rendered paste body# Generated by iptables-save v1.2.11 on Wed May 17 18:38:10 2006
*filter
:INPUT DROP [25252:15821254]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [10483:631359]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -p icmp -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 6700,7000 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 7800,9000 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 139,445 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 3128 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 42 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -i eth1 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i eth1 -p udp -m udp --dport 67 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 67 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 68 -j ACCEPT
-A INPUT -i eth1 -p udp -m udp --dport 68 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 20 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 21 -j ACCEPT
-A FORWARD -i eth1 -p udp -m udp --dport 20 -j ACCEPT
-A FORWARD -i eth1 -p udp -m udp --dport 21 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 25 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 110 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 80 -j ACCEPT
-A FORWARD -i eth1 -p udp -m udp --dport 123 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 443 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 1863 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 2096 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 5000 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 5001 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 5005 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 5050 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 5100 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 6660:6670 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 7000 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 28805 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 32196 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 27315 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 51215 -j ACCEPT
-A FORWARD -i eth1 -p tcp -m tcp --dport 53 -j ACCEPT
-A FORWARD -i eth1 -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Wed May 17 18:38:10 2006
# Generated by iptables-save v1.2.11 on Wed May 17 18:38:10 2006
*nat
:PREROUTING ACCEPT [16686:11824804]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [10164:613831]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A POSTROUTING -j MASQUERADE
COMMIT
# Completed on Wed May 17 18:38:10 2006