API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Feb 24th, 2022
80
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.82 KB | None | 0 0
raw download clone embed print report
  1. sudo iptables -L
  2. Chain INPUT (policy DROP)
  3. target prot opt source destination
  4. f2b-sshd tcp -- anywhere anywhere multiport dports ssh
  5. ufw-before-logging-input all -- anywhere anywhere
  6. ufw-before-input all -- anywhere anywhere
  7. ufw-after-input all -- anywhere anywhere
  8. ufw-after-logging-input all -- anywhere anywhere
  9. ufw-reject-input all -- anywhere anywhere
  10. ufw-track-input all -- anywhere anywhere
  11.  
  12. Chain FORWARD (policy DROP)
  13. target prot opt source destination
  14. ufw-before-logging-forward all -- anywhere anywhere
  15. ufw-before-forward all -- anywhere anywhere
  16. ufw-after-forward all -- anywhere anywhere
  17. ufw-after-logging-forward all -- anywhere anywhere
  18. ufw-reject-forward all -- anywhere anywhere
  19. ufw-track-forward all -- anywhere anywhere
  20.  
  21. Chain OUTPUT (policy ACCEPT)
  22. target prot opt source destination
  23. ufw-before-logging-output all -- anywhere anywhere
  24. ufw-before-output all -- anywhere anywhere
  25. ufw-after-output all -- anywhere anywhere
  26. ufw-after-logging-output all -- anywhere anywhere
  27. ufw-reject-output all -- anywhere anywhere
  28. ufw-track-output all -- anywhere anywhere
  29.  
  30. Chain f2b-sshd (1 references)
  31. target prot opt source destination
  32. REJECT all -- 43.154.201.167 anywhere reject-with icmp-port-unreachable
  33. REJECT all -- 112.85.42.128 anywhere reject-with icmp-port-unreachable
  34. REJECT all -- 119.45.199.177 anywhere reject-with icmp-port-unreachable
  35. REJECT all -- 45.9.20.25 anywhere reject-with icmp-port-unreachable
  36. REJECT all -- 112.85.42.229 anywhere reject-with icmp-port-unreachable
  37. REJECT all -- 135.205.78.34.bc.googleusercontent.com anywhere reject-with icmp-port-unreachable
  38. REJECT all -- 167.99.82.172 anywhere reject-with icmp-port-unreachable
  39. RETURN all -- anywhere anywhere
  40.  
  41. Chain ufw-after-forward (1 references)
  42. target prot opt source destination
  43.  
  44. Chain ufw-after-input (1 references)
  45. target prot opt source destination
  46. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
  47. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
  48. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
  49. ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
  50. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
  51. ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
  52. ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  53.  
  54. Chain ufw-after-logging-forward (1 references)
  55. target prot opt source destination
  56. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  57.  
  58. Chain ufw-after-logging-input (1 references)
  59. target prot opt source destination
  60. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  61.  
  62. Chain ufw-after-logging-output (1 references)
  63. target prot opt source destination
  64.  
  65. Chain ufw-after-output (1 references)
  66. target prot opt source destination
  67.  
  68. Chain ufw-before-forward (1 references)
  69. target prot opt source destination
  70. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  71. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  72. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  73. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  74. ACCEPT icmp -- anywhere anywhere icmp echo-request
  75. ufw-user-forward all -- anywhere anywhere
  76.  
  77. Chain ufw-before-input (1 references)
  78. target prot opt source destination
  79. ACCEPT all -- anywhere anywhere
  80. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  81. ufw-logging-deny all -- anywhere anywhere ctstate INVALID
  82. DROP all -- anywhere anywhere ctstate INVALID
  83. ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
  84. ACCEPT icmp -- anywhere anywhere icmp time-exceeded
  85. ACCEPT icmp -- anywhere anywhere icmp parameter-problem
  86. ACCEPT icmp -- anywhere anywhere icmp echo-request
  87. ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
  88. ufw-not-local all -- anywhere anywhere
  89. ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
  90. ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
  91. ufw-user-input all -- anywhere anywhere
  92.  
  93. Chain ufw-before-logging-forward (1 references)
  94. target prot opt source destination
  95.  
  96. Chain ufw-before-logging-input (1 references)
  97. target prot opt source destination
  98.  
  99. Chain ufw-before-logging-output (1 references)
  100. target prot opt source destination
  101.  
  102. Chain ufw-before-output (1 references)
  103. target prot opt source destination
  104. ACCEPT all -- anywhere anywhere
  105. ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
  106. ufw-user-output all -- anywhere anywhere
  107.  
  108. Chain ufw-logging-allow (0 references)
  109. target prot opt source destination
  110. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
  111.  
  112. Chain ufw-logging-deny (2 references)
  113. target prot opt source destination
  114. RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10
  115. LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
  116.  
  117. Chain ufw-not-local (1 references)
  118. target prot opt source destination
  119. RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
  120. RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
  121. RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
  122. ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
  123. DROP all -- anywhere anywhere
  124.  
  125. Chain ufw-reject-forward (1 references)
  126. target prot opt source destination
  127.  
  128. Chain ufw-reject-input (1 references)
  129. target prot opt source destination
  130.  
  131. Chain ufw-reject-output (1 references)
  132. target prot opt source destination
  133.  
  134. Chain ufw-skip-to-policy-forward (0 references)
  135. target prot opt source destination
  136. DROP all -- anywhere anywhere
  137.  
  138. Chain ufw-skip-to-policy-input (7 references)
  139. target prot opt source destination
  140. DROP all -- anywhere anywhere
  141.  
  142. Chain ufw-skip-to-policy-output (0 references)
  143. target prot opt source destination
  144. ACCEPT all -- anywhere anywhere
  145.  
  146. Chain ufw-track-forward (1 references)
  147. target prot opt source destination
  148.  
  149. Chain ufw-track-input (1 references)
  150. target prot opt source destination
  151.  
  152. Chain ufw-track-output (1 references)
  153. target prot opt source destination
  154. ACCEPT tcp -- anywhere anywhere ctstate NEW
  155. ACCEPT udp -- anywhere anywhere ctstate NEW
  156.  
  157. Chain ufw-user-forward (1 references)
  158. target prot opt source destination
  159.  
  160. Chain ufw-user-input (1 references)
  161. target prot opt source destination
  162. ACCEPT tcp -- anywhere anywhere tcp dpt:http
  163. ACCEPT udp -- anywhere anywhere udp dpt:80
  164. ACCEPT tcp -- anywhere anywhere tcp dpt:https
  165. ACCEPT udp -- anywhere anywhere udp dpt:https
  166. ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
  167. ACCEPT udp -- anywhere anywhere udp dpt:22
  168. ACCEPT tcp -- anywhere anywhere tcp dpt:51820
  169. ACCEPT udp -- anywhere anywhere udp dpt:51820
  170.  
  171. Chain ufw-user-limit (0 references)
  172. target prot opt source destination
  173. LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
  174. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  175.  
  176. Chain ufw-user-limit-accept (0 references)
  177. target prot opt source destination
  178. ACCEPT all -- anywhere anywhere
  179.  
  180. Chain ufw-user-logging-forward (0 references)
  181. target prot opt source destination
  182.  
  183. Chain ufw-user-logging-input (0 references)
  184. target prot opt source destination
  185.  
  186. Chain ufw-user-logging-output (0 references)
  187. target prot opt source destination
  188.  
  189. Chain ufw-user-output (1 references)
  190. target prot opt source destination
  191.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!