API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jun 17th, 2021
65
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.04 KB | None | 0 0
raw download clone embed print report
  1. # Generated by iptables-save v1.8.4 on Thu Jun 17 12:59:08 2021
  2. *mangle
  3. :PREROUTING ACCEPT [435279:197570368]
  4. :INPUT ACCEPT [435279:197570368]
  5. :FORWARD ACCEPT [14312:4554912]
  6. :OUTPUT ACCEPT [423094:67140597]
  7. :POSTROUTING ACCEPT [423094:67140597]
  8. -A POSTROUTING -o lxcbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
  9. COMMIT
  10. # Completed on Thu Jun 17 12:59:08 2021
  11. # Generated by iptables-save v1.8.4 on Thu Jun 17 12:59:08 2021
  12. *nat
  13. :PREROUTING ACCEPT [9943:1082166]
  14. :INPUT ACCEPT [6932:378962]
  15. :OUTPUT ACCEPT [7873:482907]
  16. :POSTROUTING ACCEPT [7873:482907]
  17. :DOCKER - [0:0]
  18. -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
  19. -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
  20. -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
  21. -A POSTROUTING -s 172.18.0.0/16 ! -o br-3d38898402ad -j MASQUERADE
  22. -A POSTROUTING -s 10.0.3.0/24 ! -d 10.0.3.0/24 -j MASQUERADE
  23. -A DOCKER -i docker0 -j RETURN
  24. -A DOCKER -i br-3d38898402ad -j RETURN
  25. COMMIT
  26. # Completed on Thu Jun 17 12:59:08 2021
  27. # Generated by iptables-save v1.8.4 on Thu Jun 17 12:59:08 2021
  28. *filter
  29. :INPUT DROP [782:44523]
  30. :FORWARD DROP [14312:4554912]
  31. :OUTPUT ACCEPT [42:1812]
  32. :DOCKER - [0:0]
  33. :DOCKER-ISOLATION-STAGE-1 - [0:0]
  34. :DOCKER-ISOLATION-STAGE-2 - [0:0]
  35. :DOCKER-USER - [0:0]
  36. :ufw-after-forward - [0:0]
  37. :ufw-after-input - [0:0]
  38. :ufw-after-logging-forward - [0:0]
  39. :ufw-after-logging-input - [0:0]
  40. :ufw-after-logging-output - [0:0]
  41. :ufw-after-output - [0:0]
  42. :ufw-before-forward - [0:0]
  43. :ufw-before-input - [0:0]
  44. :ufw-before-logging-forward - [0:0]
  45. :ufw-before-logging-input - [0:0]
  46. :ufw-before-logging-output - [0:0]
  47. :ufw-before-output - [0:0]
  48. :ufw-logging-allow - [0:0]
  49. :ufw-logging-deny - [0:0]
  50. :ufw-not-local - [0:0]
  51. :ufw-reject-forward - [0:0]
  52. :ufw-reject-input - [0:0]
  53. :ufw-reject-output - [0:0]
  54. :ufw-skip-to-policy-forward - [0:0]
  55. :ufw-skip-to-policy-input - [0:0]
  56. :ufw-skip-to-policy-output - [0:0]
  57. :ufw-track-forward - [0:0]
  58. :ufw-track-input - [0:0]
  59. :ufw-track-output - [0:0]
  60. :ufw-user-forward - [0:0]
  61. :ufw-user-input - [0:0]
  62. :ufw-user-limit - [0:0]
  63. :ufw-user-limit-accept - [0:0]
  64. :ufw-user-logging-forward - [0:0]
  65. :ufw-user-logging-input - [0:0]
  66. :ufw-user-logging-output - [0:0]
  67. :ufw-user-output - [0:0]
  68. -A INPUT -i lxcbr0 -p tcp -m tcp --dport 53 -j ACCEPT
  69. -A INPUT -i lxcbr0 -p udp -m udp --dport 53 -j ACCEPT
  70. -A INPUT -i lxcbr0 -p tcp -m tcp --dport 67 -j ACCEPT
  71. -A INPUT -i lxcbr0 -p udp -m udp --dport 67 -j ACCEPT
  72. -A INPUT -j ufw-before-logging-input
  73. -A INPUT -j ufw-before-input
  74. -A INPUT -j ufw-after-input
  75. -A INPUT -j ufw-after-logging-input
  76. -A INPUT -j ufw-reject-input
  77. -A INPUT -j ufw-track-input
  78. -A FORWARD -j DOCKER-USER
  79. -A FORWARD -j DOCKER-ISOLATION-STAGE-1
  80. -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  81. -A FORWARD -o docker0 -j DOCKER
  82. -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
  83. -A FORWARD -i docker0 -o docker0 -j ACCEPT
  84. -A FORWARD -o br-3d38898402ad -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  85. -A FORWARD -o br-3d38898402ad -j DOCKER
  86. -A FORWARD -i br-3d38898402ad ! -o br-3d38898402ad -j ACCEPT
  87. -A FORWARD -i br-3d38898402ad -o br-3d38898402ad -j ACCEPT
  88. -A FORWARD -o lxcbr0 -j ACCEPT
  89. -A FORWARD -i lxcbr0 -j ACCEPT
  90. -A FORWARD -j ufw-before-logging-forward
  91. -A FORWARD -j ufw-before-forward
  92. -A FORWARD -j ufw-after-forward
  93. -A FORWARD -j ufw-after-logging-forward
  94. -A FORWARD -j ufw-reject-forward
  95. -A FORWARD -j ufw-track-forward
  96. -A OUTPUT -j ufw-before-logging-output
  97. -A OUTPUT -j ufw-before-output
  98. -A OUTPUT -j ufw-after-output
  99. -A OUTPUT -j ufw-after-logging-output
  100. -A OUTPUT -j ufw-reject-output
  101. -A OUTPUT -j ufw-track-output
  102. -A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
  103. -A DOCKER-ISOLATION-STAGE-1 -i br-3d38898402ad ! -o br-3d38898402ad -j DOCKER-ISOLATION-STAGE-2
  104. -A DOCKER-ISOLATION-STAGE-1 -j RETURN
  105. -A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
  106. -A DOCKER-ISOLATION-STAGE-2 -o br-3d38898402ad -j DROP
  107. -A DOCKER-ISOLATION-STAGE-2 -j RETURN
  108. -A DOCKER-USER -j RETURN
  109. -A ufw-after-input -p udp -m udp --dport 137 -j ufw-skip-to-policy-input
  110. -A ufw-after-input -p udp -m udp --dport 138 -j ufw-skip-to-policy-input
  111. -A ufw-after-input -p tcp -m tcp --dport 139 -j ufw-skip-to-policy-input
  112. -A ufw-after-input -p tcp -m tcp --dport 445 -j ufw-skip-to-policy-input
  113. -A ufw-after-input -p udp -m udp --dport 67 -j ufw-skip-to-policy-input
  114. -A ufw-after-input -p udp -m udp --dport 68 -j ufw-skip-to-policy-input
  115. -A ufw-after-input -m addrtype --dst-type BROADCAST -j ufw-skip-to-policy-input
  116. -A ufw-after-logging-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  117. -A ufw-after-logging-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  118. -A ufw-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  119. -A ufw-before-forward -p icmp -m icmp --icmp-type 3 -j ACCEPT
  120. -A ufw-before-forward -p icmp -m icmp --icmp-type 11 -j ACCEPT
  121. -A ufw-before-forward -p icmp -m icmp --icmp-type 12 -j ACCEPT
  122. -A ufw-before-forward -p icmp -m icmp --icmp-type 8 -j ACCEPT
  123. -A ufw-before-forward -j ufw-user-forward
  124. -A ufw-before-input -i lo -j ACCEPT
  125. -A ufw-before-input -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  126. -A ufw-before-input -m conntrack --ctstate INVALID -j ufw-logging-deny
  127. -A ufw-before-input -m conntrack --ctstate INVALID -j DROP
  128. -A ufw-before-input -p icmp -m icmp --icmp-type 3 -j ACCEPT
  129. -A ufw-before-input -p icmp -m icmp --icmp-type 11 -j ACCEPT
  130. -A ufw-before-input -p icmp -m icmp --icmp-type 12 -j ACCEPT
  131. -A ufw-before-input -p icmp -m icmp --icmp-type 8 -j ACCEPT
  132. -A ufw-before-input -p udp -m udp --sport 67 --dport 68 -j ACCEPT
  133. -A ufw-before-input -j ufw-not-local
  134. -A ufw-before-input -d 224.0.0.251/32 -p udp -m udp --dport 5353 -j ACCEPT
  135. -A ufw-before-input -d 239.255.255.250/32 -p udp -m udp --dport 1900 -j ACCEPT
  136. -A ufw-before-input -j ufw-user-input
  137. -A ufw-before-output -o lo -j ACCEPT
  138. -A ufw-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  139. -A ufw-before-output -j ufw-user-output
  140. -A ufw-logging-allow -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] "
  141. -A ufw-logging-deny -m conntrack --ctstate INVALID -m limit --limit 3/min --limit-burst 10 -j RETURN
  142. -A ufw-logging-deny -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  143. -A ufw-not-local -m addrtype --dst-type LOCAL -j RETURN
  144. -A ufw-not-local -m addrtype --dst-type MULTICAST -j RETURN
  145. -A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN
  146. -A ufw-not-local -m limit --limit 3/min --limit-burst 10 -j ufw-logging-deny
  147. -A ufw-not-local -j DROP
  148. -A ufw-skip-to-policy-forward -j DROP
  149. -A ufw-skip-to-policy-input -j DROP
  150. -A ufw-skip-to-policy-output -j ACCEPT
  151. -A ufw-track-output -p tcp -m conntrack --ctstate NEW -j ACCEPT
  152. -A ufw-track-output -p udp -m conntrack --ctstate NEW -j ACCEPT
  153. -A ufw-user-input -s 132.232.2.100/32 -j REJECT --reject-with icmp-port-unreachable
  154. -A ufw-user-input -p tcp -m tcp --dport 80 -j ACCEPT
  155. -A ufw-user-input -p tcp -m tcp --dport 443 -j ACCEPT
  156. -A ufw-user-input -p tcp -m tcp --dport 2001 -j ACCEPT
  157. -A ufw-user-input -p udp -m udp --dport 2001 -j ACCEPT
  158. -A ufw-user-input -p tcp -m tcp --dport 22 -j ACCEPT
  159. -A ufw-user-input -p udp -m udp --dport 22 -j ACCEPT
  160. -A ufw-user-input -p tcp -m tcp --dport 7777 -j ACCEPT
  161. -A ufw-user-input -p udp -m udp --dport 7777 -j ACCEPT
  162. -A ufw-user-input -p tcp -m tcp --dport 2007 -j ACCEPT
  163. -A ufw-user-input -p udp -m udp --dport 2007 -j ACCEPT
  164. -A ufw-user-input -p tcp -m tcp --dport 1338 -j ACCEPT
  165. -A ufw-user-input -p udp -m udp --dport 1338 -j ACCEPT
  166. -A ufw-user-input -p tcp -m tcp --dport 2004 -j ACCEPT
  167. -A ufw-user-input -p udp -m udp --dport 2004 -j ACCEPT
  168. -A ufw-user-input -p tcp -m tcp --dport 2010 -j ACCEPT
  169. -A ufw-user-input -p udp -m udp --dport 2010 -j ACCEPT
  170. -A ufw-user-input -p tcp -m tcp --dport 2011 -j ACCEPT
  171. -A ufw-user-input -p udp -m udp --dport 2011 -j ACCEPT
  172. -A ufw-user-input -p tcp -m tcp --dport 2008 -j ACCEPT
  173. -A ufw-user-input -p udp -m udp --dport 2008 -j ACCEPT
  174. -A ufw-user-input -p tcp -m tcp --dport 2002 -j ACCEPT
  175. -A ufw-user-input -p udp -m udp --dport 2002 -j ACCEPT
  176. -A ufw-user-input -p tcp -m tcp --dport 2020 -j ACCEPT
  177. -A ufw-user-input -p udp -m udp --dport 2020 -j ACCEPT
  178. -A ufw-user-input -p tcp -m tcp --dport 2003 -j ACCEPT
  179. -A ufw-user-input -p udp -m udp --dport 2003 -j ACCEPT
  180. -A ufw-user-input -p tcp -m tcp --dport 2030 -j ACCEPT
  181. -A ufw-user-input -p udp -m udp --dport 2030 -j ACCEPT
  182. -A ufw-user-input -p tcp -m tcp --dport 25565 -j ACCEPT
  183. -A ufw-user-input -p udp -m udp --dport 25565 -j ACCEPT
  184. -A ufw-user-input -p tcp -m tcp --dport 25575 -j ACCEPT
  185. -A ufw-user-input -p udp -m udp --dport 25575 -j ACCEPT
  186. -A ufw-user-input -p tcp -m tcp --dport 2009 -j ACCEPT
  187. -A ufw-user-input -p udp -m udp --dport 2009 -j ACCEPT
  188. -A ufw-user-input -p tcp -m tcp --dport 2012 -j ACCEPT
  189. -A ufw-user-input -p udp -m udp --dport 2012 -j ACCEPT
  190. -A ufw-user-input -p tcp -m tcp --dport 2014 -j ACCEPT
  191. -A ufw-user-input -p udp -m udp --dport 2014 -j ACCEPT
  192. -A ufw-user-input -p tcp -m tcp --dport 2040 -j ACCEPT
  193. -A ufw-user-input -p udp -m udp --dport 2040 -j ACCEPT
  194. -A ufw-user-input -p tcp -m tcp --dport 2052 -j ACCEPT
  195. -A ufw-user-input -p udp -m udp --dport 2052 -j ACCEPT
  196. -A ufw-user-input -p tcp -m tcp --dport 2100 -j ACCEPT
  197. -A ufw-user-input -p udp -m udp --dport 2100 -j ACCEPT
  198. -A ufw-user-input -p tcp -m tcp --dport 2101 -j ACCEPT
  199. -A ufw-user-input -p udp -m udp --dport 2101 -j ACCEPT
  200. -A ufw-user-input -p tcp -m tcp --dport 2102 -j ACCEPT
  201. -A ufw-user-input -p udp -m udp --dport 2102 -j ACCEPT
  202. -A ufw-user-input -p tcp -m tcp --dport 2013 -j ACCEPT
  203. -A ufw-user-input -p udp -m udp --dport 2013 -j ACCEPT
  204. -A ufw-user-input -p tcp -m tcp --dport 27015 -j ACCEPT
  205. -A ufw-user-input -p udp -m udp --dport 27015 -j ACCEPT
  206. -A ufw-user-input -p tcp -m tcp --dport 27005 -j ACCEPT
  207. -A ufw-user-input -p udp -m udp --dport 27005 -j ACCEPT
  208. -A ufw-user-input -p tcp -m tcp --dport 26900 -j ACCEPT
  209. -A ufw-user-input -p udp -m udp --dport 26900 -j ACCEPT
  210. -A ufw-user-input -p tcp -m tcp --dport 2015 -j ACCEPT
  211. -A ufw-user-input -p udp -m udp --dport 2015 -j ACCEPT
  212. -A ufw-user-input -p tcp -m tcp --dport 8081 -j ACCEPT
  213. -A ufw-user-input -p udp -m udp --dport 8081 -j ACCEPT
  214. -A ufw-user-input -p tcp -m tcp --dport 8080 -j ACCEPT
  215. -A ufw-user-input -p udp -m udp --dport 8080 -j ACCEPT
  216. -A ufw-user-input -p tcp -m tcp --dport 2016 -j ACCEPT
  217. -A ufw-user-input -p udp -m udp --dport 2016 -j ACCEPT
  218. -A ufw-user-input -p tcp -m tcp --dport 27020 -j ACCEPT
  219. -A ufw-user-input -p udp -m udp --dport 27020 -j ACCEPT
  220. -A ufw-user-input -p tcp -m tcp --dport 81 -j ACCEPT
  221. -A ufw-user-input -p udp -m udp --dport 81 -j ACCEPT
  222. -A ufw-user-input -p tcp -m tcp --dport 554 -j ACCEPT
  223. -A ufw-user-input -p udp -m udp --dport 554 -j ACCEPT
  224. -A ufw-user-input -p tcp -m tcp --dport 2025 -j ACCEPT
  225. -A ufw-user-input -p udp -m udp --dport 2025 -j ACCEPT
  226. -A ufw-user-input -p tcp -m tcp --dport 1337 -j ACCEPT
  227. -A ufw-user-input -p udp -m udp --dport 1337 -j ACCEPT
  228. -A ufw-user-input -p tcp -m tcp --dport 2053 -j ACCEPT
  229. -A ufw-user-input -p udp -m udp --dport 2053 -j ACCEPT
  230. -A ufw-user-input -p tcp -m tcp --dport 27016 -j ACCEPT
  231. -A ufw-user-input -p udp -m udp --dport 27016 -j ACCEPT
  232. -A ufw-user-input -p tcp -m tcp --dport 8766 -j ACCEPT
  233. -A ufw-user-input -p udp -m udp --dport 8766 -j ACCEPT
  234. -A ufw-user-input -p tcp -m tcp --dport 27021 -j ACCEPT
  235. -A ufw-user-input -p udp -m udp --dport 27021 -j ACCEPT
  236. -A ufw-user-input -p tcp -m tcp --dport 2041 -j ACCEPT
  237. -A ufw-user-input -p udp -m udp --dport 2041 -j ACCEPT
  238. -A ufw-user-input -p tcp -m tcp --dport 1300 -j ACCEPT
  239. -A ufw-user-input -p udp -m udp --dport 1300 -j ACCEPT
  240. -A ufw-user-input -p tcp -m tcp --dport 20715 -j ACCEPT
  241. -A ufw-user-input -p udp -m udp --dport 20715 -j ACCEPT
  242. -A ufw-user-input -p tcp -m tcp --dport 10000 -j ACCEPT
  243. -A ufw-user-input -p udp -m udp --dport 10000 -j ACCEPT
  244. -A ufw-user-input -p tcp -m tcp --dport 3000 -j ACCEPT
  245. -A ufw-user-input -p udp -m udp --dport 3000 -j ACCEPT
  246. -A ufw-user-input -p tcp -m tcp --dport 2021 -j ACCEPT
  247. -A ufw-user-input -p udp -m udp --dport 2021 -j ACCEPT
  248. -A ufw-user-input -p tcp -m tcp --dport 3310 -j ACCEPT
  249. -A ufw-user-input -p udp -m udp --dport 3310 -j ACCEPT
  250. -A ufw-user-input -p tcp -m tcp --dport 2050 -j ACCEPT
  251. -A ufw-user-input -p udp -m udp --dport 2050 -j ACCEPT
  252. -A ufw-user-input -s 216.244.66.248/32 -j DROP
  253. -A ufw-user-input -p tcp -m tcp --dport 19999 -j ACCEPT
  254. -A ufw-user-input -p udp -m udp --dport 19999 -j ACCEPT
  255. -A ufw-user-input -p tcp -m tcp --dport 3001 -j ACCEPT
  256. -A ufw-user-input -p udp -m udp --dport 3001 -j ACCEPT
  257. -A ufw-user-input -p tcp -m tcp --dport 8000 -j ACCEPT
  258. -A ufw-user-input -p udp -m udp --dport 8000 -j ACCEPT
  259. -A ufw-user-input -p tcp -m tcp --dport 8001 -j ACCEPT
  260. -A ufw-user-input -p udp -m udp --dport 8001 -j ACCEPT
  261. -A ufw-user-input -p tcp -m tcp --dport 2051 -j ACCEPT
  262. -A ufw-user-input -p udp -m udp --dport 2051 -j ACCEPT
  263. -A ufw-user-limit -m limit --limit 3/min -j LOG --log-prefix "[UFW LIMIT BLOCK] "
  264. -A ufw-user-limit -j REJECT --reject-with icmp-port-unreachable
  265. -A ufw-user-limit-accept -j ACCEPT
  266. COMMIT
  267. # Completed on Thu Jun 17 12:59:08 2021
  268.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!