版主快来看看，急等！

xjzbw

#iptables-save

# Generated by iptables-save v1.3.3 on Tue Oct 11 11:43:00 2005
*nat
REROUTING ACCEPT [92502]
OSTROUTING ACCEPT [14820]
:OUTPUT ACCEPT [14759]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A POSTROUTING -s 192.168.0.0/255.255.255.0 -o ppp0 -j MASQUERADE
COMMIT
# Completed on Tue Oct 11 11:43:00 2005
# Generated by iptables-save v1.3.3 on Tue Oct 11 11:43:00 2005
*mangle
REROUTING ACCEPT [1776343]
:INPUT ACCEPT [352783]
:FORWARD ACCEPT [1423382]
:OUTPUT ACCEPT [380848]
OSTROUTING ACCEPT [1233674]
COMMIT
# Completed on Tue Oct 11 11:43:00 2005
# Generated by iptables-save v1.3.3 on Tue Oct 11 11:43:00 2005
*filter
:INPUT ACCEPT [141]
:FORWARD DROP [423]
:OUTPUT ACCEPT [145]
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 80 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 22 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 21 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 25 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 110 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 23 -j ACCEPT
-A FORWARD -p udp -m udp --dport 53 -j ACCEPT
COMMIT
# Completed on Tue Oct 11 11:43:00 2005


我的iptables-save结果是这样的，其他的filter都去掉了，局域网内机器还是不能上网，改成iptables-P FORWARD ACCEPT 就能上网了，求解决办法，急等！