API tools faq
paste
Advertisement
NWJeff

Untitled

NWJeff
Jul 24th, 2019
95
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.49 KB | None | 0 0
raw download clone embed print report
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. ACCEPT udp -- anywhere anywhere udp dpt:openvpn
  4. f2b-sshd tcp -- anywhere anywhere multiport dports ssh
  5. ufw-before-logging-input all -- anywhere anywhere
  6. ufw-before-input all -- anywhere anywhere
  7. ufw-after-input all -- anywhere anywhere
  8. ufw-after-logging-input all -- anywhere anywhere
  9. ufw-reject-input all -- anywhere anywhere
  10. ufw-track-input all -- anywhere anywhere
  11.  
  12. Chain FORWARD (policy ACCEPT)
  13. target prot opt source destination
  14. ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
  15. ACCEPT all -- 10.8.0.0/24 anywhere
  16. ufw-before-logging-forward all -- anywhere anywhere
  17. ufw-before-forward all -- anywhere anywhere
  18. ufw-after-forward all -- anywhere anywhere
  19. ufw-after-logging-forward all -- anywhere anywhere
  20. ufw-reject-forward all -- anywhere anywhere
  21. ufw-track-forward all -- anywhere anywhere
  22.  
  23. Chain OUTPUT (policy ACCEPT)
  24. target prot opt source destination
  25. ufw-before-logging-output all -- anywhere anywhere
  26. ufw-before-output all -- anywhere anywhere
  27. ufw-after-output all -- anywhere anywhere
  28. ufw-after-logging-output all -- anywhere anywhere
  29. ufw-reject-output all -- anywhere anywhere
  30. ufw-track-output all -- anywhere anywhere
  31.  
  32. Chain f2b-sshd (1 references)
  33. target prot opt source destination
  34. RETURN all -- anywhere anywhere
  35.  
  36. Chain ufw-after-forward (1 references)
  37. target prot opt source destination
  38.  
  39. Chain ufw-after-input (1 references)
  40. target prot opt source destination
  41. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  42. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  43. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  44. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  45. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  46. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  47. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  48.  
  49. Chain ufw-after-logging-forward (1 references)
  50. target prot opt source destination
  51.  
  52. Chain ufw-after-logging-input (1 references)
  53. target prot opt source destination
  54. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  55.  
  56. Chain ufw-after-logging-output (1 references)
  57. target prot opt source destination
  58.  
  59. Chain ufw-after-output (1 references)
  60. target prot opt source destination
  61.  
  62. Chain ufw-before-forward (1 references)
  63. target prot opt source destination
  64. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  65. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  66. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  67. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  68. ACCEPT icmp -- anywhere anywhere icmp echo-request
  69. ufw-user-forward all -- anywhere anywhere
  70.  
  71. Chain ufw-before-input (1 references)
  72. target prot opt source destination
  73. ACCEPT all -- anywhere anywhere
  74. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  75. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  76. DROP all -- anywhere anywhere ctstate INVALID
  77. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  78. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  79. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  80. ACCEPT icmp -- anywhere anywhere icmp echo-request
  81. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  82. ufw-not-local all -- anywhere anywhere
  83. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  84. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  85. ufw-user-input all -- anywhere anywhere
  86.  
  87. Chain ufw-before-logging-forward (1 references)
  88. target prot opt source destination
  89.  
  90. Chain ufw-before-logging-input (1 references)
  91. target prot opt source destination
  92.  
  93. Chain ufw-before-logging-output (1 references)
  94. target prot opt source destination
  95.  
  96. Chain ufw-before-output (1 references)
  97. target prot opt source destination
  98. ACCEPT all -- anywhere anywhere
  99. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  100. ufw-user-output all -- anywhere anywhere
  101.  
  102. Chain ufw-logging-allow (0 references)
  103. target prot opt source destination
  104. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  105.  
  106. Chain ufw-logging-deny (2 references)
  107. target prot opt source destination
  108. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  109. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  110.  
  111. Chain ufw-not-local (1 references)
  112. target prot opt source destination
  113. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  114. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  115. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  116. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  117. DROP all -- anywhere anywhere
  118.  
  119. Chain ufw-reject-forward (1 references)
  120. target prot opt source destination
  121.  
  122. Chain ufw-reject-input (1 references)
  123. target prot opt source destination
  124.  
  125. Chain ufw-reject-output (1 references)
  126. target prot opt source destination
  127.  
  128. Chain ufw-skip-to-policy-forward (0 references)
  129. target prot opt source destination
  130. ACCEPT all -- anywhere anywhere
  131.  
  132. Chain ufw-skip-to-policy-input (7 references)
  133. target prot opt source destination
  134. DROP all -- anywhere anywhere
  135.  
  136. Chain ufw-skip-to-policy-output (0 references)
  137. target prot opt source destination
  138. ACCEPT all -- anywhere anywhere
  139.  
  140. Chain ufw-track-forward (1 references)
  141. target prot opt source destination
  142. ACCEPT tcp -- anywhere anywhere ctstate NEW
  143. ACCEPT udp -- anywhere anywhere ctstate NEW
  144.  
  145. Chain ufw-track-input (1 references)
  146. target prot opt source destination
  147.  
  148. Chain ufw-track-output (1 references)
  149. target prot opt source destination
  150. ACCEPT tcp -- anywhere anywhere ctstate NEW
  151. ACCEPT udp -- anywhere anywhere ctstate NEW
  152.  
  153. Chain ufw-user-forward (1 references)
  154. target prot opt source destination
  155.  
  156. Chain ufw-user-input (1 references)
  157. target prot opt source destination
  158. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  159. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  160. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  161. DROP tcp -- anywhere anywhere tcp dpt:mysql
  162. DROP udp -- anywhere anywhere udp dpt:mysql
  163. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh /* 'dapp_OpenSSH' */
  164. ACCEPT udp -- anywhere anywhere udp dpt:openvpn
  165. ACCEPT tcp -- anywhere anywhere tcp dpt:mysql
  166. ACCEPT all -- anywhere anywhere
  167.  
  168. Chain ufw-user-limit (0 references)
  169. target prot opt source destination
  170. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  171. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  172.  
  173. Chain ufw-user-limit-accept (0 references)
  174. target prot opt source destination
  175. ACCEPT all -- anywhere anywhere
  176.  
  177. Chain ufw-user-logging-forward (0 references)
  178. target prot opt source destination
  179.  
  180. Chain ufw-user-logging-input (0 references)
  181. target prot opt source destination
  182.  
  183. Chain ufw-user-logging-output (0 references)
  184. target prot opt source destination
  185.  
  186. Chain ufw-user-output (1 references)
  187. target prot opt source destination
  188. ACCEPT all -- anywhere anywhere
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!