Advertisement
Guest User

Untitled

a guest
Jan 15th, 2018
48
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.77 KB | None | 0 0
  1. buccino@sbuccino-HP-620:~$ sudo iptables -s
  2. [sudo] password di sbuccino:
  3. iptables v1.6.0: option "-s" requires an argument
  4. Try `iptables -h' or 'iptables --help' for more information.
  5. sbuccino@sbuccino-HP-620:~$ sudo iptables -S
  6. -P INPUT DROP
  7. -P FORWARD DROP
  8. -P OUTPUT ACCEPT
  9. -N ufw-after-forward
  10. -N ufw-after-input
  11. -N ufw-after-logging-forward
  12. -N ufw-after-logging-input
  13. -N ufw-after-logging-output
  14. -N ufw-after-output
  15. -N ufw-before-forward
  16. -N ufw-before-input
  17. -N ufw-before-logging-forward
  18. -N ufw-before-logging-input
  19. -N ufw-before-logging-output
  20. -N ufw-before-output
  21. -N ufw-logging-allow
  22. -N ufw-logging-deny
  23. -N ufw-not-local
  24. -N ufw-reject-forward
  25. -N ufw-reject-input
  26. -N ufw-reject-output
  27. -N ufw-skip-to-policy-forward
  28. -N ufw-skip-to-policy-input
  29. -N ufw-skip-to-policy-output
  30. -N ufw-track-forward
  31. -N ufw-track-input
  32. -N ufw-track-output
  33. -N ufw-user-forward
  34. -N ufw-user-input
  35. -N ufw-user-limit
  36. -N ufw-user-limit-accept
  37. -N ufw-user-logging-forward
  38. -N ufw-user-logging-input
  39. -N ufw-user-logging-output
  40. -N ufw-user-output
  41. -A INPUT -j ufw-before-logging-input
  42. -A INPUT -j ufw-before-input
  43. -A INPUT -j ufw-after-input
  44. -A INPUT -j ufw-after-logging-input
  45. -A INPUT -j ufw-reject-input
  46. -A INPUT -j ufw-track-input
  47. -A FORWARD -j ufw-before-logging-forward
  48. -A FORWARD -j ufw-before-forward
  49. -A FORWARD -j ufw-after-forward
  50. -A FORWARD -j ufw-after-logging-forward
  51. -A FORWARD -j ufw-reject-forward
  52. -A FORWARD -j ufw-track-forward
  53. -A OUTPUT -j ufw-before-logging-output
  54. -A OUTPUT -j ufw-before-output
  55. -A OUTPUT -j ufw-after-output
  56. -A OUTPUT -j ufw-after-logging-output
  57. -A OUTPUT -j ufw-reject-output
  58. -A OUTPUT -j ufw-track-output
  59. -A ufw-after-input -p udp -m udp --dport 137 -j ufw-skip-to-policy-input
  60. -A ufw-after-input -p udp -m udp --dport 138 -j ufw-skip-to-policy-input
  61. -A ufw-after-input -p tcp -m tcp --dport 139 -j ufw-skip-to-policy-input
  62. -A ufw-after-input -p tcp -m tcp --dport 445 -j ufw-skip-to-policy-input
  63. -A ufw-after-input -p udp -m udp --dport 67 -j ufw-skip-to-policy-input
  64. -A ufw-after-input -p udp -m udp --dport 68 -j ufw-skip-to-policy-input
  65. -A ufw-after-input -m addrtype --dst-type BROADCAST -j ufw-skip-to-policy-input
  66. -A ufw-after-logging-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  67. -A ufw-after-logging-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  68. -A ufw-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  69. -A ufw-before-forward -p icmp -m icmp --icmp-type 3 -j ACCEPT
  70. -A ufw-before-forward -p icmp -m icmp --icmp-type 4 -j ACCEPT
  71. -A ufw-before-forward -p icmp -m icmp --icmp-type 11 -j ACCEPT
  72. -A ufw-before-forward -p icmp -m icmp --icmp-type 12 -j ACCEPT
  73. -A ufw-before-forward -p icmp -m icmp --icmp-type 8 -j ACCEPT
  74. -A ufw-before-forward -j ufw-user-forward
  75. -A ufw-before-input -i lo -j ACCEPT
  76. -A ufw-before-input -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  77. -A ufw-before-input -m conntrack --ctstate INVALID -j ufw-logging-deny
  78. -A ufw-before-input -m conntrack --ctstate INVALID -j DROP
  79. -A ufw-before-input -p icmp -m icmp --icmp-type 3 -j ACCEPT
  80. -A ufw-before-input -p icmp -m icmp --icmp-type 4 -j ACCEPT
  81. -A ufw-before-input -p icmp -m icmp --icmp-type 11 -j ACCEPT
  82. -A ufw-before-input -p icmp -m icmp --icmp-type 12 -j ACCEPT
  83. -A ufw-before-input -p icmp -m icmp --icmp-type 8 -j ACCEPT
  84. -A ufw-before-input -p udp -m udp --sport 67 --dport 68 -j ACCEPT
  85. -A ufw-before-input -j ufw-not-local
  86. -A ufw-before-input -d 224.0.0.251/32 -p udp -m udp --dport 5353 -j ACCEPT
  87. -A ufw-before-input -d 239.255.255.250/32 -p udp -m udp --dport 1900 -j ACCEPT
  88. -A ufw-before-input -j ufw-user-input
  89. -A ufw-before-output -o lo -j ACCEPT
  90. -A ufw-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  91. -A ufw-before-output -j ufw-user-output
  92. -A ufw-logging-allow -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] "
  93. -A ufw-logging-deny -m conntrack --ctstate INVALID -m limit --limit 3/min --limit-burst 10 -j RETURN
  94. -A ufw-logging-deny -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
  95. -A ufw-not-local -m addrtype --dst-type LOCAL -j RETURN
  96. -A ufw-not-local -m addrtype --dst-type MULTICAST -j RETURN
  97. -A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN
  98. -A ufw-not-local -m limit --limit 3/min --limit-burst 10 -j ufw-logging-deny
  99. -A ufw-not-local -j DROP
  100. -A ufw-skip-to-policy-forward -j DROP
  101. -A ufw-skip-to-policy-input -j DROP
  102. -A ufw-skip-to-policy-output -j ACCEPT
  103. -A ufw-track-output -p tcp -m conntrack --ctstate NEW -j ACCEPT
  104. -A ufw-track-output -p udp -m conntrack --ctstate NEW -j ACCEPT
  105. -A ufw-user-limit -m limit --limit 3/min -j LOG --log-prefix "[UFW LIMIT BLOCK] "
  106. -A ufw-user-limit -j REJECT --reject-with icmp-port-unreachable
  107. -A ufw-user-limit-accept -j ACCEPT
  108. sbuccino@sbuccino-HP-620:~$
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement