Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- gateway ~ # iptables -L
- Chain INPUT (policy ACCEPT)
- target prot opt source destination
- ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
- ACCEPT all -- anywhere anywhere
- syn_flood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
- input_rule all -- anywhere anywhere
- input all -- anywhere anywhere
- Chain FORWARD (policy DROP)
- target prot opt source destination
- ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
- forwarding_rule all -- anywhere anywhere
- forward all -- anywhere anywhere
- reject all -- anywhere anywhere
- Chain OUTPUT (policy ACCEPT)
- target prot opt source destination
- ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
- ACCEPT all -- anywhere anywhere
- output_rule all -- anywhere anywhere
- output all -- anywhere anywhere
- Chain forward (1 references)
- target prot opt source destination
- zone_lan_forward all -- anywhere anywhere
- zone_wan_forward all -- anywhere anywhere
- Chain forwarding_lan (1 references)
- target prot opt source destination
- Chain forwarding_rule (1 references)
- target prot opt source destination
- nat_reflection_fwd all -- anywhere anywhere
- Chain forwarding_wan (1 references)
- target prot opt source destination
- ACCEPT tcp -- anywhere somewhere.owl tcp dpt:www
- Chain input (1 references)
- target prot opt source destination
- zone_lan all -- anywhere anywhere
- zone_wan all -- anywhere anywhere
- Chain input_lan (1 references)
- target prot opt source destination
- Chain input_rule (1 references)
- target prot opt source destination
- Chain input_wan (1 references)
- target prot opt source destination
- Chain nat_reflection_fwd (1 references)
- target prot opt source destination
- ACCEPT tcp -- 10.8.12.0/24 192.168.1.209 tcp dpt:ssh /* wan */
- Chain output (1 references)
- target prot opt source destination
- zone_lan_ACCEPT all -- anywhere anywhere
- zone_wan_ACCEPT all -- anywhere anywhere
- Chain output_rule (1 references)
- target prot opt source destination
- Chain reject (5 references)
- target prot opt source destination
- REJECT tcp -- anywhere anywhere reject-with tcp-reset
- REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
- Chain syn_flood (1 references)
- target prot opt source destination
- RETURN tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 25/sec burst 50
- DROP all -- anywhere anywhere
- Chain zone_lan (1 references)
- target prot opt source destination
- input_lan all -- anywhere anywhere
- zone_lan_ACCEPT all -- anywhere anywhere
- Chain zone_lan_ACCEPT (2 references)
- target prot opt source destination
- ACCEPT all -- anywhere anywhere
- ACCEPT all -- anywhere anywhere
- Chain zone_lan_DROP (0 references)
- target prot opt source destination
- DROP all -- anywhere anywhere
- DROP all -- anywhere anywhere
- Chain zone_lan_REJECT (1 references)
- target prot opt source destination
- reject all -- anywhere anywhere
- reject all -- anywhere anywhere
- Chain zone_lan_forward (1 references)
- target prot opt source destination
- zone_wan_ACCEPT all -- anywhere anywhere
- forwarding_lan all -- anywhere anywhere
- zone_lan_REJECT all -- anywhere anywhere
- Chain zone_wan (1 references)
- target prot opt source destination
- ACCEPT udp -- anywhere anywhere udp dpt:bootpc
- ACCEPT icmp -- anywhere anywhere icmp echo-request
- input_wan all -- anywhere anywhere
- zone_wan_REJECT all -- anywhere anywhere
- Chain zone_wan_ACCEPT (2 references)
- target prot opt source destination
- ACCEPT all -- anywhere anywhere
- ACCEPT all -- anywhere anywhere
- Chain zone_wan_DROP (0 references)
- target prot opt source destination
- DROP all -- anywhere anywhere
- DROP all -- anywhere anywhere
- Chain zone_wan_REJECT (2 references)
- target prot opt source destination
- reject all -- anywhere anywhere
- reject all -- anywhere anywhere
- Chain zone_wan_forward (1 references)
- target prot opt source destination
- ACCEPT tcp -- anywhere 192.168.1.209 tcp dpt:ssh
- forwarding_wan all -- anywhere anywhere
- zone_wan_REJECT all -- anywhere anywhere
Advertisement