iptables -A INPUT -m state --state INVALID -j DROP 丢弃了错误包。

报错如下：
eth0 Link encap:Ethernet HWaddr 00:11:43:FD:52:26 
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::211:43ff:fefd:5226/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:18022561 errors:0 dropped:646 overruns:0 frame:0
TX packets:19525256 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100 
RX bytes:2152535949 (2.0 GiB) TX bytes:2893898301 (2.6 GiB)
Base address:0xecc0 Memory:dfde0000-dfe00000

 

dropped:646
UDP: bad checksum. From 61.154.58.35:9001 to 
UDP: bad checksum. From 61.154.58.35:9001

这些ip 全drop 了。

本文转自 liang3391 51CTO博客，原文链接:http://blog.51cto.com/liang3391/456584