Chain OUTPUT (policy ACCEPT) target prot opt source destination DROP all -- 220.127.116.11 anywhere
I have right now this active rule. However as you can figure out, it isn't working because I'm writing this question. If I add the rule to the
INPUT chain, it works perfectly.
Initially I thought
aaa of course, it isn't working because it's asking DNS for www.serverfault.com, so I added the rule
iptables -A OUTPUT -s www.serverfault.com -j DROP, but still the same.
Why is iptables allowing outgoing packets to this web?