Advertisement
JewishCat

Untitled

Sep 6th, 2018
140
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.94 KB | None | 0 0
  1. # Generated by iptables-save v1.6.0 on Thu Sep 6 14:21:01 2018
  2. *nat
  3. :PREROUTING ACCEPT [4274:302933]
  4. :INPUT ACCEPT [3163:236004]
  5. :OUTPUT ACCEPT [1509:103763]
  6. :POSTROUTING ACCEPT [1641:110664]
  7. :DOCKER - [0:0]
  8. -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
  9. -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
  10. -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
  11. -A POSTROUTING -s 172.18.0.0/16 ! -o pterodactyl0 -j MASQUERADE
  12. -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
  13. -A POSTROUTING -s 172.18.0.3/32 -d 172.18.0.3/32 -p tcp -m tcp --dport 22011 -j MASQUERADE
  14. -A POSTROUTING -s 172.18.0.3/32 -d 172.18.0.3/32 -p udp -m udp --dport 22011 -j MASQUERADE
  15. -A POSTROUTING -s 172.18.0.3/32 -d 172.18.0.3/32 -p tcp -m tcp --dport 22007 -j MASQUERADE
  16. -A POSTROUTING -s 172.18.0.3/32 -d 172.18.0.3/32 -p udp -m udp --dport 22007 -j MASQUERADE
  17. -A POSTROUTING -s 172.18.0.5/32 -d 172.18.0.5/32 -p tcp -m tcp --dport 22006 -j MASQUERADE
  18. -A POSTROUTING -s 172.18.0.5/32 -d 172.18.0.5/32 -p udp -m udp --dport 22006 -j MASQUERADE
  19. -A POSTROUTING -s 172.18.0.5/32 -d 172.18.0.5/32 -p tcp -m tcp --dport 22005 -j MASQUERADE
  20. -A POSTROUTING -s 172.18.0.5/32 -d 172.18.0.5/32 -p udp -m udp --dport 22005 -j MASQUERADE
  21. -A POSTROUTING -s 172.18.0.6/32 -d 172.18.0.6/32 -p tcp -m tcp --dport 25560 -j MASQUERADE
  22. -A POSTROUTING -s 172.18.0.6/32 -d 172.18.0.6/32 -p udp -m udp --dport 25560 -j MASQUERADE
  23. -A POSTROUTING -s 172.18.0.6/32 -d 172.18.0.6/32 -p tcp -m tcp --dport 22010 -j MASQUERADE
  24. -A POSTROUTING -s 172.18.0.6/32 -d 172.18.0.6/32 -p udp -m udp --dport 22010 -j MASQUERADE
  25. -A POSTROUTING -s 172.18.0.7/32 -d 172.18.0.7/32 -p tcp -m tcp --dport 22002 -j MASQUERADE
  26. -A POSTROUTING -s 172.18.0.7/32 -d 172.18.0.7/32 -p udp -m udp --dport 22002 -j MASQUERADE
  27. -A POSTROUTING -s 172.18.0.7/32 -d 172.18.0.7/32 -p tcp -m tcp --dport 22001 -j MASQUERADE
  28. -A POSTROUTING -s 172.18.0.7/32 -d 172.18.0.7/32 -p udp -m udp --dport 22001 -j MASQUERADE
  29. -A POSTROUTING -s 172.18.0.4/32 -d 172.18.0.4/32 -p tcp -m tcp --dport 22004 -j MASQUERADE
  30. -A POSTROUTING -s 172.18.0.4/32 -d 172.18.0.4/32 -p udp -m udp --dport 22004 -j MASQUERADE
  31. -A POSTROUTING -s 172.18.0.4/32 -d 172.18.0.4/32 -p tcp -m tcp --dport 22003 -j MASQUERADE
  32. -A POSTROUTING -s 172.18.0.4/32 -d 172.18.0.4/32 -p udp -m udp --dport 22003 -j MASQUERADE
  33. -A POSTROUTING -s 172.18.0.2/32 -d 172.18.0.2/32 -p tcp -m tcp --dport 22020 -j MASQUERADE
  34. -A POSTROUTING -s 172.18.0.2/32 -d 172.18.0.2/32 -p udp -m udp --dport 22020 -j MASQUERADE
  35. -A POSTROUTING -s 172.18.0.2/32 -d 172.18.0.2/32 -p tcp -m tcp --dport 22019 -j MASQUERADE
  36. -A POSTROUTING -s 172.18.0.2/32 -d 172.18.0.2/32 -p udp -m udp --dport 22019 -j MASQUERADE
  37. -A DOCKER -i docker0 -j RETURN
  38. -A DOCKER -i pterodactyl0 -j RETURN
  39. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22011 -j DNAT --to-destination 172.18.0.3:22011
  40. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22011 -j DNAT --to-destination 172.18.0.3:22011
  41. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22007 -j DNAT --to-destination 172.18.0.3:22007
  42. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22007 -j DNAT --to-destination 172.18.0.3:22007
  43. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22006 -j DNAT --to-destination 172.18.0.5:22006
  44. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22006 -j DNAT --to-destination 172.18.0.5:22006
  45. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22005 -j DNAT --to-destination 172.18.0.5:22005
  46. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22005 -j DNAT --to-destination 172.18.0.5:22005
  47. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 25560 -j DNAT --to-destination 172.18.0.6:25560
  48. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 25560 -j DNAT --to-destination 172.18.0.6:25560
  49. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22010 -j DNAT --to-destination 172.18.0.6:22010
  50. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22010 -j DNAT --to-destination 172.18.0.6:22010
  51. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22002 -j DNAT --to-destination 172.18.0.7:22002
  52. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22002 -j DNAT --to-destination 172.18.0.7:22002
  53. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22001 -j DNAT --to-destination 172.18.0.7:22001
  54. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22001 -j DNAT --to-destination 172.18.0.7:22001
  55. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22004 -j DNAT --to-destination 172.18.0.4:22004
