Есть 8 одинаковых серверов с Centos 7. На всех делаю iptables-restore /shared/cfg/iptables-save && iptables-save
. На семи машинках прогнозируемо выводится тот же самый файлик, а на восьмой - таблицы почему-то перемешаны и откуда-то вылезает ещё таблица raw.
Файл у всех один и тот же, проверял.
Исходный файл /shared/cfg/iptables-save
# Generated by iptables-save v1.4.21 on Wed Apr 12 12:45:54 2017
*mangle
:PREROUTING ACCEPT [91829422:110237476820]
:INPUT ACCEPT [63935320:77752831520]
:FORWARD ACCEPT [10828393:28838962062]
:OUTPUT ACCEPT [50957589:135465127003]
:POSTROUTING ACCEPT [61785980:164304088409]
COMMIT
# Completed on Wed Apr 12 12:45:54 2017
# Generated by iptables-save v1.4.21 on Wed Apr 12 12:45:54 2017
*nat
:PREROUTING ACCEPT [4377246:906464047]
:INPUT ACCEPT [247951:19643664]
:OUTPUT ACCEPT [454678:31768318]
:POSTROUTING ACCEPT [33897:2123600]
-A PREROUTING -s 192.168.0.0/16 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.76.27.21:3128
-A POSTROUTING -o eno1 -j MASQUERADE
COMMIT
# Completed on Wed Apr 12 12:45:54 2017
# Generated by iptables-save v1.4.21 on Wed Apr 12 12:45:54 2017
*filter
:INPUT ACCEPT [63935328:77752833194]
:FORWARD ACCEPT [10828393:28838962062]
:OUTPUT ACCEPT [50957595:135465127427]
COMMIT
# Completed on Wed Apr 12 12:45:54 2017
Что отдают 7 машин:
# Generated by iptables-save v1.4.21 on Tue May 22 11:52:23 2018
*mangle
:PREROUTING ACCEPT [3466:443827]
:INPUT ACCEPT [564:176139]
:FORWARD ACCEPT [2902:267688]
:OUTPUT ACCEPT [487:100163]
:POSTROUTING ACCEPT [3389:367851]
COMMIT
# Completed on Tue May 22 11:52:23 2018
# Generated by iptables-save v1.4.21 on Tue May 22 11:52:23 2018
*nat
:PREROUTING ACCEPT [145:16670]
:INPUT ACCEPT [39:8614]
:OUTPUT ACCEPT [39:2577]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -s 192.168.0.0/16 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.76.27.21:3128
-A POSTROUTING -o eno1 -j MASQUERADE
COMMIT
# Completed on Tue May 22 11:52:23 2018
# Generated by iptables-save v1.4.21 on Tue May 22 11:52:23 2018
*filter
:INPUT ACCEPT [564:176139]
:FORWARD ACCEPT [2902:267688]
:OUTPUT ACCEPT [495:101491]
COMMIT
# Completed on Tue May 22 11:52:23 2018
Что отдает восьмая
# Generated by iptables-save v1.4.21 on Tue May 22 11:55:28 2018
*raw
:PREROUTING ACCEPT [97160274:239576454739]
:OUTPUT ACCEPT [27810188:23438787957]
COMMIT
# Completed on Tue May 22 11:55:28 2018
# Generated by iptables-save v1.4.21 on Tue May 22 11:55:28 2018
*filter
:INPUT ACCEPT [32:2240]
:FORWARD ACCEPT [11:1004]
:OUTPUT ACCEPT [17:1520]
COMMIT
# Completed on Tue May 22 11:55:28 2018
# Generated by iptables-save v1.4.21 on Tue May 22 11:55:28 2018
*mangle
:PREROUTING ACCEPT [43:3244]
:INPUT ACCEPT [32:2240]
:FORWARD ACCEPT [11:1004]
:OUTPUT ACCEPT [20:2056]
:POSTROUTING ACCEPT [31:3060]
COMMIT
# Completed on Tue May 22 11:55:28 2018
# Generated by iptables-save v1.4.21 on Tue May 22 11:55:28 2018
*nat
:PREROUTING ACCEPT [1:76]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -s 192.168.0.0/16 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.76.27.21:3128
-A POSTROUTING -o eno1 -j MASQUERADE
COMMIT
# Completed on Tue May 22 11:55:28 2018
Что я упускаю и куда смотреть?