无法连接到mongo shell似乎与iptables相关

Question

刚刚在centos 6上安装了mongodb。尝试用命令“mongo”连接mongo sh却得到这个错误消息:2015-09-26T07:07:35.309 0000 W网络在5000毫秒后连接127.0.0.1:27017失败，放弃。2015-09-26T07:07:35.316 0000 E查询错误:无法连接到服务器127.0.0.1:27017 (127.0.0.1)，连接尝试在连接时失败(src/mongo/shell/mongo.js:179:14)在(connect):1:6在src/mongo/shell/mongo . js:179

然而，一旦我停止了我的防火墙(iptables stop ),我就可以访问mongo shell，下面是我的iptables:

Chain INPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:28017 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:3306 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
ACCEPT     tcp  --  192.168.1.0/24       0.0.0.0/0           tcp dpt:22 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
ACCEPT     tcp  --  127.0.0.1            0.0.0.0/0           tcp dpt:27017 state NEW,ESTABLISHED 
LOGGING    all  --  0.0.0.0/0            0.0.0.0/0           
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:51396 
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  0.0.0.0/0            127.0.0.1           tcp spt:27017 state ESTABLISHED 

Chain LOGGING (1 references)
target     prot opt source               destination         
LOG        all  --  0.0.0.0/0            0.0.0.0/0           limit: avg 2/min burst 5 LOG flags 0 level 4 prefix `IPTables-Dropped: ' 
DROP       all  --  0.0.0.0/0            0.0.0.0/0   

搜索并尝试了不同的解决方案。拆下锁，修理；重置iptables，没有帮助。

这些是iptables丢弃数据包的日志

九月26日06:59:38 xxx内核：IPTables被丢弃：IN=lo OUT=MAC=00:00:00-00:00:00:00：00:00/00:00 SRC=127.0.0.1 DST=127.O.0.1Len=60 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=27017 DPT=51396 WINDOW=32768 RES=0x00 ACK SYNURGP=0

Sep 26 07:04:47 xxx内核:IPTables-Dropped:IN = lo OUT = MAC = 00:00:00:00:00:00:00:00:00:00:00:08:00 SRC = 127 . 0 . 0 . 1 DST = 127 . 0 . 0 . 1 LEN = 60 TOS = 0x 00 PREC = 0x 00 TTL = 64 ID = 0 DF PROTO = TCP SPT = 27017 DPT

不明白为什么它仍然阻止27017。

Answer 1

在防火墙中打开端口(27017)。