Description
i used iptables firewall is a month,running is favorable.it is failed when i connecting to my server on time.the servers' web service and all ports did not connect.i remote login the other server and through intranet address login this server then i restart iptables .but through internet still could not connect.
I do not know .why ?i tested my iptables rules on other server.at works well.

the iptables rule following

iptables #!/bin/bash
iptables -F
iptables -Z
iptables -X
wlc_addr=158.61.161.183
lc_addr=192.168.1.233
lo_addr=127.0.0.1
iptables -P OUTPUT ACCEPT
iptables -P INPUT DROP
iptables -P FORWARD ACCEPT
iptables -A INPUT -p ALL -s $lc_addr -d $lc_addr -j ACCEPT
iptables -A INPUT -p ALL -s $wlc_addr -d $wlc_addr -j ACCEPT
iptables -A INPUT -p ALL -s $lo_addr -d $lo_addr -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 22 -j ACCEPT
-A INPUT -i eth1 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 28888 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 28888 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 8888 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 37946 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 7891 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 7890 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 7911 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 25 -j ACCEPT
iptables -A INPUT -i eth1 -p udp --sport 53 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 7910 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 65100 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 10123 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 1521 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 5511 -j ACCEPT
iptables -A INPUT -i eth0 -p ALL -s 192.168.1.232 -d 192.168.1.233 -j ACCEPT
iptables -A INPUT -p ALL -s 192.168.1.232 -d 192.168.1.233 -j ACCEPT
iptables -A INPUT -p ALL -s 158.61.161.182 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 211.138.225.168 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 218.246.35.15 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 211.138.238.11 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 210.72.145.14 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 211.138.224.53 -d 158.61.161.183 -j ACCEPT