Advertisement
Guest User

Untitled

a guest
Jul 27th, 2019
328
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.67 KB | None | 0 0
  1. Chain INPUT (policy ACCEPT)
  2. target prot opt source destination
  3. LIBVIRT_INP all -- anywhere anywhere
  4. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED,DNAT
  5. ACCEPT all -- anywhere anywhere
  6. INPUT_direct all -- anywhere anywhere
  7. INPUT_ZONES all -- anywhere anywhere
  8. DROP all -- anywhere anywhere ctstate INVALID
  9. REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
  10.  
  11. Chain FORWARD (policy ACCEPT)
  12. target prot opt source destination
  13. LIBVIRT_FWX all -- anywhere anywhere
  14. LIBVIRT_FWI all -- anywhere anywhere
  15. LIBVIRT_FWO all -- anywhere anywhere
  16. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED,DNAT
  17. ACCEPT all -- anywhere anywhere
  18. FORWARD_direct all -- anywhere anywhere
  19. FORWARD_IN_ZONES all -- anywhere anywhere
  20. FORWARD_OUT_ZONES all -- anywhere anywhere
  21. DROP all -- anywhere anywhere ctstate INVALID
  22. REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
  23.  
  24. Chain OUTPUT (policy ACCEPT)
  25. target prot opt source destination
  26. LIBVIRT_OUT all -- anywhere anywhere
  27. ACCEPT all -- anywhere anywhere
  28. OUTPUT_direct all -- anywhere anywhere
  29.  
  30. Chain FORWARD_IN_ZONES (1 references)
  31. target prot opt source destination
  32. FORWARD_IN_ZONES_IFACES all -- anywhere anywhere [goto]
  33.  
  34. Chain FORWARD_IN_ZONES_IFACES (1 references)
  35. target prot opt source destination
  36. FWDI_public all -- anywhere anywhere [goto]
  37. FWDI_libvirt all -- anywhere anywhere [goto]
  38. FWDI_public all -- anywhere anywhere [goto]
  39.  
  40. Chain FORWARD_OUT_ZONES (1 references)
  41. target prot opt source destination
  42. FORWARD_OUT_ZONES_IFACES all -- anywhere anywhere [goto]
  43.  
  44. Chain FORWARD_OUT_ZONES_IFACES (1 references)
  45. target prot opt source destination
  46. FWDO_public all -- anywhere anywhere [goto]
  47. FWDO_libvirt all -- anywhere anywhere [goto]
  48. FWDO_public all -- anywhere anywhere [goto]
  49.  
  50. Chain FORWARD_direct (1 references)
  51. target prot opt source destination
  52.  
  53. Chain FWDI_libvirt (1 references)
  54. target prot opt source destination
  55. FWDI_libvirt_pre all -- anywhere anywhere
  56. FWDI_libvirt_log all -- anywhere anywhere
  57. FWDI_libvirt_deny all -- anywhere anywhere
  58. FWDI_libvirt_allow all -- anywhere anywhere
  59. FWDI_libvirt_post all -- anywhere anywhere
  60. ACCEPT all -- anywhere anywhere
  61.  
  62. Chain FWDI_libvirt_allow (1 references)
  63. target prot opt source destination
  64.  
  65. Chain FWDI_libvirt_deny (1 references)
  66. target prot opt source destination
  67.  
  68. Chain FWDI_libvirt_log (1 references)
  69. target prot opt source destination
  70.  
  71. Chain FWDI_libvirt_post (1 references)
  72. target prot opt source destination
  73.  
  74. Chain FWDI_libvirt_pre (1 references)
  75. target prot opt source destination
  76.  
  77. Chain FWDI_public (2 references)
  78. target prot opt source destination
  79. FWDI_public_pre all -- anywhere anywhere
  80. FWDI_public_log all -- anywhere anywhere
  81. FWDI_public_deny all -- anywhere anywhere
  82. FWDI_public_allow all -- anywhere anywhere
  83. FWDI_public_post all -- anywhere anywhere
  84. ACCEPT icmp -- anywhere anywhere
  85.  
  86. Chain FWDI_public_allow (1 references)
  87. target prot opt source destination
  88.  
  89. Chain FWDI_public_deny (1 references)
  90. target prot opt source destination
  91.  
  92. Chain FWDI_public_log (1 references)
  93. target prot opt source destination
  94.  
  95. Chain FWDI_public_post (1 references)
  96. target prot opt source destination
  97.  
  98. Chain FWDI_public_pre (1 references)
  99. target prot opt source destination
  100.  
  101. Chain FWDO_libvirt (1 references)
  102. target prot opt source destination
  103. FWDO_libvirt_pre all -- anywhere anywhere
  104. FWDO_libvirt_log all -- anywhere anywhere
  105. FWDO_libvirt_deny all -- anywhere anywhere
  106. FWDO_libvirt_allow all -- anywhere anywhere
  107. FWDO_libvirt_post all -- anywhere anywhere
  108. ACCEPT all -- anywhere anywhere
  109.  
  110. Chain FWDO_libvirt_allow (1 references)
  111. target prot opt source destination
  112.  
  113. Chain FWDO_libvirt_deny (1 references)
  114. target prot opt source destination
  115.  
  116. Chain FWDO_libvirt_log (1 references)
  117. target prot opt source destination
  118.  
  119. Chain FWDO_libvirt_post (1 references)
  120. target prot opt source destination
  121.  
