iptables - `iiptables input policy drop`变成`all forward drop`

Question

iptablses 丢弃所有输入。那么forward正在转移的也将被丢弃。

在我看来，INPUT 不应该影响 FORWARD....

sudo iptables -t nat -A POSTROUTING -o $2 -j MASQUERADE
sudo iptables -A FORWARD -i $2 -o $1 -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i $1 -o $2 -j ACCEPT
sudo iptables -P INPUT DROP

标签： iptables

Answer 1

这解决了它。

sudo iptables -t nat -A POSTROUTING -o $2 -j MASQUERADE
sudo iptables -A FORWARD -i $2 -o $1 -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i $1 -o $2 -j ACCEPT

sudo iptables -t filter -A INPUT -i eth0 -j DROP