Advertisement
Guest User

Untitled

a guest
Jan 20th, 2013
30
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 17.97 KB | None | 0 0
  1. sudo ufw status
  2. Status: active
  3.  
  4. To Action From
  5. -- ------ ----
  6. 1027 ALLOW Anywhere
  7. 8085 ALLOW Anywhere
  8. 8084 ALLOW Anywhere
  9. 49152:65535/tcp ALLOW Anywhere
  10. 49152:65535/udp ALLOW Anywhere
  11. 25565 ALLOW Anywhere
  12. 80 ALLOW Anywhere
  13. 443 ALLOW Anywhere
  14. 8081 ALLOW Anywhere
  15. 9090 ALLOW Anywhere
  16. 8086 ALLOW Anywhere
  17. 81 ALLOW Anywhere
  18. 8082 ALLOW Anywhere
  19. 25566 ALLOW Anywhere
  20. 49152:65535/tcp ALLOW Anywhere (v6)
  21. 49152:65535/udp ALLOW Anywhere (v6)
  22.  
  23. <---->
  24.  
  25. sudo ifconfig
  26.  
  27. eth0 Link encap:Ethernet HWaddr 38:60:77:13:52:08
  28. inet addr:188.165.234.REMOVED Bcast:188.165.234.255 Mask:255.255.255.0
  29. inet6 addr: fe80::3a60:77ff:fe13:5208/64 Scope:Link
  30. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  31. RX packets:1649599756 errors:0 dropped:5794 overruns:0 frame:0
  32. TX packets:1742181603 errors:0 dropped:0 overruns:0 carrier:0
  33. collisions:0 txqueuelen:1000
  34. RX bytes:1614517094578 (1.6 TB) TX bytes:1873293991619 (1.8 TB)
  35. Interrupt:20 Memory:fe500000-fe520000
  36.  
  37. lo Link encap:Local Loopback
  38. inet addr:127.0.0.1 Mask:255.0.0.0
  39. inet6 addr: ::1/128 Scope:Host
  40. UP LOOPBACK RUNNING MTU:16436 Metric:1
  41. RX packets:1261420 errors:0 dropped:0 overruns:0 frame:0
  42. TX packets:1261420 errors:0 dropped:0 overruns:0 carrier:0
  43. collisions:0 txqueuelen:0
  44. RX bytes:154710039 (154.7 MB) TX bytes:154710039 (154.7 MB)
  45.  
  46. virbr0 Link encap:Ethernet HWaddr fe:54:00:b2:97:4c
  47. inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0
  48. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  49. RX packets:1101037 errors:0 dropped:6263 overruns:0 frame:0
  50. TX packets:1629223 errors:0 dropped:0 overruns:0 carrier:0
  51. collisions:0 txqueuelen:0
  52. RX bytes:123430492 (123.4 MB) TX bytes:2090035296 (2.0 GB)
  53.  
  54. vnet0 Link encap:Ethernet HWaddr fe:54:00:b2:97:4c
  55. inet6 addr: fe80::fc54:ff:feb2:974c/64 Scope:Link
  56. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  57. RX packets:19063 errors:0 dropped:0 overruns:0 frame:0
  58. TX packets:42598 errors:0 dropped:0 overruns:0 carrier:0
  59. collisions:0 txqueuelen:500
  60. RX bytes:2521906 (2.5 MB) TX bytes:34455765 (34.4 MB)
  61.  
  62. Chain INPUT (policy DROP 6 packets, 192 bytes)
  63. num pkts bytes target prot opt in out source destination
  64. 1 634 40698 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
  65. 2 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
  66. 3 295 103K ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67
  67. 4 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67
  68. 5 1284M 1557G ufw-before-logging-input all -- * * 0.0.0.0/0 0.0.0.0/0
  69. 6 1284M 1557G ufw-before-input all -- * * 0.0.0.0/0 0.0.0.0/0
  70. 7 128K 96M ufw-after-input all -- * * 0.0.0.0/0 0.0.0.0/0
  71. 8 128K 96M ufw-after-logging-input all -- * * 0.0.0.0/0 0.0.0.0/0
  72. 9 128K 96M ufw-reject-input all -- * * 0.0.0.0/0 0.0.0.0/0
  73. 10 128K 96M ufw-track-input all -- * * 0.0.0.0/0 0.0.0.0/0
  74.  
