Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- :INPUT ACCEPT [5998:3010003]
- :FORWARD ACCEPT [0:0]
- :OUTPUT ACCEPT [7292:2859420]
- :nova-compute-FORWARD - [0:0]
- :nova-compute-INPUT - [0:0]
- :nova-compute-OUTPUT - [0:0]
- :nova-compute-inst-71 - [0:0]
- :nova-compute-local - [0:0]
- :nova-compute-provider - [0:0]
- :nova-compute-sg-fallback - [0:0]
- :nova-filter-top - [0:0]
- :nova-network-FORWARD - [0:0]
- :nova-network-INPUT - [0:0]
- :nova-network-OUTPUT - [0:0]
- :nova-network-local - [0:0]
- -A INPUT -j nova-compute-INPUT
- -A INPUT -j nova-network-INPUT
- -A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT
- -A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT
- -A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT
- -A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT
- -A FORWARD -j nova-filter-top
- -A FORWARD -j nova-compute-FORWARD
- -A FORWARD -j nova-network-FORWARD
- -A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT
- -A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT
- -A FORWARD -i virbr0 -o virbr0 -j ACCEPT
- -A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable
- -A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable
- -A OUTPUT -j nova-filter-top
- -A OUTPUT -j nova-compute-OUTPUT
- -A OUTPUT -j nova-network-OUTPUT
- -A nova-compute-inst-71 -m state --state INVALID -j DROP
- -A nova-compute-inst-71 -m state --state RELATED,ESTABLISHED -j ACCEPT
- -A nova-compute-inst-71 -j nova-compute-provider
- -A nova-compute-inst-71 -s 10.0.0.21/32 -p udp -m udp --sport 67 --dport 68 -j ACCEPT
- -A nova-compute-inst-71 -s 10.0.0.0/24 -j ACCEPT
- -A nova-compute-inst-71 -p icmp -j ACCEPT
- -A nova-compute-inst-71 -p tcp -m tcp --dport 22 -j ACCEPT
- -A nova-compute-inst-71 -j nova-compute-sg-fallback
- -A nova-compute-local -d 10.0.0.48/32 -j nova-compute-inst-71
- -A nova-compute-sg-fallback -j DROP
- -A nova-filter-top -j nova-compute-local
- -A nova-filter-top -j nova-network-local
- -A nova-network-FORWARD -i br100 -j ACCEPT
- -A nova-network-FORWARD -o br100 -j ACCEPT
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement