Advertisement
DanPacu

lo que tengo de firewall

Mar 2nd, 2020
145
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.43 KB | None | 0 0
  1. sudo iptables -L
  2. Chain INPUT (policy DROP)
  3. target prot opt source destination
  4. ufw-before-logging-input all -- anywhere anywhere
  5. ufw-before-input all -- anywhere anywhere
  6. ufw-after-input all -- anywhere anywhere
  7. ufw-after-logging-input all -- anywhere anywhere
  8. ufw-reject-input all -- anywhere anywhere
  9. ufw-track-input all -- anywhere anywhere
  10.  
  11. Chain FORWARD (policy DROP)
  12. target prot opt source destination
  13. ufw-before-logging-forward all -- anywhere anywhere
  14. ufw-before-forward all -- anywhere anywhere
  15. ufw-after-forward all -- anywhere anywhere
  16. ufw-after-logging-forward all -- anywhere anywhere
  17. ufw-reject-forward all -- anywhere anywhere
  18. ufw-track-forward all -- anywhere anywhere
  19.  
  20. Chain OUTPUT (policy ACCEPT)
  21. target prot opt source destination
  22. ufw-before-logging-output all -- anywhere anywhere
  23. ufw-before-output all -- anywhere anywhere
  24. ufw-after-output all -- anywhere anywhere
  25. ufw-after-logging-output all -- anywhere anywhere
  26. ufw-reject-output all -- anywhere anywhere
  27. ufw-track-output all -- anywhere anywhere
  28.  
  29. Chain ufw-before-logging-input (1 references)
  30. target prot opt source destination
  31.  
  32. Chain ufw-before-logging-output (1 references)
  33. target prot opt source destination
  34.  
  35. Chain ufw-before-logging-forward (1 references)
  36. target prot opt source destination
  37.  
  38. Chain ufw-before-input (1 references)
  39. target prot opt source destination
  40. ACCEPT all -- anywhere anywhere
  41. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  42. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  43. DROP all -- anywhere anywhere ctstate INVALID
  44. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  45. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  46. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  47. ACCEPT icmp -- anywhere anywhere icmp echo-request
  48. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  49. ufw-not-local all -- anywhere anywhere
  50. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  51. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  52. ufw-user-input all -- anywhere anywhere
  53.  
  54. Chain ufw-before-output (1 references)
  55. target prot opt source destination
  56. ACCEPT all -- anywhere anywhere
  57. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  58. ufw-user-output all -- anywhere anywhere
  59.  
  60. Chain ufw-before-forward (1 references)
  61. target prot opt source destination
  62. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  63. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  64. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  65. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  66. ACCEPT icmp -- anywhere anywhere icmp echo-request
  67. ufw-user-forward all -- anywhere anywhere
  68.  
  69. Chain ufw-after-input (1 references)
  70. target prot opt source destination
  71. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  72. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  73. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  74. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  75. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  76. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  77. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  78.  
  79. Chain ufw-after-output (1 references)
  80. target prot opt source destination
  81.  
  82. Chain ufw-after-forward (1 references)
  83. target prot opt source destination
  84.  
  85. Chain ufw-after-logging-input (1 references)
  86. target prot opt source destination
  87. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  88.  
  89. Chain ufw-after-logging-output (1 references)
  90. target prot opt source destination
  91.  
  92. Chain ufw-after-logging-forward (1 references)
  93. target prot opt source destination
  94. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  95.  
  96. Chain ufw-reject-input (1 references)
  97. target prot opt source destination
  98.  
  99. Chain ufw-reject-output (1 references)
  100. target prot opt source destination
  101.  
  102. Chain ufw-reject-forward (1 references)
  103. target prot opt source destination
  104.  
  105. Chain ufw-track-input (1 references)
  106. target prot opt source destination
  107.  
  108. Chain ufw-track-output (1 references)
  109. target prot opt source destination
  110. ACCEPT tcp -- anywhere anywhere ctstate NEW
  111. ACCEPT udp -- anywhere anywhere ctstate NEW
  112.  
  113. Chain ufw-track-forward (1 references)
  114. target prot opt source destination
  115.  
  116. Chain ufw-logging-deny (2 references)
  117. target prot opt source destination
  118. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  119. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  120.  
  121. Chain ufw-logging-allow (0 references)
  122. target prot opt source destination
  123. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  124.  
  125. Chain ufw-skip-to-policy-input (7 references)
  126. target prot opt source destination
  127. DROP all -- anywhere anywhere
  128.  
  129. Chain ufw-skip-to-policy-output (0 references)
  130. target prot opt source destination
  131. ACCEPT all -- anywhere anywhere
  132.  
  133. Chain ufw-skip-to-policy-forward (0 references)
  134. target prot opt source destination
  135. DROP all -- anywhere anywhere
  136.  
  137. Chain ufw-not-local (1 references)
  138. target prot opt source destination
  139. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  140. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  141. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  142. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  143. DROP all -- anywhere anywhere
  144.  
  145. Chain ufw-user-input (1 references)
  146. target prot opt source destination
  147. ACCEPT all -- 92.189.141.111 anywhere
  148. ACCEPT all -- MacBook-Pro.home anywhere
  149. ACCEPT all -- iPhone-de-Dan.home anywhere
  150. ACCEPT all -- 192.168.1.115 anywhere
  151. ACCEPT all -- iPad-de-Dan.home anywhere
  152. ACCEPT all -- HUAWEI_Mate_10_lite-6c07f.home anywhere
  153. ACCEPT tcp -- anywhere anywhere tcp dpt:32400
  154.  
  155. Chain ufw-user-output (1 references)
  156. target prot opt source destination
  157.  
  158. Chain ufw-user-forward (1 references)
  159. target prot opt source destination
  160.  
  161. Chain ufw-user-logging-input (0 references)
  162. target prot opt source destination
  163.  
  164. Chain ufw-user-logging-output (0 references)
  165. target prot opt source destination
  166.  
  167. Chain ufw-user-logging-forward (0 references)
  168. target prot opt source destination
  169.  
  170. Chain ufw-user-limit (0 references)
  171. target prot opt source destination
  172. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  173. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  174.  
  175. Chain ufw-user-limit-accept (0 references)
  176. target prot opt source destination
  177. ACCEPT all -- anywhere anywhere
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement