LINUX.ORG.RU

История изменений

Исправление anc, (текущая версия) :

Уточню в таблице FORWARD у вас:

-P FORWARD DROP
-A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT
-A FORWARD -i virbr0 -o virbr0 -j ACCEPT
-A FORWARD -i virbr0 -o tun0 -j ACCEPT
-A FORWARD -o virbr0 -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable
?

Исходная версия anc, :

Уточню в таблице FORWARD у вас:

-P FORWARD DROP
-A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT
-A FORWARD -i virbr0 -o virbr0 -j ACCEPT
-A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i virbr0 -o tun0 -j ACCEPT
-A FORWARD -o virbr0 -m state --state ESTABLISHED,RELATED -j ACCEPT

?