rendered paste body
[root@dbserver root]# iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
[root@dbserver root]# iptables -l
iptables v1.2.7a: Unknown arg `-l'
Try `iptables -h' or 'iptables --help' for more information.
[root@dbserver root]# iptables
iptables v1.2.7a: no command specified
Try `iptables -h' or 'iptables --help' for more information.
[root@dbserver root]# iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- 192.168.0.0/16 anywhere
ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dpt:bootps
INETIN all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- 192.168.0.0/16 anywhere
ACCEPT all -- anywhere 192.168.0.0/16
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
INETOUT all -- anywhere anywhere
Chain DMZIN (0 references)
target prot opt source destination
Chain DMZOUT (0 references)
target prot opt source destination
Chain INETIN (1 references)
target prot opt source destination
TREJECT all -- anywhere anywhere state INVALID
ACCEPT icmp -- anywhere anywhere icmp echo-request li mit: avg 1/sec burst 5
TREJECT icmp -- anywhere anywhere icmp echo-request
ACCEPT icmp -- anywhere anywhere icmp !echo-request
TCPACCEPT tcp -- anywhere anywhere tcp dpt:ssh
TCPACCEPT tcp -- anywhere anywhere tcp dpt:smtp
TCPACCEPT tcp -- anywhere anywhere tcp dpt:domain
TCPACCEPT tcp -- anywhere anywhere tcp dpt:http
TCPACCEPT tcp -- anywhere anywhere tcp dpt:85
TCPACCEPT tcp -- anywhere anywhere tcp dpt:pop3
TCPACCEPT tcp -- anywhere anywhere tcp dpt:auth
TCPACCEPT tcp -- anywhere anywhere tcp dpt:imap
TCPACCEPT tcp -- anywhere anywhere tcp dpt:imaps
TCPACCEPT tcp -- anywhere anywhere tcp dpt:ldap
UDPACCEPT udp -- anywhere anywhere udp dpt:domain
UDPACCEPT udp -- anywhere anywhere udp dpt:auth
ACCEPT all -- anywhere anywhere state ESTABLISHED
TCPACCEPT tcp -- anywhere anywhere tcp dpts:1024:65535 state RELATED
UDPACCEPT udp -- anywhere anywhere udp dpts:1024:65535 state RELATED
TREJECT all -- anywhere anywhere
Chain INETOUT (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain LDROP (0 references)
target prot opt source destination
LOG tcp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `TCP Dropped '
LOG udp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `UDP Dropped '
LOG icmp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `ICMP Dropped '
LOG all -f anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `FRAGMENT Dropped '
DROP all -- anywhere anywhere
Chain LREJECT (0 references)
target prot opt source destination
LOG tcp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `TCP Rejected '
LOG udp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `UDP Rejected '
LOG icmp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `ICMP Dropped '
LOG all -f anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `FRAGMENT Rejected '
REJECT all -- anywhere anywhere reject-with icmp-por t-unreachable
Chain LTREJECT (0 references)
target prot opt source destination
LOG tcp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `TCP Rejected '
LOG udp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `UDP Rejected '
LOG icmp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `ICMP Dropped '
LOG all -f anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `FRAGMENT Rejected '
REJECT tcp -- anywhere anywhere reject-with tcp-rese t
REJECT udp -- anywhere anywhere reject-with icmp-por t-unreachable
DROP icmp -- anywhere anywhere
REJECT all -- anywhere anywhere reject-with icmp-por t-unreachable
Chain TCPACCEPT (11 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp flags:SYN,RST,AC K/SYN limit: avg 20/sec burst 5
LOG tcp -- anywhere anywhere tcp flags:SYN,RST,AC K/SYN limit: avg 2/sec burst 5 LOG level warning prefix `Possible SynFlood '
TREJECT tcp -- anywhere anywhere tcp flags:SYN,RST,AC K/SYN
ACCEPT tcp -- anywhere anywhere tcp flags:!SYN,RST,A CK/SYN
LOG all -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `Mismatch in TCPACCEPT '
TREJECT all -- anywhere anywhere
Chain TREJECT (6 references)
target prot opt source destination
REJECT tcp -- anywhere anywhere reject-with tcp-rese t
REJECT udp -- anywhere anywhere reject-with icmp-por t-unreachable
DROP icmp -- anywhere anywhere
REJECT all -- anywhere anywhere reject-with icmp-por t-unreachable
Chain UDPACCEPT (3 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere
LOG all -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `Mismatch on UDPACCEPT '
TREJECT all -- anywhere anywhere
[root@dbserver root]#