linux做squid+iptables开启后访问明显变慢。在线等.急.急.急.

jianglin-

iptables开启后访问明显变慢，下面是我的iptables的配置

*nat
REROUTING ACCEPT [3:542]
OSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]

-A POSTROUTING -s 192.168.16.0/24 -o eth0 -j MASQUERADE
-A PREROUTING -s 192.168.16.0/24 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
COMMIT

*filter
:INPUT ACCEPT [174:14002]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [101:9708]-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 23 -j DROP
-A INPUT -i eth1 -p udp -m udp --dport 23 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 137 -j DROP
-A INPUT -i eth1 -p udp -m udp --dport 137 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 138 -j DROP
-A INPUT -i eth1 -p udp -m udp --dport 138 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 138 -j DROP
-A INPUT -i eth1 -p udp -m udp --dport 138 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 25 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 80 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 110 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 443 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 143 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 22 -j DROP
-A INPUT -i eth1 -p tcp -m tcp --dport 21 -j DROP
-A INPUT -i eth1 -p icmp -j DROP
-A INPUT -p tcp -m tcp -m state -s 192.168.16.55/24 --dport 10000 --state NEW -j ACCEPT
-A INPUT -i eth0 -s 192.168.8.3/24 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j DROP
-A OUTPUT -p tcp -m tcp -s 192.168.16.0/255.255.255.0 --dport 110 --sport 1024:65535 -j ACCEPT
-A syn-flood -m limit --limit 100/sec --limit-burst 150 -j RETURN
-A syn-flood -j DROP
COMMIT*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
REROUTING ACCEPT [0:0]
OSTROUTING ACCEPT [0:0]
COMMIT



:syn-flood - [0:0]
-A INPUT -j syn-flood
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -j ACCEPT

wch100

嫌慢就把iptables关了吧