Всем привет
[root@server]# iptables -nvL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
13953 2750K ACCEPT all — * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
73 6080 ACCEPT icmp — * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all — lo * 0.0.0.0/0 0.0.0.0/0
39 2340 ACCEPT tcp — * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
0 0 ACCEPT tcp — * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 ACCEPT tcp — * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80
0 0 ACCEPT tcp — * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443
0 0 ACCEPT tcp — * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:5672
0 0 ACCEPT tcp — * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:4369
0 0 ACCEPT tcp — * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:35197
987 59220 ACCEPT tcp — * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:10050
100 5526 REJECT all — * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 REJECT all — * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT 2249 packets, 692K bytes)
pkts bytes target prot opt in out source destination
[root@server]# netstat -atnup | grep \\:80
tcp 0 0 83.142.162.40:80 0.0.0.0:* LISTEN 14492/httpd
[root@server]# telnet 83.142.162.40 80
Trying 83.142.162.40...
Connected to 83.142.162.40.
Escape character is '^]'.
GET / HTTP/1.0
Host: 12312312312
HTTP/1.1 400 Bad Request
Date: Tue, 10 Sep 2013 10:21:29 GMT
Server: Apache
Content-Length: 226
Connection: close
Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
</body></html>
Connection closed by foreign host.
НО!!!
[user@client]$ telnet 83.142.162.40 80 Trying 83.142.162.40... telnet: connect to address 83.142.162.40: No route to host [user@client]$ ping 83.142.162.40 PING 83.142.162.40 (83.142.162.40) 56(84) bytes of data. 64 bytes from 83.142.162.40: icmp_seq=1 ttl=52 time=2.58 ms ^C --- 83.142.162.40 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 2.580/2.580/2.580/0.000 ms [user@client]$ telnet 83.142.162.40 22 Trying 83.142.162.40... Connected to 83.142.162.40. Escape character is '^]'. SSH-2.0-OpenSSH_5.3 ^] telnet> q Connection closed.
И судя по счётчикам iptables, пакет в правило для 80 порта не попадает, сразу в последнее.
КАК ТАК???
