Shadowsocks-libev: iptables该如何设置

[860git]

Please answer these questions before submitting your issue. Thanks!

(Please mention that if the issue you filed is solved, you may wish to close it by yourself. Thanks again.)

(PS, you can remove 3 lines above, including this one, before post your issue.)

What version of shadowsocks-libev are you using?

shadowsocks-libev 2.6.2 with OpenSSL 1.0.2k

What operating system are you using?

centos

What did you do?

/etc/shadowsocks-libev/shadowsocks.json

{
        "server":"x.x.x.x",
        "server_port":8888,
        "password":"xxx",
        "timeout":600,
        "method":"aes-256-cfb"
}

service iptables start
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -p tcp --dport 8888 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 8888 -j ACCEPT
service shadowsocks.server start

What did you expect to see?

run shadowsocks with iptables is opened

What did you see instead?

开启INPUT过滤后,shadowsocks无法访问客户端请求的网站

What is your config in detail (with all sensitive info masked)?

[halldong]

iptables -A OUTPUT -p tcp --dport 8888 -j ACCEPT

[kkkkke]

一些微小的工作

清空所有链

iptables --flush
iptables --delete-chain
iptables --table mangle --flush
iptables --table mangle --delete-chain

设定默认规则

iptables --policy INPUT DROP
iptables --policy OUTPUT ACCEPT
iptables --policy FORWARD DROP

允许SSH

iptables --append INPUT --protocol tcp --dport 22-j ACCEPT

允许Shadowsocks端口

iptables --append INPUT --protocol tcp --dport 8888 -j ACCEPT

允许合法接入链接

iptables --append INPUT --match conntrack --ctstate ESTABLISHED,RELATED --jump ACCEPT

永久化

iptables-save > /etc/iptables_rules
echo "/sbin/iptables-restore < /etc/iptables_rules" >> /etc/rc.local

[candledragle]

thks

[860git]

thks2

[songxin1990]

擦，iptables --policy INPUT DROP这一条不能直接命令行输入的，导致VPS直接连不上了。

[Dongzzzz]

擦，iptables --policy INPUT DROP这一条不能直接命令行输入的，导致VPS直接连不上了。

什么意思，这一行不能输入是么？

[songxin1990]

擦，iptables --policy INPUT DROP这一条不能直接命令行输入的，导致VPS直接连不上了。

什么意思，这一行不能输入是么？

就是说不能直接在控制台，shell窗口中输入，要编辑配置文件模式下输入。
如果vps连接不上了，可以尝试linode管理台重启vps或者用linode的控制台连接vps。
shadowsocks现在端口老是被封，被封后通过linode控制台上去改端口，或者直接开telnet吧，，不怕的话。