Advertisement
Guest User

Untitled

a guest
Sep 10th, 2021
75
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.41 KB | None | 0 0
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. ufw-before-logging-input all -- anywhere anywhere
  4. ufw-before-input all -- anywhere anywhere
  5. ufw-after-input all -- anywhere anywhere
  6. ufw-after-logging-input all -- anywhere anywhere
  7. ufw-reject-input all -- anywhere anywhere
  8. ufw-track-input all -- anywhere anywhere
  9.  
  10. Chain FORWARD (policy ACCEPT)
  11. target prot opt source destination
  12. ufw-before-logging-forward all -- anywhere anywhere
  13. ufw-before-forward all -- anywhere anywhere
  14. ufw-after-forward all -- anywhere anywhere
  15. ufw-after-logging-forward all -- anywhere anywhere
  16. ufw-reject-forward all -- anywhere anywhere
  17. ufw-track-forward all -- anywhere anywhere
  18.  
  19. Chain OUTPUT (policy ACCEPT)
  20. target prot opt source destination
  21. ufw-before-logging-output all -- anywhere anywhere
  22. ufw-before-output all -- anywhere anywhere
  23. ufw-after-output all -- anywhere anywhere
  24. ufw-after-logging-output all -- anywhere anywhere
  25. ufw-reject-output all -- anywhere anywhere
  26. ufw-track-output all -- anywhere anywhere
  27.  
  28. Chain ufw-after-forward (1 references)
  29. target prot opt source destination
  30.  
  31. Chain ufw-after-input (1 references)
  32. target prot opt source destination
  33. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  34. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  35. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  36. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  37. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  38. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  39. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  40.  
  41. Chain ufw-after-logging-forward (1 references)
  42. target prot opt source destination
  43.  
  44. Chain ufw-after-logging-input (1 references)
  45. target prot opt source destination
  46. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  47.  
  48. Chain ufw-after-logging-output (1 references)
  49. target prot opt source destination
  50.  
  51. Chain ufw-after-output (1 references)
  52. target prot opt source destination
  53.  
  54. Chain ufw-before-forward (1 references)
  55. target prot opt source destination
  56. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  57. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  58. ACCEPT icmp -- anywhere anywhere icmp source-quench
  59. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  60. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  61. ACCEPT icmp -- anywhere anywhere icmp echo-request
  62. ufw-user-forward all -- anywhere anywhere
  63.  
  64. Chain ufw-before-input (1 references)
  65. target prot opt source destination
  66. ACCEPT all -- anywhere anywhere
  67. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  68. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  69. DROP all -- anywhere anywhere ctstate INVALID
  70. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  71. ACCEPT icmp -- anywhere anywhere icmp source-quench
  72. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  73. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  74. ACCEPT icmp -- anywhere anywhere icmp echo-request
  75. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  76. ufw-not-local all -- anywhere anywhere
  77. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  78. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  79. ufw-user-input all -- anywhere anywhere
  80.  
  81. Chain ufw-before-logging-forward (1 references)
  82. target prot opt source destination
  83.  
  84. Chain ufw-before-logging-input (1 references)
  85. target prot opt source destination
  86.  
  87. Chain ufw-before-logging-output (1 references)
  88. target prot opt source destination
  89.  
  90. Chain ufw-before-output (1 references)
  91. target prot opt source destination
  92. ACCEPT all -- anywhere anywhere
  93. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  94. ufw-user-output all -- anywhere anywhere
  95.  
  96. Chain ufw-logging-allow (0 references)
  97. target prot opt source destination
  98. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  99.  
  100. Chain ufw-logging-deny (2 references)
  101. target prot opt source destination
  102. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  103. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  104.  
  105. Chain ufw-not-local (1 references)
  106. target prot opt source destination
  107. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  108. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  109. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  110. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  111. DROP all -- anywhere anywhere
  112.  
  113. Chain ufw-reject-forward (1 references)
  114. target prot opt source destination
  115.  
  116. Chain ufw-reject-input (1 references)
  117. target prot opt source destination
  118.  
  119. Chain ufw-reject-output (1 references)
  120. target prot opt source destination
  121.  
  122. Chain ufw-skip-to-policy-forward (0 references)
  123. target prot opt source destination
  124. ACCEPT all -- anywhere anywhere
  125.  
  126. Chain ufw-skip-to-policy-input (7 references)
  127. target prot opt source destination
  128. DROP all -- anywhere anywhere
  129.  
  130. Chain ufw-skip-to-policy-output (0 references)
  131. target prot opt source destination
  132. ACCEPT all -- anywhere anywhere
  133.  
  134. Chain ufw-track-forward (1 references)
  135. target prot opt source destination
  136. ACCEPT tcp -- anywhere anywhere ctstate NEW
  137. ACCEPT udp -- anywhere anywhere ctstate NEW
  138.  
  139. Chain ufw-track-input (1 references)
  140. target prot opt source destination
  141.  
  142. Chain ufw-track-output (1 references)
  143. target prot opt source destination
  144. ACCEPT tcp -- anywhere anywhere ctstate NEW
  145. ACCEPT udp -- anywhere anywhere ctstate NEW
  146.  
  147. Chain ufw-user-forward (1 references)
  148. target prot opt source destination
  149.  
  150. Chain ufw-user-input (1 references)
  151. target prot opt source destination
  152. ACCEPT udp -- anywhere anywhere udp dpt:openvpn
  153. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  154.  
  155. Chain ufw-user-limit (0 references)
  156. target prot opt source destination
  157. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  158. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  159.  
  160. Chain ufw-user-limit-accept (0 references)
  161. target prot opt source destination
  162. ACCEPT all -- anywhere anywhere
  163.  
  164. Chain ufw-user-logging-forward (0 references)
  165. target prot opt source destination
  166.  
  167. Chain ufw-user-logging-input (0 references)
  168. target prot opt source destination
  169.  
  170. Chain ufw-user-logging-output (0 references)
  171. target prot opt source destination
  172.  
  173. Chain ufw-user-output (1 references)
  174. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement