Re: 求救 RHEL5.1 AS 之 PREROUTING 遇到困難.

看板Linux作者時間17年前 (2008/07/31 14:01), 編輯推噓0(0推 0噓 0→)
留言0則, 0人參與, 最新討論串5/8 (看更多)
iptables-save全部在此,非常感謝 [root@eip ~]# iptables-save # Generated by iptables-save v1.3.5 on Thu Jul 31 21:43:55 2008 *nat :PREROUTING ACCEPT [16:3088] :POSTROUTING ACCEPT [2:139] :OUTPUT ACCEPT [2:139] -A PREROUTING -d 61.250.251.165 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 192.168.147.4:3389 -A PREROUTING -d 61.250.251.165 -p tcp -m tcp --dport 3390 -j DNAT --to-destination 192.168.147.5:3389 -A PREROUTING -d 61.250.251.165 -p tcp -m tcp --dport 3391 -j DNAT --to-destination 192.168.147.7:3389 -A PREROUTING -d 61.250.251.165 -p tcp -m tcp --dport 3392 -j DNAT --to-destination 192.168.147.9:3389 -A PREROUTING -d 61.250.251.165 -p tcp -m tcp --dport 3900 -j DNAT --to-destination 192.168.147.11:3389 -A PREROUTING -d 61.250.251.165 -p tcp -m tcp --dport 9999 -j DNAT --to-destination 192.168.146.238:3389 -A PREROUTING -d 61.250.251.165 -p tcp -m tcp --dport 5900 -j DNAT --to-destination 192.168.147.250:5900 -A PREROUTING -d 61.250.251.165 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 192.168.145.251:8080 -A POSTROUTING -p tcp -m tcp --dport 5190 -j DROP -A POSTROUTING -d 64.12.162.57 -p tcp -j DROP -A POSTROUTING -d 205.188.179.233 -p tcp -j DROP -A POSTROUTING -d 202.1.237.43 -p tcp -j DROP -A POSTROUTING -d 210.59.225.110 -p tcp -j DROP -A POSTROUTING -d 211.72.254.134 -p tcp -j DROP -A POSTROUTING -d 211.72.254.139 -p tcp -j DROP -A POSTROUTING -d 202.39.224.70 -p tcp -j DROP -A POSTROUTING -d 211.75.117.2 -p tcp -j DROP -A POSTROUTING -d 61.220.39.3 -p tcp -j DROP -A POSTROUTING -d 61.13.51.150 -p tcp -j DROP -A POSTROUTING -d 210.177.77.146 -p tcp -j DROP -A POSTROUTING -d 203.207.12.41 -p tcp -j DROP -A POSTROUTING -d 211.72.241.90 -p tcp -j DROP -A POSTROUTING -d 211.72.241.212 -p tcp -j DROP -A POSTROUTING -d 203.69.31.2 -p tcp -j DROP -A POSTROUTING -d 210.242.173.2 -p tcp -j DROP -A POSTROUTING -d 210.244.191.7 -p tcp -j DROP -A POSTROUTING -d 203.149.247.6 -p tcp -j DROP -A POSTROUTING -d 211.20.49.198 -p tcp -j DROP -A POSTROUTING -d 211.20.139.61 -p tcp -j DROP -A POSTROUTING -d 210.63.221.2 -p tcp -j DROP -A POSTROUTING -d 203.95.215.129 -p tcp -j DROP -A POSTROUTING -d 61.63.144.150 -p tcp -j DROP -A POSTROUTING -d 203.75.21.80 -p tcp -j DROP -A POSTROUTING -d 139.223.140.1 -p tcp -j DROP -A POSTROUTING -d 210.59.227.221 -p tcp -j DROP -A POSTROUTING -d 210.209.24.20 -p tcp -j DROP -A POSTROUTING -d 203.69.92.14 -p tcp -j DROP -A POSTROUTING -d 210.59.162.132 -p tcp -j DROP -A POSTROUTING -d 203.69.27.15 -p tcp -j DROP -A POSTROUTING -d 210.62.158.129 -p tcp -j DROP -A POSTROUTING -d 203.149.244.135 -p tcp -j DROP -A POSTROUTING -d 211.22.59.7 -p tcp -j DROP -A POSTROUTING -d 202.52.98.176 -p tcp -j DROP -A POSTROUTING -d 203.69.187.129 -p tcp -j DROP -A POSTROUTING -d 203.69.212.77 -p tcp -j DROP -A POSTROUTING -d 213.73.130.2 -p tcp -j DROP -A POSTROUTING -d 210.208.237.131 -p tcp -j DROP -A POSTROUTING -d 203.161.239.238 -p tcp -j DROP -A POSTROUTING -d 210.200.179.161 -p tcp -j DROP -A POSTROUTING -d 203.161.248.212 -p tcp -j DROP -A POSTROUTING -d 61.16.54.142 -p tcp -j DROP -A POSTROUTING -d 64.176.79.76 -p tcp -j DROP -A POSTROUTING -d 210.65.151.11 -p tcp -j DROP -A POSTROUTING -d 203.69.208.130 -p tcp -j DROP -A POSTROUTING -d 211.21.141.2 -p tcp -j DROP -A POSTROUTING -d 203.149.145.7 -p tcp -j DROP -A POSTROUTING -d 210.65.49.67 -p tcp -j DROP -A POSTROUTING -d 61.13.51.131 -p tcp -j DROP -A POSTROUTING -d 61.63.156.130 -p tcp -j DROP -A POSTROUTING -d 61.63.156.133 -p tcp -j DROP -A POSTROUTING -d 203.74.187.68 -p tcp -j DROP -A POSTROUTING -d 210.242.164.150 -p tcp -j DROP -A POSTROUTING -d 211.72.97.2 -p tcp -j DROP -A POSTROUTING -d 211.20.235.1 -p tcp -j DROP -A POSTROUTING -d 210.61.45.7 -p tcp -j DROP -A POSTROUTING -d 192.168.21.25 -p tcp -j DROP -A POSTROUTING -d 210.63.220.198 -p tcp -j DROP -A POSTROUTING -d 210.200.216.200 -p tcp -j DROP -A POSTROUTING -d 203.149.237.129 -p tcp -j DROP -A POSTROUTING -d 210.65.205.19 -p tcp -j DROP -A POSTROUTING -d 61.221.94.2 -p tcp -j DROP -A POSTROUTING -d 203.66.194.28 -p tcp -j DROP -A POSTROUTING -d 210.243.253.152 -p tcp -j DROP -A POSTROUTING -d 202.3.161.249 -p tcp -j DROP -A POSTROUTING -d 210.59.193.99 -p tcp -j DROP -A POSTROUTING -d 61.220.107.155 -p tcp -j DROP -A POSTROUTING -d 202.84.254.5 -p tcp -j DROP -A POSTROUTING -d 203.150.12.241 -p tcp -j DROP -A POSTROUTING -d 211.78.135.31 -p tcp -j DROP -A POSTROUTING -d 203.75.150.170 -p tcp -j DROP -A POSTROUTING -d 203.59.147.13 -p tcp -j DROP -A POSTROUTING -d 61.63.13.105 -p tcp -j DROP -A POSTROUTING -d 209.130.84.252 -p tcp -j DROP -A POSTROUTING -d 139.175.66.2 -p tcp -j DROP -A POSTROUTING -d 201.58.101.251 -p tcp -j DROP -A POSTROUTING -d 210.65.219.1 -p tcp -j DROP -A POSTROUTING -d 210.243.190.1 -p tcp -j DROP -A POSTROUTING -d 210.58.101.251 -p tcp -j DROP -A POSTROUTING -d 203.95.215.67 -p tcp -j DROP -A POSTROUTING -d 61.219.35.195 -p tcp -j DROP -A POSTROUTING -d 203.135.128.102 -p tcp -j DROP -A POSTROUTING -d 202.66.25.241 -p tcp -j DROP -A POSTROUTING -d 203.153.104.163 -p tcp -j DROP -A POSTROUTING -d 210.176.73.228 -p tcp -j DROP -A POSTROUTING -d 202.153.106.93 -p tcp -j DROP -A POSTROUTING -d 202.181.238.84 -p tcp -j DROP -A POSTROUTING -d 210.17.137.72 -p tcp -j DROP -A POSTROUTING -d 202.153.120.17 -p tcp -j DROP -A POSTROUTING -d 203.161.247.35 -p tcp -j DROP -A POSTROUTING -d 202.64.33.130 -p tcp -j DROP -A POSTROUTING -d 210.200.136.192 -p tcp -j DROP -A POSTROUTING -d 203.74.254.1 -p tcp -j DROP -A POSTROUTING -d 210.64.58.195 -p tcp -j DROP -A POSTROUTING -d 61.63.133.7 -p tcp -j DROP -A POSTROUTING -d 202.132.3.22 -p tcp -j DROP -A POSTROUTING -d 202.132.41.3 -p tcp -j DROP -A POSTROUTING -d 203.75.227.101 -p tcp -j DROP -A POSTROUTING -d 211.78.138.43 -p tcp -j DROP -A POSTROUTING -d 210.244.130.55 -p tcp -j DROP -A POSTROUTING -d 211.20.182.69 -p tcp -j DROP -A POSTROUTING -d 210.243.177.147 -p tcp -j DROP -A POSTROUTING -d 139.175.208.13 -p tcp -j DROP -A POSTROUTING -d 211.78.10.161 -p tcp -j DROP -A POSTROUTING -d 61.63.143.40 -p tcp -j DROP -A POSTROUTING -d 61.218.196.93 -p tcp -j DROP -A POSTROUTING -d 210.64.97.180 -p tcp -j DROP -A POSTROUTING -d 210.64.97.174 -p tcp -j DROP -A POSTROUTING -d 207.68.131.27 -p tcp -j DROP -A POSTROUTING -d 203.74.116.3 -p tcp -j DROP -A POSTROUTING -d 202.1.237.42 -p tcp -j DROP -A POSTROUTING -d 203.74.228.22 -p tcp -j DROP -A POSTROUTING -d 203.74.187.66 -p tcp -j DROP -A POSTROUTING -d 162.93.163.69 -p tcp -j DROP -A POSTROUTING -d 210.61.65.6 -p tcp -j DROP -A POSTROUTING -d 211.72.252.30 -p tcp -j DROP -A POSTROUTING -d 12.153.64.199 -p tcp -j DROP -A POSTROUTING -d 210.59.231.207 -p tcp -j DROP -A POSTROUTING -d 203.73.97.138 -p tcp -j DROP -A POSTROUTING -d 210.58.98.2 -p tcp -j DROP -A POSTROUTING -d 192.72.82.9 -p tcp -j DROP -A POSTROUTING -d 210.65.1.167 -p tcp -j DROP -A POSTROUTING -d 211.21.76.203 -p tcp -j DROP -A POSTROUTING -d 210.241.234.179 -p tcp -j DROP -A POSTROUTING -d 203.129.65.1 -p tcp -j DROP -A POSTROUTING -d 202.146.139.9 -p tcp -j DROP -A POSTROUTING -d 202.43.68.66 -p tcp -j DROP -A POSTROUTING -d 210.20.16.211 -p tcp -j DROP -A POSTROUTING -d 211.78.10.177 -p tcp -j DROP -A POSTROUTING -d 61.222.185.180 -p tcp -j DROP -A POSTROUTING -d 202.67.158.12 -p tcp -j DROP -A POSTROUTING -d 139.175.67.41 -p tcp -j DROP -A POSTROUTING -d 210.242.158.15 -p tcp -j DROP -A POSTROUTING -d 210.67.33.66 -p tcp -j DROP -A POSTROUTING -d 202.153.120.67 -p tcp -j DROP -A POSTROUTING -d 202.123.79.184 -p tcp -j DROP -A POSTROUTING -d 202.77.129.21 -p tcp -j DROP -A POSTROUTING -d 203.129.70.86 -p tcp -j DROP -A POSTROUTING -d 210.242.42.3 -p tcp -j DROP -A POSTROUTING -d 61.222.198.156 -p tcp -j DROP -A POSTROUTING -d 203.75.144.70 -p tcp -j DROP -A POSTROUTING -d 210.177.158.84 -p tcp -j DROP -A POSTROUTING -d 61.13.27.198 -p tcp -j DROP -A POSTROUTING -d 208.219.220.131 -p tcp -j DROP -A POSTROUTING -d 210.176.181.46 -p tcp -j DROP -A POSTROUTING -d 210.208.237.135 -p tcp -j DROP -A POSTROUTING -d 210.63.81.9 -p tcp -j DROP -A POSTROUTING -d 203.98.129.45 -p tcp -j DROP -A POSTROUTING -d 210.208.251.66 -p tcp -j DROP -A POSTROUTING -d 202.154.197.194 -p tcp -j DROP -A POSTROUTING -d 210.61.152.251 -p tcp -j DROP -A POSTROUTING -d 204.0.14.14 -p tcp -j DROP -A POSTROUTING -d 210.61.132.194 -p tcp -j DROP -A POSTROUTING -d 210.67.114.10 -p tcp -j DROP -A POSTROUTING -d 204.0.14.14 -p tcp -j DROP -A POSTROUTING -d 210.61.132.194 -p tcp -j DROP -A POSTROUTING -d 211.20.189.138 -p tcp -j DROP -A POSTROUTING -d 202.181.132.34 -p tcp -j DROP -A POSTROUTING -d 208.65.153.253 -p tcp -j DROP -A POSTROUTING -d 208.65.153.238 -p tcp -j DROP -A POSTROUTING -d 208.65.153.251 -p tcp -j DROP -A POSTROUTING -d 208.65.153.253 -p tcp -j DROP -A POSTROUTING -d 208.65.153.238 -p tcp -j DROP -A POSTROUTING -d 208.65.153.251 -p tcp -j DROP -A POSTROUTING -s 210.208.85.17 -p tcp -j DROP -A POSTROUTING -d 65.54.153.254 -p tcp -j DROP -A POSTROUTING -d 208.65.153.251 -p tcp -j DROP -A POSTROUTING -d 208.65.153.253 -p tcp -j DROP -A POSTROUTING -d 208.65.153.238 -p tcp -j DROP -A POSTROUTING -d 211.20.189.138 -p tcp -j DROP -A POSTROUTING -d 202.181.132.34 -p tcp -j DROP -A POSTROUTING -s 192.168.147.21 -p tcp -m tcp --dport 21 -j MASQUERADE -A POSTROUTING -s 192.168.147.21 -p tcp -m tcp --dport 1024:65535 -j MASQUERADE -A POSTROUTING -d 134.180.14.120 -j MASQUERADE -A POSTROUTING -s 192.168.146.238 -j MASQUERADE -A POSTROUTING -s 192.168.146.251 -j MASQUERADE -A POSTROUTING -s 192.168.147.15 -j MASQUERADE -A POSTROUTING -s 192.168.147.2 -j MASQUERADE -A POSTROUTING -s 192.168.147.249 -j MASQUERADE -A POSTROUTING -s 192.168.147.252 -j MASQUERADE -A POSTROUTING -d 207.46.248.16 -p tcp -m tcp --dport 119 -j MASQUERADE -A POSTROUTING -d 202.133.252.12 -p tcp -m tcp --dport 23 -j LOG -A POSTROUTING -d 202.133.252.12 -p tcp -m tcp --dport 23 -j MASQUERADE -A POSTROUTING -d 64.60.37.226 -j MASQUERADE -A POSTROUTING -d 210.145.134.86 -p tcp -j MASQUERADE -A POSTROUTING -d 202.145.134.86 -p tcp -j MASQUERADE -A POSTROUTING -d 210.80.77.86 -p tcp -j MASQUERADE -A POSTROUTING -d 61.152.217.222 -j MASQUERADE -A POSTROUTING -d 203.75.58.3 -j MASQUERADE -A POSTROUTING -d 59.120.128.140 -j MASQUERADE -A POSTROUTING -d 60.249.163.180 -j MASQUERADE -A POSTROUTING -d 209.172.70.69 -j MASQUERADE -A POSTROUTING -d 210.80.77.29 -p tcp -m tcp --dport 80 -j MASQUERADE -A POSTROUTING -d 91.121.15.150 -p tcp -m tcp --dport 80 -j MASQUERADE -A POSTROUTING -d 210.63.97.57 -p tcp -j MASQUERADE -A POSTROUTING -d 210.63.97.158 -p tcp -j MASQUERADE -A POSTROUTING -d 210.63.97.159 -p tcp -j MASQUERADE -A POSTROUTING -d 210.63.97.160 -p tcp -j MASQUERADE -A POSTROUTING -d 210.68.22.22 -j MASQUERADE -A POSTROUTING -d 220.128.79.136 -p tcp -j MASQUERADE -A POSTROUTING -d 210.80.77.20 -p tcp -j MASQUERADE -A POSTROUTING -d 210.128.79.136 -p tcp -j MASQUERADE COMMIT # Completed on Thu Jul 31 21:43:55 2008 # Generated by iptables-save v1.3.5 on Thu Jul 31 21:43:55 2008 *filter :INPUT ACCEPT [261:18448] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [369:53714] :icmpfilter - [0:0] -A INPUT -s 60.251.221.178 -i eth1 -j ACCEPT -A INPUT -s 61.20.235.219 -i eth1 -j ACCEPT -A INPUT -s 123.20.140.6 -i eth1 -j ACCEPT -A INPUT -s 21.192.137.241 -i eth1 -j ACCEPT -A INPUT -s 61.251.139.123 -i eth1 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 3900 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 8080 -j ACCEPT -A INPUT -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -i eth1 -m state --state INVALID,NEW -j DROP -A INPUT -i eth1 -j DROP -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 8 -j DROP -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 0 -j ACCEPT -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 3 -j ACCEPT -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 3/4 -j ACCEPT -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 4 -j ACCEPT -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 11 -j ACCEPT -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 12 -j ACCEPT -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 14 -j ACCEPT -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 16 -j ACCEPT -A icmpfilter -i eth1 -p icmp -m icmp --icmp-type 18 -j ACCEPT COMMIT # Completed on Thu Jul 31 21:43:55 2008 [root@eip ~]# On 31 Jul 2008 04:29:13 GMT, kenduest.bbs@bbs.sayya.org (小州) wrote: >※ 引述《Jacky@bcc.com (世界是平的)》之銘言： >> On 29 Jul 2008 08:38:05 GMT, kenduest.bbs@bbs.sayya.org (小州) wrote: >> 感謝回覆不過仍然失敗...... >> [skip] > > 請不要還把 iptables-save 東西省略，資訊是給大家判斷的，若你都自己 > 判斷了怎麼還需要討論？ > >-- >-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- > > 現代人普遍的現象: 「小學而大遺」、「捨本而逐末」 > 「以偏而概全」、「因噎而廢食」 >-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
‣ 更多 Jacky. 的文章
文章代碼(AID): #18aLKU00 (Linux)
討論串 (同標題文章)
完整討論串 (本文為第 5 之 8 篇)：
排序： 最新先 | 最舊先 | 留言數
在新視窗開啟完整討論串 (共8篇)
‣ 更多 Jacky. 的文章
文章代碼(AID): #18aLKU00 (Linux)