折腾了许久才研究出防火墙的配置，锐速的配置，记录下来，免得下次重装又得重新研究。

锐速配置文件关键修改点

advacc="1"
advinacc="1"
maxmode="1"
rsc="1"
gso="1"

iptables防火墙配置

 # Generated by iptables-save v1.4.7 on Thu Jul 2 20:11:30 2015
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [1:140]
 -A INPUT -i eth0 -p tcp -m tcp --dport 1723 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 10100:10110 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 8888 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
 -A INPUT -p gre -j ACCEPT
 -A INPUT -p icmp -j ACCEPT
 -A INPUT -i lo -j ACCEPT
 -A FORWARD -i ppp+ -o eth0 -j ACCEPT
 -A FORWARD -i eth0 -o ppp+ -j ACCEPT
 -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
 -A FORWARD -s 172.16.36.0/24 -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j TCPMSS --set-mss 1356
 COMMIT
 # Completed on Thu Jul 2 20:11:30 2015
 # Generated by iptables-save v1.4.7 on Thu Jul 2 20:11:30 2015
 *nat
 :PREROUTING ACCEPT [0:0]
 :POSTROUTING ACCEPT [0:0]
 :OUTPUT ACCEPT [0:0]
 -A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source 你的UltraVPS主IP
 COMMIT
 # Completed on Thu Jul 2 20:11:30 2015

实在搞不定，可以联系我有偿安装，详细看这里介绍~