允许Traceroute探测漏洞修复

vim /etc/sysconfig/iptables-A INPUT -p icmp -m icmp --icmp-type time-exceeded -j DROP-A OUTPUT -p icmp -m icmp --icmp-type time-exceeded -j IPtables服务重启DROP：systemctl restart 检查iptables新添加的规则是否有效，检查命令：iptables -L -n