Could someone explain an iptables rule for me?

Zippy1970 · 07-18-2012, 10:54 AM

If I view my current iptables rules on my webserver, I see this line for (almost) all of my hosted domains:

Code:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
           0    --  anywhere             www.domain.com

.
.
.

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
           0    --  www.domain.com       anywhere

Does that even do anything? Like I said, I see such a rule for almost all hosted domains. I have no idea how those rules got there (never checked before so I have no idea how long they have been there).

unSpawn · 07-18-2012, 06:27 PM

Posting 'iptables -L' output often is the least interesting: best post plain rule configuration file contents.

rknichols · 07-19-2012, 08:25 AM

Rules with matchers and an empty target just record how much traffic satisfied the match. Run "iptables -vL" and note the "pkts" and "bytes" columns.

Zippy1970 · 07-19-2012, 06:42 PM

Quote:

Originally Posted by rknichols

Rules with matchers and an empty target just record how much traffic satisfied the match. Run "iptables -vL" and note the "pkts" and "bytes" columns.

Aaaaah... Now it makes sense. Those are probably rules I added for Munin a long time ago (to monitor the bandwidth of those domains).