iptables에서 ping

hyji의 이미지

AP입니다.
이상하게 내부 네트웤에서 외부로 ping은 안가는데요 인터넷은 되네요...
왜 그럴까요?

ping empas.com 하면 안가는데, 익스플로어에서 www.empas.com 열면 잘 열립니다...^^

<<filter>>

Chain INPUT (policy ACCEPT 294 packets, 18960 bytes)
pkts bytes target prot opt in out source destination
13 1740 ACCEPT all -- eth0 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
433 33830 common_input all -- * * 0.0.0.0/0 0.0.0.0/0
294 18960 common_deny_policy all -- * * 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
163 6871 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 0
45 2132 inner_internet all -- * * 0.0.0.0/0 0.0.0.0/0
3 136 common_input all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 common_deny_policy all -- * * 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy ACCEPT 293 packets, 18861 bytes)
pkts bytes target prot opt in out source destination

Chain common_deny_policy (2 references)
pkts bytes target prot opt in out source destination
293 18900 macfilter_deny_policy all -- * * 0.0.0.0/0 0.0.0.0/0
293 18900 firewall_deny_policy all -- * * 0.0.0.0/0 0.0.0.0/0

Chain common_input (2 references)
pkts bytes target prot opt in out source destination
435 33906 firewall all -- * * 0.0.0.0/0 0.0.0.0/0
293 18900 macfilter all -- * * 0.0.0.0/0 0.0.0.0/0

Chain firewall (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 5.5.5.5 192.168.0.33
142 15006 DROP all -- * * 61.106.48.0/24 0.0.0.0/0

Chain firewall_deny_policy (1 references)
pkts bytes target prot opt in out source destination

Chain inner_internet (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- eth0 br0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
42 1996 ACCEPT all -- br0 eth0 0.0.0.0/0 0.0.0.0/0

Chain macfilter (1 references)
pkts bytes target prot opt in out source destination

Chain macfilter_deny_policy (1 references)
pkts bytes target prot opt in out source destination

<< nat >>
Chain PREROUTING (policy ACCEPT 747 packets, 54410 bytes)
pkts bytes target prot opt in out source destination
746 54350 port_forward all -- * * 0.0.0.0/0 0.0.0.0/0

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
111 5342 inner_internet all -- * * 0.0.0.0/0 0.0.0.0/0
3 178 SNAT all -- * eth0 0.0.0.0/0 0.0.0.0/0 to:211.106.40.56

Chain OUTPUT (policy ACCEPT 3 packets, 178 bytes)
pkts bytes target prot opt in out source destination

Chain inner_internet (1 references)
pkts bytes target prot opt in out source destination
108 5164 MASQUERADE all -- * eth0 192.168.0.0/24 0.0.0.0/0

Chain port_forward (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT udp -- * * 0.0.0.0/0 211.106.40.56 udp dpt:1719 to:192.168.0.10:1719

eseo의 이미지

hyji wrote:
AP입니다.
이상하게 내부 네트ㅤㅇㅝㅋ에서 외부로 ping은 안가는데요 인터넷은 되네요...
왜 그럴까요?

ping empas.com 하면 안가는데, 익스플로어에서 www.empas.com 열면 잘 열립니다...^^
...

서버쪽에서 PING 응답을 막아 놓은것이 아닐까요?
ping google.com 을 해보세요.
구글이 되고, 엠파스가 안된다면 로컬문제는 아니겠죠.

---
배려하는 마음을 갖자.