Advertisement
Guest User

iptables l

a guest
Apr 6th, 2020
161
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.96 KB | None | 0 0
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. ufw-before-logging-input all -- anywhere anywhere
  4. ufw-before-input all -- anywhere anywhere
  5. ufw-after-input all -- anywhere anywhere
  6. ufw-after-logging-input all -- anywhere anywhere
  7. ufw-reject-input all -- anywhere anywhere
  8. ufw-track-input all -- anywhere anywhere
  9.  
  10. Chain FORWARD (policy DROP)
  11. target prot opt source destination
  12. ufw-before-logging-forward all -- anywhere anywhere
  13. ufw-before-forward all -- anywhere anywhere
  14. ufw-after-forward all -- anywhere anywhere
  15. ufw-after-logging-forward all -- anywhere anywhere
  16. ufw-reject-forward all -- anywhere anywhere
  17. ufw-track-forward all -- anywhere anywhere
  18.  
  19. Chain OUTPUT (policy ACCEPT)
  20. target prot opt source destination
  21. ufw-before-logging-output all -- anywhere anywhere
  22. ufw-before-output all -- anywhere anywhere
  23. ufw-after-output all -- anywhere anywhere
  24. ufw-after-logging-output all -- anywhere anywhere
  25. ufw-reject-output all -- anywhere anywhere
  26. ufw-track-output all -- anywhere anywhere
  27.  
  28. Chain ufw-after-forward (1 references)
  29. target prot opt source destination
  30.  
  31. Chain ufw-after-input (1 references)
  32. target prot opt source destination
  33. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  34. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  35. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  36. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  37. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  38. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  39. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  40.  
  41. Chain ufw-after-logging-forward (1 references)
  42. target prot opt source destination
  43. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  44.  
  45. Chain ufw-after-logging-input (1 references)
  46. target prot opt source destination
  47. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  48.  
  49. Chain ufw-after-logging-output (1 references)
  50. target prot opt source destination
  51.  
  52. Chain ufw-after-output (1 references)
  53. target prot opt source destination
  54.  
  55. Chain ufw-before-forward (1 references)
  56. target prot opt source destination
  57. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  58. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  59. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  60. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  61. ACCEPT icmp -- anywhere anywhere icmp echo-request
  62. ufw-user-forward all -- anywhere anywhere
  63.  
  64. Chain ufw-before-input (1 references)
  65. target prot opt source destination
  66. ACCEPT all -- anywhere anywhere
  67. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  68. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  69. DROP all -- anywhere anywhere ctstate INVALID
  70. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  71. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  72. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  73. ACCEPT icmp -- anywhere anywhere icmp echo-request
  74. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  75. ufw-not-local all -- anywhere anywhere
  76. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  77. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  78. ufw-user-input all -- anywhere anywhere
  79.  
  80. Chain ufw-before-logging-forward (1 references)
  81. target prot opt source destination
  82.  
  83. Chain ufw-before-logging-input (1 references)
  84. target prot opt source destination
  85.  
  86. Chain ufw-before-logging-output (1 references)
  87. target prot opt source destination
  88.  
  89. Chain ufw-before-output (1 references)
  90. target prot opt source destination
  91. ACCEPT all -- anywhere anywhere
  92. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  93. ufw-user-output all -- anywhere anywhere
  94.  
  95. Chain ufw-logging-allow (0 references)
  96. target prot opt source destination
  97. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  98.  
  99. Chain ufw-logging-deny (2 references)
  100. target prot opt source destination
  101. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  102. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  103.  
  104. Chain ufw-not-local (1 references)
  105. target prot opt source destination
  106. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  107. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  108. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  109. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  110. DROP all -- anywhere anywhere
  111.  
  112. Chain ufw-reject-forward (1 references)
  113. target prot opt source destination
  114.  
  115. Chain ufw-reject-input (1 references)
  116. target prot opt source destination
  117.  
  118. Chain ufw-reject-output (1 references)
  119. target prot opt source destination
  120.  
  121. Chain ufw-skip-to-policy-forward (0 references)
  122. target prot opt source destination
  123. DROP all -- anywhere anywhere
  124.  
  125. Chain ufw-skip-to-policy-input (7 references)
  126. target prot opt source destination
  127. DROP all -- anywhere anywhere
  128.  
  129. Chain ufw-skip-to-policy-output (0 references)
  130. target prot opt source destination
  131. ACCEPT all -- anywhere anywhere
  132.  
  133. Chain ufw-track-forward (1 references)
  134. target prot opt source destination
  135.  
  136. Chain ufw-track-input (1 references)
  137. target prot opt source destination
  138.  
  139. Chain ufw-track-output (1 references)
  140. target prot opt source destination
  141. ACCEPT tcp -- anywhere anywhere ctstate NEW
  142. ACCEPT udp -- anywhere anywhere ctstate NEW
  143.  
  144. Chain ufw-user-forward (1 references)
  145. target prot opt source destination
  146.  
  147. Chain ufw-user-input (1 references)
  148. target prot opt source destination
  149.  
  150. Chain ufw-user-limit (0 references)
  151. target prot opt source destination
  152. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  153. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  154.  
  155. Chain ufw-user-limit-accept (0 references)
  156. target prot opt source destination
  157. ACCEPT all -- anywhere anywhere
  158.  
  159. Chain ufw-user-logging-forward (0 references)
  160. target prot opt source destination
  161.  
  162. Chain ufw-user-logging-input (0 references)
  163. target prot opt source destination
  164.  
  165. Chain ufw-user-logging-output (0 references)
  166. target prot opt source destination
  167.  
  168. Chain ufw-user-output (1 references)
  169. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement