赞
踩
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT udp -- anywhere anywhere udp dpt:bootps
ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
这里的问题,iptables当找到匹配的规则时,就会执行相应的动作,而不会向下继续匹配。
可以看到https没有添加,匹配不到规则,所以就会包错
解决方法:
iptables -I INPUT -p tcp --dport 443 -j ACCEPT
Copyright © 2003-2013 www.wpsshop.cn 版权所有,并保留所有权利。