Dijit

default firewall rules, fedora23.

Nov 21st, 2015
408
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.16 KB | None | 0 0
  1. [person@pg-parade ~]$ sudo iptables -L -n
  2. Chain INPUT (policy ACCEPT)
  3. target prot opt source destination
  4. ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53
  5. ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
  6. ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67
  7. ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:67
  8. ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  9. ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
  10. INPUT_direct all -- 0.0.0.0/0 0.0.0.0/0
  11. INPUT_ZONES_SOURCE all -- 0.0.0.0/0 0.0.0.0/0
  12. INPUT_ZONES all -- 0.0.0.0/0 0.0.0.0/0
  13. ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
  14. DROP all -- 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  15. REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  16.  
  17. Chain FORWARD (policy ACCEPT)
  18. target prot opt source destination
  19. DOCKER all -- 0.0.0.0/0 0.0.0.0/0
  20. ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  21. ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
  22. ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 ctstate RELATED,ESTABLISHED
  23. ACCEPT all -- 192.168.122.0/24 0.0.0.0/0
  24. ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
  25. REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  26. REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  27. ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  28. ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
  29. FORWARD_direct all -- 0.0.0.0/0 0.0.0.0/0
  30. FORWARD_IN_ZONES_SOURCE all -- 0.0.0.0/0 0.0.0.0/0
  31. FORWARD_IN_ZONES all -- 0.0.0.0/0 0.0.0.0/0
  32. FORWARD_OUT_ZONES_SOURCE all -- 0.0.0.0/0 0.0.0.0/0
  33. FORWARD_OUT_ZONES all -- 0.0.0.0/0 0.0.0.0/0
  34. ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
  35. DROP all -- 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  36. REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  37. ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
  38.  
  39. Chain OUTPUT (policy ACCEPT)
  40. target prot opt source destination
  41. ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:68
  42. OUTPUT_direct all -- 0.0.0.0/0 0.0.0.0/0
  43.  
  44. Chain DOCKER (1 references)
  45. target prot opt source destination
  46. ACCEPT tcp -- 0.0.0.0/0 172.17.0.3 tcp dpt:5432
  47. ACCEPT tcp -- 0.0.0.0/0 172.17.0.5 tcp dpt:5432
  48.  
  49. Chain FORWARD_IN_ZONES (1 references)
  50. target prot opt source destination
  51. FWDI_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  52. FWDI_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  53. FWDI_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  54.  
  55. Chain FORWARD_IN_ZONES_SOURCE (1 references)
  56. target prot opt source destination
  57.  
  58. Chain FORWARD_OUT_ZONES (1 references)
  59. target prot opt source destination
  60. FWDO_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  61. FWDO_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  62. FWDO_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  63.  
  64. Chain FORWARD_OUT_ZONES_SOURCE (1 references)
  65. target prot opt source destination
  66.  
  67. Chain FORWARD_direct (1 references)
  68. target prot opt source destination
  69.  
  70. Chain FWDI_FedoraServer (3 references)
  71. target prot opt source destination
  72. FWDI_FedoraServer_log all -- 0.0.0.0/0 0.0.0.0/0
  73. FWDI_FedoraServer_deny all -- 0.0.0.0/0 0.0.0.0/0
  74. FWDI_FedoraServer_allow all -- 0.0.0.0/0 0.0.0.0/0
  75.  
  76. Chain FWDI_FedoraServer_allow (1 references)
  77. target prot opt source destination
  78.  
  79. Chain FWDI_FedoraServer_deny (1 references)
  80. target prot opt source destination
  81.  
  82. Chain FWDI_FedoraServer_log (1 references)
  83. target prot opt source destination
  84.  
  85. Chain FWDO_FedoraServer (3 references)
  86. target prot opt source destination
  87. FWDO_FedoraServer_log all -- 0.0.0.0/0 0.0.0.0/0
  88. FWDO_FedoraServer_deny all -- 0.0.0.0/0 0.0.0.0/0
  89. FWDO_FedoraServer_allow all -- 0.0.0.0/0 0.0.0.0/0
  90.  
  91. Chain FWDO_FedoraServer_allow (1 references)
  92. target prot opt source destination
  93.  
  94. Chain FWDO_FedoraServer_deny (1 references)
  95. target prot opt source destination
  96.  
  97. Chain FWDO_FedoraServer_log (1 references)
  98. target prot opt source destination
  99.  
  100. Chain INPUT_ZONES (1 references)
  101. target prot opt source destination
  102. IN_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  103. IN_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  104. IN_FedoraServer all -- 0.0.0.0/0 0.0.0.0/0 [goto]
  105.  
  106. Chain INPUT_ZONES_SOURCE (1 references)
  107. target prot opt source destination
  108.  
  109. Chain INPUT_direct (1 references)
  110. target prot opt source destination
  111.  
  112. Chain IN_FedoraServer (3 references)
  113. target prot opt source destination
  114. IN_FedoraServer_log all -- 0.0.0.0/0 0.0.0.0/0
  115. IN_FedoraServer_deny all -- 0.0.0.0/0 0.0.0.0/0
  116. IN_FedoraServer_allow all -- 0.0.0.0/0 0.0.0.0/0
  117.  
  118. Chain IN_FedoraServer_allow (1 references)
  119. target prot opt source destination
  120. ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9090 ctstate NEW
  121. ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW
  122.  
  123. Chain IN_FedoraServer_deny (1 references)
  124. target prot opt source destination
  125.  
  126. Chain IN_FedoraServer_log (1 references)
  127. target prot opt source destination
  128.  
  129. Chain OUTPUT_direct (1 references)
  130. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment