我错过了什么规则 aws s3 解决 iptables?

试图制作 s3cmd 跟...共事 aws s3, 但我这么认为 iptables 我阻止我，我允许所有传出的交通 http / https 在任何主机上作为Web服务器，但它仍然不起作用 S3, 我假设我需要一些传入流量的规则？

只是不确定。

这是结果 iptables-save

-A INPUT -i eth0 -p tcp -m tcp --sport 47200 -m state --state ESTABLISHED -j ACCEPT

-A INPUT -s 68.2.71.66/32 -p tcp -m tcp --dport 3306 -j ACCEPT

-A INPUT -s 172.245.74.250/32 -p tcp -m tcp --dport 3306 -j ACCEPT

-A INPUT -s 127.0.0.1/32 -p tcp -m tcp --dport 3306 -j ACCEPT

-A INPUT -p tcp -m multiport --dports 22 -j f2b-sshd

-A INPUT -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT

-A INPUT -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT

-A INPUT -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT

-A INPUT -p tcp -m tcp --dport 3306 -j REJECT --reject-with icmp-port-unreachable

-A INPUT -p udp -m udp --dport 9987 -j ACCEPT

-A INPUT -p tcp -m tcp --dport 30033 -j ACCEPT

-A INPUT -p tcp -m tcp --sport 30033 -j ACCEPT

-A INPUT -p tcp -m tcp --dport 10011 -j ACCEPT

-A INPUT -p tcp -m tcp --sport 10011 -j ACCEPT

-A INPUT -i eth0 -j DROP

-A OUTPUT -o eth0 -p tcp -m tcp --dport 47200 -m state --state NEW,ESTABLISHED -j ACCEPT

-A OUTPUT -p tcp -m tcp --sport 22 -m conntrack --ctstate ESTABLISHED -j ACCEPT

-A OUTPUT -p tcp -m tcp --sport 80 -m conntrack --ctstate NEW,RELATED,ESTABLISHED -j ACCEPT

-A OUTPUT -p tcp -m tcp --sport 443 -m conntrack --ctstate NEW,RELATED,ESTABLISHED -j ACCEPT

-A f2b-sshd -s 221.194.47.224/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 121.18.238.98/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 221.194.47.229/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 221.194.47.249/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 119.249.54.75/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 221.194.47.208/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 119.249.54.88/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 197.221.234.20/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 119.249.54.68/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -s 121.18.238.104/32 -j REJECT --reject-with icmp-port-unreachable

-A f2b-sshd -j RETURN

COMMIT

# Completed on Wed Oct  5 00:45:48 2016