All pastes #1021360 Raw Edit

iptables

public text v1 · immutable
#1021360 ·published 2008-05-17 22:20 UTC
rendered paste body
root@rms-desktop:/home/rms# iptables -L -v
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  615 65355 ACCEPT     0    --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED 
    0     0 DROP       0    --  any    any     anywhere             anywhere            state INVALID 
   25  3439 ETH0-IF    0    --  eth0   any     192.168.0.0/24       anywhere            
   14  2732 ETH1-IF    0    --  eth1   any     10.0.0.0/8           anywhere            
  473 31321 ACCEPT     0    --  lo     any     anywhere             anywhere            
   40  8463 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `DFT_INPUT_DROP' queue_threshold 1 
   40  8463 DROP       0    --  any    any     anywhere             anywhere            

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   30  4544 ACCEPT     0    --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED 
    0     0 DROP       0    --  any    any     anywhere             anywhere            state INVALID 
    4   240 ETH0-ETH1  0    --  eth0   eth1    192.168.0.0/24       10.0.0.0/8          
    0     0 ETH1-ETH0  0    --  eth1   eth0    10.0.0.0/8           192.168.0.0/24      
    0     0 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `DFT_FORWARD_DROP' queue_threshold 1 
    0     0 DROP       0    --  any    any     anywhere             anywhere            

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  621 64755 ACCEPT     0    --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED 
    0     0 DROP       0    --  any    any     anywhere             anywhere            state INVALID 
    0     0 IF-ETH1    0    --  any    eth1    anywhere             10.0.0.0/8          
    0     0 IF-ETH0    0    --  any    eth0    anywhere             192.168.0.0/24      
  473 31321 ACCEPT     0    --  any    lo      anywhere             anywhere            
    0     0 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `DFT_OUTPUT_DROP' queue_threshold 1 
    0     0 DROP       0    --  any    any     anywhere             anywhere            

Chain ETH0-ETH1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    3   180 NFQUEUE    tcp  --  any    any     anywhere             anywhere            tcp spts:1024:65535 dpt:www flags:FIN,SYN,RST,ACK/SYN state NEW NFQUEUE num 0
    1    60 NFQUEUE    tcp  --  any    any     anywhere             anywhere            tcp spts:1024:65535 dpt:ssh flags:FIN,SYN,RST,ACK/SYN state NEW NFQUEUE num 0
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            icmp echo-request state NEW 
    0     0 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `F0D:ETH0-ETH1 DROP' queue_threshold 1 
    0     0 DROP       0    --  any    any     anywhere             anywhere            

Chain ETH0-IF (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            icmp echo-request state NEW 
    9   540 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp spts:1024:65535 dpt:4129 flags:FIN,SYN,RST,ACK/SYN state NEW 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp spts:1024:65535 dpt:ssh flags:FIN,SYN,RST,ACK/SYN state NEW 
   16  2899 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `I0D:ETH0-IF DROP' queue_threshold 1 
   16  2899 DROP       0    --  any    any     anywhere             anywhere            

Chain ETH1-ETH0 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `F0D:ETH1-ETH0 DROP' queue_threshold 1 
    0     0 DROP       0    --  any    any     anywhere             anywhere            

Chain ETH1-IF (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   14  2732 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `I0D:ETH1-IF DROP' queue_threshold 1 
   14  2732 DROP       0    --  any    any     anywhere             anywhere            

Chain IF-ETH0 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            icmp echo-request state NEW 
    0     0 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `O0D:IF-ETH0 DROP' queue_threshold 1 
    0     0 DROP       0    --  any    any     anywhere             anywhere            

Chain IF-ETH1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp spts:1024:65535 dpt:www flags:FIN,SYN,RST,ACK/SYN state NEW 
    0     0 ULOG       0    --  any    any     anywhere             anywhere            ULOG copy_range 0 nlgroup 1 prefix `O0D:IF-ETH1 DROP' queue_threshold 1 
    0     0 DROP       0    --  any    any     anywhere             anywhere