Advertisement
Guest User

Untitled

a guest
Jul 28th, 2018
100
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.43 KB | None | 0 0
  1. Chain INPUT (policy DROP)
  2. target prot opt source destination
  3. ufw-before-logging-input all -- anywhere anywhere
  4. ufw-before-input all -- anywhere anywhere
  5. ufw-after-input all -- anywhere anywhere
  6. ufw-after-logging-input all -- anywhere anywhere
  7. ufw-reject-input all -- anywhere anywhere
  8. ufw-track-input all -- anywhere anywhere
  9.  
  10. Chain FORWARD (policy ACCEPT)
  11. target prot opt source destination
  12. ufw-before-logging-forward all -- anywhere anywhere
  13. ufw-before-forward all -- anywhere anywhere
  14. ufw-after-forward all -- anywhere anywhere
  15. ufw-after-logging-forward all -- anywhere anywhere
  16. ufw-reject-forward all -- anywhere anywhere
  17. ufw-track-forward all -- anywhere anywhere
  18.  
  19. Chain OUTPUT (policy ACCEPT)
  20. target prot opt source destination
  21. ufw-before-logging-output all -- anywhere anywhere
  22. ufw-before-output all -- anywhere anywhere
  23. ufw-after-output all -- anywhere anywhere
  24. ufw-after-logging-output all -- anywhere anywhere
  25. ufw-reject-output all -- anywhere anywhere
  26. ufw-track-output all -- anywhere anywhere
  27.  
  28. Chain ufw-after-forward (1 references)
  29. target prot opt source destination
  30.  
  31. Chain ufw-after-input (1 references)
  32. target prot opt source destination
  33. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  34. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  35. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  36. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  37. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  38. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  39. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  40.  
  41. Chain ufw-after-logging-forward (1 references)
  42. target prot opt source destination
  43.  
  44. Chain ufw-after-logging-input (1 references)
  45. target prot opt source destination
  46. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  47.  
  48. Chain ufw-after-logging-output (1 references)
  49. target prot opt source destination
  50.  
  51. Chain ufw-after-output (1 references)
  52. target prot opt source destination
  53.  
  54. Chain ufw-before-forward (1 references)
  55. target prot opt source destination
  56. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  57. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  58. ACCEPT icmp -- anywhere anywhere icmp source-quench
  59. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  60. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  61. ACCEPT icmp -- anywhere anywhere icmp echo-request
  62. ufw-user-forward all -- anywhere anywhere
  63.  
  64. Chain ufw-before-input (1 references)
  65. target prot opt source destination
  66. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  67. DROP all -- anywhere anywhere ctstate INVALID
  68. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  69. ACCEPT icmp -- anywhere anywhere icmp source-quench
  70. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  71. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  72. ACCEPT icmp -- anywhere anywhere icmp echo-request
  73. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  74. ufw-not-local all -- anywhere anywhere
  75. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  76. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  77. qqACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  78. ufw-user-input all -- anywhere anywhere
  79.  
  80. Chain ufw-before-logging-forward (1 references)
  81. target prot opt source destination
  82.  
  83. Chain ufw-before-logging-input (1 references)
  84. target prot opt source destination
  85.  
  86. Chain ufw-before-logging-output (1 references)
  87. target prot opt source destination
  88.  
  89. Chain ufw-before-output (1 references)
  90. target prot opt source destination
  91. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  92. ufw-user-output all -- anywhere anywhere
  93.  
  94. Chain ufw-logging-allow (0 references)
  95. target prot opt source destination
  96. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  97.  
  98. Chain ufw-logging-deny (2 references)
  99. target prot opt source destination
  100. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  101. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  102.  
  103. Chain ufw-not-local (1 references)
  104. target prot opt source destination
  105. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  106. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  107. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  108. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  109. DROP all -- anywhere anywhere
  110.  
  111. Chain ufw-reject-forward (1 references)
  112. target prot opt source destination
  113.  
  114. Chain ufw-reject-input (1 references)
  115. target prot opt source destination
  116.  
  117. Chain ufw-reject-output (1 references)
  118. target prot opt source destination
  119.  
  120. Chain ufw-skip-to-policy-forward (0 references)
  121. target prot opt source destination
  122. ACCEPT all -- anywhere anywhere
  123.  
  124. Chain ufw-skip-to-policy-input (7 references)
  125. target prot opt source destination
  126. DROP all -- anywhere anywhere
  127.  
  128. Chain ufw-skip-to-policy-output (0 references)
  129. target prot opt source destination
  130. ACCEPT all -- anywhere anywhere
  131.  
  132. Chain ufw-track-forward (1 references)
  133. target prot opt source destination
  134. ACCEPT tcp -- anywhere anywhere ctstate NEW
  135. ACCEPT udp -- anywhere anywhere ctstate NEW
  136.  
  137. Chain ufw-track-input (1 references)
  138. target prot opt source destination
  139.  
  140. Chain ufw-track-output (1 references)
  141. target prot opt source destination
  142. ACCEPT tcp -- anywhere anywhere ctstate NEW
  143. ACCEPT udp -- anywhere anywhere ctstate NEW
  144.  
  145. Chain ufw-user-forward (1 references)
  146. target prot opt source destination
  147.  
  148. Chain ufw-user-input (1 references)
  149. target prot opt source destination
  150. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  151. ACCEPT udp -- anywhere anywhere udp dpt:22
  152. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  153. ACCEPT udp -- anywhere anywhere udp dpt:80
  154. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  155. ACCEPT udp -- anywhere anywhere udp dpt:443
  156. ACCEPT tcp -- anywhere anywhere tcp dpt:openvpn
  157. ACCEPT udp -- anywhere ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  158. ufw-user-input all -- anywhere anywhere
  159.  
  160. Chain ufw-before-logging-forward (1 references)
  161. target prot opt source destination
  162.  
  163. Chain ufw-before-logging-input (1 references)
  164. target prot opt source destination
  165.  
  166. Chain ufw-before-logging-output (1 references)
  167. target prot opt source destination
  168.  
  169. Chain ufw-before-output (1 references)
  170. target prot opt source destination
  171. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  172. ufw-user-output all -- anywhere anywhere
  173.  
  174. Chain ufw-logging-allow (0 references)
  175. target prot opt source destination
  176. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  177.  
  178. Chain ufw-logging-deny (2 references)
  179. target prot opt source destination
  180. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  181. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  182.  
  183. Chain ufw-not-local (1 references)
  184. target prot opt source destination
  185. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  186. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  187. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  188. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  189. DROP all -- anywhere anywhere
  190.  
  191. Chain ufw-reject-forward (1 references)
  192. target prot opt source destination
  193.  
  194. Chain ufw-reject-input (1 references)
  195. target prot opt source destination
  196.  
  197. Chain ufw-reject-output (1 references)
  198. target prot opt source destination
  199.  
  200. Chain ufw-skip-to-policy-forward (0 references)
  201. target prot opt source destination
  202. ACCEPT all -- anywhere anywhere
  203.  
  204. Chain ufw-skip-to-policy-input (7 references)
  205. target prot opt source destination
  206. DROP all -- anywhere anywhere
  207.  
  208. Chain ufw-skip-to-policy-output (0 references)
  209. target prot opt source destination
  210. ACCEPT all -- anywhere anywhere
  211.  
  212. Chain ufw-track-forward (1 references)
  213. target prot opt source destination
  214. ACCEPT tcp -- anywhere anywhere ctstate NEW
  215. ACCEPT udp -- anywhere anywhere ctstate NEW
  216.  
  217. Chain ufw-track-input (1 references)
  218. target prot opt source destination
  219.  
  220. Chain ufw-track-output (1 references)
  221. target prot opt source destination
  222. ACCEPT tcp -- anywhere anywhere ctstate NEW
  223. ACCEPT udp -- anywhere anywhere ctstate NEW
  224.  
  225. Chain ufw-user-forward (1 references)
  226. target prot opt source destination
  227.  
  228. Chain ufw-user-input (1 references)
  229. target prot opt source destination
  230. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  231. ACCEPT udp -- anywhere anywhere udp dpt:22
  232. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  233. ACCEPT udp -- anywhere anywhere udp dpt:80
  234. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  235. ACCEPT udp -- anywhere anywhere udp dpt:443
  236. ACCEPT tcp -- anywhere anywhere tcp dpt:openvpn
  237. ACCEPT udp -- anywhere anywhere udp dpt:openvpn
  238. ACCEPT tcp -- anywhere anywhere tcp dpt:81
  239. ACCEPT udp -- anywhere anywhere udp dpt:81
  240. ACCEPT tcp -- anywhere anywhere tcp dpt:http-alt
  241. ACCEPT udp -- anywhere anywhere udp dpt:http-alt
  242. ACCEPT tcp -- anywhere anywhere tcp dpt:8000
  243. ACCEPT udp -- anywhere anywhere udp dpt:8000
  244. ACCEPT udp -- anywhere anywhere udp dpt:openvpn
  245. ACCEPT tcp -- anywhere anywhere tcp dpt:mysql
  246. ACCEPT udp -- anywhere anywhere udp dpt:mysql
  247.  
  248. Chain ufw-user-limit (0 references)
  249. target prot opt source destination
  250. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  251. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  252.  
  253. Chain ufw-user-limit-accept (0 references)
  254. target prot opt source destination
  255. ACCEPT all -- anywhere anywhere
  256.  
  257. Chain ufw-user-logging-forward (0 references)
  258. target prot opt source destination
  259.  
  260. Chain ufw-user-logging-input (0 references)
  261. target prot opt source destination
  262.  
  263. Chain ufw-user-logging-output (0 references)
  264. target prot opt source destination
  265.  
  266. Chain ufw-user-output (1 references)
  267. target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement