Guest User

Untitled

a guest
Jun 17th, 2021
31
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # Generated by iptables-save v1.8.4 on Thu Jun 17 12:59:08 2021
  2. *mangle
  3. :PREROUTING ACCEPT [435279:197570368]
  4. :INPUT ACCEPT [435279:197570368]
  5. :FORWARD ACCEPT [14312:4554912]
  6. :OUTPUT ACCEPT [423094:67140597]
  7. :POSTROUTING ACCEPT [423094:67140597]
  8. -A POSTROUTING -o lxcbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
  9. COMMIT
  10. # Completed on Thu Jun 17 12:59:08 2021
  11. # Generated by iptables-save v1.8.4 on Thu Jun 17 12:59:08 2021
  12. *nat
  13. :PREROUTING ACCEPT [9943:1082166]
  14. :INPUT ACCEPT [6932:378962]
  15. :OUTPUT ACCEPT [7873:482907]
  16. :POSTROUTING ACCEPT [7873:482907]
  17. :DOCKER - [0:0]
  18. -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
  19. -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
  20. -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
  21. -A POSTROUTING -s 172.18.0.0/16 ! -o br-3d38898402ad -j MASQUERADE
  22. -A POSTROUTING -s 10.0.3.0/24 ! -d 10.0.3.0/24 -j MASQUERADE
  23. -A DOCKER -i docker0 -j RETURN
  24. -A DOCKER -i br-3d38898402ad -j RETURN
  25. COMMIT
  26. # Completed on Thu Jun 17 12:59:08 2021
  27. # Generated by iptables-save v1.8.4 on Thu Jun 17 12:59:08 2021
  28. *filter
  29. :INPUT DROP [782:44523]
  30. :FORWARD DROP [14312:4554912]
  31. :OUTPUT ACCEPT [42:1812]
  32. :DOCKER - [0:0]
  33. :DOCKER-ISOLATION-STAGE-1 - [0:0]
  34. :DOCKER-ISOLATION-STAGE-2 - [0:0]
  35. :DOCKER-USER - [0:0]
  36. :ufw-after-forward - [0:0]
  37. :ufw-after-input - [0:0]
  38. :ufw-after-logging-forward - [0:0]
  39. :ufw-after-logging-input - [0:0]
  40. :ufw-after-logging-output - [0:0]
  41. :ufw-after-output - [0:0]
  42. :ufw-before-forward - [0:0]
  43. :ufw-before-input - [0:0]
  44. :ufw-before-logging-forward - [0:0]
  45. :ufw-before-logging-input - [0:0]
  46. :ufw-before-logging-output - [0:0]
  47. :ufw-before-output - [0:0]
  48. :ufw-logging-allow - [0:0]
  49. :ufw-logging-deny - [0:0]
  50. :ufw-not-local - [0:0]
  51. :ufw-reject-forward - [0:0]
  52. :ufw-reject-input - [0:0]
  53. :ufw-reject-output - [0:0]
  54. :ufw-skip-to-policy-forward - [0:0]
  55. :ufw-skip-to-policy-input - [0:0]
  56. :ufw-skip-to-policy-output - [0:0]
  57. :ufw-track-forward - [0:0]
  58. :ufw-track-input - [0:0]
  59. :ufw-track-output - [0:0]
  60. :ufw-user-forward - [0:0]
  61. :ufw-user-input - [0:0]
  62. :ufw-user-limit - [0:0]
  63. :ufw-user-limit-accept - [0:0]
  64. :ufw-user-logging-forward - [0:0]
  65. :ufw-user-logging-input - [0:0]
  66. :ufw-user-logging-output - [0:0]
  67. :ufw-user-output - [0:0]
  68. -A INPUT -i lxcbr0 -p tcp -m tcp --dport 53 -j ACCEPT
  69. -A INPUT -i lxcbr0 -p udp -m udp --dport 53 -j ACCEPT
  70. -A INPUT -i lxcbr0 -p tcp -m tcp --dport 67 -j ACCEPT
  71. -A INPUT -i lxcbr0 -p udp -m udp --dport 67 -j ACCEPT
  72. -A INPUT -j ufw-before-logging-input
  73. -A INPUT -j ufw-before-input
  74. -A INPUT -j ufw-after-input
  75. -A INPUT -j ufw-after-logging-input
  76. -A INPUT -j ufw-reject-input
  77. -A INPUT -j ufw-track-input
  78. -A FORWARD -j DOCKER-USER
  79. -A FORWARD -j DOCKER-ISOLATION-STAGE-1
  80. -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  81. -A FORWARD -o docker0 -j DOCKER
  82. -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
  83. -A FORWARD -i docker0 -o docker0 -j ACCEPT
  84. -A FORWARD -o br-3d38898402ad -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  85. -A FORWARD -o br-3d38898402ad -j DOCKER
  86. -A FORWARD -i br-3d38898402ad ! -o br-3d38898402ad -j ACCEPT
  87. -A FORWARD -i br-3d38898402ad -o br-3d38898402ad -j ACCEPT
  88. -A FORWARD -o lxcbr0 -j ACCEPT
  89. -A FORWARD -i lxcbr0 -j ACCEPT
  90. -A FORWARD -j ufw-before-logging-forward
  91. -A FORWARD -j ufw-before-forward
  92. -A FORWARD -j ufw-after-forward
  93. -A FORWARD -j ufw-after-logging-forward
  94. -A FORWARD -j ufw-reject-forward
  95. -A FORWARD -j ufw-track-forward
  96. -A OUTPUT -j ufw-before-logging-output
  97. -A OUTPUT -j ufw-before-output
  98. -A OUTPUT -j ufw-after-output
  99. -A OUTPUT -j ufw-after-logging-output
  100. -A OUTPUT -j ufw-reject-output
  101. -A OUTPUT -j ufw-track-output
  102. -A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
  103. -A DOCKER-ISOLATION-STAGE-1 -i br-3d38898402ad ! -o br-3d38898402ad -j DOCKER-ISOLATION-STAGE-2
  104. -A DOCKER-ISOLATION-STAGE-1 -j RETURN
  105. -A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
  106. -A DOCKER-ISOLATION-STAGE-2 -o br-3d38898402ad -j DROP
  107. -A DOCKER-ISOLATION-STAGE-2 -j RETURN
  108. -A DOCKER-USER -j RETURN
  109. -A ufw-after-input -p udp -m udp --dport 137 -j ufw-skip-to-policy-input
  110. -A ufw-after-input -p udp -m udp --dport 138 -j ufw-skip-to-policy-input
  111. -A ufw-after-input -p tcp -m tcp --dport 139 -j ufw-skip-to-policy-input
  112. -A ufw-after-input -p tcp -m tcp --dport 445 -j ufw-skip-to-policy-input
  113. -A ufw-after-input -p udp -m udp --dport 67 -j ufw-skip-to-policy-input
  114. -A ufw-after-input -p udp -m udp --dport 68 -j ufw-skip-to-policy-input
  115. -A ufw-after-input -m addrtype --dst-type BROADCAST -j ufw-skip-to-policy-input
  116. -A ufw-after-logging-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  117. -A ufw-after-logging-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  118. -A ufw-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  119. -A ufw-before-forward -p icmp -m icmp --icmp-type 3 -j ACCEPT
  120. -A ufw-before-forward -p icmp -m icmp --icmp-type 11 -j ACCEPT
  121. -A ufw-before-forward -p icmp -m icmp --icmp-type 12 -j ACCEPT
  122. -A ufw-before-forward -p icmp -m icmp --icmp-type 8 -j ACCEPT
  123. -A ufw-before-forward -j ufw-user-forward
  124. -A ufw-before-input -i lo -j ACCEPT
  125. -A ufw-before-input -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  126. -A ufw-before-input -m conntrack --ctstate INVALID -j ufw-logging-deny
  127. -A ufw-before-input -m conntrack --ctstate INVALID -j DROP
  128. -A ufw-before-input -p icmp -m icmp --icmp-type 3 -j ACCEPT
  129. -A ufw-before-input -p icmp -m icmp --icmp-type 11 -j ACCEPT
  130. -A ufw-before-input -p icmp -m icmp --icmp-type 12 -j ACCEPT
  131. -A ufw-before-input -p icmp -m icmp --icmp-type 8 -j ACCEPT
  132. -A ufw-before-input -p udp -m udp --sport 67 --dport 68 -j ACCEPT
  133. -A ufw-before-input -j ufw-not-local
  134. -A ufw-before-input -d 224.0.0.251/32 -p udp -m udp --dport 5353 -j ACCEPT
  135. -A ufw-before-input -d 239.255.255.250/32 -p udp -m udp --dport 1900 -j ACCEPT
  136. -A ufw-before-input -j ufw-user-input
  137. -A ufw-before-output -o lo -j ACCEPT
  138. -A ufw-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  139. -A ufw-before-output -j ufw-user-output
  140. -A ufw-logging-allow -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] "
  141. -A ufw-logging-deny -m conntrack --ctstate INVALID -m limit --limit 3/min --limit-burst 10 -j RETURN
  142. -A ufw-logging-deny -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  143. -A ufw-not-local -m addrtype --dst-type LOCAL -j RETURN
  144. -A ufw-not-local -m addrtype --dst-type MULTICAST -j RETURN
  145. -A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN
  146. -A ufw-not-local -m limit --limit 3/min --limit-burst 10 -j ufw-logging-deny
  147. -A ufw-not-local -j DROP
  148. -A ufw-skip-to-policy-forward -j DROP
  149. -A ufw-skip-to-policy-input -j DROP
  150. -A ufw-skip-to-policy-output -j ACCEPT
  151. -A ufw-track-output -p tcp -m conntrack --ctstate NEW -j ACCEPT
  152. -A ufw-track-output -p udp -m conntrack --ctstate NEW -j ACCEPT
  153. -A ufw-user-input -s 132.232.2.100/32 -j REJECT --reject-with icmp-port-unreachable
  154. -A ufw-user-input -p tcp -m tcp --dport 80 -j ACCEPT
  155. -A ufw-user-input -p tcp -m tcp --dport 443 -j ACCEPT
  156. -A ufw-user-input -p tcp -m tcp --dport 2001 -j ACCEPT
  157. -A ufw-user-input -p udp -m udp --dport 2001 -j ACCEPT
  158. -A ufw-user-input -p tcp -m tcp --dport 22 -j ACCEPT
  159. -A ufw-user-input -p udp -m udp --dport 22 -j ACCEPT
  160. -A ufw-user-input -p tcp -m tcp --dport 7777 -j ACCEPT
  161. -A ufw-user-input -p udp -m udp --dport 7777 -j ACCEPT
  162. -A ufw-user-input -p tcp -m tcp --dport 2007 -j ACCEPT
  163. -A ufw-user-input -p udp -m udp --dport 2007 -j ACCEPT
  164. -A ufw-user-input -p tcp -m tcp --dport 1338 -j ACCEPT
  165. -A ufw-user-input -p udp -m udp --dport 1338 -j ACCEPT
  166. -A ufw-user-input -p tcp -m tcp --dport 2004 -j ACCEPT
  167. -A ufw-user-input -p udp -m udp --dport 2004 -j ACCEPT
  168. -A ufw-user-input -p tcp -m tcp --dport 2010 -j ACCEPT
  169. -A ufw-user-input -p udp -m udp --dport 2010 -j ACCEPT
  170. -A ufw-user-input -p tcp -m tcp --dport 2011 -j ACCEPT
  171. -A ufw-user-input -p udp -m udp --dport 2011 -j ACCEPT
  172. -A ufw-user-input -p tcp -m tcp --dport 2008 -j ACCEPT
  173. -A ufw-user-input -p udp -m udp --dport 2008 -j ACCEPT
  174. -A ufw-user-input -p tcp -m tcp --dport 2002 -j ACCEPT
  175. -A ufw-user-input -p udp -m udp --dport 2002 -j ACCEPT
  176. -A ufw-user-input -p tcp -m tcp --dport 2020 -j ACCEPT
  177. -A ufw-user-input -p udp -m udp --dport 2020 -j ACCEPT
  178. -A ufw-user-input -p tcp -m tcp --dport 2003 -j ACCEPT
  179. -A ufw-user-input -p udp -m udp --dport 2003 -j ACCEPT
  180. -A ufw-user-input -p tcp -m tcp --dport 2030 -j ACCEPT
  181. -A ufw-user-input -p udp -m udp --dport 2030 -j ACCEPT
  182. -A ufw-user-input -p tcp -m tcp --dport 25565 -j ACCEPT
  183. -A ufw-user-input -p udp -m udp --dport 25565 -j ACCEPT
  184. -A ufw-user-input -p tcp -m tcp --dport 25575 -j ACCEPT
  185. -A ufw-user-input -p udp -m udp --dport 25575 -j ACCEPT
  186. -A ufw-user-input -p tcp -m tcp --dport 2009 -j ACCEPT
  187. -A ufw-user-input -p udp -m udp --dport 2009 -j ACCEPT
  188. -A ufw-user-input -p tcp -m tcp --dport 2012 -j ACCEPT
  189. -A ufw-user-input -p udp -m udp --dport 2012 -j ACCEPT
  190. -A ufw-user-input -p tcp -m tcp --dport 2014 -j ACCEPT
  191. -A ufw-user-input -p udp -m udp --dport 2014 -j ACCEPT
  192. -A ufw-user-input -p tcp -m tcp --dport 2040 -j ACCEPT
  193. -A ufw-user-input -p udp -m udp --dport 2040 -j ACCEPT
  194. -A ufw-user-input -p tcp -m tcp --dport 2052 -j ACCEPT
  195. -A ufw-user-input -p udp -m udp --dport 2052 -j ACCEPT
  196. -A ufw-user-input -p tcp -m tcp --dport 2100 -j ACCEPT
  197. -A ufw-user-input -p udp -m udp --dport 2100 -j ACCEPT
  198. -A ufw-user-input -p tcp -m tcp --dport 2101 -j ACCEPT
  199. -A ufw-user-input -p udp -m udp --dport 2101 -j ACCEPT
  200. -A ufw-user-input -p tcp -m tcp --dport 2102 -j ACCEPT
  201. -A ufw-user-input -p udp -m udp --dport 2102 -j ACCEPT
  202. -A ufw-user-input -p tcp -m tcp --dport 2013 -j ACCEPT
  203. -A ufw-user-input -p udp -m udp --dport 2013 -j ACCEPT
  204. -A ufw-user-input -p tcp -m tcp --dport 27015 -j ACCEPT
  205. -A ufw-user-input -p udp -m udp --dport 27015 -j ACCEPT
  206. -A ufw-user-input -p tcp -m tcp --dport 27005 -j ACCEPT
  207. -A ufw-user-input -p udp -m udp --dport 27005 -j ACCEPT
  208. -A ufw-user-input -p tcp -m tcp --dport 26900 -j ACCEPT
  209. -A ufw-user-input -p udp -m udp --dport 26900 -j ACCEPT
  210. -A ufw-user-input -p tcp -m tcp --dport 2015 -j ACCEPT
  211. -A ufw-user-input -p udp -m udp --dport 2015 -j ACCEPT
  212. -A ufw-user-input -p tcp -m tcp --dport 8081 -j ACCEPT
  213. -A ufw-user-input -p udp -m udp --dport 8081 -j ACCEPT
  214. -A ufw-user-input -p tcp -m tcp --dport 8080 -j ACCEPT
  215. -A ufw-user-input -p udp -m udp --dport 8080 -j ACCEPT
  216. -A ufw-user-input -p tcp -m tcp --dport 2016 -j ACCEPT
  217. -A ufw-user-input -p udp -m udp --dport 2016 -j ACCEPT
  218. -A ufw-user-input -p tcp -m tcp --dport 27020 -j ACCEPT
  219. -A ufw-user-input -p udp -m udp --dport 27020 -j ACCEPT
  220. -A ufw-user-input -p tcp -m tcp --dport 81 -j ACCEPT
  221. -A ufw-user-input -p udp -m udp --dport 81 -j ACCEPT
  222. -A ufw-user-input -p tcp -m tcp --dport 554 -j ACCEPT
  223. -A ufw-user-input -p udp -m udp --dport 554 -j ACCEPT
  224. -A ufw-user-input -p tcp -m tcp --dport 2025 -j ACCEPT
  225. -A ufw-user-input -p udp -m udp --dport 2025 -j ACCEPT
  226. -A ufw-user-input -p tcp -m tcp --dport 1337 -j ACCEPT
  227. -A ufw-user-input -p udp -m udp --dport 1337 -j ACCEPT
  228. -A ufw-user-input -p tcp -m tcp --dport 2053 -j ACCEPT
  229. -A ufw-user-input -p udp -m udp --dport 2053 -j ACCEPT
  230. -A ufw-user-input -p tcp -m tcp --dport 27016 -j ACCEPT
  231. -A ufw-user-input -p udp -m udp --dport 27016 -j ACCEPT
  232. -A ufw-user-input -p tcp -m tcp --dport 8766 -j ACCEPT
  233. -A ufw-user-input -p udp -m udp --dport 8766 -j ACCEPT
  234. -A ufw-user-input -p tcp -m tcp --dport 27021 -j ACCEPT
  235. -A ufw-user-input -p udp -m udp --dport 27021 -j ACCEPT
  236. -A ufw-user-input -p tcp -m tcp --dport 2041 -j ACCEPT
  237. -A ufw-user-input -p udp -m udp --dport 2041 -j ACCEPT
  238. -A ufw-user-input -p tcp -m tcp --dport 1300 -j ACCEPT
  239. -A ufw-user-input -p udp -m udp --dport 1300 -j ACCEPT
  240. -A ufw-user-input -p tcp -m tcp --dport 20715 -j ACCEPT
  241. -A ufw-user-input -p udp -m udp --dport 20715 -j ACCEPT
  242. -A ufw-user-input -p tcp -m tcp --dport 10000 -j ACCEPT
  243. -A ufw-user-input -p udp -m udp --dport 10000 -j ACCEPT
  244. -A ufw-user-input -p tcp -m tcp --dport 3000 -j ACCEPT
  245. -A ufw-user-input -p udp -m udp --dport 3000 -j ACCEPT
  246. -A ufw-user-input -p tcp -m tcp --dport 2021 -j ACCEPT
  247. -A ufw-user-input -p udp -m udp --dport 2021 -j ACCEPT
  248. -A ufw-user-input -p tcp -m tcp --dport 3310 -j ACCEPT
  249. -A ufw-user-input -p udp -m udp --dport 3310 -j ACCEPT
  250. -A ufw-user-input -p tcp -m tcp --dport 2050 -j ACCEPT
  251. -A ufw-user-input -p udp -m udp --dport 2050 -j ACCEPT
  252. -A ufw-user-input -s 216.244.66.248/32 -j DROP
  253. -A ufw-user-input -p tcp -m tcp --dport 19999 -j ACCEPT
  254. -A ufw-user-input -p udp -m udp --dport 19999 -j ACCEPT
  255. -A ufw-user-input -p tcp -m tcp --dport 3001 -j ACCEPT
  256. -A ufw-user-input -p udp -m udp --dport 3001 -j ACCEPT
  257. -A ufw-user-input -p tcp -m tcp --dport 8000 -j ACCEPT
  258. -A ufw-user-input -p udp -m udp --dport 8000 -j ACCEPT
  259. -A ufw-user-input -p tcp -m tcp --dport 8001 -j ACCEPT
  260. -A ufw-user-input -p udp -m udp --dport 8001 -j ACCEPT
  261. -A ufw-user-input -p tcp -m tcp --dport 2051 -j ACCEPT
  262. -A ufw-user-input -p udp -m udp --dport 2051 -j ACCEPT
  263. -A ufw-user-limit -m limit --limit 3/min -j LOG --log-prefix "[UFW LIMIT BLOCK] "
  264. -A ufw-user-limit -j REJECT --reject-with icmp-port-unreachable
  265. -A ufw-user-limit-accept -j ACCEPT
  266. COMMIT
  267. # Completed on Thu Jun 17 12:59:08 2021
  268.  
RAW Paste Data