iptables 怎样设置DNS转发阿！

xjzbw

局域网内客户机输入IP地址能浏览网页，输入域名却不行，我也做了DNS转发了
iptables-A PREROUTING -p udp --dport 53 -j ACCEPT
iptables -A FORWARD -p udp --dport 53 -j ACCEPT
iptables -A FORWARD -p tcp --dprot 53 -j ACCEPT
三句我都试过了没有效果，谁能给我想想办法！

platinum

iptables-save
贴一下结果

xjzbw

原帖由 "platinum" 发表：
iptables-save
贴一下结果

# Generated by iptables-save v1.3.3 on Tue Oct 11 11:43:00 2005
*nat
REROUTING ACCEPT [92502]
OSTROUTING ACCEPT [14820]
:OUTPUT ACCEPT [14759]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A POSTROUTING -s 192.168.0.0/255.255.255.0 -o ppp0 -j MASQUERADE
COMMIT
# Completed on Tue Oct 11 11:43:00 2005
# Generated by iptables-save v1.3.3 on Tue Oct 11 11:43:00 2005
*mangle
REROUTING ACCEPT [1776343]
:INPUT ACCEPT [352783]
:FORWARD ACCEPT [1423382]
:OUTPUT ACCEPT [380848]
OSTROUTING ACCEPT [1233674]
COMMIT
# Completed on Tue Oct 11 11:43:00 2005
# Generated by iptables-save v1.3.3 on Tue Oct 11 11:43:00 2005
*filter
:INPUT ACCEPT [141]
:FORWARD DROP [423]
:OUTPUT ACCEPT [145]
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 80 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 22 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 21 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 25 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 110 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 23 -j ACCEPT
-A FORWARD -p udp -m udp --dport 53 -j ACCEPT
COMMIT
# Completed on Tue Oct 11 11:43:00 2005


我的iptables-save结果是这样的，其他的filter都去掉了，局域网内机器还是不能上网，改成iptables-P FORWARD ACCEPT 就能上网了，求解决办法，急等！

platinum

iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT

xjzbw

[quote]原帖由 "platinum"]iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT[/quote 发表：



问题解决了，太疏忽了！