API tools faq
paste
Guest User

Untitled

a guest
Jan 10th, 2023
200
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.03 KB | None | 0 0
raw download clone embed print report
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. LIBVIRT_INP all -- anywhere anywhere
  4. ufw-before-logging-input all -- anywhere anywhere
  5. ufw-before-input all -- anywhere anywhere
  6. ufw-after-input all -- anywhere anywhere
  7. ufw-after-logging-input all -- anywhere anywhere
  8. ufw-reject-input all -- anywhere anywhere
  9. ufw-track-input all -- anywhere anywhere
  10.  
  11. Chain FORWARD (policy DROP)
  12. target prot opt source destination
  13. LIBVIRT_FWX all -- anywhere anywhere
  14. LIBVIRT_FWI all -- anywhere anywhere
  15. LIBVIRT_FWO all -- anywhere anywhere
  16. ufw-before-logging-forward all -- anywhere anywhere
  17. ufw-before-forward all -- anywhere anywhere
  18. ufw-after-forward all -- anywhere anywhere
  19. ufw-after-logging-forward all -- anywhere anywhere
  20. ufw-reject-forward all -- anywhere anywhere
  21. ufw-track-forward all -- anywhere anywhere
  22.  
  23. Chain OUTPUT (policy ACCEPT)
  24. target prot opt source destination
  25. LIBVIRT_OUT all -- anywhere anywhere
  26. ufw-before-logging-output all -- anywhere anywhere
  27. ufw-before-output all -- anywhere anywhere
  28. ufw-after-output all -- anywhere anywhere
  29. ufw-after-logging-output all -- anywhere anywhere
  30. ufw-reject-output all -- anywhere anywhere
  31. ufw-track-output all -- anywhere anywhere
  32.  
  33. Chain LIBVIRT_FWI (1 references)
  34. target prot opt source destination
  35. ACCEPT all -- anywhere 192.168.122.0/24 ctstate RELATED,ESTABLISHED
  36. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  37.  
  38. Chain LIBVIRT_FWO (1 references)
  39. target prot opt source destination
  40. ACCEPT all -- 192.168.122.0/24 anywhere
  41. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  42.  
  43. Chain LIBVIRT_FWX (1 references)
  44. target prot opt source destination
  45. ACCEPT all -- anywhere anywhere
  46.  
  47. Chain LIBVIRT_INP (1 references)
  48. target prot opt source destination
  49. ACCEPT udp -- anywhere anywhere udp dpt:domain
  50. ACCEPT tcp -- anywhere anywhere tcp dpt:domain
  51. ACCEPT udp -- anywhere anywhere udp dpt:bootps
  52. ACCEPT tcp -- anywhere anywhere tcp dpt:67
  53.  
  54. Chain LIBVIRT_OUT (1 references)
  55. target prot opt source destination
  56. ACCEPT udp -- anywhere anywhere udp dpt:domain
  57. ACCEPT tcp -- anywhere anywhere tcp dpt:domain
  58. ACCEPT udp -- anywhere anywhere udp dpt:bootpc
  59. ACCEPT tcp -- anywhere anywhere tcp dpt:68
  60.  
  61. Chain ufw-after-forward (1 references)
  62. target prot opt source destination
  63.  
  64. Chain ufw-after-input (1 references)
  65. target prot opt source destination
  66. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  67. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  68. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  69. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  70. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  71. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  72. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  73.  
  74. Chain ufw-after-logging-forward (1 references)
  75. target prot opt source destination
  76. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  77.  
  78. Chain ufw-after-logging-input (1 references)
  79. target prot opt source destination
  80. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  81.  
  82. Chain ufw-after-logging-output (1 references)
  83. target prot opt source destination
  84.  
  85. Chain ufw-after-output (1 references)
  86. target prot opt source destination
  87.  
  88. Chain ufw-before-forward (1 references)
  89. target prot opt source destination
  90. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  91. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  92. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  93. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  94. ACCEPT icmp -- anywhere anywhere icmp echo-request
  95. ufw-user-forward all -- anywhere anywhere
  96.  
  97. Chain ufw-before-input (1 references)
  98. target prot opt source destination
  99. ACCEPT all -- anywhere anywhere
  100. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  101. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  102. DROP all -- anywhere anywhere ctstate INVALID
  103. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  104. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  105. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  106. ACCEPT icmp -- anywhere anywhere icmp echo-request
  107. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  108. ufw-not-local all -- anywhere anywhere
  109. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  110. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  111. ufw-user-input all -- anywhere anywhere
  112.  
  113. Chain ufw-before-logging-forward (1 references)
  114. target prot opt source destination
  115.  
  116. Chain ufw-before-logging-input (1 references)
  117. target prot opt source destination
  118.  
  119. Chain ufw-before-logging-output (1 references)
  120. target prot opt source destination
  121.  
  122. Chain ufw-before-output (1 references)
  123. target prot opt source destination
  124. ACCEPT all -- anywhere anywhere
  125. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  126. ufw-user-output all -- anywhere anywhere
  127.  
  128. Chain ufw-logging-allow (0 references)
  129. target prot opt source destination
  130. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  131.  
  132. Chain ufw-logging-deny (2 references)
  133. target prot opt source destination
  134. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  135. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  136.  
  137. Chain ufw-not-local (1 references)
  138. target prot opt source destination
  139. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  140. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  141. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  142. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  143. DROP all -- anywhere anywhere
  144.  
  145. Chain ufw-reject-forward (1 references)
  146. target prot opt source destination
  147.  
  148. Chain ufw-reject-input (1 references)
  149. target prot opt source destination
  150.  
  151. Chain ufw-reject-output (1 references)
  152. target prot opt source destination
  153.  
  154. Chain ufw-skip-to-policy-forward (0 references)
  155. target prot opt source destination
  156. DROP all -- anywhere anywhere
  157.  
  158. Chain ufw-skip-to-policy-input (7 references)
  159. target prot opt source destination
  160. DROP all -- anywhere anywhere
  161.  
  162. Chain ufw-skip-to-policy-output (0 references)
  163. target prot opt source destination
  164. ACCEPT all -- anywhere anywhere
  165.  
  166. Chain ufw-track-forward (1 references)
  167. target prot opt source destination
  168.  
  169. Chain ufw-track-input (1 references)
  170. target prot opt source destination
  171.  
  172. Chain ufw-track-output (1 references)
  173. target prot opt source destination
  174. ACCEPT tcp -- anywhere anywhere ctstate NEW
  175. ACCEPT udp -- anywhere anywhere ctstate NEW
  176.  
  177. Chain ufw-user-forward (1 references)
  178. target prot opt source destination
  179.  
  180. Chain ufw-user-input (1 references)
  181. target prot opt source destination
  182. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  183. ACCEPT udp -- anywhere anywhere udp dpt:22
  184. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  185. ACCEPT udp -- anywhere anywhere udp dpt:80
  186. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  187. ACCEPT udp -- anywhere anywhere udp dpt:https
  188. ACCEPT tcp -- anywhere anywhere tcp dpt:3000
  189. ACCEPT udp -- anywhere anywhere udp dpt:3000
  190. ACCEPT tcp -- anywhere anywhere tcp dpt:40120
  191. ACCEPT udp -- anywhere anywhere udp dpt:40120
  192. ACCEPT tcp -- anywhere anywhere tcp dpt:40121
  193. ACCEPT udp -- anywhere anywhere udp dpt:40121
  194. ACCEPT tcp -- anywhere anywhere tcp dpt:8006
  195. ACCEPT udp -- anywhere anywhere udp dpt:8006
  196.  
  197. Chain ufw-user-limit (0 references)
  198. target prot opt source destination
  199. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  200. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  201.  
  202. Chain ufw-user-limit-accept (0 references)
  203. target prot opt source destination
  204. ACCEPT all -- anywhere anywhere
  205.  
  206. Chain ufw-user-logging-forward (0 references)
  207. target prot opt source destination
  208.  
  209. Chain ufw-user-logging-input (0 references)
  210. target prot opt source destination
  211.  
  212. Chain ufw-user-logging-output (0 references)
  213. target prot opt source destination
  214.  
  215. Chain ufw-user-output (1 references)
  216. target prot opt source destination
  217.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!