Advertisement
Guest User

Untitled

a guest
Dec 9th, 2019
119
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.73 KB | None | 0 0
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:8192
  4. ufw-before-logging-input all -- anywhere anywhere
  5. ufw-before-input all -- anywhere anywhere
  6. ufw-after-input all -- anywhere anywhere
  7. ufw-after-logging-input all -- anywhere anywhere
  8. ufw-reject-input all -- anywhere anywhere
  9. ufw-track-input all -- anywhere anywhere
  10.  
  11. Chain FORWARD (policy DROP)
  12. target prot opt source destination
  13. DOCKER-USER all -- anywhere anywhere
  14. DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere
  15. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  16. DOCKER all -- anywhere anywhere
  17. ACCEPT all -- anywhere anywhere
  18. ACCEPT all -- anywhere anywhere
  19. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  20. DOCKER all -- anywhere anywhere
  21. ACCEPT all -- anywhere anywhere
  22. ACCEPT all -- anywhere anywhere
  23. ufw-before-logging-forward all -- anywhere anywhere
  24. ufw-before-forward all -- anywhere anywhere
  25. ufw-after-forward all -- anywhere anywhere
  26. ufw-after-logging-forward all -- anywhere anywhere
  27. ufw-reject-forward all -- anywhere anywhere
  28. ufw-track-forward all -- anywhere anywhere
  29.  
  30. Chain OUTPUT (policy ACCEPT)
  31. target prot opt source destination
  32. ufw-before-logging-output all -- anywhere anywhere
  33. ufw-before-output all -- anywhere anywhere
  34. ufw-after-output all -- anywhere anywhere
  35. ufw-after-logging-output all -- anywhere anywhere
  36. ufw-reject-output all -- anywhere anywhere
  37. ufw-track-output all -- anywhere anywhere
  38.  
  39. Chain DOCKER (2 references)
  40. target prot opt source destination
  41. ACCEPT tcp -- anywhere 172.18.0.2 tcp dpt:25565
  42. ACCEPT udp -- anywhere 172.18.0.2 udp dpt:25565
  43.  
  44. Chain DOCKER-ISOLATION-STAGE-1 (1 references)
  45. target prot opt source destination
  46. DOCKER-ISOLATION-STAGE-2 all -- anywhere anywhere
  47. DOCKER-ISOLATION-STAGE-2 all -- anywhere anywhere
  48. RETURN all -- anywhere anywhere
  49.  
  50. Chain DOCKER-ISOLATION-STAGE-2 (2 references)
  51. target prot opt source destination
  52. DROP all -- anywhere anywhere
  53. DROP all -- anywhere anywhere
  54. RETURN all -- anywhere anywhere
  55.  
  56. Chain DOCKER-USER (1 references)
  57. target prot opt source destination
  58. RETURN all -- anywhere anywhere
  59.  
  60. Chain ufw-after-forward (1 references)
  61. target prot opt source destination
  62.  
  63. Chain ufw-after-input (1 references)
  64. target prot opt source destination
  65. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  66. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  67. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  68. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  69. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  70. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  71. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  72.  
  73. Chain ufw-after-logging-forward (1 references)
  74. target prot opt source destination
  75. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  76.  
  77. Chain ufw-after-logging-input (1 references)
  78. target prot opt source destination
  79. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  80.  
  81. Chain ufw-after-logging-output (1 references)
  82. target prot opt source destination
  83.  
  84. Chain ufw-after-output (1 references)
  85. target prot opt source destination
  86.  
  87. Chain ufw-before-forward (1 references)
  88. target prot opt source destination
  89. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  90. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  91. ACCEPT icmp -- anywhere anywhere icmp source-quench
  92. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  93. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  94. ACCEPT icmp -- anywhere anywhere icmp echo-request
  95. ufw-user-forward all -- anywhere anywhere
  96.  
