iptables：封1.1.1.1iptables -I INPUT -s 1.1.1.1 -j DROP解封iptables -D INPUT -s 1.1.1.1 -j DROP保存重启防火墙service iptables saveservice iptables restartfirewalld：封firewall-cmd --permanent --add-rich-rule='rule family=ipv4 source address="1.1.1.1"