Advertisement
Guest User

Untitled

a guest
Apr 26th, 2018
68
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.26 KB | None | 0 0
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. f2b-ssh tcp -- anywhere anywhere multiport dports ssh
  4. f2b-sshd tcp -- anywhere anywhere multiport dports ssh
  5. ACCEPT tcp -- anywhere anywhere tcp dpt:1723 state NEW,ESTABLISHED
  6. ufw-before-logging-input all -- anywhere anywhere
  7. ufw-before-input all -- anywhere anywhere
  8. ufw-after-input all -- anywhere anywhere
  9. ufw-after-logging-input all -- anywhere anywhere
  10. ufw-reject-input all -- anywhere anywhere
  11. ufw-track-input all -- anywhere anywhere
  12.  
  13. Chain FORWARD (policy DROP)
  14. target prot opt source destination
  15. ufw-before-logging-forward all -- anywhere anywhere
  16. ufw-before-forward all -- anywhere anywhere
  17. ufw-after-forward all -- anywhere anywhere
  18. ufw-after-logging-forward all -- anywhere anywhere
  19. ufw-reject-forward all -- anywhere anywhere
  20. ufw-track-forward all -- anywhere anywhere
  21.  
  22. Chain OUTPUT (policy ACCEPT)
  23. target prot opt source destination
  24. ufw-before-logging-output all -- anywhere anywhere
  25. ufw-before-output all -- anywhere anywhere
  26. ufw-after-output all -- anywhere anywhere
  27. ufw-after-logging-output all -- anywhere anywhere
  28. ufw-reject-output all -- anywhere anywhere
  29. ufw-track-output all -- anywhere anywhere
  30.  
  31. Chain f2b-ssh (1 references)
  32. target prot opt source destination
  33. RETURN all -- anywhere anywhere
  34.  
  35. Chain f2b-sshd (1 references)
  36. target prot opt source destination
  37. RETURN all -- anywhere anywhere
  38.  
  39. Chain ufw-after-forward (1 references)
  40. target prot opt source destination
  41.  
  42. Chain ufw-after-input (1 references)
  43. target prot opt source destination
  44. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  45. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  46. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  47. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  48. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  49. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  50. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  51.  
  52. Chain ufw-after-logging-forward (1 references)
  53. target prot opt source destination
  54. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  55.  
  56. Chain ufw-after-logging-input (1 references)
  57. target prot opt source destination
  58. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  59.  
  60. Chain ufw-after-logging-output (1 references)
  61. target prot opt source destination
  62.  
  63. Chain ufw-after-output (1 references)
  64. target prot opt source destination
  65.  
  66. Chain ufw-before-forward (1 references)
  67. target prot opt source destination
  68. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  69. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  70. ACCEPT icmp -- anywhere anywhere icmp source-quench
  71. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  72. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  73. ACCEPT icmp -- anywhere anywhere icmp echo-request
  74. ufw-user-forward all -- anywhere anywhere
  75.  
  76. Chain ufw-before-input (1 references)
  77. target prot opt source destination
  78. ACCEPT all -- anywhere anywhere
  79. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  80. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  81. DROP all -- anywhere anywhere ctstate INVALID
  82. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  83. ACCEPT icmp -- anywhere anywhere icmp source-quench
  84. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  85. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  86. ACCEPT icmp -- anywhere anywhere icmp echo-request
  87. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  88. ufw-not-local all -- anywhere anywhere
  89. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  90. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  91. ufw-user-input all -- anywhere anywhere
  92.  
  93. Chain ufw-before-logging-forward (1 references)
  94. target prot opt source destination
  95.  
  96. Chain ufw-before-logging-input (1 references)
  97. target prot opt source destination
  98.  
  99. Chain ufw-before-logging-output (1 references)
  100. target prot opt source destination
  101.  
  102. Chain ufw-before-output (1 references)
  103. target prot opt source destination
  104. ACCEPT all -- anywhere anywhere
  105. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  106. ufw-user-output all -- anywhere anywhere
  107.  
  108. Chain ufw-logging-allow (0 references)
  109. target prot opt source destination
  110. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  111.  
  112. Chain ufw-logging-deny (2 references)
  113. target prot opt source destination
  114. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  115. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  116.  
  117. Chain ufw-not-local (1 references)
  118. target prot opt source destination
  119. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  120. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  121. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  122. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  123. DROP all -- anywhere anywhere
  124.  
  125. Chain ufw-reject-forward (1 references)
  126. target prot opt source destination
  127.  
  128. Chain ufw-reject-input (1 references)
  129. target prot opt source destination
  130.  
  131. Chain ufw-reject-output (1 references)
  132. target prot opt source destination
  133.  
  134. Chain ufw-skip-to-policy-forward (0 references)
  135. target prot opt source destination
  136. DROP all -- anywhere anywhere
  137.  
  138. Chain ufw-skip-to-policy-input (7 references)
  139. target prot opt source destination
  140. DROP all -- anywhere anywhere
  141.  
  142. Chain ufw-skip-to-policy-output (0 references)
  143. target prot opt source destination
  144. ACCEPT all -- anywhere anywhere
  145.  
  146. Chain ufw-track-forward (1 references)
  147. target prot opt source destination
  148.  
  149. Chain ufw-track-input (1 references)
  150. target prot opt source destination
  151.  
  152. Chain ufw-track-output (1 references)
  153. target prot opt source destination
  154. ACCEPT tcp -- anywhere anywhere ctstate NEW
  155. ACCEPT udp -- anywhere anywhere ctstate NEW
  156.  
  157. Chain ufw-user-forward (1 references)
  158. target prot opt source destination
  159.  
  160. Chain ufw-user-input (1 references)
  161. target prot opt source destination
  162. ACCEPT udp -- anywhere anywhere udp dpt:openvpn
  163. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh /* 'dapp_OpenSSH' */
  164. ACCEPT tcp -- anywhere anywhere tcp dpt:1723 /* 'pptpd' */
  165.  
  166. Chain ufw-user-limit (0 references)
  167. target prot opt source destination
  168. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  169. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  170.  
  171. Chain ufw-user-limit-accept (0 references)
  172. target prot opt source destination
  173. ACCEPT all -- anywhere anywhere
  174.  
  175. Chain ufw-user-logging-forward (0 references)
  176. target prot opt source destination
  177.  
  178. Chain ufw-user-logging-input (0 references)
  179. target prot opt source destination
  180.  
  181. Chain ufw-user-logging-output (0 references)
  182. target prot opt source destination
  183.  
  184. Chain ufw-user-output (1 references)
  185. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement