--hashlimit-mode dstip --hashlimit-above 512kb/s --hashlimit-burst 1mb hbh (IPv6-specific) 此模块与“逐跳选项”报文头中的参数匹配。 [!] --hbh-len length 此报文头的总长度(以八位字节为单位)。 --hbh-opts type[:length][,type[:length]...] 选项的数字类型和选项数据的长度(以八位字节为...
-idocker0: iptables: No chain/target/match by that name 1. 2. 解决方法: vim /etc/sysconfig/iptables *nat :PREROUTING ACCEPT [27:11935] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [598:57368] :POSTROUTING ACCEPT [591:57092] :DOCKER - [0:0] -A PREROUTING -m addrtype --dst-type LOCAL -j...
*nat:PREROUTINGACCEPT [27:11935]:INPUTACCEPT [0:0]:OUTPUTACCEPT [598:57368]:POSTROUTINGACCEPT [591:57092]:DOCKER- [0:0] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER -A OUTPUT ! -d127.0.0.0/8-m addrtype --dst-type LOCAL -j DOCKER -A POSTROUTING -s172.17.0.0/16! -o doc...
-d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADECOMMIT # Completed on Sun Sep 20 17:35:31 2015# Generated by iptables-save v1.4.21 on Sun Sep 20 17:35:31 2015*filter:INPUT ACCEPT [139291:461018923]:FORWARD ACCEPT ...
iptables -L 3、检查iptables⽂件中是否有docker项⽬ nat :PREROUTING ACCEPT [27:11935]:INPUT ACCEPT [0:0]:OUTPUT ACCEPT [598:57368]:POSTROUTING ACCEPT [591:57092]:DOCKER - [0:0]-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst...
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE COMMIT *filter规则里对docker的配置如下 *filter :INPUT ACCEPT [139291:461018923] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [127386:5251162] ...
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE COMMIT # Completed on Sun Sep 20 17:35:31 2015 ...
fw3" -j zone_lan_postrouting -A POSTROUTING -o teql0 -m comment --comment "!fw3" -j zone_wan_postrouting -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p tcp -j REDIRECT --to-ports 7892 -A openclash_output -m set --match-set localnetwork dst -...
-APREROUTING-m addrtype --dst-typeLOCAL-jDOCKER-APOSTROUTING-s172.17.0.0/16! -o docker0-jMASQUERADECOMMIT *filter规则里对docker的配置如下 *filter:INPUTACCEPT[139291:461018923]:FORWARDACCEPT[0:0]:OUTPUTACCEPT[127386:5251162]:DOCKER-[0:0]-AFORWARD-odocker0-jDOCKER-AFORWARD-odocker0-mconntrack...
-A OUTPUT !-d 127.0.0.0/8-m addrtype --dst-type LOCAL -j DOCKER -A POSTROUTING -s 172.17.0.0/16!-o docker0 -j MASQUERADE COMMIT # *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :DOCKER -[0:0] ...