Advertisement
Guest User

Untitled

a guest
Nov 15th, 2018
221
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.23 KB | None | 0 0
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. ufw-before-logging-input all -- anywhere anywhere
  4. ufw-before-input all -- anywhere anywhere
  5. ufw-after-input all -- anywhere anywhere
  6. ufw-after-logging-input all -- anywhere anywhere
  7. ufw-reject-input all -- anywhere anywhere
  8. ufw-track-input all -- anywhere anywhere
  9.  
  10. Chain FORWARD (policy DROP)
  11. target prot opt source destination
  12. ufw-before-logging-forward all -- anywhere anywhere
  13. ufw-before-forward all -- anywhere anywhere
  14. ufw-after-forward all -- anywhere anywhere
  15. ufw-after-logging-forward all -- anywhere anywhere
  16. ufw-reject-forward all -- anywhere anywhere
  17. ufw-track-forward all -- anywhere anywhere
  18.  
  19. Chain OUTPUT (policy ACCEPT)
  20. target prot opt source destination
  21. ufw-before-logging-output all -- anywhere anywhere
  22. ufw-before-output all -- anywhere anywhere
  23. ufw-after-output all -- anywhere anywhere
  24. ufw-after-logging-output all -- anywhere anywhere
  25. ufw-reject-output all -- anywhere anywhere
  26. ufw-track-output all -- anywhere anywhere
  27.  
  28. Chain ufw-after-forward (1 references)
  29. target prot opt source destination
  30.  
  31. Chain ufw-after-input (1 references)
  32. target prot opt source destination
  33. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  34. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  35. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  36. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  37. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  38. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  39. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  40.  
  41. Chain ufw-after-logging-forward (1 references)
  42. target prot opt source destination
  43. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  44.  
  45. Chain ufw-after-logging-input (1 references)
  46. target prot opt source destination
  47. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  48.  
  49. Chain ufw-after-logging-output (1 references)
  50. target prot opt source destination
  51.  
  52. Chain ufw-after-output (1 references)
  53. target prot opt source destination
  54.  
  55. Chain ufw-before-forward (1 references)
  56. target prot opt source destination
  57. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  58. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  59. ACCEPT icmp -- anywhere anywhere icmp source-quench
  60. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  61. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  62. ACCEPT icmp -- anywhere anywhere icmp echo-request
  63. ufw-user-forward all -- anywhere anywhere
  64.  
  65. Chain ufw-before-input (1 references)
  66. target prot opt source destination
  67. ACCEPT all -- anywhere anywhere
  68. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  69. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  70. DROP all -- anywhere anywhere ctstate INVALID
  71. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  72. ACCEPT icmp -- anywhere anywhere icmp source-quench
  73. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  74. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  75. ACCEPT icmp -- anywhere anywhere icmp echo-request
  76. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  77. ufw-not-local all -- anywhere anywhere
  78. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  79. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  80. ufw-user-input all -- anywhere anywhere
  81.  
  82. Chain ufw-before-logging-forward (1 references)
  83. target prot opt source destination
  84.  
  85. Chain ufw-before-logging-input (1 references)
  86. target prot opt source destination
  87.  
  88. Chain ufw-before-logging-output (1 references)
  89. target prot opt source destination
  90.  
  91. Chain ufw-before-output (1 references)
  92. target prot opt source destination
  93. ACCEPT all -- anywhere anywhere
  94. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  95. ufw-user-output all -- anywhere anywhere
  96.  
  97. Chain ufw-logging-allow (0 references)
  98. target prot opt source destination
  99. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  100.  
  101. Chain ufw-logging-deny (2 references)
  102. target prot opt source destination
  103. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  104. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  105.  
  106. Chain ufw-not-local (1 references)
  107. target prot opt source destination
  108. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  109. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  110. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  111. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  112. DROP all -- anywhere anywhere
  113.  
  114. Chain ufw-reject-forward (1 references)
  115. target prot opt source destination
  116.  
  117. Chain ufw-reject-input (1 references)
  118. target prot opt source destination
  119.  
  120. Chain ufw-reject-output (1 references)
  121. target prot opt source destination
  122.  
  123. Chain ufw-skip-to-policy-forward (0 references)
  124. target prot opt source destination
  125. DROP all -- anywhere anywhere
  126.  
  127. Chain ufw-skip-to-policy-input (7 references)
  128. target prot opt source destination
  129. DROP all -- anywhere anywhere
  130.  
  131. Chain ufw-skip-to-policy-output (0 references)
  132. target prot opt source destination
  133. ACCEPT all -- anywhere anywhere
  134.  
  135. Chain ufw-track-forward (1 references)
  136. target prot opt source destination
  137.  
  138. Chain ufw-track-input (1 references)
  139. target prot opt source destination
  140.  
  141. Chain ufw-track-output (1 references)
  142. target prot opt source destination
  143. ACCEPT tcp -- anywhere anywhere ctstate NEW
  144. ACCEPT udp -- anywhere anywhere ctstate NEW
  145.  
  146. Chain ufw-user-forward (1 references)
  147. target prot opt source destination
  148.  
  149. Chain ufw-user-input (1 references)
  150. target prot opt source destination
  151. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  152. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  153. ACCEPT udp -- anywhere anywhere udp dpt:22
  154. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  155. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  156. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  157. ACCEPT udp -- anywhere anywhere udp dpt:443
  158. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  159. ACCEPT udp -- anywhere anywhere udp dpt:80
  160. ACCEPT tcp -- anywhere anywhere multiport dports http,https
  161.  
  162. Chain ufw-user-limit (0 references)
  163. target prot opt source destination
  164. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  165. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  166.  
  167. Chain ufw-user-limit-accept (0 references)
  168. target prot opt source destination
  169. ACCEPT all -- anywhere anywhere
  170.  
  171. Chain ufw-user-logging-forward (0 references)
  172. target prot opt source destination
  173.  
  174. Chain ufw-user-logging-input (0 references)
  175. target prot opt source destination
  176.  
  177. Chain ufw-user-logging-output (0 references)
  178. target prot opt source destination
  179.  
  180. Chain ufw-user-output (1 references)
  181. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement