|
不懂怎么看,麻烦帮忙看下
[PDCN-1 /home/root]# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
vserver all -- anywhere 124.91.80.175
AD_BYBY tcp -- anywhere anywhere multiport dports www,http-alt
SS_SPEC_LAN_DG tcp -- anywhere anywhere multiport dports ssh,www,https
SS_SPEC_DNS_LAN_DG udp -- 192.168.111.0/24 anywhere udp dpt:domain
AD_BYBY_DNS_LAN_DG udp -- 192.168.111.0/24 anywhere udp dpt:domain
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
REDIRECT tcp -- anywhere resolver2.opendns.com tcp dpt:https redir ports 1090
REDIRECT tcp -- anywhere resolver1.opendns.com tcp dpt:https redir ports 1090
REDIRECT tcp -- anywhere google-public-dns-b.google.com tcp dpt:domain redir ports 1090
REDIRECT tcp -- anywhere google-public-dns-a.google.com tcp dpt:domain redir ports 1090
SS_SPEC_WAN_DG tcp -- anywhere anywhere
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
SNAT all -- 192.168.111.0/24 anywhere to:124.91.80.175
MASQUERADE all -- 192.168.111.0/24 anywhere
SNAT all -- 10.8.0.0/24 anywhere to:124.91.80.175
SNAT all -- 192.168.111.0/24 192.168.111.0/24 to:192.168.111.1
Chain AD_BYBY (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere match-set ad_spec_dst_sp dst
AD_BYBY_LAN_AC all -- anywhere anywhere
Chain AD_BYBY_DNS_LAN_AC (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere match-set ad_spec_src_bp src
AD_BYBY_DNS_WAN_FW all -- anywhere anywhere match-set ad_spec_src_fw src
AD_BYBY_DNS_WAN_AC all -- anywhere anywhere match-set ad_spec_src_ac src
AD_BYBY_DNS_WAN_AC all -- anywhere anywhere
Chain AD_BYBY_DNS_LAN_DG (1 references)
target prot opt source destination
RETURN udp -- anywhere PDCN-1.lan
RETURN udp -- anywhere google-public-dns-a.google.com
AD_BYBY_DNS_LAN_AC all -- anywhere anywhere
Chain AD_BYBY_DNS_WAN_AC (2 references)
target prot opt source destination
AD_BYBY_DNS_WAN_FW all -- anywhere anywhere
Chain AD_BYBY_DNS_WAN_FW (2 references)
target prot opt source destination
DNAT all -- anywhere anywhere to:8.8.8.8
Chain AD_BYBY_LAN_AC (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere match-set ad_spec_src_bp src
AD_BYBY_to all -- anywhere anywhere match-set ad_spec_src_fw src
AD_BYBY_WAN_AC all -- anywhere anywhere match-set ad_spec_src_ac src
AD_BYBY_WAN_AC all -- anywhere anywhere
Chain AD_BYBY_WAN_AC (2 references)
target prot opt source destination
AD_BYBY_to all -- anywhere anywhere match-set adbybylist dst
AD_BYBY_to all -- anywhere anywhere match-set cflist dst
AD_BYBY_to all -- anywhere anywhere
Chain AD_BYBY_to (4 references)
target prot opt source destination
REDIRECT tcp -- anywhere anywhere redir ports 8118
Chain SS_SPEC_DNS_LAN_AC (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere match-set ss_spec_src_bp src
SS_SPEC_DNS_WAN_FW all -- anywhere anywhere match-set ss_spec_src_fw src
SS_SPEC_DNS_WAN_AC all -- anywhere anywhere match-set ss_spec_src_ac src
SS_SPEC_DNS_WAN_AC all -- anywhere anywhere match-set ss_spec_src_gfw src
SS_SPEC_DNS_WAN_AC all -- anywhere anywhere match-set ss_spec_src_chn src
RETURN all -- anywhere anywhere
Chain SS_SPEC_DNS_LAN_DG (1 references)
target prot opt source destination
RETURN udp -- anywhere PDCN-1.lan
RETURN udp -- anywhere google-public-dns-a.google.com
SS_SPEC_DNS_LAN_AC all -- anywhere anywhere
Chain SS_SPEC_DNS_WAN_AC (3 references)
target prot opt source destination
SS_SPEC_DNS_WAN_FW all -- anywhere anywhere
Chain SS_SPEC_DNS_WAN_FW (2 references)
target prot opt source destination
DNAT all -- anywhere anywhere to:8.8.8.8
Chain SS_SPEC_LAN_AC (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere match-set ss_spec_src_bp src
SS_SPEC_WAN_FW all -- anywhere anywhere match-set ss_spec_src_fw src
SS_SPEC_WAN_AC all -- anywhere anywhere match-set ss_spec_src_ac src
SS_SPEC_WAN_GFW all -- anywhere anywhere match-set ss_spec_src_gfw src
RETURN all -- anywhere anywhere match-set ss_spec_src_gfw src
SS_SPEC_WAN_CHN all -- anywhere anywhere match-set ss_spec_src_chn src
RETURN all -- anywhere anywhere match-set ss_spec_src_chn src
RETURN all -- anywhere anywhere
Chain SS_SPEC_LAN_DG (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere match-set ss_spec_dst_sp dst
SS_SPEC_LAN_AC all -- anywhere anywhere
Chain SS_SPEC_WAN_AC (2 references)
target prot opt source destination
SS_SPEC_WAN_FW all -- anywhere anywhere match-set ss_spec_dst_fw dst
RETURN all -- anywhere anywhere match-set ss_spec_dst_bp dst
SS_SPEC_WAN_GFW all -- anywhere anywhere
Chain SS_SPEC_WAN_CHN (2 references)
target prot opt source destination
SS_SPEC_WAN_FW all -- anywhere anywhere match-set ss_spec_dst_fw dst
RETURN all -- anywhere anywhere match-set ss_spec_dst_bp dst
RETURN all -- anywhere anywhere match-set ss_spec_dst_sh dst
SS_SPEC_WAN_FW all -- anywhere anywhere
Chain SS_SPEC_WAN_CHNGFW (0 references)
target prot opt source destination
SS_SPEC_WAN_GFW all -- anywhere anywhere
SS_SPEC_WAN_CHN all -- anywhere anywhere
Chain SS_SPEC_WAN_DG (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere match-set ss_spec_dst_sp dst
SS_SPEC_WAN_AC tcp -- anywhere anywhere multiport dports ssh,www,https
Chain SS_SPEC_WAN_FW (7 references)
target prot opt source destination
REDIRECT tcp -- anywhere anywhere redir ports 1090
Chain SS_SPEC_WAN_GFW (3 references)
target prot opt source destination
SS_SPEC_WAN_FW all -- anywhere anywhere match-set ss_spec_dst_fw dst
RETURN all -- anywhere anywhere match-set ss_spec_dst_bp dst
SS_SPEC_WAN_FW all -- anywhere anywhere match-set gfwlist dst
SS_SPEC_WAN_FW all -- anywhere anywhere match-set cflist dst
RETURN all -- anywhere anywhere
Chain SS_SPEC_WAN_KCPTUN (0 references)
target prot opt source destination
REDIRECT tcp -- anywhere anywhere redir ports 1091
Chain upnp (1 references)
target prot opt source destination
DNAT udp -- anywhere anywhere udp dpt:mdns to:192.168.111.144:5353
DNAT tcp -- anywhere anywhere tcp dpt:38888 to:192.168.111.110:38888
DNAT udp -- anywhere anywhere udp dpt:62906 to:192.168.111.103:62906
DNAT udp -- anywhere anywhere udp dpt:58557 to:192.168.111.103:58557
DNAT udp -- anywhere anywhere udp dpt:52120 to:192.168.111.103:52120
Chain upnp-post (0 references)
target prot opt source destination
Chain vserver (1 references)
target prot opt source destination
DNAT tcp -- anywhere anywhere tcp dpt:8181 to:192.168.111.1:801
DNAT tcp -- anywhere anywhere tcp dpt:9321 to:192.168.111.1
DNAT tcp -- anywhere anywhere tcp dpt:9322 to:192.168.111.1
DNAT tcp -- anywhere anywhere tcp dpt:8864 to:192.168.111.3:21
upnp all -- anywhere anywhere
|
|