  122. Chain FWDO_libvirt_pre (1 references)
  123. target prot opt source destination
  124.  
  125. Chain FWDO_public (2 references)
  126. target prot opt source destination
  127. FWDO_public_pre all -- anywhere anywhere
  128. FWDO_public_log all -- anywhere anywhere
  129. FWDO_public_deny all -- anywhere anywhere
  130. FWDO_public_allow all -- anywhere anywhere
  131. FWDO_public_post all -- anywhere anywhere
  132.  
  133. Chain FWDO_public_allow (1 references)
  134. target prot opt source destination
  135.  
  136. Chain FWDO_public_deny (1 references)
  137. target prot opt source destination
  138.  
  139. Chain FWDO_public_log (1 references)
  140. target prot opt source destination
  141.  
  142. Chain FWDO_public_post (1 references)
  143. target prot opt source destination
  144.  
  145. Chain FWDO_public_pre (1 references)
  146. target prot opt source destination
  147.  
  148. Chain INPUT_ZONES (1 references)
  149. target prot opt source destination
  150. INPUT_ZONES_IFACES all -- anywhere anywhere [goto]
  151.  
  152. Chain INPUT_ZONES_IFACES (1 references)
  153. target prot opt source destination
  154. IN_public all -- anywhere anywhere [goto]
  155. IN_libvirt all -- anywhere anywhere [goto]
  156. IN_public all -- anywhere anywhere [goto]
  157.  
  158. Chain INPUT_direct (1 references)
  159. target prot opt source destination
  160.  
  161. Chain IN_libvirt (1 references)
  162. target prot opt source destination
  163. IN_libvirt_pre all -- anywhere anywhere
  164. IN_libvirt_log all -- anywhere anywhere
  165. IN_libvirt_deny all -- anywhere anywhere
  166. IN_libvirt_allow all -- anywhere anywhere
  167. IN_libvirt_post all -- anywhere anywhere
  168. ACCEPT all -- anywhere anywhere
  169.  
  170. Chain IN_libvirt_allow (1 references)
  171. target prot opt source destination
  172. ACCEPT udp -- anywhere anywhere udp dpt:bootps ctstate NEW,UNTRACKED
  173. ACCEPT udp -- anywhere anywhere udp dpt:dhcpv6-server ctstate NEW,UNTRACKED
  174. ACCEPT tcp -- anywhere anywhere tcp dpt:domain ctstate NEW,UNTRACKED
  175. ACCEPT udp -- anywhere anywhere udp dpt:domain ctstate NEW,UNTRACKED
  176. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ctstate NEW,UNTRACKED
  177. ACCEPT udp -- anywhere anywhere udp dpt:tftp ctstate NEW,UNTRACKED
  178. ACCEPT icmp -- anywhere anywhere ctstate NEW,UNTRACKED
  179. ACCEPT ipv6-icmp-- anywhere anywhere ctstate NEW,UNTRACKED
  180.  
  181. Chain IN_libvirt_deny (1 references)
  182. target prot opt source destination
  183.  
  184. Chain IN_libvirt_log (1 references)
  185. target prot opt source destination
  186.  
  187. Chain IN_libvirt_post (1 references)
  188. target prot opt source destination
  189. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  190.  
  191. Chain IN_libvirt_pre (1 references)
  192. target prot opt source destination
  193.  
  194. Chain IN_public (2 references)
  195. target prot opt source destination
  196. IN_public_pre all -- anywhere anywhere
  197. IN_public_log all -- anywhere anywhere
  198. IN_public_deny all -- anywhere anywhere
  199. IN_public_allow all -- anywhere anywhere
  200. IN_public_post all -- anywhere anywhere
  201. ACCEPT icmp -- anywhere anywhere
  202.  
  203. Chain IN_public_allow (1 references)
  204. target prot opt source destination
  205. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ctstate NEW,UNTRACKED
  206.  
  207. Chain IN_public_deny (1 references)
  208. target prot opt source destination
  209.  
  210. Chain IN_public_log (1 references)
  211. target prot opt source destination
  212.  
  213. Chain IN_public_post (1 references)
  214. target prot opt source destination
  215.  
  216. Chain IN_public_pre (1 references)
  217. target prot opt source destination
  218.  
  219. Chain LIBVIRT_FWI (1 references)
  220. target prot opt source destination
  221. ACCEPT all -- anywhere 192.168.104.0/24 ctstate RELATED,ESTABLISHED
  222. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  223.  
  224. Chain LIBVIRT_FWO (1 references)
  225. target prot opt source destination
  226. ACCEPT all -- 192.168.104.0/24 anywhere
  227. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  228.  
  229. Chain LIBVIRT_FWX (1 references)
  230. target prot opt source destination
  231. ACCEPT all -- anywhere anywhere
  232.  
  233. Chain LIBVIRT_INP (1 references)
  234. target prot opt source destination
  235. ACCEPT udp -- anywhere anywhere udp dpt:domain
  236. ACCEPT tcp -- anywhere anywhere tcp dpt:domain
  237. ACCEPT udp -- anywhere anywhere udp dpt:bootps
  238. ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
  239.  
  240. Chain LIBVIRT_OUT (1 references)
  241. target prot opt source destination
  242. ACCEPT udp -- anywhere anywhere udp dpt:bootpc
  243.  
  244. Chain OUTPUT_direct (1 references)
  245. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement