iptables如何打开ping功能呢？

lopkin · 发表于 2011-9-7 19:35:33

搜索搜到如下的教程：开启ping iptables -D INPUT -p icmp -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -D INPUT -i eth0 -p icmp -j DROP，可是输入后出现这样的提示：iptables: No chain/target/match by that name，不知道是什么问题

lazyzhu · 发表于 2011-9-7 19:38:05

xt_state 模块缺失

只看该作者 · 发表于 2011-9-7 19:40:11

提示: 作者被禁止或删除内容自动屏蔽

lopkin · 发表于 2011-9-7 19:53:49

还是不能ping

lopkin · 发表于 2011-9-7 19:54:20

是需要去安装吗？如何装呢

只看该作者 · 发表于 2011-9-7 20:02:19

提示: 作者被禁止或删除内容自动屏蔽

lopkin · 发表于 2011-9-7 20:05:46

Chain INPUT (policy ACCEPT)
target    prot opt source             destination
ACCEPT    all  --  localhost.localdomain  localhost.localdomain
ACCEPT    all  --  anywhere          anywhere          state RELATED,ESTAB                                                                                              LISHED
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:ssh
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:http
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:ftp
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:ftp-data
REJECT    all  --  anywhere          anywhere          reject-with icmp-po                                                                                              rt-unreachable
ACCEPT    icmp --  anywhere          anywhere          icmp echo-reply
ACCEPT    icmp --  anywhere          anywhere          icmp destination-un                                                                                              reachable
ACCEPT    icmp --  anywhere          anywhere          icmp time-exceeded
ACCEPT    udp  --  60.195.249.83       anywhere          udp dpt:snmp
ACCEPT    udp  --  60.195.252.107    anywhere          udp dpt:snmp
ACCEPT    udp  --  60.195.252.110    anywhere          udp dpt:snmp

Chain FORWARD (policy ACCEPT)
target    prot opt source             destination
REJECT    all  --  anywhere          anywhere          reject-with icmp-po                                                                                              rt-unreachable
REJECT    all  --  anywhere          anywhere          reject-with icmp-po                                                                                              rt-unreachable

Chain OUTPUT (policy ACCEPT)
target    prot opt source             destination
ACCEPT    all  --  anywhere          anywhere

我是人 · 发表于 2011-9-7 20:07:12

次序问题，ACCEPT icmp 要在 REJECT all 之前。

lopkin · 发表于 2011-9-7 20:07:40

Chain INPUT (policy ACCEPT)
target    prot opt source             destination
ACCEPT    all  --  localhost.localdomain  localhost.localdomain
ACCEPT    all  --  anywhere          anywhere          state RELATED,ESTAB                                                                                              LISHED
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:ssh
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:http
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:ftp
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:ftp-data
REJECT    all  --  anywhere          anywhere          reject-with icmp-po                                                                                              rt-unreachable
ACCEPT    icmp --  anywhere          anywhere          icmp echo-reply
ACCEPT    icmp --  anywhere          anywhere          icmp destination-un                                                                                              reachable
ACCEPT    icmp --  anywhere          anywhere          icmp time-exceeded
ACCEPT    udp  --  60.195.249.83       anywhere          udp dpt:snmp
ACCEPT    udp  --  60.195.252.107    anywhere          udp dpt:snmp
ACCEPT    udp  --  60.195.252.110    anywhere          udp dpt:snmp

Chain FORWARD (policy ACCEPT)
target    prot opt source             destination
REJECT    all  --  anywhere          anywhere          reject-with icmp-po                                                                                              rt-unreachable
REJECT    all  --  anywhere          anywhere          reject-with icmp-po                                                                                              rt-unreachable

Chain OUTPUT (policy ACCEPT)
target    prot opt source             destination
ACCEPT    all  --  anywhere          anywhere

按照vpser上设置的

ATOM · 发表于 2011-9-7 20:08:42

原帖由 我是人 于 2011-9-7 20:07 发表
次序问题，ACCEPT icmp 要在 REJECT all 之前。

是的ACCEPT接受要在REJECT拒绝之前。

		自动登录	找回密码
密码			注册

sunshine 该用户已被删除	3^# 发表于 2011-9-7 19:40:11 \| 只看该作者提示: 作者被禁止或删除内容自动屏蔽
sunshine 该用户已被删除
	回复支持反对举报

sunshine 该用户已被删除	6^# 发表于 2011-9-7 20:02:19 \| 只看该作者提示: 作者被禁止或删除内容自动屏蔽
sunshine 该用户已被删除
	回复支持反对举报

iptables如何打开ping功能呢？

回复 3# sunshine 的帖子

回复 2# lazyzhu 的帖子

回复 6# sunshine 的帖子

浏览过的版块