服務(wù)器路由跟蹤

lsh4032

今天用traceroute跟蹤本機(jī)顯示全是*，跟蹤外網(wǎng)是可以的。想知道是怎么回事，各位與遇到過嗎？

chenyx

樓主的機(jī)器是不是禁止ping了?

zongg

iptables 看看開沒開?

lsh4032

你好，ping 是可以的，但是路由跟蹤有問題。只要關(guān)閉了防火墻就能跟蹤了！

lsh4032

1. [root@localhost ~]# ping 10.32.0.225
   
2. PING 10.32.0.225 (10.32.0.225) 56(84) bytes of data.
   
3. 64 bytes from 10.32.0.225: icmp_seq=1 ttl=64 time=0.034 ms
   
4. 64 bytes from 10.32.0.225: icmp_seq=2 ttl=64 time=0.021 ms
   
5. 64 bytes from 10.32.0.225: icmp_seq=3 ttl=64 time=0.024 ms
   
6. ^C
   
7. --- 10.32.0.225 ping statistics ---
   
8. 3 packets transmitted, 3 received, 0% packet loss, time 2423ms
   
9. rtt min/avg/max/mdev = 0.021/0.026/0.034/0.007 ms
   
10. [root@localhost ~]# traceroute 10.32.0.225
    
11. traceroute to 10.32.0.225 (10.32.0.225), 30 hops max, 60 byte packets
    
12. 1  localhost.localdomain (10.32.0.225)  0.027 ms * *
    
13. [root@localhost ~]#

復(fù)制代碼

chenyx

禁止iptables就可以的話,樓主的iptables規(guī)則有問題,貼上來看看

lsh4032

1. # Generated by iptables-save v1.3.5 on Thu May 10 14:55:26 2012
   
2. *filter
   
3. :INPUT DROP [94:6556]
   
4. :FORWARD ACCEPT [0:0]
   
5. :OUTPUT ACCEPT [2329:620839]
   
6. #-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
   
7. -A INPUT -p icmp -j ACCEPT
   
8. -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
   
9. -A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
   
10. -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
    
11. -A INPUT -p tcp -m tcp --dport 445 -j ACCEPT
    
12. -A INPUT -p tcp -m tcp --dport 3306 -j ACCEPT
    
13. -A INPUT -p tcp -m tcp --dport 5432 -j ACCEPT
    
14. -A INPUT -p tcp -m tcp --dport 5666 -j ACCEPT
    
15. -A INPUT -p tcp -m tcp --dport 8899 -j ACCEPT
    
16. -A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT
    
17. -A INPUT -p tcp -m tcp --dport 11211 -j ACCEPT
    
18. -A INPUT -p tcp -m tcp --dport 11212 -j ACCEPT
    
19. -A INPUT -p tcp -m tcp --dport 61613 -j ACCEPT
    
20. -A INPUT -p tcp -m tcp --dport 8161 -j ACCEPT
    
21. -A INPUT -p tcp -m tcp --dport 8898 -j ACCEPT
    
22. 
    
23. COMMIT
    
24. # Completed on Thu May 10 14:55:26 2012

復(fù)制代碼

chenyx

#-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

把前面的#去掉,然后重啟iptables服務(wù)

lsh4032

謝謝大家，已經(jīng)解決了！