Advertisement
Guest User

postVPN

a guest
Oct 30th, 2016
217
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 17.50 KB | None | 0 0
  1. postVPN:
  2.  
  3. Chain INPUT (policy DROP 26 packets, 1632 bytes)
  4. pkts bytes target prot opt in out source destination
  5. 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
  6. 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
  7. 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67
  8. 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67
  9. 11874 4461K ufw-before-logging-input all -- * * 0.0.0.0/0 0.0.0.0/0
  10. 11874 4461K ufw-before-input all -- * * 0.0.0.0/0 0.0.0.0/0
  11. 48 4120 ufw-after-input all -- * * 0.0.0.0/0 0.0.0.0/0
  12. 26 1632 ufw-after-logging-input all -- * * 0.0.0.0/0 0.0.0.0/0
  13. 26 1632 ufw-reject-input all -- * * 0.0.0.0/0 0.0.0.0/0
  14. 26 1632 ufw-track-input all -- * * 0.0.0.0/0 0.0.0.0/0
  15.  
  16. Chain FORWARD (policy DROP 0 packets, 0 bytes)
  17. pkts bytes target prot opt in out source destination
  18. 0 0 ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 ctstate RELATED,ESTABLISHED
  19. 0 0 ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0
  20. 0 0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0
  21. 0 0 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  22. 0 0 REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  23. 0 0 DOCKER-ISOLATION all -- * * 0.0.0.0/0 0.0.0.0/0
  24. 0 0 DOCKER all -- * docker0 0.0.0.0/0 0.0.0.0/0
  25. 0 0 ACCEPT all -- * docker0 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  26. 0 0 ACCEPT all -- docker0 !docker0 0.0.0.0/0 0.0.0.0/0
  27. 0 0 ACCEPT all -- docker0 docker0 0.0.0.0/0 0.0.0.0/0
  28. 0 0 ufw-before-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  29. 0 0 ufw-before-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  30. 0 0 ufw-after-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  31. 0 0 ufw-after-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  32. 0 0 ufw-reject-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  33. 0 0 ufw-track-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  34.  
  35. Chain OUTPUT (policy ACCEPT 10 packets, 504 bytes)
  36. pkts bytes target prot opt in out source destination
  37. 0 0 ACCEPT udp -- * virbr0 0.0.0.0/0 0.0.0.0/0 udp dpt:68
  38. 11728 1684K ufw-before-logging-output all -- * * 0.0.0.0/0 0.0.0.0/0
  39. 11728 1684K ufw-before-output all -- * * 0.0.0.0/0 0.0.0.0/0
  40. 682 178K ufw-after-output all -- * * 0.0.0.0/0 0.0.0.0/0
  41. 682 178K ufw-after-logging-output all -- * * 0.0.0.0/0 0.0.0.0/0
  42. 682 178K ufw-reject-output all -- * * 0.0.0.0/0 0.0.0.0/0
  43. 682 178K ufw-track-output all -- * * 0.0.0.0/0 0.0.0.0/0
  44.  
  45. Chain DOCKER (1 references)
  46. pkts bytes target prot opt in out source destination
  47.  
  48. Chain DOCKER-ISOLATION (1 references)
  49. pkts bytes target prot opt in out source destination
  50. 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
  51.  
  52. Chain ufw-after-forward (1 references)
  53. pkts bytes target prot opt in out source destination
  54.  
  55. Chain ufw-after-input (1 references)
  56. pkts bytes target prot opt in out source destination
  57. 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137
  58. 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138
  59. 0 0 ufw-skip-to-policy-input tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139
  60. 0 0 ufw-skip-to-policy-input tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445
  61. 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67
  62. 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:68
  63. 22 2488 ufw-skip-to-policy-input all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
  64.  
  65. Chain ufw-after-logging-forward (1 references)
  66. pkts bytes target prot opt in out source destination
  67. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
  68.  
  69. Chain ufw-after-logging-input (1 references)
  70. pkts bytes target prot opt in out source destination
  71. 20 1291 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
  72.  
  73. Chain ufw-after-logging-output (1 references)
  74. pkts bytes target prot opt in out source destination
  75.  
  76. Chain ufw-after-output (1 references)
  77. pkts bytes target prot opt in out source destination
  78.  
  79. Chain ufw-before-forward (1 references)
  80. pkts bytes target prot opt in out source destination
  81. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  82. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3
  83. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 4
  84. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11
  85. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12
  86. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8
  87. 0 0 ufw-user-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  88.  
  89. Chain ufw-before-input (1 references)
  90. pkts bytes target prot opt in out source destination
  91. 5384 309K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  92. 6214 4124K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  93. 0 0 ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  94. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  95. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3
  96. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 4
  97. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11
  98. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12
  99. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8
  100. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68
  101. 276 27683 ufw-not-local all -- * * 0.0.0.0/0 0.0.0.0/0
  102. 120 10059 ACCEPT udp -- * * 0.0.0.0/0 224.0.0.251 udp dpt:5353
  103. 0 0 ACCEPT udp -- * * 0.0.0.0/0 239.255.255.250 udp dpt:1900
  104. 156 17624 ufw-user-input all -- * * 0.0.0.0/0 0.0.0.0/0
  105.  
  106. Chain ufw-before-logging-forward (1 references)
  107. pkts bytes target prot opt in out source destination
  108.  
  109. Chain ufw-before-logging-input (1 references)
  110. pkts bytes target prot opt in out source destination
  111.  
  112. Chain ufw-before-logging-output (1 references)
  113. pkts bytes target prot opt in out source destination
  114.  
