VPS侦探论坛

标题: iptables-restore: una ble to initializetable ‘security’ Error occurred at line: [打印本页]
作者: oogoogle    时间: 2013-6-7 09:57
标题: iptables-restore: una ble to initializetable ‘security’ Error occurred at line:
重启 iptables 出现这个问题
  1. /etc/init.d/iptables restart
  2. Applying iptables firewall rules: iptables-restore v1.3.5: iptables-restore: una ble to initializetable ‘security’  Error occurred at line: 2 Try `iptables-restore -h’ or ‘iptables-restore –help’ for more information. [FAILED]
复制代码

iptables内容：
  1. # Generated by iptables-save v1.3.5 on Wed Jan 16 02:43:43 2013
  2. *nat
  3. :PREROUTING ACCEPT [1402:289184]
  4. :POSTROUTING ACCEPT [90:5400]
  5. :OUTPUT ACCEPT [90:5400]
  6. COMMIT
  7. # Completed on Wed Jan 16 02:43:43 2013
  8. # Generated by iptables-save v1.3.5 on Wed Jan 16 02:43:43 2013
  9. *filter
  10. :INPUT ACCEPT [2865:438216]
  11. :FORWARD ACCEPT [0:0]
  12. :OUTPUT ACCEPT [2295:495459]
  13. # 允许本地连接
  14. -A INPUT -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT
  15. # 允许所有已经建立的和相关的连接
  16. -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
  17. -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
  18. # 允许loopback!(不然会导致DNS无法正常关闭、memcached 连接失败等问题)
  19. -A INPUT -i lo -p all -j ACCEPT
  20. -A OUTPUT -o lo -p all -j ACCEPT
  21. -A INPUT -i eth0 -j ACCEPT
  22. # 允许所有本机向外的访问
  23. -A OUTPUT -j ACCEPT
  24. # 允许访问22端口
  25. -A INPUT -p tcp --syn --dport 22 -j ACCEPT
  26. -A OUTPUT -p tcp --syn --dport 22 -j ACCEPT
  27. # 允许访问80端口
  28. -A INPUT -p tcp --syn --dport 80 -j ACCEPT
  29. -A OUTPUT -p tcp --syn --dport 80 -j ACCEPT
  30. # 允许访问443端口
  31. -A INPUT -p tcp --dport 443 -j ACCEPT
  32. -A OUTPUT -p tcp --dport 443 -j ACCEPT
  33. # 允许Ping
  34. -A INPUT -p icmp -j ACCEPT
  35. -A OUTPUT -p icmp -j ACCEPT
  36. # 允许邮件服务的25端口
  37. -A INPUT -p tcp --syn --dport 25 -j ACCEPT
  38. -A OUTPUT -p tcp --syn --dport 25 -j ACCEPT
  39. # 允许FTP服务的21和20端口
  40. -A INPUT -p tcp --syn --dport 21 -j ACCEPT
  41. -A OUTPUT -p tcp --syn --dport 21 -j ACCEPT
  42. -A INPUT -p tcp --syn --dport 20 -j ACCEPT
  43. -A OUTPUT -p tcp --syn --dport 20 -j ACCEPT
  44. # 允许DNS服务的53端口
  45. -A INPUT -p tcp --dport 53 -j ACCEPT
  46. -A OUTPUT -p tcp --dport 53 -j ACCEPT
  47. # 丢弃坏的TCP包
  48. -A FORWARD -p TCP ! --syn -m state --state NEW -j DROP
  49. # 处理IP碎片数量,防止攻击,允许每秒100个
  50. -A FORWARD -f -m limit --limit 100/s --limit-burst 100 -j ACCEPT
  51. # 设置ICMP包过滤,允许每秒1个包,限制触发条件是10个包.
  52. -A FORWARD -p icmp -m limit --limit 1/s --limit-burst 10 -j ACCEPT
  53. # 禁止非法连接
  54. -A FORWARD -m state --state INVALID -j DROP
  55. # 防止SYN攻击 轻量
  56. -N syn-flood
  57. -A INPUT -p tcp --syn -j syn-flood
  58. -A syn-flood -p tcp -m limit --limit 3/s --limit-burst 6 -j RETURN
  59. -A syn-flood -j REJECT
  60. # 防止php-ddos对外udp发包
  61. -I OUTPUT -p udp --dport 53 -d 208.87.241.170 -j ACCEPT
  62. -A OUTPUT -p udp -j DROP
  63. # 拒绝非法连接
  64. -A INPUT   -m state --state INVALID -j DROP
  65. -A OUTPUT  -m state --state INVALID -j DROP
  66. # 禁止其他未允许的规则访问（注意：如果22端口未加入允许规则，SSH链接会直接断开。）
  67. -A INPUT -j REJECT
  68. -A FORWARD -j REJECT

  70. COMMIT
  71. # Completed on Wed Jan 16 02:43:43 2013
复制代码

请问是什么问题引起的呢？
作者: licess    时间: 2013-6-7 11:27
重新save一下iptable再restart一下看看试试



欢迎光临 VPS侦探论坛 (https://bbs.lnmp.com/) Powered by Discuz! X3.4