Исходное сообщение
"Опять грабли" Отправлено DREAMTIME, 11-Сен-09 11:52
>[оверквотинг удален] >--limit-burst 1 -j LOG --log-prefix "Bad TCP flag(128): " --log-level 6 > >-A VALID_CHK -p tcp -m tcp --tcp-option 64 -j DROP >-A VALID_CHK -p tcp -m tcp --tcp-option 128 -j DROP >-A VALID_CHK -m state --state INVALID -j DROP >-A VALID_CHK -f -m limit --limit 3/min --limit-burst 1 -j LOG --log-prefix >"Fragmented packet: " --log-level 6 >-A VALID_CHK -f -j DROP >COMMIT ># Completed on Fri Sep 11 13:00:48 2009 а у меня вот как iptables-save # Generated by iptables-save v1.3.3 on Fri Sep 11 11:50:17 2009 *mangle :PREROUTING ACCEPT [55:7693] :INPUT ACCEPT [55:7693] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [56:9660] :POSTROUTING ACCEPT [56:9660] COMMIT # Completed on Fri Sep 11 11:50:17 2009 # Generated by iptables-save v1.3.3 on Fri Sep 11 11:50:17 2009 *nat :PREROUTING ACCEPT [3:448] :POSTROUTING ACCEPT [2:141] :OUTPUT ACCEPT [2:141] -A POSTROUTING -o eth1 -j MASQUERADE COMMIT # Completed on Fri Sep 11 11:50:17 2009 # Generated by iptables-save v1.3.3 on Fri Sep 11 11:50:17 2009 *filter :INPUT ACCEPT [1:328] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [56:9660] -A INPUT -i lo -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -i ! eth1 -m state --state NEW -j ACCEPT -A FORWARD -i eth1 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i eth0 -o eth1 -j ACCEPT -A FORWARD -i eth1 -o eth1 -j REJECT --reject-with icmp-port-unreachable COMMIT # Completed on Fri Sep 11 11:50:17 2009