Ниже приведен конфиг iptables в CentOS. Почему не пропускает пакеты на порты?
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [724:280814]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A INPUT -p tcp -m multiport --dports 80,443,4848,3050,8080 -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A OUTPUT -p tcp -m multiport --dports 80,443,4848,3050,8080 -j ACCEPT
COMMIT
# Completed on Tue Oct 29 12:51:35 2013
# Generated by iptables-save v1.4.7 on Tue Oct 29 12:51:35 2013
*nat
:PREROUTING ACCEPT [604:65228]
:POSTROUTING ACCEPT [41:2477]
:OUTPUT ACCEPT [41:2477]
-A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080
-A PREROUTING -p udp -m udp --dport 80 -j REDIRECT --to-ports 8080
COMMIT
# Completed on Tue Oct 29 12:51:35 2013

• Iptables конфиг, что не так?,pavel_simple, 18:59 , 29-Окт-13
• Iptables конфиг, что не так?,izyk, 01:06 , 30-Окт-13
  • Iptables конфиг, что не так?,Bumbucha, 17:42 , 30-Окт-13

>[оверквотинг удален]
> # Completed on Tue Oct 29 12:51:35 2013
> # Generated by iptables-save v1.4.7 on Tue Oct 29 12:51:35 2013
> *nat
> :PREROUTING ACCEPT [604:65228]
> :POSTROUTING ACCEPT [41:2477]
> :OUTPUT ACCEPT [41:2477]
> -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080
> -A PREROUTING -p udp -m udp --dport 80 -j REDIRECT --to-ports 8080
> COMMIT
> # Completed on Tue Oct 29 12:51:35 2013

какие пакеты на какие порты?

> -A INPUT -j REJECT --reject-with icmp-host-prohibited

>> -A INPUT -j REJECT --reject-with icmp-host-prohibited

Да понял всё, наконец получил некое понимание того как работают цепочки.