预防PHPDDOS – iptables 规则：

 iptables -I OUTPUT -p udp --dport 53 -d 222.172.200.68 -j ACCEPT

iptables -I OUTPUT -p udp --dport 53 -d 61.166.150.123 -j ACCEPT

iptables -A OUTPUT -p tcp -m tcp --sport 1024:65535 -d 222.172.200.68 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p tcp -m tcp --sport 1024:65535 -d 61.166.150.123 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p udp -m udp --sport 1024:65535 -d 222.172.200.68 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p udp -m udp --sport 1024:65535 -d 61.166.150.123 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p udp -j REJECT

/etc/rc.d/init.d/iptables save

service iptables restart

chkconfig iptables on

关键字：PHPDDOS 、iptables、规则