  97. Chain ufw-before-input (1 references)
  98. target prot opt source destination
  99. ACCEPT all -- anywhere anywhere
  100. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  101. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  102. DROP all -- anywhere anywhere ctstate INVALID
  103. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  104. ACCEPT icmp -- anywhere anywhere icmp source-quench
  105. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  106. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  107. ACCEPT icmp -- anywhere anywhere icmp echo-request
  108. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  109. ufw-not-local all -- anywhere anywhere
  110. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  111. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  112. ufw-user-input all -- anywhere anywhere
  113.  
  114. Chain ufw-before-logging-forward (1 references)
  115. target prot opt source destination
  116.  
  117. Chain ufw-before-logging-input (1 references)
  118. target prot opt source destination
  119.  
  120. Chain ufw-before-logging-output (1 references)
  121. target prot opt source destination
  122.  
  123. Chain ufw-before-output (1 references)
  124. target prot opt source destination
  125. ACCEPT all -- anywhere anywhere
  126. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  127. ufw-user-output all -- anywhere anywhere
  128.  
  129. Chain ufw-logging-allow (0 references)
  130. target prot opt source destination
  131. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  132.  
  133. Chain ufw-logging-deny (2 references)
  134. target prot opt source destination
  135. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  136. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  137.  
  138. Chain ufw-not-local (1 references)
  139. target prot opt source destination
  140. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  141. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  142. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  143. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  144. DROP all -- anywhere anywhere
  145.  
  146. Chain ufw-reject-forward (1 references)
  147. target prot opt source destination
  148.  
  149. Chain ufw-reject-input (1 references)
  150. target prot opt source destination
  151.  
  152. Chain ufw-reject-output (1 references)
  153. target prot opt source destination
  154.  
  155. Chain ufw-skip-to-policy-forward (0 references)
  156. target prot opt source destination
  157. DROP all -- anywhere anywhere
  158.  
  159. Chain ufw-skip-to-policy-input (7 references)
  160. target prot opt source destination
  161. DROP all -- anywhere anywhere
  162.  
  163. Chain ufw-skip-to-policy-output (0 references)
  164. target prot opt source destination
  165. ACCEPT all -- anywhere anywhere
  166.  
  167. Chain ufw-track-forward (1 references)
  168. target prot opt source destination
  169.  
  170. Chain ufw-track-input (1 references)
  171. target prot opt source destination
  172.  
  173. Chain ufw-track-output (1 references)
  174. target prot opt source destination
  175. ACCEPT tcp -- anywhere anywhere ctstate NEW
  176. ACCEPT udp -- anywhere anywhere ctstate NEW
  177.  
  178. Chain ufw-user-forward (1 references)
  179. target prot opt source destination
  180.  
  181. Chain ufw-user-input (1 references)
  182. target prot opt source destination
  183. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  184. ACCEPT udp -- anywhere anywhere udp dpt:ssh
  185. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  186. ACCEPT tcp -- anywhere anywhere tcp dpt:ftp
  187. ACCEPT tcp -- anywhere anywhere tcp dpt:8192
  188. ACCEPT tcp -- anywhere anywhere tcp dpt:ms-sql-s
  189. ACCEPT udp -- anywhere anywhere udp dpt:ms-sql-s
  190. ACCEPT tcp -- anywhere anywhere tcp dpt:mysql
  191. ACCEPT udp -- anywhere anywhere udp dpt:mysql
  192.  
  193. Chain ufw-user-limit (0 references)
  194. target prot opt source destination
  195. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  196. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  197.  
  198. Chain ufw-user-limit-accept (0 references)
  199. target prot opt source destination
  200. ACCEPT all -- anywhere anywhere
  201.  
  202. Chain ufw-user-logging-forward (0 references)
  203. target prot opt source destination
  204.  
  205. Chain ufw-user-logging-input (0 references)
  206. target prot opt source destination
  207.  
  208. Chain ufw-user-logging-output (0 references)
  209. target prot opt source destination
  210.  
  211. Chain ufw-user-output (1 references)
  212. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement