解决iptables Setting chains to policy ACCEPT: security raw nat[FAILED]filter-睿象云平台

解决iptables Setting chains to policy ACCEPT: security raw nat[FAILED]filter

本站部分文章、图片属于网络上可搜索到的公开信息，均用于学习和交流用途，不能代表睿象云的观点、立场或意见。我们接受网民的监督，如发现任何违法内容或侵犯了您的权益，请第一时间联系小编邮箱jiasou666@gmail.com 处理。

解决iptables Setting chains to policy ACCEPT: security raw nat[FAILED]filter

错误重现

[root@li254-129 ~]# service iptables restartiptables: Setting chains to policy ACCEPT: security raw nat[FAILED]filter iptables: Flushing firewall rules:                         [  OK  ]iptables: Unloading modules:                               [  OK  ]iptables: Applying firewall rules:                         [  OK  ]

[root@li254-129~]# service iptables restart

iptables:Setting chains topolicy ACCEPT:security raw nat[FAILED]filter

iptables:Flushing firewall rules: [ OK ]

iptables:Unloading modules: [ OK ]

iptables:Applying firewall rules: [ OK ]

错误原因

Linode官方在iptables里加了一个security的规则链，但是centos不支持，既然不支持，我就做点手脚吧。

解决iptables: Setting chains to policy ACCEPT: security raw nat[FAILED]filter

找到如下case段,在raw后面加上security)段，修改后如下。

# vim /etc/init.d/iptables for i in $tables; do echo -n "$i " case "$i" in raw) $IPTABLES -t raw -P PREROUTING $policy \ && $IPTABLES -t raw -P OUTPUT $policy \ || let ret+=1 ;;security) $IPTABLES -t filter -P INPUT $policy \ && $IPTABLES -t filter -P OUTPUT $policy \ && $IPTABLES -t filter -P FORWARD $policy \ || let ret+=1 ;;

# vim /etc/init.d/iptables

foriin$tables;do

echo-n"$i "

case"$i"in

raw)

$IPTABLES-traw-PPREROUTING$policy\

&&$IPTABLES-traw-POUTPUT$policy\

||let ret+=1

;;

security)

$IPTABLES-tfilter-PINPUT$policy\

&&$IPTABLES-tfilter-POUTPUT$policy\

&&$IPTABLES-tfilter-PFORWARD$policy\

||let ret+=1

;;

重启iptables

[root@li254-129 ~]# service iptables restartiptables: Setting chains to policy ACCEPT: security raw nat[  OK  ]filter iptables: Flushing firewall rules:                         [  OK  ]iptables: Unloading modules:                               [  OK  ]iptables: Applying firewall rules:                         [  OK  ]