开启iptables 就大量的丢包

发布于 2022-09-09 03:52:05 字数 3929 浏览 9 评论 6

我一台放在电信机房的服务器，配一个公网IP（1.1.1.1），一个内网IP(192.168.1.1)，

现在把iptables 开起来，就丢包，比较重(在30~40%) 左右，
把iptables 停掉就正常了，能给点参考意见吗？

规则如下，不做nat

[root@hz_web_200 sys]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Firewall-1-INPUT (2 references)
target    prot opt source             destination
ACCEPT    tcp  --  anywhere          anywhere          tcp dpt:domain
ACCEPT    udp  --  anywhere          anywhere          udp dpt:domain
ACCEPT    all  --  anywhere          10.1.10.0/24
ACCEPT    all  --  10.1.10.0/24       anywhere
ACCEPT    all  --  anywhere          anywhere
ACCEPT    icmp --  anywhere          anywhere          icmp any
ACCEPT    esp  --  anywhere          anywhere
ACCEPT    ah --  anywhere          anywhere
ACCEPT    all  --  anywhere          anywhere          state RELATED,ESTABLISHED
ACCEPT    tcp  --  anywhere          anywhere          state NEW tcp dpt:telnet
ACCEPT    tcp  --  anywhere          anywhere          state NEW tcp dpt:ssh
REJECT    all  --  anywhere          anywhere          reject-with icmp-host-prohibited