iptables icmp-host-prohibited引起的No route to host

Chai Yingchao

已于 2022-04-19 10:14:23 修改

阅读量2.5k

点赞数

分类专栏： kubernetes 文章标签： iptables kubernetes

于 2022-04-19 10:13:02 首次发布

本文链接：https://blog.csdn.net/qq_31977125/article/details/124266472

版权

kubernetes 专栏收录该内容

31 篇文章

订阅专栏

如果数据包匹配到下边这条iptables规则，访问端则会报No route to host，抓包中可能会看到 unreachable - admin prohibited

-j REJECT --reject-with icmp-host-prohibited
报错看起来像是没有路由到目的主机，但实际是在一个局域网内。

No route to host

# telnet  192.168.10.10 8880
Trying 192.168.10.10...
telnet: connect to address 192.168.10.10: No route to host

icmp-host-prohibited
被拒绝的连接会收到一个icmp，返回目标主机不可达。

Connection refused

# 连接一个网络可以通的主机，但主机没有监听的端口，会报Connection refused
# telnet  192.168.10.10 8800
Trying 192.168.10.10...
telnet: connect to address 192.168.10.10: Connection refused

Connection timed out

# 连接一个不存在的ip，会报Connection timed out
# telnet 192.168.10.101 8800 
Trying 192.168.10.101...
telnet: connect to address 10.85.19.131: Connection timed out

Name or service not known

# telnet一个无法解析的域名，会报 Name or service not known
# telnet  www.ababalabba.com 8800
telnet: www.ababalabba.com: Name or service not known
www.ababalabba.com: Unknown host