如果我把全部接受0.0.0.0/0意味着这个服务器是完全开放的任何IP?

接受全部 -  0.0.0.0/0 0.0.0.0/0

这是否意味着允许从所有端口的所有IP?

但我仍然无法访问服务器,除非我通过允许的IP地址

如果我把这条线放在任何一行,我是否完全打开这个服务器的任何连接?

下面是完整的iptable列表

连锁input(政策接受)
目标人select源目的地  
接受全部 -  0.0.0.0/0 0.0.0.0/0       
接受全部 -  116.211.25.89 0.0.0.0/0           
接受全部 -  222.215.136.8 0.0.0.0/0           
全部接受 -  125.82.87.21 0.0.0.0/0           
接受全部 -  127.0.0.1 127.0.0.1           
 ACCEPT tcp  -  61.172.251.109 0.0.0.0/0 tcp spt:8080 
 ACCEPT tcp  -  61.172.254.123 0.0.0.0/0 tcp spt:8080 
 ACCEPT tcp  -  61.129.44.191 0.0.0.0/0           
 ACCEPT tcp  -  61.129.44.128 0.0.0.0/0           
 ACCEPT tcp  -  61.172.251.109 0.0.0.0/0 tcp spt:8080 
 ACCEPT tcp  -  61.172.254.123 0.0.0.0/0 tcp spt:8080 
 ACCEPT icmp  -  0.0.0.0/0 0.0.0.0/0 icmptypes0 
 ACCEPT icmp  -  0.0.0.0/0 0.0.0.0/0 icmp type 8 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:53 
 ACCEPT udp  -  0.0.0.0/0 0.0.0.0/0 udp spt:53 
 ACCEPT udp  -  0.0.0.0/0 0.0.0.0/0 udp spt:123 
 ACCEPT udp  -  0.0.0.0/0 0.0.0.0/0 udp dpt:123 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:20 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:21 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:80 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:88 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:8000 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:8080 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:8888 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:873 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:6969 
 ACCEPT tcp  -  0.0.0.0/0 0.0.0.0/0 tcp spt:6900 
 ACCEPT tcp  -  61.172.241.98 0.0.0.0/0           
 ACCEPT tcp  -  61.172.247.98 0.0.0.0/0           
 ACCEPT tcp  -  61.172.247.100 0.0.0.0/0           
 ACCEPT tcp  -  61.152.122.33 0.0.0.0/0           
 ACCEPT tcp  -  61.152.110.130 0.0.0.0/0           
 ACCEPT tcp  -  210.51.28.220 0.0.0.0/0           
 ACCEPT tcp  -  210.51.28.120 0.0.0.0/0           
 ACCEPT tcp  -  61.172.241.120 0.0.0.0/0           
 ACCEPT tcp  -  211.147.0.85 0.0.0.0/0           
 ACCEPT tcp  -  211.147.0.114 0.0.0.0/0           
 ACCEPT tcp  -  222.73.61.249 0.0.0.0/0           
 ACCEPT tcp  -  222.73.61.250 0.0.0.0/0           
 ACCEPT tcp  -  222.73.61.251 0.0.0.0/0           
 ACCEPT tcp  -  210.51.31.11 0.0.0.0/0 tcp dpt:38422 
 ACCEPT tcp  -  210.51.31.12 0.0.0.0/0 tcp dpt:38422 
 ACCEPT tcp  -  61.172.254.123 0.0.0.0/0 tcp spt:8080 
 ACCEPT tcp  -  61.172.251.109 0.0.0.0/0 tcp spt:8080 
 ACCEPT tcp  -  61.172.247.85 0.0.0.0/0           
 ACCEPT tcp  -  222.73.12.248 0.0.0.0/0           
 ACCEPT tcp  -  61.172.254.184 0.0.0.0/0           
 ACCEPT tcp  -  61.172.254.78 0.0.0.0/0           
 ACCEPT tcp  -  61.172.254.243 0.0.0.0/0           
 ACCEPT tcp  -  61.152.97.115 0.0.0.0/0           
 ACCEPT tcp  -  221.231.128.206 0.0.0.0/0           
 ACCEPT tcp  -  221.231.130.199 0.0.0.0/0           
 ACCEPT udp  -  172.0.0.0/8 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  10.0.0.0/8 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  192.168.0.0/16 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  61.172.252.58 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  61.183.13.201 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  222.73.2.11 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  221.208.157.158 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  218.30.74.250 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  202.102.54.234 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  125.64.2.115 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  222.73.23.23 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  210.51.33.97 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  210.51.33.98 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  222.73.11.112 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  222.73.11.111 0.0.0.0/0 udp dpt:161 
 ACCEPT udp  -  222.73.11.89 0.0.0.0/0 udp spt:38514 
 DROP tcp  -  0.0.0.0/0 0.0.0.0/0 tcp dpt:38423 
 REJECT tcp  -  0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 
 DROP全部 -  0.0.0.0/0 0.0.0.0/0           

连锁FORWARD(政策接受)
目标人select源目的地         
 DROP全部 -  0.0.0.0/0 0.0.0.0/0           

链式输出(策略ACCEPT)
目标人select源目的地         
 ACCEPT udp  -  0.0.0.0/0 222.73.11.89 udp dpt:38514 

这是否意味着允许从所有端口的所有IP?

不必要。 添加“-v”选项(iptables -nv -L)显示全部/出界面。

 4060K 498M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 

如果你不想要IPtables,为什么不closures它们呢? iptables -F应该做的伎俩

否则提供更多的细节,例如您尝试连接的端口和IP以及您的IP