byghis

openstack(iptables -L) cactus (no access public eth0)

Sep 10th, 2011
212
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.82 KB | None | 0 0
  1. edward@pituba:~$ sudo iptables -L
  2. [sudo] password for edward:
  3. Chain INPUT (policy ACCEPT)
  4. target prot opt source destination
  5. nova-network-INPUT all -- anywhere anywhere
  6. nova-compute-INPUT all -- anywhere anywhere
  7. ACCEPT udp -- anywhere anywhere udp dpt:domain
  8. ACCEPT tcp -- anywhere anywhere tcp dpt:domain
  9. ACCEPT udp -- anywhere anywhere udp dpt:bootps
  10. ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
  11.  
  12. Chain FORWARD (policy ACCEPT)
  13. target prot opt source destination
  14. nova-filter-top all -- anywhere anywhere
  15. nova-network-FORWARD all -- anywhere anywhere
  16. nova-compute-FORWARD all -- anywhere anywhere
  17. ACCEPT all -- anywhere 192.168.122.0/24 state RELATED,ESTABLISHED
  18. ACCEPT all -- 192.168.122.0/24 anywhere
  19. ACCEPT all -- anywhere anywhere
  20. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  21. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  22.  
  23. Chain OUTPUT (policy ACCEPT)
  24. target prot opt source destination
  25. nova-filter-top all -- anywhere anywhere
  26. nova-network-OUTPUT all -- anywhere anywhere
  27. nova-compute-OUTPUT all -- anywhere anywhere
  28.  
  29. Chain nova-compute-FORWARD (1 references)
  30. target prot opt source destination
  31. ACCEPT all -- anywhere anywhere
  32. ACCEPT all -- anywhere anywhere
  33.  
  34. Chain nova-compute-INPUT (1 references)
  35. target prot opt source destination
  36.  
  37. Chain nova-compute-OUTPUT (1 references)
  38. target prot opt source destination
  39.  
  40. Chain nova-compute-inst-11 (1 references)
  41. target prot opt source destination
  42. DROP all -- anywhere anywhere state INVALID
  43. ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
  44. ACCEPT udp -- pituba.local anywhere udp spt:bootps dpt:bootpc
  45. ACCEPT all -- 10.0.0.0/29 anywhere
  46. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  47. ACCEPT icmp -- anywhere anywhere
  48. nova-compute-sg-fallback all -- anywhere anywhere
  49.  
  50. Chain nova-compute-local (1 references)
  51. target prot opt source destination
  52. nova-compute-inst-11 all -- anywhere 10.0.0.2
  53.  
  54. Chain nova-compute-sg-fallback (1 references)
  55. target prot opt source destination
  56. DROP all -- anywhere anywhere
  57.  
  58. Chain nova-filter-top (2 references)
  59. target prot opt source destination
  60. nova-network-local all -- anywhere anywhere
  61. nova-compute-local all -- anywhere anywhere
  62.  
  63. Chain nova-network-FORWARD (1 references)
  64. target prot opt source destination
  65. ACCEPT all -- anywhere anywhere
  66. ACCEPT all -- anywhere anywhere
  67.  
  68. Chain nova-network-INPUT (1 references)
  69. target prot opt source destination
  70.  
  71. Chain nova-network-OUTPUT (1 references)
  72. target prot opt source destination
  73.  
  74. Chain nova-network-local (1 references)
  75. target prot opt source destination
  76. edward@pituba:~$
Advertisement
Add Comment
Please, Sign In to add comment