Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- You are connected to United States #8192 (us8192.nordvpn.com)!
- -2022/01/27 13:28:02 POST_CONNECT system info:
- Routes for ipv4:
- 0.0.0.0/1 via 10.5.0.2 dev nordlynx
- default via 172.19.0.1 dev eth0
- 128.0.0.0/1 via 10.5.0.2 dev nordlynx
- 172.19.0.0/16 dev eth0 proto kernel scope link src 172.19.0.2
- 185.93.0.116 via 172.19.0.1 dev eth0
- 192.168.10.0/24 via 172.19.0.1 dev eth0
- local 10.5.0.2 dev nordlynx table local proto kernel scope host src 10.5.0.2
- broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1
- local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
- local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
- broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
- broadcast 172.19.0.0 dev eth0 table local proto kernel scope link src 172.19.0.2
- local 172.19.0.2 dev eth0 table local proto kernel scope host src 172.19.0.2
- broadcast 172.19.255.255 dev eth0 table local proto kernel scope link src 172.19.0.2
- IP rules for ipv4:
- 0: from all lookup local
- 32766: from all lookup main
- 32767: from all lookup default
- Routes for ipv6:
- IP rules for ipv6:
- 0: from all lookup local
- 32766: from all lookup main
- IP tables for ipv4:
- filter:
- -P INPUT DROP
- -P FORWARD DROP
- -P OUTPUT DROP
- -A INPUT -s 185.93.0.116/32 -i eth0 -j ACCEPT
- -A INPUT -s 192.168.10.0/24 -i eth0 -j ACCEPT
- -A INPUT -s 172.19.0.0/16 -i eth0 -j ACCEPT
- -A INPUT -i eth0 -j DROP
- -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
- -A INPUT -i lo -j ACCEPT
- -A INPUT -s 172.19.0.0/16 -i eth0 -j ACCEPT
- -A INPUT -s 192.168.10.0/24 -i eth0 -j ACCEPT
- -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
- -A FORWARD -i lo -j ACCEPT
- -A FORWARD -d 172.19.0.0/16 -i eth0 -j ACCEPT
- -A FORWARD -s 172.19.0.0/16 -i eth0 -j ACCEPT
- -A FORWARD -d 192.168.10.0/24 -i eth0 -j ACCEPT
- -A FORWARD -s 192.168.10.0/24 -i eth0 -j ACCEPT
- -A OUTPUT -d 185.93.0.116/32 -o eth0 -j ACCEPT
- -A OUTPUT -d 192.168.10.0/24 -o eth0 -j ACCEPT
- -A OUTPUT -d 172.19.0.0/16 -o eth0 -j ACCEPT
- -A OUTPUT -o eth0 -j DROP
- -A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
- -A OUTPUT -o lo -j ACCEPT
- -A OUTPUT -o tap+ -j ACCEPT
- -A OUTPUT -o tun+ -j ACCEPT
- -A OUTPUT -o nordlynx+ -j ACCEPT
- -A OUTPUT -d 172.19.0.0/16 -o eth0 -j ACCEPT
- -A OUTPUT -o eth0 -p udp -m udp --dport 53 -j ACCEPT
- -A OUTPUT -o eth0 -p udp -m udp --dport 51820 -j ACCEPT
- -A OUTPUT -o eth0 -p tcp -m tcp --dport 1194 -j ACCEPT
- -A OUTPUT -o eth0 -p udp -m udp --dport 1194 -j ACCEPT
- -A OUTPUT -o eth0 -p tcp -m tcp --dport 443 -j ACCEPT
- -A OUTPUT -d 192.168.10.0/24 -o eth0 -j ACCEPT
- nat:
- -P PREROUTING ACCEPT
- -P INPUT ACCEPT
- -P OUTPUT ACCEPT
- -P POSTROUTING ACCEPT
- -N DOCKER_OUTPUT
- -N DOCKER_POSTROUTING
- -A OUTPUT -d 127.0.0.11/32 -j DOCKER_OUTPUT
- -A POSTROUTING -d 127.0.0.11/32 -j DOCKER_POSTROUTING
- -A POSTROUTING -o tap+ -j MASQUERADE
- -A POSTROUTING -o tun+ -j MASQUERADE
- -A POSTROUTING -o nordlynx+ -j MASQUERADE
- -A DOCKER_OUTPUT -d 127.0.0.11/32 -p tcp -m tcp --dport 53 -j DNAT --to-destination 127.0.0.11:37829
- -A DOCKER_OUTPUT -d 127.0.0.11/32 -p udp -m udp --dport 53 -j DNAT --to-destination 127.0.0.11:33312
- -A DOCKER_POSTROUTING -s 127.0.0.11/32 -p tcp -m tcp --sport 37829 -j SNAT --to-source :53
- -A DOCKER_POSTROUTING -s 127.0.0.11/32 -p udp -m udp --sport 33312 -j SNAT --to-source :53
- mangle:
- -P PREROUTING ACCEPT
- -P INPUT ACCEPT
- -P FORWARD ACCEPT
- -P OUTPUT ACCEPT
- -P POSTROUTING ACCEPT
- raw:
- -P PREROUTING ACCEPT
- -P OUTPUT ACCEPT
- :
- -P INPUT ACCEPT
- -P FORWARD ACCEPT
- -P OUTPUT ACCEPT
- IP tables for ipv6:
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement