API tools faq
paste
Advertisement
Guest User

IPtables

a guest
Nov 11th, 2019
1,048
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.08 KB | None | 0 0
raw download clone embed print report
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. f2b-sshd tcp -- anywhere anywhere multiport dports ssh
  4. ufw-before-logging-input all -- anywhere anywhere
  5. ufw-before-input all -- anywhere anywhere
  6. ufw-after-input all -- anywhere anywhere
  7. ufw-after-logging-input all -- anywhere anywhere
  8. ufw-reject-input all -- anywhere anywhere
  9. ufw-track-input all -- anywhere anywhere
  10.  
  11. Chain FORWARD (policy DROP)
  12. target prot opt source destination
  13. ufw-before-logging-forward all -- anywhere anywhere
  14. ufw-before-forward all -- anywhere anywhere
  15. ufw-after-forward all -- anywhere anywhere
  16. ufw-after-logging-forward all -- anywhere anywhere
  17. ufw-reject-forward all -- anywhere anywhere
  18. ufw-track-forward all -- anywhere anywhere
  19.  
  20. Chain OUTPUT (policy ACCEPT)
  21. target prot opt source destination
  22. ufw-before-logging-output all -- anywhere anywhere
  23. ufw-before-output all -- anywhere anywhere
  24. ufw-after-output all -- anywhere anywhere
  25. ufw-after-logging-output all -- anywhere anywhere
  26. ufw-reject-output all -- anywhere anywhere
  27. ufw-track-output all -- anywhere anywhere
  28.  
  29. Chain f2b-sshd (1 references)
  30. target prot opt source destination
  31. REJECT all -- 116.113.70.106 anywhere reject-with icmp-port-unreachable
  32. REJECT all -- 112.85.42.194 anywhere reject-with icmp-port-unreachable
  33. RETURN all -- anywhere anywhere
  34.  
  35. Chain ufw-after-forward (1 references)
  36. target prot opt source destination
  37.  
  38. Chain ufw-after-input (1 references)
  39. target prot opt source destination
  40. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  41. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  42. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  43. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  44. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  45. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  46. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  47.  
  48. Chain ufw-after-logging-forward (1 references)
  49. target prot opt source destination
  50. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  51.  
  52. Chain ufw-after-logging-input (1 references)
  53. target prot opt source destination
  54. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  55.  
  56. Chain ufw-after-logging-output (1 references)
  57. target prot opt source destination
  58.  
  59. Chain ufw-after-output (1 references)
  60. target prot opt source destination
  61.  
  62. Chain ufw-before-forward (1 references)
  63. target prot opt source destination
  64. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  65. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  66. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  67. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  68. ACCEPT icmp -- anywhere anywhere icmp echo-request
  69. ufw-user-forward all -- anywhere anywhere
  70.  
  71. Chain ufw-before-input (1 references)
  72. target prot opt source destination
  73. ACCEPT all -- anywhere anywhere
  74. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  75. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  76. DROP all -- anywhere anywhere ctstate INVALID
  77. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  78. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  79. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  80. ACCEPT icmp -- anywhere anywhere icmp echo-request
  81. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  82. ufw-not-local all -- anywhere anywhere
  83. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  84. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  85. ufw-user-input all -- anywhere anywhere
  86.  
  87. Chain ufw-before-logging-forward (1 references)
  88. target prot opt source destination
  89.  
  90. Chain ufw-before-logging-input (1 references)
  91. target prot opt source destination
  92.  
  93. Chain ufw-before-logging-output (1 references)
  94. target prot opt source destination
  95.  
  96. Chain ufw-before-output (1 references)
  97. target prot opt source destination
  98. ACCEPT all -- anywhere anywhere
  99. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  100. ufw-user-output all -- anywhere anywhere
  101.  
  102. Chain ufw-logging-allow (0 references)
  103. target prot opt source destination
  104. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  105.  
  106. Chain ufw-logging-deny (2 references)
  107. target prot opt source destination
  108. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  109. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  110.  
  111. Chain ufw-not-local (1 references)
  112. target prot opt source destination
  113. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  114. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  115. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  116. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  117. DROP all -- anywhere anywhere
  118.  
  119. Chain ufw-reject-forward (1 references)
  120. target prot opt source destination
  121.  
  122. Chain ufw-reject-input (1 references)
  123. target prot opt source destination
  124.  
  125. Chain ufw-reject-output (1 references)
  126. target prot opt source destination
  127.  
  128. Chain ufw-skip-to-policy-forward (0 references)
  129. target prot opt source destination
  130. DROP all -- anywhere anywhere
  131.  
  132. Chain ufw-skip-to-policy-input (7 references)
  133. target prot opt source destination
  134. DROP all -- anywhere anywhere
  135.  
  136. Chain ufw-skip-to-policy-output (0 references)
  137. target prot opt source destination
  138. ACCEPT all -- anywhere anywhere
  139.  
  140. Chain ufw-track-forward (1 references)
  141. target prot opt source destination
  142.  
  143. Chain ufw-track-input (1 references)
  144. target prot opt source destination
  145.  
  146. Chain ufw-track-output (1 references)
  147. target prot opt source destination
  148. ACCEPT tcp -- anywhere anywhere ctstate NEW
  149. ACCEPT udp -- anywhere anywhere ctstate NEW
  150.  
  151. Chain ufw-user-forward (1 references)
  152. target prot opt source destination
  153.  
  154. Chain ufw-user-input (1 references)
  155. target prot opt source destination
  156. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  157. ACCEPT tcp -- anywhere anywhere tcp dpt:8022
  158. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  159. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  160. ACCEPT udp -- anywhere anywhere multiport dports 27015:27030
  161. ACCEPT tcp -- anywhere anywhere multiport dports 27015:27030
  162. ACCEPT tcp -- anywhere anywhere tcp dpt:51413
  163. ACCEPT tcp -- anywhere anywhere tcp dpt:4444
  164. ACCEPT udp -- anywhere anywhere udp dpt:4444
  165.  
  166. Chain ufw-user-limit (0 references)
  167. target prot opt source destination
  168. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  169. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  170.  
  171. Chain ufw-user-limit-accept (0 references)
  172. target prot opt source destination
  173. ACCEPT all -- anywhere anywhere
  174.  
  175. Chain ufw-user-logging-forward (0 references)
  176. target prot opt source destination
  177.  
  178. Chain ufw-user-logging-input (0 references)
  179. target prot opt source destination
  180.  
  181. Chain ufw-user-logging-output (0 references)
  182. target prot opt source destination
  183.  
  184. Chain ufw-user-output (1 references)
  185. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!