iptables에서 ping
AP입니다.
이상하게 내부 네트웤에서 외부로 ping은 안가는데요 인터넷은 되네요...
왜 그럴까요?
ping empas.com 하면 안가는데, 익스플로어에서 www.empas.com 열면 잘 열립니다...^^
<<filter>>
Chain INPUT (policy ACCEPT 294 packets, 18960 bytes)
pkts bytes target prot opt in out source destination
13 1740 ACCEPT all -- eth0 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
433 33830 common_input all -- * * 0.0.0.0/0 0.0.0.0/0
294 18960 common_deny_policy all -- * * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
163 6871 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 0
45 2132 inner_internet all -- * * 0.0.0.0/0 0.0.0.0/0
3 136 common_input all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 common_deny_policy all -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 293 packets, 18861 bytes)
pkts bytes target prot opt in out source destination
Chain common_deny_policy (2 references)
pkts bytes target prot opt in out source destination
293 18900 macfilter_deny_policy all -- * * 0.0.0.0/0 0.0.0.0/0
293 18900 firewall_deny_policy all -- * * 0.0.0.0/0 0.0.0.0/0
Chain common_input (2 references)
pkts bytes target prot opt in out source destination
435 33906 firewall all -- * * 0.0.0.0/0 0.0.0.0/0
293 18900 macfilter all -- * * 0.0.0.0/0 0.0.0.0/0
Chain firewall (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 5.5.5.5 192.168.0.33
142 15006 DROP all -- * * 61.106.48.0/24 0.0.0.0/0
Chain firewall_deny_policy (1 references)
pkts bytes target prot opt in out source destination
Chain inner_internet (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- eth0 br0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
42 1996 ACCEPT all -- br0 eth0 0.0.0.0/0 0.0.0.0/0
Chain macfilter (1 references)
pkts bytes target prot opt in out source destination
Chain macfilter_deny_policy (1 references)
pkts bytes target prot opt in out source destination
<< nat >>
Chain PREROUTING (policy ACCEPT 747 packets, 54410 bytes)
pkts bytes target prot opt in out source destination
746 54350 port_forward all -- * * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
111 5342 inner_internet all -- * * 0.0.0.0/0 0.0.0.0/0
3 178 SNAT all -- * eth0 0.0.0.0/0 0.0.0.0/0 to:211.106.40.56
Chain OUTPUT (policy ACCEPT 3 packets, 178 bytes)
pkts bytes target prot opt in out source destination
Chain inner_internet (1 references)
pkts bytes target prot opt in out source destination
108 5164 MASQUERADE all -- * eth0 192.168.0.0/24 0.0.0.0/0
Chain port_forward (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT udp -- * * 0.0.0.0/0 211.106.40.56 udp dpt:1719 to:192.168.0.10:1719
Re: iptables에서 ping
서버쪽에서 PING 응답을 막아 놓은것이 아닐까요?
ping google.com 을 해보세요.
구글이 되고, 엠파스가 안된다면 로컬문제는 아니겠죠.
---
배려하는 마음을 갖자.
댓글 달기