给你们看看这个:
[root@linux root]# iptables -vL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
1350 930K RH-Firewall-1-INPUT all -- any any anywhere anywhere
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
69 6724 RH-Firewall-1-INPUT all -- any any anywhere anywhere
Chain OUTPUT (policy ACCEPT 1100 packets, 115K bytes)
pkts bytes target prot opt in out source destination
Chain RH-Firewall-1-INPUT (2 references)
pkts bytes target prot opt in out source destination
2 100 ACCEPT all -- lo any anywhere anywhere
93 9553 ACCEPT all -- eth0 any anywhere anywhere
119 5768 ACCEPT icmp -- any any anywhere anywhere icmp any
0 0 ACCEPT ipv6-crypt-- any any anywhere anywhere
0 0 ACCEPT ipv6-auth-- any any anywhere anywhere
926 900K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ssh
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:smtp
1 48 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:http
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ftp
278 21531 REJECT all -- any any anywhere anywhere reject-with icmp-host-prohibited
[root@linux root]# iptables -vL -t nat
Chain PREROUTING (policy ACCEPT 301 packets, 23948 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 85 packets, 5125 bytes)
pkts bytes target prot opt in out source destination
2 244 MASQUERADE all -- any any 192.168.0.0/24 anywhere
0 0 MASQUERADE all -- any any 192.168.1.0/24 anywhere
Chain OUTPUT (policy ACCEPT 85 packets, 5125 bytes)
pkts bytes target prot opt in out source destination