# Generated by iptables-save v1.4.12 on Mon Jan 28 13:28:45 2013
*nat
:PREROUTING ACCEPT [4321:276452]
:INPUT ACCEPT [964:83532]
:OUTPUT ACCEPT [13640:882453]
:POSTROUTING ACCEPT [15095:1014509]
:nova-api-metadat-OUTPUT - [0:0]
:nova-api-metadat-POSTROUTING - [0:0]
:nova-api-metadat-PREROUTING - [0:0]
:nova-api-metadat-float-snat - [0:0]
:nova-api-metadat-snat - [0:0]
:nova-compute-OUTPUT - [0:0]
:nova-compute-POSTROUTING - [0:0]
:nova-compute-PREROUTING - [0:0]
:nova-compute-float-snat - [0:0]
:nova-compute-snat - [0:0]
:nova-postrouting-bottom - [0:0]
-A PREROUTING -j nova-compute-PREROUTING
-A PREROUTING -j nova-api-metadat-PREROUTING
-A OUTPUT -j nova-compute-OUTPUT
-A OUTPUT -j nova-api-metadat-OUTPUT
-A POSTROUTING -j nova-compute-POSTROUTING
-A POSTROUTING -j nova-api-metadat-POSTROUTING
-A POSTROUTING -j nova-postrouting-bottom
-A nova-api-metadat-snat -j nova-api-metadat-float-snat
-A nova-compute-snat -j nova-compute-float-snat
-A nova-postrouting-bottom -j nova-compute-snat
-A nova-postrouting-bottom -j nova-api-metadat-snat
COMMIT
# Completed on Mon Jan 28 13:28:45 2013
# Generated by iptables-save v1.4.12 on Mon Jan 28 13:28:45 2013
*mangle
:PREROUTING ACCEPT [183177:382150729]
:INPUT ACCEPT [172700:380113962]
:FORWARD ACCEPT [9398:2105247]
:OUTPUT ACCEPT [211873:67758530]
:POSTROUTING ACCEPT [221505:69888326]
COMMIT
# Completed on Mon Jan 28 13:28:45 2013
# Generated by iptables-save v1.4.12 on Mon Jan 28 13:28:45 2013
*filter
:INPUT ACCEPT [145219:349096731]
:FORWARD ACCEPT [6106:1159235]
:OUTPUT ACCEPT [199151:66408438]
:nova-api-metadat-FORWARD - [0:0]
:nova-api-metadat-INPUT - [0:0]
:nova-api-metadat-OUTPUT - [0:0]
:nova-api-metadat-local - [0:0]
:nova-compute-FORWARD - [0:0]
:nova-compute-INPUT - [0:0]
:nova-compute-OUTPUT - [0:0]
:nova-compute-inst-2 - [0:0]
:nova-compute-inst-3 - [0:0]
:nova-compute-local - [0:0]
:nova-compute-provider - [0:0]
:nova-compute-sg-fallback - [0:0]
:nova-filter-top - [0:0]
-A INPUT -j nova-compute-INPUT
-A INPUT -j nova-api-metadat-INPUT
-A INPUT -p gre -j ACCEPT
-A FORWARD -j nova-filter-top
-A FORWARD -j nova-compute-FORWARD
-A FORWARD -j nova-api-metadat-FORWARD
-A OUTPUT -j nova-filter-top
-A OUTPUT -j nova-compute-OUTPUT
-A OUTPUT -j nova-api-metadat-OUTPUT
-A nova-api-metadat-INPUT -d 192.168.0.11/32 -p tcp -m tcp --dport 8775 -j ACCEPT
-A nova-compute-inst-2 -m state --state INVALID -j DROP
-A nova-compute-inst-2 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A nova-compute-inst-2 -j nova-compute-provider
-A nova-compute-inst-2 -s 10.5.5.2/32 -p udp -m udp --sport 67 --dport 68 -j ACCEPT
-A nova-compute-inst-2 -s 10.5.5.0/24 -j ACCEPT
-A nova-compute-inst-2 -p tcp -m tcp --dport 22 -j ACCEPT
-A nova-compute-inst-2 -p icmp -j ACCEPT
-A nova-compute-inst-2 -j nova-compute-sg-fallback
-A nova-compute-inst-3 -m state --state INVALID -j DROP
-A nova-compute-inst-3 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A nova-compute-inst-3 -j nova-compute-provider
-A nova-compute-inst-3 -s 10.5.5.2/32 -p udp -m udp --sport 67 --dport 68 -j ACCEPT
-A nova-compute-inst-3 -s 10.5.5.0/24 -j ACCEPT
-A nova-compute-inst-3 -p tcp -m tcp --dport 22 -j ACCEPT
-A nova-compute-inst-3 -p icmp -j ACCEPT
-A nova-compute-inst-3 -j nova-compute-sg-fallback
-A nova-compute-local -d 10.5.5.3/32 -j nova-compute-inst-2
-A nova-compute-local -d 10.5.5.4/32 -j nova-compute-inst-3
-A nova-compute-sg-fallback -j DROP
-A nova-filter-top -j nova-compute-local
-A nova-filter-top -j nova-api-metadat-local
COMMIT
# Completed on Mon Jan 28 13:28:45 2013