Advertisement
Guest User

Untitled

a guest
Aug 30th, 2016
65
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.28 KB | None | 0 0
  1. firewall-cmd --get-active-zones
  2. public
  3. interfaces: ens32
  4.  
  5. firewall-cmd --list-all
  6. public (default, active)
  7. interfaces: ens32
  8. sources:
  9. services: dhcpv6-client ssh
  10. ports: 10050/tcp 8080/tcp
  11. masquerade: no
  12. forward-ports:
  13. icmp-blocks:
  14. rich rules:
  15. rule family="ipv4" source address="10.54.208.94" port port="8301" protocol="tcp" accept
  16. rule family="ipv4" source address="10.54.212.86" port port="8301" protocol="tcp" accept
  17. rule family="ipv4" source address="10.54.208.108" port port="8301" protocol="udp" accept
  18. rule family="ipv4" source address="10.54.212.92" port port="8301" protocol="udp" accept
  19. rule family="ipv4" source address="10.54.208.109" port port="8301" protocol="tcp" accept
  20. rule family="ipv4" source address="10.54.212.86" port port="8301" protocol="udp" accept
  21. rule family="ipv4" source address="10.54.208.111" port port="8301" protocol="tcp" accept
  22. rule family="ipv4" source address="10.54.208.95" port port="8301" protocol="udp" accept
  23. rule family="ipv4" source address="10.54.208.109" port port="8301" protocol="udp" accept
  24. rule family="ipv4" source address="10.54.208.110" port port="8301" protocol="udp" accept
  25. rule family="ipv4" source address="10.54.212.96" port port="8301" protocol="tcp" accept
  26. rule family="ipv4" source address="10.54.212.92" port port="4646" protocol="tcp" accept
  27. rule family="ipv4" source address="10.54.208.93" port port="8301" protocol="udp" accept
  28. rule family="ipv4" source address="10.54.208.94" port port="4646" protocol="tcp" accept
  29. rule family="ipv4" source address="10.54.208.112" port port="8301" protocol="udp" accept
  30. rule family="ipv4" source address="10.54.208.112" port port="8301" protocol="tcp" accept
  31. rule family="ipv4" source address="10.54.208.94" port port="8301" protocol="udp" accept
  32. rule family="ipv4" source address="10.54.212.95" port port="8301" protocol="tcp" accept
  33. rule family="ipv4" source address="10.54.212.94" port port="4646" protocol="tcp" accept
  34. rule family="ipv4" source address="10.54.212.96" port port="4646" protocol="tcp" accept
  35. rule family="ipv4" source address="10.54.208.111" port port="8301" protocol="udp" accept
  36. rule family="ipv4" source address="10.54.212.92" port port="8301" protocol="tcp" accept
  37. rule family="ipv4" source address="10.54.208.110" port port="8301" protocol="tcp" accept
  38. rule family="ipv4" source address="10.54.208.108" port port="8301" protocol="tcp" accept
  39. rule family="ipv4" source address="10.54.208.93" port port="8301" protocol="tcp" accept
  40. rule family="ipv4" source address="10.54.212.95" port port="4646" protocol="tcp" accept
  41. rule family="ipv4" source address="10.54.212.94" port port="8301" protocol="tcp" accept
  42. rule family="ipv4" source address="10.54.208.92" port port="8301" protocol="udp" accept
  43. rule family="ipv4" source address="10.54.208.93" port port="4646" protocol="tcp" accept
  44. rule family="ipv4" source address="10.54.208.92" port port="4646" protocol="tcp" accept
  45. rule family="ipv4" source address="10.54.208.92" port port="8301" protocol="tcp" accept
  46.  
  47. Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
  48. pkts bytes target prot opt in out source destination
  49. 215K 177M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  50. 1668 101K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  51. 7390 603K INPUT_direct all -- * * 0.0.0.0/0 0.0.0.0/0
  52. 7390 603K INPUT_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0
  53. 7390 603K INPUT_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0
  54. 1 60 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
  55. 836 210K REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  56.  
  57. Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
  58. pkts bytes target prot opt in out source destination
  59. 182K 185M DOCKER-ISOLATION all -- * * 0.0.0.0/0 0.0.0.0/0
  60. 137K 183M DOCKER all -- * docker0 0.0.0.0/0 0.0.0.0/0
  61. 137K 183M ACCEPT all -- * docker0 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  62. 45185 2376K ACCEPT all -- docker0 !docker0 0.0.0.0/0 0.0.0.0/0
  63. 0 0 ACCEPT all -- docker0 docker0 0.0.0.0/0 0.0.0.0/0
  64. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  65. 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  66. 0 0 FORWARD_direct all -- * * 0.0.0.0/0 0.0.0.0/0
  67. 0 0 FORWARD_IN_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0
  68. 0 0 FORWARD_IN_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0
  69. 0 0 FORWARD_OUT_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0
  70. 0 0 FORWARD_OUT_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0
  71. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
  72. 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  73.  
  74. Chain OUTPUT (policy ACCEPT 222K packets, 140M bytes)
  75. pkts bytes target prot opt in out source destination
  76. 222K 140M OUTPUT_direct all -- * * 0.0.0.0/0 0.0.0.0/0
  77.  
  78. Chain DOCKER (1 references)
  79. pkts bytes target prot opt in out source destination
  80. 0 0 ACCEPT udp -- !docker0 docker0 0.0.0.0/0 172.17.0.2 udp dpt:8080
  81. 0 0 ACCEPT tcp -- !docker0 docker0 0.0.0.0/0 172.17.0.2 tcp dpt:31870
  82. 0 0 ACCEPT tcp -- !docker0 docker0 0.0.0.0/0 172.17.0.3 tcp dpt:51747
  83. 0 0 ACCEPT tcp -- !docker0 docker0 0.0.0.0/0 172.17.0.2 tcp dpt:8080
  84. 0 0 ACCEPT tcp -- !docker0 docker0 0.0.0.0/0 172.17.0.5 tcp dpt:8080
  85. 0 0 ACCEPT udp -- !docker0 docker0 0.0.0.0/0 172.17.0.3 udp dpt:4004
  86. 0 0 ACCEPT tcp -- !docker0 docker0 0.0.0.0/0 172.17.0.5 tcp dpt:34595
  87. 0 0 ACCEPT udp -- !docker0 docker0 0.0.0.0/0 172.17.0.5 udp dpt:34595
  88. 0 0 ACCEPT udp -- !docker0 docker0 0.0.0.0/0 172.17.0.5 udp dpt:8080
  89. 0 0 ACCEPT udp -- !docker0 docker0 0.0.0.0/0 172.17.0.2 udp dpt:31870
  90. 0 0 ACCEPT udp -- !docker0 docker0 0.0.0.0/0 172.17.0.3 udp dpt:51747
  91. 0 0 ACCEPT tcp -- !docker0 docker0 0.0.0.0/0 172.17.0.3 tcp dpt:4004
  92.  
  93. Chain DOCKER-ISOLATION (1 references)
  94. pkts bytes target prot opt in out source destination
  95. 182K 185M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
  96.  
  97. Chain FORWARD_IN_ZONES (1 references)
  98. pkts bytes target prot opt in out source destination
  99. 0 0 FWDI_public all -- + * 0.0.0.0/0 0.0.0.0/0 [goto]
  100.  
  101. Chain FORWARD_IN_ZONES_SOURCE (1 references)
  102. pkts bytes target prot opt in out source destination
  103.  
  104. Chain FORWARD_OUT_ZONES (1 references)
  105. pkts bytes target prot opt in out source destination
  106. 0 0 FWDO_public all -- * + 0.0.0.0/0 0.0.0.0/0 [goto]
  107.  
  108. Chain FORWARD_OUT_ZONES_SOURCE (1 references)
  109. pkts bytes target prot opt in out source destination
  110.  
  111. Chain FORWARD_direct (1 references)
  112. pkts bytes target prot opt in out source destination
  113.  
  114. Chain FWDI_public (1 references)
  115. pkts bytes target prot opt in out source destination
  116. 0 0 FWDI_public_log all -- * * 0.0.0.0/0 0.0.0.0/0
  117. 0 0 FWDI_public_deny all -- * * 0.0.0.0/0 0.0.0.0/0
  118. 0 0 FWDI_public_allow all -- * * 0.0.0.0/0 0.0.0.0/0
  119.  
  120. Chain FWDI_public_allow (1 references)
  121. pkts bytes target prot opt in out source destination
  122.  
  123. Chain FWDI_public_deny (1 references)
  124. pkts bytes target prot opt in out source destination
  125.  
  126. Chain FWDI_public_log (1 references)
  127. pkts bytes target prot opt in out source destination
  128.  
  129. Chain FWDO_public (1 references)
  130. pkts bytes target prot opt in out source destination
  131. 0 0 FWDO_public_log all -- * * 0.0.0.0/0 0.0.0.0/0
  132. 0 0 FWDO_public_deny all -- * * 0.0.0.0/0 0.0.0.0/0
  133. 0 0 FWDO_public_allow all -- * * 0.0.0.0/0 0.0.0.0/0
  134.  
  135. Chain FWDO_public_allow (1 references)
  136. pkts bytes target prot opt in out source destination
  137.  
  138. Chain FWDO_public_deny (1 references)
  139. pkts bytes target prot opt in out source destination
  140.  
  141. Chain FWDO_public_log (1 references)
  142. pkts bytes target prot opt in out source destination
  143.  
  144. Chain INPUT_ZONES (1 references)
  145. pkts bytes target prot opt in out source destination
  146. 7385 603K IN_public all -- + * 0.0.0.0/0 0.0.0.0/0 [goto]
  147.  
  148. Chain INPUT_ZONES_SOURCE (1 references)
  149. pkts bytes target prot opt in out source destination
  150.  
  151. Chain INPUT_direct (1 references)
  152. pkts bytes target prot opt in out source destination
  153.  
  154. Chain IN_public (1 references)
  155. pkts bytes target prot opt in out source destination
  156. 7385 603K IN_public_log all -- * * 0.0.0.0/0 0.0.0.0/0
  157. 7385 603K IN_public_deny all -- * * 0.0.0.0/0 0.0.0.0/0
  158. 7385 603K IN_public_allow all -- * * 0.0.0.0/0 0.0.0.0/0
  159.  
  160. Chain IN_public_allow (1 references)
  161. pkts bytes target prot opt in out source destination
  162. 28 1680 ACCEPT tcp -- * * 10.54.208.94 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  163. 0 0 ACCEPT tcp -- * * 10.54.212.86 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  164. 0 0 ACCEPT udp -- * * 10.54.208.108 0.0.0.0/0 udp dpt:8301 ctstate NEW
  165. 0 0 ACCEPT udp -- * * 10.54.212.92 0.0.0.0/0 udp dpt:8301 ctstate NEW
  166. 29 1740 ACCEPT tcp -- * * 10.54.208.109 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  167. 0 0 ACCEPT udp -- * * 10.54.212.86 0.0.0.0/0 udp dpt:8301 ctstate NEW
  168. 45 2700 ACCEPT tcp -- * * 10.54.208.111 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  169. 0 0 ACCEPT udp -- * * 10.54.208.95 0.0.0.0/0 udp dpt:8301 ctstate NEW
  170. 0 0 ACCEPT udp -- * * 10.54.208.109 0.0.0.0/0 udp dpt:8301 ctstate NEW
  171. 0 0 ACCEPT udp -- * * 10.54.208.110 0.0.0.0/0 udp dpt:8301 ctstate NEW
  172. 0 0 ACCEPT tcp -- * * 10.54.212.96 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  173. 0 0 ACCEPT tcp -- * * 10.54.212.92 0.0.0.0/0 tcp dpt:4646 ctstate NEW
  174. 0 0 ACCEPT udp -- * * 10.54.208.93 0.0.0.0/0 udp dpt:8301 ctstate NEW
  175. 0 0 ACCEPT tcp -- * * 10.54.208.94 0.0.0.0/0 tcp dpt:4646 ctstate NEW
  176. 0 0 ACCEPT udp -- * * 10.54.208.112 0.0.0.0/0 udp dpt:8301 ctstate NEW
  177. 0 0 ACCEPT tcp -- * * 10.54.208.112 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  178. 0 0 ACCEPT tcp -- * * 10.54.208.95 0.0.0.0/0 tcp dpt:4646 ctstate NEW
  179. 0 0 ACCEPT udp -- * * 10.54.208.94 0.0.0.0/0 udp dpt:8301 ctstate NEW
  180. 0 0 ACCEPT tcp -- * * 10.54.212.95 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  181. 0 0 ACCEPT tcp -- * * 10.54.212.94 0.0.0.0/0 tcp dpt:4646 ctstate NEW
  182. 0 0 ACCEPT tcp -- * * 10.54.212.96 0.0.0.0/0 tcp dpt:4646 ctstate NEW
  183. 0 0 ACCEPT udp -- * * 10.54.208.111 0.0.0.0/0 udp dpt:8301 ctstate NEW
  184. 33 1980 ACCEPT tcp -- * * 10.54.212.92 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  185. 34 2040 ACCEPT tcp -- * * 10.54.208.95 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  186. 33 1980 ACCEPT tcp -- * * 10.54.208.110 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  187. 30 1800 ACCEPT tcp -- * * 10.54.208.108 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  188. 41 2460 ACCEPT tcp -- * * 10.54.208.93 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  189. 0 0 ACCEPT tcp -- * * 10.54.212.95 0.0.0.0/0 tcp dpt:4646 ctstate NEW
  190. 0 0 ACCEPT tcp -- * * 10.54.212.94 0.0.0.0/0 tcp dpt:8301 ctstate NEW
  191. 0 0 ACCEPT udp -- * * 10.54.208.92 0.0.0.0/0 udp dpt:8301 ctstate NEW
  192. 0 0 ACCEPT tcp -- * * 10.54.208.93 0.0.0.0/0 tcp dpt:4646 ctstate NEW
  193. 1 120 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW
  194. 6229 374K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10050 ctstate NEW
  195. 50 3000 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 ctstate NEW
  196.  
  197. Chain IN_public_deny (1 references)
  198. pkts bytes target prot opt in out source destination
  199.  
  200. Chain IN_public_log (1 references)
  201. pkts bytes target prot opt in out source destination
  202.  
  203. Chain OUTPUT_direct (1 references)
  204. pkts bytes target prot opt in out source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement