Advertisement
Guest User

Untitled

a guest
May 22nd, 2018
119
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.99 KB | None | 0 0
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. ACCEPT udp -- anywhere anywhere udp dpt:domain
  4. ACCEPT tcp -- anywhere anywhere tcp dpt:domain
  5. ACCEPT udp -- anywhere anywhere udp dpt:bootps
  6. ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
  7. ufw-before-logging-input all -- anywhere anywhere
  8. ufw-before-input all -- anywhere anywhere
  9. ufw-after-input all -- anywhere anywhere
  10. ufw-after-logging-input all -- anywhere anywhere
  11. ufw-reject-input all -- anywhere anywhere
  12. ufw-track-input all -- anywhere anywhere
  13.  
  14. Chain FORWARD (policy DROP)
  15. target prot opt source destination
  16. ACCEPT all -- anywhere 192.168.122.0/24 ctstate RELATED,ESTABLISHED
  17. ACCEPT all -- 192.168.122.0/24 anywhere
  18. ACCEPT all -- anywhere anywhere
  19. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  20. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  21. ufw-before-logging-forward all -- anywhere anywhere
  22. ufw-before-forward all -- anywhere anywhere
  23. ufw-after-forward all -- anywhere anywhere
  24. ufw-after-logging-forward all -- anywhere anywhere
  25. ufw-reject-forward all -- anywhere anywhere
  26. ufw-track-forward all -- anywhere anywhere
  27. ACCEPT tcp -- anywhere 192.168.122.2 tcp dpt:ftp
  28. ACCEPT tcp -- anywhere JALA-STRAWBERRY tcp dpt:ssh state NEW,RELATED,ESTABLISHED
  29.  
  30. Chain OUTPUT (policy ACCEPT)
  31. target prot opt source destination
  32. ACCEPT udp -- anywhere anywhere udp dpt:bootpc
  33. ufw-before-logging-output all -- anywhere anywhere
  34. ufw-before-output all -- anywhere anywhere
  35. ufw-after-output all -- anywhere anywhere
  36. ufw-after-logging-output all -- anywhere anywhere
  37. ufw-reject-output all -- anywhere anywhere
  38. ufw-track-output all -- anywhere anywhere
  39.  
  40. Chain ufw-after-forward (1 references)
  41. target prot opt source destination
  42.  
  43. Chain ufw-after-input (1 references)
  44. target prot opt source destination
  45. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  46. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  47. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  48. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  49. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  50. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  51. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  52.  
  53. Chain ufw-after-logging-forward (1 references)
  54. target prot opt source destination
  55. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  56.  
  57. Chain ufw-after-logging-input (1 references)
  58. target prot opt source destination
  59. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  60.  
  61. Chain ufw-after-logging-output (1 references)
  62. target prot opt source destination
  63.  
  64. Chain ufw-after-output (1 references)
  65. target prot opt source destination
  66.  
  67. Chain ufw-before-forward (1 references)
  68. target prot opt source destination
  69. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  70. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  71. ACCEPT icmp -- anywhere anywhere icmp source-quench
  72. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  73. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  74. ACCEPT icmp -- anywhere anywhere icmp echo-request
  75. ufw-user-forward all -- anywhere anywhere
  76.  
  77. Chain ufw-before-input (1 references)
  78. target prot opt source destination
  79. ACCEPT all -- anywhere anywhere
  80. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  81. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  82. DROP all -- anywhere anywhere ctstate INVALID
  83. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  84. ACCEPT icmp -- anywhere anywhere icmp source-quench
  85. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  86. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  87. ACCEPT icmp -- anywhere anywhere icmp echo-request
  88. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  89. ufw-not-local all -- anywhere anywhere
  90. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  91. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  92. ufw-user-input all -- anywhere anywhere
  93.  
  94. Chain ufw-before-logging-forward (1 references)
  95. target prot opt source destination
  96.  
  97. Chain ufw-before-logging-input (1 references)
  98. target prot opt source destination
  99.  
  100. Chain ufw-before-logging-output (1 references)
  101. target prot opt source destination
  102.  
  103. Chain ufw-before-output (1 references)
  104. target prot opt source destination
  105. ACCEPT all -- anywhere anywhere
  106. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  107. ufw-user-output all -- anywhere anywhere
  108.  
  109. Chain ufw-logging-allow (0 references)
  110. target prot opt source destination
  111. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  112.  
  113. Chain ufw-logging-deny (2 references)
  114. target prot opt source destination
  115. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  116. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  117.  
  118. Chain ufw-not-local (1 references)
  119. target prot opt source destination
  120. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  121. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  122. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  123. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  124. DROP all -- anywhere anywhere
  125.  
  126. Chain ufw-reject-forward (1 references)
  127. target prot opt source destination
  128.  
  129. Chain ufw-reject-input (1 references)
  130. target prot opt source destination
  131.  
  132. Chain ufw-reject-output (1 references)
  133. target prot opt source destination
  134.  
  135. Chain ufw-skip-to-policy-forward (0 references)
  136. target prot opt source destination
  137. DROP all -- anywhere anywhere
  138.  
  139. Chain ufw-skip-to-policy-input (7 references)
  140. target prot opt source destination
  141. DROP all -- anywhere anywhere
  142.  
  143. Chain ufw-skip-to-policy-output (0 references)
  144. target prot opt source destination
  145. ACCEPT all -- anywhere anywhere
  146.  
  147. Chain ufw-track-forward (1 references)
  148. target prot opt source destination
  149.  
  150. Chain ufw-track-input (1 references)
  151. target prot opt source destination
  152.  
  153. Chain ufw-track-output (1 references)
  154. target prot opt source destination
  155. ACCEPT tcp -- anywhere anywhere ctstate NEW
  156. ACCEPT udp -- anywhere anywhere ctstate NEW
  157.  
  158. Chain ufw-user-forward (1 references)
  159. target prot opt source destination
  160.  
  161. Chain ufw-user-input (1 references)
  162. target prot opt source destination
  163. ACCEPT tcp -- anywhere anywhere tcp dpt:2355
  164. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  165. ACCEPT udp -- anywhere anywhere udp dpt:80
  166. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  167. ACCEPT udp -- anywhere anywhere udp dpt:443
  168. ACCEPT udp -- anywhere anywhere udp dpt:34197
  169. ACCEPT udp -- anywhere anywhere multiport dports netbios-ns,netbios-dgm /* 'dapp_Samba' */
  170. ACCEPT tcp -- anywhere anywhere multiport dports netbios-ssn,microsoft-ds /* 'dapp_Samba' */
  171. ACCEPT tcp -- anywhere anywhere tcp dpt:81
  172. ACCEPT tcp -- anywhere anywhere tcp dpt:8888
  173. ACCEPT udp -- anywhere anywhere udp dpt:8888
  174.  
  175. Chain ufw-user-limit (0 references)
  176. target prot opt source destination
  177. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  178. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  179.  
  180. Chain ufw-user-limit-accept (0 references)
  181. target prot opt source destination
  182. ACCEPT all -- anywhere anywhere
  183.  
  184. Chain ufw-user-logging-forward (0 references)
  185. target prot opt source destination
  186.  
  187. Chain ufw-user-logging-input (0 references)
  188. target prot opt source destination
  189.  
  190. Chain ufw-user-logging-output (0 references)
  191. target prot opt source destination
  192.  
  193. Chain ufw-user-output (1 references)
  194. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement