API tools faq
paste
Advertisement
mileskanda

iptables-save

mileskanda
Dec 9th, 2021
50
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.84 KB | None | 0 0
raw download clone embed print report
  1. # Generated by iptables-save v1.6.1 on Thu Dec 9 18:36:40 2021
  2. *nat
  3. :PREROUTING ACCEPT [80373:4180330]
  4. :INPUT ACCEPT [33878:1967818]
  5. :OUTPUT ACCEPT [9376:687201]
  6. :POSTROUTING ACCEPT [9376:687201]
  7. -A POSTROUTING -s 10.8.0.0/24 -o ens3 -j MASQUERADE
  8. COMMIT
  9. # Completed on Thu Dec 9 18:36:40 2021
  10. # Generated by iptables-save v1.6.1 on Thu Dec 9 18:36:40 2021
  11. *filter
  12. :INPUT DROP [3793:185501]
  13. :FORWARD DROP [0:0]
  14. :OUTPUT ACCEPT [3:120]
  15. :ufw-after-forward - [0:0]
  16. :ufw-after-input - [0:0]
  17. :ufw-after-logging-forward - [0:0]
  18. :ufw-after-logging-input - [0:0]
  19. :ufw-after-logging-output - [0:0]
  20. :ufw-after-output - [0:0]
  21. :ufw-before-forward - [0:0]
  22. :ufw-before-input - [0:0]
  23. :ufw-before-logging-forward - [0:0]
  24. :ufw-before-logging-input - [0:0]
  25. :ufw-before-logging-output - [0:0]
  26. :ufw-before-output - [0:0]
  27. :ufw-logging-allow - [0:0]
  28. :ufw-logging-deny - [0:0]
  29. :ufw-not-local - [0:0]
  30. :ufw-reject-forward - [0:0]
  31. :ufw-reject-input - [0:0]
  32. :ufw-reject-output - [0:0]
  33. :ufw-skip-to-policy-forward - [0:0]
  34. :ufw-skip-to-policy-input - [0:0]
  35. :ufw-skip-to-policy-output - [0:0]
  36. :ufw-track-forward - [0:0]
  37. :ufw-track-input - [0:0]
  38. :ufw-track-output - [0:0]
  39. :ufw-user-forward - [0:0]
  40. :ufw-user-input - [0:0]
  41. :ufw-user-limit - [0:0]
  42. :ufw-user-limit-accept - [0:0]
  43. :ufw-user-logging-forward - [0:0]
  44. :ufw-user-logging-input - [0:0]
  45. :ufw-user-logging-output - [0:0]
  46. :ufw-user-output - [0:0]
  47. -A INPUT -i ens3 -p udp -m udp --dport 1194 -j ACCEPT
  48. -A INPUT -i tun0 -j ACCEPT
  49. -A INPUT -j ufw-before-logging-input
  50. -A INPUT -j ufw-before-input
  51. -A INPUT -j ufw-after-input
  52. -A INPUT -j ufw-after-logging-input
  53. -A INPUT -j ufw-reject-input
  54. -A INPUT -j ufw-track-input
  55. -A FORWARD -i tun0 -o ens3 -j ACCEPT
  56. -A FORWARD -i ens3 -o tun0 -j ACCEPT
  57. -A FORWARD -j ufw-before-logging-forward
  58. -A FORWARD -j ufw-before-forward
  59. -A FORWARD -j ufw-after-forward
  60. -A FORWARD -j ufw-after-logging-forward
  61. -A FORWARD -j ufw-reject-forward
  62. -A FORWARD -j ufw-track-forward
  63. -A OUTPUT -j ufw-before-logging-output
  64. -A OUTPUT -j ufw-before-output
  65. -A OUTPUT -j ufw-after-output
  66. -A OUTPUT -j ufw-after-logging-output
  67. -A OUTPUT -j ufw-reject-output
  68. -A OUTPUT -j ufw-track-output
  69. -A ufw-after-input -p udp -m udp --dport 137 -j ufw-skip-to-policy-input
  70. -A ufw-after-input -p udp -m udp --dport 138 -j ufw-skip-to-policy-input
  71. -A ufw-after-input -p tcp -m tcp --dport 139 -j ufw-skip-to-policy-input
  72. -A ufw-after-input -p tcp -m tcp --dport 445 -j ufw-skip-to-policy-input
  73. -A ufw-after-input -p udp -m udp --dport 67 -j ufw-skip-to-policy-input
  74. -A ufw-after-input -p udp -m udp --dport 68 -j ufw-skip-to-policy-input
  75. -A ufw-after-input -m addrtype --dst-type BROADCAST -j ufw-skip-to-policy-input
  76. -A ufw-after-logging-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  77. -A ufw-after-logging-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  78. -A ufw-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  79. -A ufw-before-forward -p icmp -m icmp --icmp-type 3 -j ACCEPT
  80. -A ufw-before-forward -p icmp -m icmp --icmp-type 11 -j ACCEPT
  81. -A ufw-before-forward -p icmp -m icmp --icmp-type 12 -j ACCEPT
  82. -A ufw-before-forward -p icmp -m icmp --icmp-type 8 -j ACCEPT
  83. -A ufw-before-forward -j ufw-user-forward
  84. -A ufw-before-input -i lo -j ACCEPT
  85. -A ufw-before-input -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  86. -A ufw-before-input -m conntrack --ctstate INVALID -j ufw-logging-deny
  87. -A ufw-before-input -m conntrack --ctstate INVALID -j DROP
  88. -A ufw-before-input -p icmp -m icmp --icmp-type 3 -j ACCEPT
  89. -A ufw-before-input -p icmp -m icmp --icmp-type 11 -j ACCEPT
  90. -A ufw-before-input -p icmp -m icmp --icmp-type 12 -j ACCEPT
  91. -A ufw-before-input -p icmp -m icmp --icmp-type 8 -j ACCEPT
  92. -A ufw-before-input -p udp -m udp --sport 67 --dport 68 -j ACCEPT
  93. -A ufw-before-input -j ufw-not-local
  94. -A ufw-before-input -d 224.0.0.251/32 -p udp -m udp --dport 5353 -j ACCEPT
  95. -A ufw-before-input -d 239.255.255.250/32 -p udp -m udp --dport 1900 -j ACCEPT
  96. -A ufw-before-input -j ufw-user-input
  97. -A ufw-before-output -o lo -j ACCEPT
  98. -A ufw-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  99. -A ufw-before-output -j ufw-user-output
  100. -A ufw-logging-allow -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] "
  101. -A ufw-logging-deny -m conntrack --ctstate INVALID -m limit --limit 3/min --limit-burst 10 -j RETURN
  102. -A ufw-logging-deny -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  103. -A ufw-not-local -m addrtype --dst-type LOCAL -j RETURN
  104. -A ufw-not-local -m addrtype --dst-type MULTICAST -j RETURN
  105. -A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN
  106. -A ufw-not-local -m limit --limit 3/min --limit-burst 10 -j ufw-logging-deny
  107. -A ufw-not-local -j DROP
  108. -A ufw-skip-to-policy-forward -j DROP
  109. -A ufw-skip-to-policy-input -j DROP
  110. -A ufw-skip-to-policy-output -j ACCEPT
  111. -A ufw-track-output -p tcp -m conntrack --ctstate NEW -j ACCEPT
  112. -A ufw-track-output -p udp -m conntrack --ctstate NEW -j ACCEPT
  113. -A ufw-user-input -p tcp -m tcp --dport 22 -m comment --comment "\'dapp_OpenSSH\'" -j ACCEPT
  114. -A ufw-user-input -p tcp -m multiport --dports 80,443 -m comment --comment "\'dapp_apache2\'" -j ACCEPT
  115. -A ufw-user-input -p tcp -m tcp --dport 6379 -j ACCEPT
  116. -A ufw-user-input -p tcp -m multiport --dports 3478,3479,5349,5350,49152:65535 -m comment --comment "\'dapp_Turnserver\'" -j ACCEPT
  117. -A ufw-user-input -p udp -m multiport --dports 3478,3479,5349,5350,49152:65535 -m comment --comment "\'dapp_Turnserver\'" -j ACCEPT
  118. -A ufw-user-input -p tcp -m tcp --dport 5432 -j ACCEPT
  119. -A ufw-user-input -p udp -m udp --dport 5432 -j ACCEPT
  120. -A ufw-user-input -p tcp -m multiport --dports 3000,3001,4000 -m comment --comment "\'dapp_NodeJS\'" -j ACCEPT
  121. -A ufw-user-input -p udp -m multiport --dports 3000,3001,4000 -m comment --comment "\'dapp_NodeJS\'" -j ACCEPT
  122. -A ufw-user-input -p tcp -m tcp --dport 9100 -m comment --comment "\'dapp_TorServer\'" -j ACCEPT
  123. -A ufw-user-input -p udp -m udp --dport 9100 -m comment --comment "\'dapp_TorServer\'" -j ACCEPT
  124. -A ufw-user-input -p tcp -m multiport --dports 1883,5222,5269,5280,5443 -m comment --comment "\'dapp_ejabberd\'" -j ACCEPT
  125. -A ufw-user-input -p udp -m multiport --dports 1883,5222,5269,5280,5443 -m comment --comment "\'dapp_ejabberd\'" -j ACCEPT
  126. -A ufw-user-input -p tcp -m tcp --dport 1194 -m comment --comment "\'dapp_ovpn\'" -j ACCEPT
  127. -A ufw-user-input -p udp -m udp --dport 1194 -m comment --comment "\'dapp_ovpn\'" -j ACCEPT
  128. -A ufw-user-input -p tcp -m tcp --dport 9980 -j ACCEPT
  129. -A ufw-user-input -p udp -m udp --dport 9980 -j ACCEPT
  130. -A ufw-user-input -p tcp -m tcp --dport 3443 -j ACCEPT
  131. -A ufw-user-input -p udp -m udp --dport 3443 -j ACCEPT
  132. -A ufw-user-limit -m limit --limit 3/min -j LOG --log-prefix "[UFW LIMIT BLOCK] "
  133. -A ufw-user-limit -j REJECT --reject-with icmp-port-unreachable
  134. -A ufw-user-limit-accept -j ACCEPT
  135. COMMIT
  136. # Completed on Thu Dec 9 18:36:40 2021
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!