rht5 nat后玩浩方cs 和魔兽延时1000多ping,出现卡的问题!

tieren_1000

我这边是小区宽带,用rhel5 nat后玩浩方cs 和魔兽延时1000多ping,出现卡的问题!通过测试直接用外网地址玩正常,请大家帮助分析一下原因,先谢谢拉!!

cnjnhu

先把nat设置里的限制去掉，只留转发看看。

tieren_1000

楼上的所表示的限制能详细些吗,具体限制什么?

ssffzz1

iptables-save
帖规则

tieren_1000

# Generated by iptables-save v1.3.5 on Tue Aug  5 09:13:51 2008
*mangle
REROUTING ACCEPT [175276257465:92662595548089]
:INPUT ACCEPT [7441943634:467946122920]
:FORWARD ACCEPT [167828049758:92194208915236]
:OUTPUT ACCEPT [7799191:675118277]
OSTROUTING ACCEPT [167834108224:92194768397535]
COMMIT
# Completed on Tue Aug  5 09:13:51 2008
# Generated by iptables-save v1.3.5 on Tue Aug  5 09:13:51 2008
*nat
REROUTING ACCEPT [9305659259:578921886373]
OSTROUTING ACCEPT [3881422:570289455]
:OUTPUT ACCEPT [1432132:120288966]
-A POSTROUTING -s 10.0.118.0/255.255.255.0 -o eth4 -j SNAT --to-source 210.211.0.2
-A POSTROUTING -s 10.2.15.93 -o eth4 -j SNAT --to-source 210.211.0.1
-A POSTROUTING -s 10.2.15.94 -o eth4 -j SNAT --to-source 210.211.0.2
-A POSTROUTING -s 10.0.0.0/255.0.0.0 -o eth4 -j SNAT --to-source 210.211.0.1
-A POSTROUTING -s 192.168.101.2 -j SNAT --to-source 210.211.0.2
-A POSTROUTING -s 10.0.0.0/255.0.0.0 -o eth1 -j SNAT --to-source 124.107.212.200
COMMIT
# Completed on Tue Aug  5 09:13:51 2008
# Generated by iptables-save v1.3.5 on Tue Aug  5 09:13:51 2008
*filter
:INPUT DROP [7393407104:464926674096]
:FORWARD ACCEPT [167826309057:92194093292196]
:OUTPUT ACCEPT [7799193:675118757]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -s 10.1.0.0/255.255.255.0 -p tcp -m tcp --dport 2222 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 199 -j ACCEPT
-A INPUT -p udp -m udp --dport 161 -j ACCEPT
-A FORWARD -p tcp -m multiport --dports 69,135:139,445,593,4444,1434,2500,5800,5900,6346,9393,5554,9996 -j REJECT --reject-with tcp-reset
-A FORWARD -p udp -m multiport --dports 135,137,138,139,445,593,4444,1434 -j REJECT --reject-with icmp-port-unreachable
COMMIT