  75. Chain FORWARD (policy DROP 0 packets, 0 bytes)
  76. num pkts bytes target prot opt in out source destination
  77. 1 820K 2025M ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED
  78. 2 889K 49M ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0
  79. 3 0 0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0
  80. 4 53 2804 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  81. 5 0 0 REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  82. 6 0 0 ufw-before-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  83. 7 0 0 ufw-before-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  84. 8 0 0 ufw-after-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  85. 9 0 0 ufw-after-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  86. 10 0 0 ufw-reject-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  87. 11 0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.122.100 tcp dpt:80 state NEW,RELATED,ESTABLISHED
  88.  
  89. Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
  90. num pkts bytes target prot opt in out source destination
  91. 1 652M 1785G ufw-before-logging-output all -- * * 0.0.0.0/0 0.0.0.0/0
  92. 2 652M 1785G ufw-before-output all -- * * 0.0.0.0/0 0.0.0.0/0
  93. 3 1372K 200M ufw-after-output all -- * * 0.0.0.0/0 0.0.0.0/0
  94. 4 1372K 200M ufw-after-logging-output all -- * * 0.0.0.0/0 0.0.0.0/0
  95. 5 1372K 200M ufw-reject-output all -- * * 0.0.0.0/0 0.0.0.0/0
  96. 6 1372K 200M ufw-track-output all -- * * 0.0.0.0/0 0.0.0.0/0
  97.  
  98. Chain ufw-after-forward (1 references)
  99. num pkts bytes target prot opt in out source destination
  100.  
  101. Chain ufw-after-input (1 references)
  102. num pkts bytes target prot opt in out source destination
  103. 1 233 18174 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137
  104. 2 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138
  105. 3 58 2904 ufw-skip-to-policy-input tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139
  106. 4 31 1624 ufw-skip-to-policy-input tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445
  107. 5 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67
  108. 6 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:68
  109. 7 0 0 ufw-skip-to-policy-input all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
  110.  
  111. Chain ufw-after-logging-forward (1 references)
  112. num pkts bytes target prot opt in out source destination
  113. 1 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
  114.  
  115. Chain ufw-after-logging-input (1 references)
  116. num pkts bytes target prot opt in out source destination
  117. 1 55836 3847K LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
  118.  
  119. Chain ufw-after-logging-output (1 references)
  120. num pkts bytes target prot opt in out source destination
  121.  
  122. Chain ufw-after-output (1 references)
  123. num pkts bytes target prot opt in out source destination
  124.  
  125. Chain ufw-before-forward (1 references)
  126. num pkts bytes target prot opt in out source destination
  127. 1 0 0 ufw-user-forward all -- * * 0.0.0.0/0 0.0.0.0/0
  128.  
  129. Chain ufw-before-input (1 references)
  130. num pkts bytes target prot opt in out source destination
  131. 1 1224K 151M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  132. 2 1215M 1441G ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
  133. 3 18651 5224K ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
  134. 4 18651 5224K DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
  135. 5 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3
  136. 6 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 4
  137. 7 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11
  138. 8 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12
  139. 9 26136 2188K ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8
  140. 10 20414 6805K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68
  141. 11 465K 28M ufw-not-local all -- * * 0.0.0.0/0 0.0.0.0/0
  142. 12 0 0 ACCEPT udp -- * * 0.0.0.0/0 224.0.0.251 udp dpt:5353
  143. 13 0 0 ACCEPT udp -- * * 0.0.0.0/0 239.255.255.250 udp dpt:1900
  144. 14 465K 28M ufw-user-input all -- * * 0.0.0.0/0 0.0.0.0/0
  145.  
  146. Chain ufw-before-logging-forward (1 references)
  147. num pkts bytes target prot opt in out source destination
  148.  
  149. Chain ufw-before-logging-input (1 references)
  150. num pkts bytes target prot opt in out source destination
  151.  
  152. Chain ufw-before-logging-output (1 references)
  153. num pkts bytes target prot opt in out source destination
  154.  
  155. Chain ufw-before-output (1 references)
  156. num pkts bytes target prot opt in out source destination
  157. 1 1224K 151M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
  158. 2 602M 1762G ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
  159. 3 1254K 181M ufw-user-output all -- * * 0.0.0.0/0 0.0.0.0/0
  160.  
  161. Chain ufw-logging-allow (0 references)
  162. num pkts bytes target prot opt in out source destination
  163. 1 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] "
  164.  
  165. Chain ufw-logging-deny (2 references)
  166. num pkts bytes target prot opt in out source destination
  167. 1 8431 1839K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID limit: avg 3/min burst 10
  168. 2 1418 459K LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
  169.  
  170. Chain ufw-not-local (1 references)
  171. num pkts bytes target prot opt in out source destination
  172. 1 461K 27M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL
  173. 2 3436 110K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
  174. 3 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
  175. 4 0 0 ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10
  176. 5 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  177.  
  178. Chain ufw-reject-forward (1 references)
  179. num pkts bytes target prot opt in out source destination
  180.  
  181. Chain ufw-reject-input (1 references)
  182. num pkts bytes target prot opt in out source destination
  183.  
  184. Chain ufw-reject-output (1 references)
  185. num pkts bytes target prot opt in out source destination
  186.  
  187. Chain ufw-skip-to-policy-forward (0 references)
  188. num pkts bytes target prot opt in out source destination
  189. 1 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  190.  
  191. Chain ufw-skip-to-policy-input (7 references)
  192. num pkts bytes target prot opt in out source destination
  193. 1 322 22702 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  194.  
  195. Chain ufw-skip-to-policy-output (0 references)
  196. num pkts bytes target prot opt in out source destination
  197. 1 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  198.  
  199. Chain ufw-track-input (1 references)
  200. num pkts bytes target prot opt in out source destination
  201.  
  202. Chain ufw-track-output (1 references)
  203. num pkts bytes target prot opt in out source destination
  204. 1 287K 17M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
  205. 2 966K 163M ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
  206.  
  207. Chain ufw-user-forward (1 references)
  208. num pkts bytes target prot opt in out source destination
  209.  
  210. Chain ufw-user-input (1 references)
  211. num pkts bytes target prot opt in out source destination
  212. 1 3913 235K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1027
  213. 2 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1027
  214. 3 333 18964 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8085
  215. 4 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:8085
  216. 5 166 10356 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8084
  217. 6 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:8084
  218. 7 200K 11M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 49152:65535
  219. 8 58981 3590K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 49152:65535
  220. 9 27705 1468K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25565
  221. 10 2613 96744 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25565
  222. 11 7773 437K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
  223. 12 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:80
  224. 13 6151 366K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
  225. 14 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:443
  226. 15 1043 62978 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8081
  227. 16 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:8081
  228. 17 79744 4771K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9090
  229. 18 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:9090
  230. 19 156 7960 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8086
  231. 20 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:8086
  232. 21 829 42468 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81
  233. 22 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:81
  234. 23 1086 65056 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8082
  235. 24 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:8082
  236. 25 110 5878 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25566
  237. 26 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25566
  238.  
  239. Chain ufw-user-limit (0 references)
  240. num pkts bytes target prot opt in out source destination
  241. 1 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] "
  242. 2 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  243.  
  244. Chain ufw-user-limit-accept (0 references)
  245. num pkts bytes target prot opt in out source destination
  246. 1 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  247.  
  248. Chain ufw-user-logging-forward (0 references)
  249. num pkts bytes target prot opt in out source destination
  250.  
  251. Chain ufw-user-logging-input (0 references)
  252. num pkts bytes target prot opt in out source destination
  253.  
  254. Chain ufw-user-logging-output (0 references)
  255. num pkts bytes target prot opt in out source destination
  256.  
  257. Chain ufw-user-output (1 references)
  258. num pkts bytes target prot opt in out source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement