API tools faq
paste
Guest User

Untitled

a guest
May 13th, 2021
88
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.93 KB | None | 0 0
raw download clone embed print report
  1. root@VPS300:~# iptables -L
  2. Chain INPUT (policy ACCEPT)
  3. target prot opt source destination
  4. ACCEPT tcp -- anywhere anywhere tcp dpt:25577 state NEW limit: avg 5/sec burst 5
  5. DROP tcp -- anywhere anywhere tcp dpt:http state NEW recent: UPDATE seconds: 20 hit_count: 10 name: DEFAULT side: source mask: 255.255.255.255
  6. tcp -- anywhere anywhere tcp dpt:http state NEW recent: SET name: DEFAULT side: source mask: 255.255.255.255
  7. ACCEPT tcp -- anywhere anywhere tcp dpt:25577 state NEW limit: avg 2/sec burst 5
  8. BotManager tcp -- anywhere anywhere
  9. REJECT tcp -- anywhere anywhere tcp dpt:25577 option=8 flags:FIN,SYN,RST,ACK/SYN reject-with icmp-port-unreachable
  10. ACCEPT tcp -- anywhere anywhere tcp dpt:25577
  11. ACCEPT tcp -- anywhere anywhere tcp dpt:25577 state RELATED,ESTABLISHED
  12. DROP tcp -- anywhere anywhere tcp dpt:25577 flags:FIN,SYN,RST,ACK/SYN #conn src/32 > 30
  13. DROP tcp -- anywhere anywhere tcp dpt:25577 flags:FIN,SYN,RST,ACK/SYN #conn src/32 > 10
  14. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
  15. ACCEPT tcp -- localhost anywhere tcp dpts:17331:27332
  16. ACCEPT tcp -- localhost anywhere tcp dpts:17331:27332
  17. ACCEPT tcp -- anywhere anywhere tcp dpt:25577
  18. DROP tcp -- anywhere anywhere tcp dpts:17331:27332
  19. REJECT tcp -- anywhere anywhere tcp dpt:25577 option=8 flags:FIN,SYN,RST,ACK/SYN reject-with icmp-port-unreachable
  20. ACCEPT tcp -- anywhere anywhere tcp dpt:25577
  21. ACCEPT tcp -- anywhere anywhere tcp dpt:25577 state RELATED,ESTABLISHED
  22. DROP tcp -- anywhere anywhere tcp dpt:25577 flags:FIN,SYN,RST,ACK/SYN #conn src/32 > 10
  23. DROP tcp -- anywhere anywhere tcp dpt:25577 flags:FIN,SYN,RST,ACK/SYN #conn src/32 > 10
  24. REJECT tcp -- anywhere anywhere tcp spt:ntp reject-with icmp-port-unreachable
  25. REJECT tcp -- anywhere anywhere tcp spt:ldap reject-with icmp-port-unreachable
  26. DROP all -f anywhere anywhere
  27. DROP tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN state NEW
  28. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
  29. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
  30. DROP icmp -- anywhere anywhere
  31. DROP all -- anywhere anywhere state INVALID
  32. ACCEPT tcp -- anywhere anywhere tcp flags:RST/RST limit: avg 2/sec burst 2
  33. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
  34. DROP icmp -- anywhere anywhere icmp address-mask-request
  35. DROP icmp -- anywhere anywhere icmp timestamp-request
  36. DROP all -f anywhere anywhere
  37. DROP icmp -- anywhere anywhere icmp router-solicitation
  38. ACCEPT icmp -- anywhere anywhere limit: avg 2/sec burst 5
  39. ACCEPT tcp -- anywhere anywhere state NEW limit: avg 60/sec burst 10
  40. DROP tcp -- anywhere anywhere state NEW
  41. ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
  42. DROP all -- anywhere anywhere recent: CHECK seconds: 86400 name: portscan side: source mask: 255.255.255.255
  43. DROP tcp -- anywhere anywhere ctstate NEW
  44. DROP tcp -- anywhere anywhere tcp flags:RST/RST
  45. DROP tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN state NEW
  46. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
  47. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
  48. DROP tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN
  49. DROP tcp -- anywhere anywhere tcp flags:PSH,ACK/PSH
  50. DROP tcp -- anywhere anywhere tcp flags:ACK,URG/URG
  51. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN
  52. DROP tcp -- anywhere anywhere tcp flags:FIN,RST/FIN,RST
  53. ACCEPT tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5
  54. DROP tcp -- anywhere anywhere tcp flags:SYN,ACK/SYN,ACK state NEW
  55. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
  56. ACCEPT tcp -- anywhere anywhere ctstate NEW limit: avg 60/sec burst 20
  57. REJECT tcp -- anywhere anywhere tcp dpt:http flags:FIN,SYN,RST,ACK/SYN #conn src/32 > 60 reject-with tcp-reset
  58. ACCEPT tcp -- anywhere anywhere tcp flags:RST/RST limit: avg 2/sec burst 2
  59. ACCEPT tcp -- anywhere anywhere tcp dpt:http state NEW limit: avg 5/sec burst 5
  60.  
  61. Chain FORWARD (policy ACCEPT)
  62. target prot opt source destination
  63. DROP all -- anywhere anywhere state INVALID
  64. DROP all -- anywhere anywhere recent: CHECK seconds: 86400 name: portscan side: source mask: 255.255.255.255
  65.  
  66. Chain OUTPUT (policy ACCEPT)
  67. target prot opt source destination
  68. DROP all -- anywhere anywhere state INVALID
  69.  
  70. Chain BotManager (1 references)
  71. target prot opt source destination
  72. ACCEPT tcp -- anywhere anywhere tcp dpt:25577 flags:FIN,SYN,RST,ACK/SYN limit: avg 15/sec burst 5
  73. DROP tcp -- anywhere anywhere tcp dpt:25577 flags:FIN,SYN,RST,ACK/SYN
  74.  
  75. Chain SCANS (0 references)
  76. target prot opt source destination
  77. DROP tcp -- anywhere anywhere tcp flags:FIN,PSH,URG/FIN,PSH,URG
  78. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
  79. DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
  80. DROP tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
  81.  
  82. Chain f2b-sshd (0 references)
  83. target prot opt source destination
  84.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!