Fli
11-11-2019, 06:40 PM
Some of your traffic is blocked on CentOS7+ and "iptables -L" shows strange lines you do not know?:
FORWARD_direct all -- anywhere anywhere
FORWARD_IN_ZONES_SOURCE all -- anywhere anywhere
FORWARD_IN_ZONES all -- anywhere anywhere
FORWARD_OUT_ZONES_SOURCE all -- anywhere anywhere
FORWARD_OUT_ZONES all -- anywhere anywhere
DROP all -- anywhere anywhere ctstate INVALID
...
FWDI_public all -- anywhere anywhere [goto]
FWDI_public all -- anywhere anywhere [goto]
Chain FORWARD_IN_ZONES_SOURCE (1 references)
target prot opt source destination
Chain FORWARD_OUT_ZONES (1 references)
target prot opt source destination
FWDO_public all -- anywhere anywhere [goto]
FWDO_public all -- anywhere anywhere [goto]
The"problem" is that likely the firewalld is used. One can solve it by removing it:
systemctl disable firewalld;yum install iptables-services -y;systemctl enable iptables;
now check iptables rules:
iptables -L
or you may clean iptables not to contain any rules:
iptables -F
if you are happy with iptables setup, then save the rules so it survive next reboot:
service iptables save
FORWARD_direct all -- anywhere anywhere
FORWARD_IN_ZONES_SOURCE all -- anywhere anywhere
FORWARD_IN_ZONES all -- anywhere anywhere
FORWARD_OUT_ZONES_SOURCE all -- anywhere anywhere
FORWARD_OUT_ZONES all -- anywhere anywhere
DROP all -- anywhere anywhere ctstate INVALID
...
FWDI_public all -- anywhere anywhere [goto]
FWDI_public all -- anywhere anywhere [goto]
Chain FORWARD_IN_ZONES_SOURCE (1 references)
target prot opt source destination
Chain FORWARD_OUT_ZONES (1 references)
target prot opt source destination
FWDO_public all -- anywhere anywhere [goto]
FWDO_public all -- anywhere anywhere [goto]
The"problem" is that likely the firewalld is used. One can solve it by removing it:
systemctl disable firewalld;yum install iptables-services -y;systemctl enable iptables;
now check iptables rules:
iptables -L
or you may clean iptables not to contain any rules:
iptables -F
if you are happy with iptables setup, then save the rules so it survive next reboot:
service iptables save