接受全部 - 0.0.0.0/0 0.0.0.0/0
这是否意味着允许从所有端口的所有IP?
但我仍然无法访问服务器,除非我通过允许的IP地址
如果我把这条线放在任何一行,我是否完全打开这个服务器的任何连接?
下面是完整的iptable列表
连锁input(政策接受) 目标人select源目的地 接受全部 - 0.0.0.0/0 0.0.0.0/0 接受全部 - 116.211.25.89 0.0.0.0/0 接受全部 - 222.215.136.8 0.0.0.0/0 全部接受 - 125.82.87.21 0.0.0.0/0 接受全部 - 127.0.0.1 127.0.0.1 ACCEPT tcp - 61.172.251.109 0.0.0.0/0 tcp spt:8080 ACCEPT tcp - 61.172.254.123 0.0.0.0/0 tcp spt:8080 ACCEPT tcp - 61.129.44.191 0.0.0.0/0 ACCEPT tcp - 61.129.44.128 0.0.0.0/0 ACCEPT tcp - 61.172.251.109 0.0.0.0/0 tcp spt:8080 ACCEPT tcp - 61.172.254.123 0.0.0.0/0 tcp spt:8080 ACCEPT icmp - 0.0.0.0/0 0.0.0.0/0 icmptypes0 ACCEPT icmp - 0.0.0.0/0 0.0.0.0/0 icmp type 8 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:53 ACCEPT udp - 0.0.0.0/0 0.0.0.0/0 udp spt:53 ACCEPT udp - 0.0.0.0/0 0.0.0.0/0 udp spt:123 ACCEPT udp - 0.0.0.0/0 0.0.0.0/0 udp dpt:123 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:20 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:21 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:80 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:88 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:8000 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:8080 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:8888 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:873 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:6969 ACCEPT tcp - 0.0.0.0/0 0.0.0.0/0 tcp spt:6900 ACCEPT tcp - 61.172.241.98 0.0.0.0/0 ACCEPT tcp - 61.172.247.98 0.0.0.0/0 ACCEPT tcp - 61.172.247.100 0.0.0.0/0 ACCEPT tcp - 61.152.122.33 0.0.0.0/0 ACCEPT tcp - 61.152.110.130 0.0.0.0/0 ACCEPT tcp - 210.51.28.220 0.0.0.0/0 ACCEPT tcp - 210.51.28.120 0.0.0.0/0 ACCEPT tcp - 61.172.241.120 0.0.0.0/0 ACCEPT tcp - 211.147.0.85 0.0.0.0/0 ACCEPT tcp - 211.147.0.114 0.0.0.0/0 ACCEPT tcp - 222.73.61.249 0.0.0.0/0 ACCEPT tcp - 222.73.61.250 0.0.0.0/0 ACCEPT tcp - 222.73.61.251 0.0.0.0/0 ACCEPT tcp - 210.51.31.11 0.0.0.0/0 tcp dpt:38422 ACCEPT tcp - 210.51.31.12 0.0.0.0/0 tcp dpt:38422 ACCEPT tcp - 61.172.254.123 0.0.0.0/0 tcp spt:8080 ACCEPT tcp - 61.172.251.109 0.0.0.0/0 tcp spt:8080 ACCEPT tcp - 61.172.247.85 0.0.0.0/0 ACCEPT tcp - 222.73.12.248 0.0.0.0/0 ACCEPT tcp - 61.172.254.184 0.0.0.0/0 ACCEPT tcp - 61.172.254.78 0.0.0.0/0 ACCEPT tcp - 61.172.254.243 0.0.0.0/0 ACCEPT tcp - 61.152.97.115 0.0.0.0/0 ACCEPT tcp - 221.231.128.206 0.0.0.0/0 ACCEPT tcp - 221.231.130.199 0.0.0.0/0 ACCEPT udp - 172.0.0.0/8 0.0.0.0/0 udp dpt:161 ACCEPT udp - 10.0.0.0/8 0.0.0.0/0 udp dpt:161 ACCEPT udp - 192.168.0.0/16 0.0.0.0/0 udp dpt:161 ACCEPT udp - 61.172.252.58 0.0.0.0/0 udp dpt:161 ACCEPT udp - 61.183.13.201 0.0.0.0/0 udp dpt:161 ACCEPT udp - 222.73.2.11 0.0.0.0/0 udp dpt:161 ACCEPT udp - 221.208.157.158 0.0.0.0/0 udp dpt:161 ACCEPT udp - 218.30.74.250 0.0.0.0/0 udp dpt:161 ACCEPT udp - 202.102.54.234 0.0.0.0/0 udp dpt:161 ACCEPT udp - 125.64.2.115 0.0.0.0/0 udp dpt:161 ACCEPT udp - 222.73.23.23 0.0.0.0/0 udp dpt:161 ACCEPT udp - 210.51.33.97 0.0.0.0/0 udp dpt:161 ACCEPT udp - 210.51.33.98 0.0.0.0/0 udp dpt:161 ACCEPT udp - 222.73.11.112 0.0.0.0/0 udp dpt:161 ACCEPT udp - 222.73.11.111 0.0.0.0/0 udp dpt:161 ACCEPT udp - 222.73.11.89 0.0.0.0/0 udp spt:38514 DROP tcp - 0.0.0.0/0 0.0.0.0/0 tcp dpt:38423 REJECT tcp - 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset DROP全部 - 0.0.0.0/0 0.0.0.0/0 连锁FORWARD(政策接受) 目标人select源目的地 DROP全部 - 0.0.0.0/0 0.0.0.0/0 链式输出(策略ACCEPT) 目标人select源目的地 ACCEPT udp - 0.0.0.0/0 222.73.11.89 udp dpt:38514
这是否意味着允许从所有端口的所有IP?
不必要。 添加“-v”选项(iptables -nv -L)显示全部/出界面。
4060K 498M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
如果你不想要IPtables,为什么不closures它们呢? iptables -F应该做的伎俩
否则提供更多的细节,例如您尝试连接的端口和IP以及您的IP