@@ -68,31 +68,32 @@ iptables -t 表名 <-A/I/D/R> 规则链名 [规则号] <-i/o 网卡名> -p 协
6868``` bash
6969 ┎╍╍╍╍╍╍╍╍╍╍╍╍╍╍╍┓
7070 ┌───────────────┐ ┃ Network ┃
71- │ table: filter │ ┖━━━━━━━│━━━━━━━┛
72- │ chain: INPUT ◀────┐ │
73- └───────┬───────┘ │ │
74- │ │ ┌─────────▼─────────┐
75- ┌ ▼ ┐ │ │ table: nat │
76- │local process│ │ │ chain: PREROUTING │
77- └ ┘ │ └─────────┬─────────┘
78- │ │ │
79- ▼ │ ▼ ┌─────────────────┐
80- ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅ │ ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅ │table: nat │
81- Routing decision └────── outing decision ─────▶│chain: PREROUTING│
82- ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅ ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅ └────────┬────────┘
83- │ │
71+ │ table: filter │ ┖━━━━━━━┳━━━━━━━┛
72+ │ chain: INPUT │◀────┐ │
73+ └───────┬───────┘ │ ▼
74+ │ │ ┌───────────────────┐
75+ ┌ ▼ ┐ │ │ table: nat │
76+ │local process│ │ │ chain: PREROUTING │
77+ └ ┘ │ └─────────┬─────────┘
78+ │ │ │
79+ ▼ │ ▼ ┌─────────────────┐
80+ ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅ │ ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅ │table: nat │
81+ Routing decision └───── outing decision ─────▶│chain: PREROUTING│
82+ ┅┅┅┅┅┅┅┅┅┳┅┅┅┅┅┅┅┅┅ ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅ └────────┬────────┘
8483 │ │
85- ┌───────▼───────┐ │
84+ ▼ │
85+ ┌───────────────┐ │
8686 │ table: nat │ ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅ │
8787 │ chain: OUTPUT │ ┌─────▶ outing decision ◀──────────────┘
88- └───────┬───────┘ │ ┅┅┅┅┅┅┅┅┅ ┅┅┅┅┅┅┅┅
88+ └───────┬───────┘ │ ┅┅┅┅┅┅┅┅┳ ┅┅┅┅┅┅┅┅
8989 │ │ │
90- ┌───────▼───────┐ │ ┌──────────▼─────────┐
91- │ table: filter │ │ │ table: nat │
92- │ chain: OUTPUT ├────┘ │ chain: POSTROUTING │
93- └───────────────┘ └──────────┬─────────┘
94- │
95- ┎╍╍╍╍╍╍╍▼╍╍╍╍╍╍╍┓
90+ ▼ │ ▼
91+ ┌───────────────┐ │ ┌────────────────────┐
92+ │ table: filter │ │ │ chain: POSTROUTING │
93+ │ chain: OUTPUT ├────┘ └──────────┬─────────┘
94+ └───────────────┘ │
95+ ▼
96+ ┎╍╍╍╍╍╍╍╍╍╍╍╍╍╍╍┓
9697 ┃ Network ┃
9798 ┖━━━━━━━━━━━━━━━┛
9899```
0 commit comments