iptables -L无法显示

edisontang

我的iptables的版本是1.3.7的，添加了以下几条命令
iptables -I FORWARD -p tcp -s 192.168.0.200 --sport 80 -d 192.168.0.201 --dport 90 -j DROP

iptables -t nat -I PREROUTING -i eth1 -d 192.168.0.200 -p tcp --dport 80 -j DNAT --to-destination 192.168.1.1:80

然后用iptables -t nat -L 和iptables -L来显示是否添加成功的时候却提示
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
然后就停在这边了，但是可以用iptables-save > test保存到test文件中：

# Generated by iptables-save v1.3.7 on Thu Jan  1 01:33:05 1970
*raw
REROUTING ACCEPT [9411:603036]
:OUTPUT ACCEPT [5299:485185]
COMMIT
# Completed on Thu Jan  1 01:33:05 1970
# Generated by iptables-save v1.3.7 on Thu Jan  1 01:33:05 1970
*nat
REROUTING ACCEPT [7269:460516]
OSTROUTING ACCEPT [12:841]
:OUTPUT ACCEPT [12:841]
-A PREROUTING -d 192.168.0.200 -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.1.1:80
COMMIT
# Completed on Thu Jan  1 01:33:05 1970
# Generated by iptables-save v1.3.7 on Thu Jan  1 01:33:05 1970
*mangle
REROUTING ACCEPT [9411:603036]
:INPUT ACCEPT [2176:146844]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [5299:485185]
OSTROUTING ACCEPT [5299:485185]
COMMIT
# Completed on Thu Jan  1 01:33:05 1970
# Generated by iptables-save v1.3.7 on Thu Jan  1 01:33:05 1970
*filter
:INPUT ACCEPT [2176:146844]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [5299:485185]
-A FORWARD -s 192.168.0.200 -d 192.168.0.201 -p tcp -m tcp --sport 80 --dport 90 -j DROP
COMMIT
# Completed on Thu Jan  1 01:33:05 1970

应该是添加成功了，但就是无法通过iptables -L来正确显示呢？

chenyx

iptables -L -n
不要解析IP地址
不加-n得等好长时间