Centos 6.6 default iptable rules

Centos 6.6 default iptable rules

Today, I installed a new centos6.6 virtual machine on my computer and nginx without any other settings. Then I found that I can only access nginx on centos and read the iptable rules.

[root@centos6 ~]# iptables-save# Generated by iptables-save v1.4.7 on Sun Jul 26 15:53:13 2015*filter:INPUT ACCEPT [0:0]:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [5819:366868]-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT# Completed on Sun Jul 26 15:53:13 2015

It seems that there is no problem. The default policy is acceptable. I can see the last two sentences and I don't understand what it means.

-A input-j REJECT -- reject-with icmp-host-prohibited-a forward-j REJECT -- reject-with icmp-host-prohibited # indicates that the FORWARD table rejects all other packets that do not comply with any of the preceding rules. In addition, a host prohibited message is sent to the rejected host.

Under record, reference http://zhidao.baidu.com/link? Url = required _