root@door:/etc/network# nano interfaces

# eno1  
auto eno1
allow-hotplug eno1
iface eno1 inet static
    address 10.75.174.213/24
    gateway 10.75.174.1
    dns-nameservers 114.114.114.114 8.8.8.8
    ip route add default via 10.75.174.1 dev eno1

nano /etc/resolv.conf

nameserver 114.114.114.114
nameserver 8.8.8.8

ufw

ufw allow from 10.75.174.41 to any port 22
ufw allow from 10.75.174.41 to any port 3306
ufw allow 80/tcp
ufw allow 443/tcp
ufw default deny incoming  # 拒绝所有外部主动发起的连接
ufw default allow outgoing # 允许本机访问外部网络
ufw allow from 172.18.0.0/16
ufw allow 22/tcp
ufw allow from 10.75.138.249 to any port 22 proto tcp

发表评论