☰

此 iptables 规则是否禁止使用 https:// ... :7777 访问服务器？

tag-icon • tag-icon linux iptables firewall https httpd
此 iptables 规则是否禁止使用 https:// ... :7777 访问服务器？

似乎它没有明确指定不允许从外部访问 7777 端口，但问题是我只有关闭 iptables 服务时才能通过 https:// ... :7777 访问该主机。

所以我的问题是，以下规则集中的哪条规则禁止我使用 https:// ... :7777 访问我的主机？

iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     icmp --  anywhere             anywhere            icmp any 
ACCEPT     esp  --  anywhere             anywhere            
ACCEPT     ah   --  anywhere             anywhere            
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp 
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

答案1

您的 INPUT 链末尾有一个 REJECT 规则：

REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

相关内容