Advertisement
Guest User

Untitled

a guest
Aug 21st, 2017
193
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.86 KB | None | 0 0
  1. Chain ufw-user-limit (0 references)
  2. target prot opt source destination
  3. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  4. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  5.  
  6. Chain ufw-user-limit-accept (0 references)
  7. target prot opt source destination
  8. ACCEPT all -- anywhere anywhere
  9.  
  10. Chain ufw-user-logging-forward (0 references)
  11. target prot opt source destination
  12.  
  13. Chain ufw-user-logging-input (0 references)
  14. target prot opt source destination
  15.  
  16. Chain ufw-user-logging-output (0 references)
  17. target prot opt source destination
  18.  
  19. Chain ufw-user-output (1 references)
  20. target prot opt source destination
  21. root@vps446248:~# clear
  22. root@vps446248:~# iptables -L
  23. Chain INPUT (policy DROP)
  24. target prot opt source destination
  25. ufw-before-logging-input all -- anywhere anywhere
  26. ufw-before-input all -- anywhere anywhere
  27. ufw-after-input all -- anywhere anywhere
  28. ufw-after-logging-input all -- anywhere anywhere
  29. ufw-reject-input all -- anywhere anywhere
  30. ufw-track-input all -- anywhere anywhere
  31.  
  32. Chain FORWARD (policy ACCEPT)
  33. target prot opt source destination
  34. ufw-before-logging-forward all -- anywhere anywhere
  35. ufw-before-forward all -- anywhere anywhere
  36. ufw-after-forward all -- anywhere anywhere
  37. ufw-after-logging-forward all -- anywhere anywhere
  38. ufw-reject-forward all -- anywhere anywhere
  39. ufw-track-forward all -- anywhere anywhere
  40.  
  41. Chain OUTPUT (policy ACCEPT)
  42. target prot opt source destination
  43. ufw-before-logging-output all -- anywhere anywhere
  44. ufw-before-output all -- anywhere anywhere
  45. ufw-after-output all -- anywhere anywhere
  46. ufw-after-logging-output all -- anywhere anywhere
  47. ufw-reject-output all -- anywhere anywhere
  48. ufw-track-output all -- anywhere anywhere
  49.  
  50. Chain ufw-after-forward (1 references)
  51. target prot opt source destination
  52.  
  53. Chain ufw-after-input (1 references)
  54. target prot opt source destination
  55. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  56. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  57. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  58. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  59. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  60. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  61. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  62.  
  63. Chain ufw-after-logging-forward (1 references)
  64. target prot opt source destination
  65.  
  66. Chain ufw-after-logging-input (1 references)
  67. target prot opt source destination
  68. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  69.  
  70. Chain ufw-after-logging-output (1 references)
  71. target prot opt source destination
  72.  
  73. Chain ufw-after-output (1 references)
  74. target prot opt source destination
  75.  
  76. Chain ufw-before-forward (1 references)
  77. target prot opt source destination
  78. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  79. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  80. ACCEPT icmp -- anywhere anywhere icmp source-quench
  81. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  82. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  83. ACCEPT icmp -- anywhere anywhere icmp echo-request
  84. ufw-user-forward all -- anywhere anywhere
  85.  
  86. Chain ufw-before-input (1 references)
  87. target prot opt source destination
  88. ACCEPT all -- anywhere anywhere
  89. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  90. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  91. DROP all -- anywhere anywhere ctstate INVALID
  92. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  93. ACCEPT icmp -- anywhere anywhere icmp source-quench
  94. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  95. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  96. ACCEPT icmp -- anywhere anywhere icmp echo-request
  97. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  98. ufw-not-local all -- anywhere anywhere
  99. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  100. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  101. ufw-user-input all -- anywhere anywhere
  102.  
  103. Chain ufw-before-logging-forward (1 references)
  104. target prot opt source destination
  105.  
  106. Chain ufw-before-logging-input (1 references)
  107. target prot opt source destination
  108.  
  109. Chain ufw-before-logging-output (1 references)
  110. target prot opt source destination
  111.  
  112. Chain ufw-before-output (1 references)
  113. target prot opt source destination
  114. ACCEPT all -- anywhere anywhere
  115. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  116. ufw-user-output all -- anywhere anywhere
  117.  
  118. Chain ufw-logging-allow (0 references)
  119. target prot opt source destination
  120. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  121.  
  122. Chain ufw-logging-deny (2 references)
  123. target prot opt source destination
  124. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  125. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  126.  
  127. Chain ufw-not-local (1 references)
  128. target prot opt source destination
  129. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  130. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  131. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  132. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  133. DROP all -- anywhere anywhere
  134.  
  135. Chain ufw-reject-forward (1 references)
  136. target prot opt source destination
  137.  
  138. Chain ufw-reject-input (1 references)
  139. target prot opt source destination
  140.  
  141. Chain ufw-reject-output (1 references)
  142. target prot opt source destination
  143.  
  144. Chain ufw-skip-to-policy-forward (0 references)
  145. target prot opt source destination
  146. ACCEPT all -- anywhere anywhere
  147.  
  148. Chain ufw-skip-to-policy-input (7 references)
  149. target prot opt source destination
  150. DROP all -- anywhere anywhere
  151.  
  152. Chain ufw-skip-to-policy-output (0 references)
  153. target prot opt source destination
  154. ACCEPT all -- anywhere anywhere
  155.  
  156. Chain ufw-track-forward (1 references)
  157. target prot opt source destination
  158. ACCEPT tcp -- anywhere anywhere ctstate NEW
  159. ACCEPT udp -- anywhere anywhere ctstate NEW
  160.  
  161. Chain ufw-track-input (1 references)
  162. target prot opt source destination
  163.  
  164. Chain ufw-track-output (1 references)
  165. target prot opt source destination
  166. ACCEPT tcp -- anywhere anywhere ctstate NEW
  167. ACCEPT udp -- anywhere anywhere ctstate NEW
  168.  
  169. Chain ufw-user-forward (1 references)
  170. target prot opt source destination
  171.  
  172. Chain ufw-user-input (1 references)
  173. target prot opt source destination
  174. ACCEPT tcp -- anywhere anywhere multiport dports http,https /* 'dapp_Apache%20Full' */
  175. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  176. ACCEPT udp -- anywhere anywhere udp dpt:ssh
  177. ACCEPT udp -- anywhere anywhere udp dpt:openvpn
  178. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh /* 'dapp_OpenSSH' */
  179.  
  180. Chain ufw-user-limit (0 references)
  181. target prot opt source destination
  182. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  183. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  184.  
  185. Chain ufw-user-limit-accept (0 references)
  186. target prot opt source destination
  187. ACCEPT all -- anywhere anywhere
  188.  
  189. Chain ufw-user-logging-forward (0 references)
  190. target prot opt source destination
  191.  
  192. Chain ufw-user-logging-input (0 references)
  193. target prot opt source destination
  194.  
  195. Chain ufw-user-logging-output (0 references)
  196. target prot opt source destination
  197.  
  198. Chain ufw-user-output (1 references)
  199. target prot opt source destination
  200. root@vps446248:~#
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement