` `iiptables输入策略drop`变为` `all forward drop`

Question

iptablses丢弃所有输入。则正在传输的forward也将被丢弃。

输入不应影响我感知中的前进...

sudo iptables -t nat -A POSTROUTING -o $2 -j MASQUERADE
sudo iptables -A FORWARD -i $2 -o $1 -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i $1 -o $2 -j ACCEPT
sudo iptables -P INPUT DROP

Answer 1

这就解决了这个问题。

sudo iptables -t nat -A POSTROUTING -o $2 -j MASQUERADE
sudo iptables -A FORWARD -i $2 -o $1 -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i $1 -o $2 -j ACCEPT

sudo iptables -t filter -A INPUT -i eth0 -j DROP