  115. Chain ufw-before-output (1 references)
  116. pkts bytes target prot opt in out source destination
  117. 5384 309K ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
  118. 5662 1196K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  119. 682 178K ufw-user-output all -- * * 0.0.0.0/0 0.0.0.0/0
  120.  
  121. Chain ufw-logging-allow (0 references)
  122. pkts bytes target prot opt in out source destination
  123. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] "
  124.  
  125. Chain ufw-logging-deny (2 references)
  126. pkts bytes target prot opt in out source destination
  127. 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID limit: avg 3/min burst 10
  128. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
  129.  
  130. Chain ufw-not-local (1 references)
  131. pkts bytes target prot opt in out source destination
  132. 1 316 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL
  133. 145 11375 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
  134. 130 15992 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
  135. 0 0 ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10
  136. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  137.  
  138. Chain ufw-reject-forward (1 references)
  139. pkts bytes target prot opt in out source destination
  140.  
  141. Chain ufw-reject-input (1 references)
  142. pkts bytes target prot opt in out source destination
  143.  
  144. Chain ufw-reject-output (1 references)
  145. pkts bytes target prot opt in out source destination
  146.  
  147. Chain ufw-skip-to-policy-forward (0 references)
  148. pkts bytes target prot opt in out source destination
  149. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  150.  
  151. Chain ufw-skip-to-policy-input (7 references)
  152. pkts bytes target prot opt in out source destination
  153. 22 2488 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  154.  
  155. Chain ufw-skip-to-policy-output (0 references)
  156. pkts bytes target prot opt in out source destination
  157. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  158.  
  159. Chain ufw-track-forward (1 references)
  160. pkts bytes target prot opt in out source destination
  161.  
  162. Chain ufw-track-input (1 references)
  163. pkts bytes target prot opt in out source destination
  164.  
  165. Chain ufw-track-output (1 references)
  166. pkts bytes target prot opt in out source destination
  167. 235 14100 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW
  168. 435 164K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW
  169.  
  170. Chain ufw-user-forward (1 references)
  171. pkts bytes target prot opt in out source destination
  172.  
  173. Chain ufw-user-input (1 references)
  174. pkts bytes target prot opt in out source destination
  175. 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22122 ctstate NEW recent: SET name: DEFAULT side: source mask: 255.255.255.255
  176. 0 0 ufw-user-limit tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22122 ctstate NEW recent: UPDATE seconds: 30 hit_count: 6 name: DEFAULT side: source mask: 255.255.255.255
  177. 0 0 ufw-user-limit-accept tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22122
  178. 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:22122 ctstate NEW recent: SET name: DEFAULT side: source mask: 255.255.255.255
  179. 0 0 ufw-user-limit udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:22122 ctstate NEW recent: UPDATE seconds: 30 hit_count: 6 name: DEFAULT side: source mask: 255.255.255.255
  180. 0 0 ufw-user-limit-accept udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:22122
  181. 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 ctstate NEW recent: SET name: DEFAULT side: source mask: 255.255.255.255
  182. 0 0 ufw-user-limit tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 ctstate NEW recent: UPDATE seconds: 30 hit_count: 6 name: DEFAULT side: source mask: 255.255.255.255
  183. 0 0 ufw-user-limit-accept tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445
  184. 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 ctstate NEW recent: SET name: DEFAULT side: source mask: 255.255.255.255
  185. 0 0 ufw-user-limit tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 ctstate NEW recent: UPDATE seconds: 30 hit_count: 6 name: DEFAULT side: source mask: 255.255.255.255
  186. 0 0 ufw-user-limit-accept tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139
  187. 84 7920 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 ctstate NEW recent: SET name: DEFAULT side: source mask: 255.255.255.255
  188. 69 6480 ufw-user-limit udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 ctstate NEW recent: UPDATE seconds: 30 hit_count: 6 name: DEFAULT side: source mask: 255.255.255.255
  189. 15 1440 ufw-user-limit-accept udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137
  190. 24 5584 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138 ctstate NEW recent: SET name: DEFAULT side: source mask: 255.255.255.255
  191. 19 4340 ufw-user-limit udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138 ctstate NEW recent: UPDATE seconds: 30 hit_count: 6 name: DEFAULT side: source mask: 255.255.255.255
  192. 5 1244 ufw-user-limit-accept udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138
  193. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:9511
  194. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:9512
  195. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9512
  196. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53515
  197. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53515
  198. 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194 ctstate NEW recent: SET name: DEFAULT side: source mask: 255.255.255.255
  199. 0 0 ufw-user-limit udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194 ctstate NEW recent: UPDATE seconds: 30 hit_count: 6 name: DEFAULT side: source mask: 255.255.255.255
  200. 0 0 ufw-user-limit-accept udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194
  201.  
  202. Chain ufw-user-limit (7 references)
  203. pkts bytes target prot opt in out source destination
  204. 11 1789 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] "
  205. 88 10820 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  206.  
  207. Chain ufw-user-limit-accept (7 references)
  208. pkts bytes target prot opt in out source destination
  209. 20 2684 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  210.  
  211. Chain ufw-user-logging-forward (0 references)
  212. pkts bytes target prot opt in out source destination
  213.  
  214. Chain ufw-user-logging-input (0 references)
  215. pkts bytes target prot opt in out source destination
  216.  
  217. Chain ufw-user-logging-output (0 references)
  218. pkts bytes target prot opt in out source destination
  219.  
  220. Chain ufw-user-output (1 references)
  221. pkts bytes target prot opt in out source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement