|
- [root@mydesktop test]# /sbin/iptables -L
- Chain INPUT (policy ACCEPT)
- target prot opt source destination
- RH-Lokkit-0-50-INPUT all -- anywhere anywhere
-
- Chain FORWARD (policy ACCEPT)
- target prot opt source destination
- [color=red]RH-Lokkit-0-50-INPUT all -- anywhere anywhere[/color]
-
- Chain OUTPUT (policy ACCEPT)
- target prot opt source destination
-
- Chain RH-Lokkit-0-50-INPUT (2 references)
- target prot opt source destination
- ACCEPT udp -- 202.xxx.xxx.xxx anywhere udp spt:domain
- REJECT tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN reject-with icmp-port-unreachable
- REJECT udp -- anywhere anywhere udp reject-with icmp-port-unreachable
复制代码
如果不转发,红色这条链是不是必要的?
:help:thank |
|