  56. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22004 -j DNAT --to-destination 172.18.0.4:22004
  57. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22003 -j DNAT --to-destination 172.18.0.4:22003
  58. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22003 -j DNAT --to-destination 172.18.0.4:22003
  59. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22020 -j DNAT --to-destination 172.18.0.2:22020
  60. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22020 -j DNAT --to-destination 172.18.0.2:22020
  61. -A DOCKER ! -i pterodactyl0 -p tcp -m tcp --dport 22019 -j DNAT --to-destination 172.18.0.2:22019
  62. -A DOCKER ! -i pterodactyl0 -p udp -m udp --dport 22019 -j DNAT --to-destination 172.18.0.2:22019
  63. COMMIT
  64. # Completed on Thu Sep 6 14:21:01 2018
  65. # Generated by iptables-save v1.6.0 on Thu Sep 6 14:21:01 2018
  66. *filter
  67. :INPUT ACCEPT [1693:238161]
  68. :FORWARD ACCEPT [0:0]
  69. :OUTPUT ACCEPT [1657:363908]
  70. :DOCKER - [0:0]
  71. :DOCKER-ISOLATION-STAGE-1 - [0:0]
  72. :DOCKER-ISOLATION-STAGE-2 - [0:0]
  73. :DOCKER-USER - [0:0]
  74. :f2b-sshd - [0:0]
  75. -A INPUT -p tcp -m multiport --dports 22 -j f2b-sshd
  76. -A FORWARD -j DOCKER-USER
  77. -A FORWARD -j DOCKER-ISOLATION-STAGE-1
  78. -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  79. -A FORWARD -o docker0 -j DOCKER
  80. -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
  81. -A FORWARD -i docker0 -o docker0 -j ACCEPT
  82. -A FORWARD -o pterodactyl0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  83. -A FORWARD -o pterodactyl0 -j DOCKER
  84. -A FORWARD -i pterodactyl0 ! -o pterodactyl0 -j ACCEPT
  85. -A FORWARD -i pterodactyl0 -o pterodactyl0 -j ACCEPT
  86. -A FORWARD -i tun0 -j ACCEPT
  87. -A FORWARD -i tun0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
  88. -A FORWARD -i eth0 -o tun0 -m state --state RELATED,ESTABLISHED -j ACCEPT
  89. -A DOCKER -d 172.18.0.3/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22011 -j ACCEPT
  90. -A DOCKER -d 172.18.0.3/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22011 -j ACCEPT
  91. -A DOCKER -d 172.18.0.3/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22007 -j ACCEPT
  92. -A DOCKER -d 172.18.0.3/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22007 -j ACCEPT
  93. -A DOCKER -d 172.18.0.5/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22006 -j ACCEPT
  94. -A DOCKER -d 172.18.0.5/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22006 -j ACCEPT
  95. -A DOCKER -d 172.18.0.5/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22005 -j ACCEPT
  96. -A DOCKER -d 172.18.0.5/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22005 -j ACCEPT
  97. -A DOCKER -d 172.18.0.6/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 25560 -j ACCEPT
  98. -A DOCKER -d 172.18.0.6/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 25560 -j ACCEPT
  99. -A DOCKER -d 172.18.0.6/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22010 -j ACCEPT
  100. -A DOCKER -d 172.18.0.6/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22010 -j ACCEPT
  101. -A DOCKER -d 172.18.0.7/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22002 -j ACCEPT
  102. -A DOCKER -d 172.18.0.7/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22002 -j ACCEPT
  103. -A DOCKER -d 172.18.0.7/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22001 -j ACCEPT
  104. -A DOCKER -d 172.18.0.7/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22001 -j ACCEPT
  105. -A DOCKER -d 172.18.0.4/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22004 -j ACCEPT
  106. -A DOCKER -d 172.18.0.4/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22004 -j ACCEPT
  107. -A DOCKER -d 172.18.0.4/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22003 -j ACCEPT
  108. -A DOCKER -d 172.18.0.4/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22003 -j ACCEPT
  109. -A DOCKER -d 172.18.0.2/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22020 -j ACCEPT
  110. -A DOCKER -d 172.18.0.2/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22020 -j ACCEPT
  111. -A DOCKER -d 172.18.0.2/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 22019 -j ACCEPT
  112. -A DOCKER -d 172.18.0.2/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 22019 -j ACCEPT
  113. -A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
  114. -A DOCKER-ISOLATION-STAGE-1 -i pterodactyl0 ! -o pterodactyl0 -j DOCKER-ISOLATION-STAGE-2
  115. -A DOCKER-ISOLATION-STAGE-1 -j RETURN
  116. -A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
  117. -A DOCKER-ISOLATION-STAGE-2 -o pterodactyl0 -j DROP
  118. -A DOCKER-ISOLATION-STAGE-2 -j RETURN
  119. -A DOCKER-USER -j RETURN
  120. -A f2b-sshd -s 5.188.10.176/32 -j REJECT --reject-with icmp-port-unreachable
  121. -A f2b-sshd -j RETURN
  122. COMMIT
  123. # Completed on Thu Sep 6 14:21:01 2018
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement