Добрый день всем .Помогите разобратся . Есть сервер Linux где Iptables настроен так *filter

# Flush iptables
-F
-X

# Setting default filter policy DROP all
-P INPUT DROP
-P OUTPUT ACCEPT
-P FORWARD ACCEPT

# Allow unlinited traffic on both lo and venet0
-A INPUT -i venet0 -s 127.0.0.1 -j ACCEPT
-A OUTPUT -o venet0 -d 127.0.0.1 -j ACCEPT

#-A INPUT -i venet0 -m state --state ESTABLISHED,RELATED -j ACCEPT
#-A OUTPUT -o venet0 -m state --state ESTABLISHED,RELATED -j ACCEPT

-A OUTPUT -p TCP --sport 32768:61000 -j ACCEPT
-A OUTPUT -p UDP --sport 32768:61000 -j ACCEPT

-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT

-A OUTPUT -j ACCEPT

# Incoming HTTP/HTTPS
-A INPUT -p tcp -s 0/0 --sport 1024:65535 -d 77.77.77.77 --dport 80 -j ACCEPT
-A OUTPUT -p tcp -s 77.77.77.77 --sport 80 -d 0/0 --dport 1024:65535 -j ACCEPT
-A INPUT -p tcp -s 0/0 --sport 1024:65535 -d 77.77.77.77 --dport 443 -j ACCEPT
-A OUTPUT -p tcp -s 77.77.77.77 --sport 443 -d 0/0 --dport 1024:65535 -j ACCEPT

# Incoming SSH
-A INPUT -p tcp -s 0/0 --sport 513:65535 -d 77.77.77.77 --dport 22 -j ACCEPT

# Outgoing DNS
-A OUTPUT -p udp -m udp -o venet0 --dport 53 -j ACCEPT
-A OUTPUT -p tcp -m tcp -o venet0 --dport 53 -j ACCEPT
-A INPUT -p udp -m udp -i venet0 --dport 53 --sport 1024:65535 -j ACCEPT
-A INPUT -p tcp -m tcp -i venet0 --dport 53 --sport 1024:65535 -j ACCEPT

# Outgoing ICMP
-A OUTPUT -p icmp -j ACCEPT
-A INPUT -p icmp -j ACCEPT

# Outgoing traceroute
-A OUTPUT -p udp -s 77.77.77.77 --sport 1024:65535 -d 0/0 --dport 33434:33523 -j ACCEPT

# outgoing HTTP/HTTPS
-A OUTPUT -p tcp -s 77.77.77.77 --sport 1024:65535 -d 0/0 --dport 80 -j ACCEPT
-A INPUT -p tcp -s 0/0 --sport 80 -d 77.77.77.77 --dport 1024:65535 -j ACCEPT
-A OUTPUT -p tcp -s 77.77.77.77 --sport 1024:65535 -d 0/0 --dport 443 -j ACCEPT
-A INPUT -p tcp -s 0/0 --sport 443 -d 77.77.77.77 --dport 1024:65535 -j ACCEPT

COMMIT

все исходяшие пакеты к порту 53 блокируются
telnet> open 8.8.8.8 53
Trying 8.8.8.8...
telnet: connect to address 8.8.8.8: Connection timed out

Niemi,

[ROOT ~]# iptables -vnL OUTPUT
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * venet0 0.0.0.0/0 127.0.0.1
4494 402K ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
34925 36M ACCEPT all -- * venet0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 77.77.77.77 0.0.0.0/0 tcp spt:80 dpts:1024:65535
0 0 ACCEPT tcp -- * * 70.70.70.70 0.0.0.0/0 tcp spt:22 dpts:513:65535
0 0 ACCEPT udp -- * venet0 77.77.77.77 0.0.0.0/0 udp spts:1024:65535 dpt:53
0 0 ACCEPT tcp -- * venet0 77.77.77.77 0.0.0.0/0 tcp spts:1024:65535 dpt:53
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT udp -- * * 77.77.77.77 0.0.0.0/0 udp spts:1024:65535 dpts:33434:33523
0 0 ACCEPT tcp -- * * 77.77.77.77 0.0.0.0/0 tcp spts:513:65535 dpt:7891
0 0 ACCEPT tcp -- * * 77.77.77.77 0.0.0.0/0 tcp spts:1024:65535 dpt:80
0 0 ACCEPT tcp -- * * 77.77.77.77 0.0.0.0/0 tcp spts:1024:65535 dpt:443
[ROOT ~]# ping mail.ru
ping: unknown host mail.ru
[ROOT ~]# service iptables stop
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: mangle filter [ OK ]
iptables: Unloading modules: [ OK ]
[ROOT ~]# ping mail.ru
PING mail.ru (94.100.191.245) 56(84) bytes of data.
64 bytes from 94.100.191.245: icmp_seq=1 ttl=58 time=57.9 ms
64 bytes from 94.100.191.245: icmp_seq=2 ttl=58 time=58.1 ms
64 bytes from 94.100.191.245: icmp_seq=3 ttl=58 time=57.7 ms
64 bytes from 94.100.191.245: icmp_seq=4 ttl=58 time=57.9 ms
64 bytes from 94.100.191.245: icmp_seq=5 ttl=58 time=58.0 ms
^C
--- mail.ru ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4950ms
rtt min/avg/max/mdev = 57.737/57.965/58.191/0.212 ms
[ROOT ~]# service iptables start
iptables: Applying firewall rules: [ OK ]
[ROOT ~]# ping mail.ru
ping: unknown host mail.ru
[ROOT ~]# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=50 time=6.81 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=50 time=6.70 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=50 time=6.84 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=50 time=6.48 ms
^C
--- 8.8.8.8 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3857ms
rtt min/avg/max/mdev = 6.488/6.712/6.846/0.162 ms
[ROOT ~]#