OpenVZ Forum: Support

Home » General » Support » Iptables

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Iptables [message #27277]

Wed, 13 February 2008 15:56

ittec
Messages: 41
Registered: February 2008

Member

Hi again

excuse me by a second support request in 1 day :/ I spoke in my first post about one powerful server running with openvz. One of VE had a bad performance so i examined system logs and i saw a lot of rows like these:

TCP: Treason uncloaked! Peer 200.47.151.107:54451/80 shrinks window 2485826383:2485826384. Repaired.
TCP: Treason uncloaked! Peer 200.47.151.107:5567/80 shrinks window 2499005088:2499005089. Repaired.

I read a lot of this problem. I have modified sysctl.conf to make server more strong but i found interesting info about make and sh to avoid ips from "bogon" nets. So one of the steps is examine the current rules with iptables command:

#iptables -L

But the Output is:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

So Are there any rules in Iptables on HN? Shocked