rendered paste body# Generated by iptables-save v1.3.5 on Mon Sep 18 08:40:22 2006
*raw
:OUTPUT -o lo ACCEPT
:PREROUTING ACCEPT [2237825:1141774210]
:OUTPUT ACCEPT [557750:196109143]
COMMIT
# Completed on Mon Sep 18 08:40:22 2006
# Generated by iptables-save v1.3.5 on Mon Sep 18 08:40:22 2006
*nat
:PREROUTING ACCEPT [968237:84026773]
:POSTROUTING ACCEPT [27007:5186279]
:OUTPUT ACCEPT [536318:45421008]
[41:2068] -A PREROUTING -d 62.94.126.26 -i eth1 -p tcp -m tcp --dport 4662 -j DNAT --to-destination 192.168.100.4
[375328:29065550] -A POSTROUTING -o eth1 -j SNAT --to-source 62.94.126.26
[0:0] -A POSTROUTING -o eth1 -j SNAT --to-source 62.94.126.26
[0:0] -A POSTROUTING -o eth1 -j SNAT --to-source 62.94.126.26
COMMIT
# Completed on Mon Sep 18 08:40:22 2006
# Generated by iptables-save v1.3.5 on Mon Sep 18 08:40:22 2006
*mangle
:PREROUTING ACCEPT [2231642:1138360917]
:INPUT ACCEPT [592450:339531194]
:FORWARD ACCEPT [1639068:798807032]
:OUTPUT ACCEPT [554854:195801810]
:POSTROUTING ACCEPT [2167574:992430433]
COMMIT
# Completed on Mon Sep 18 08:40:22 2006
# Generated by iptables-save v1.3.5 on Mon Sep 18 08:40:22 2006
*filter
:INPUT DROP [31852:2463513]
:FORWARD DROP [0:0]
:OUTPUT DROP [27272:1929283]
:allowed - [0:0]
:bad_tcp_packets - [0:0]
:icmp_packets - [0:0]
:tcp_packets - [0:0]
:udp_packets - [0:0]
[90507:11793290] -A INPUT -s 192.168.100.0/255.255.255.0 -i eth0 -j ACCEPT
[133317:35332232] -A INPUT -s 127.0.0.1 -i lo -j ACCEPT
[0:0] -A INPUT -s 192.168.100.1 -i lo -j ACCEPT
[0:0] -A INPUT -s 62.94.126.26 -i lo -j ACCEPT
[0:0] -A INPUT -d 192.168.100.255 -i eth0 -j ACCEPT
[0:0] -A INPUT -i eth0 -p udp -m udp --sport 68 --dport 67 -j ACCEPT
[359844:314660070] -A INPUT -d 62.94.126.26 -m state --state RELATED,ESTABLISHED -j ACCEPT
[21593:1204893] -A INPUT -i eth1 -p tcp -j tcp_packets
[19562:1809030] -A INPUT -i eth1 -p udp -j udp_packets
[5134:332072] -A INPUT -i eth1 -p icmp -j icmp_packets
[8670:1195469] -A INPUT -m limit --limit 3/min --limit-burst 3 -j LOG --log-prefix "IPT INPUT packet died: " --log-level 7
[1067137:617331932] -A FORWARD -p tcp -j bad_tcp_packets
[745112:83398150] -A FORWARD -i eth0 -j ACCEPT
[925280:733402436] -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
[0:0] -A FORWARD -m limit --limit 3/min --limit-burst 3 -j LOG --log-prefix "IPT FORWARD packet died: " --log-level 7
[475324:177637288] -A OUTPUT -p tcp -j bad_tcp_packets
[133317:35332232] -A OUTPUT -s 127.0.0.1 -o lo -j ACCEPT
[112370:128755957] -A OUTPUT -s 192.168.100.1 -o eth0 -j ACCEPT
[310094:34958614] -A OUTPUT -s 62.94.126.26 -o eth1 -j ACCEPT
[3898:259438] -A OUTPUT -m limit --limit 3/min --limit-burst 3 -j LOG --log-prefix "IPT OUTPUT packet died: " --log-level 7
[9201:549488] -A allowed -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
[0:0] -A allowed -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
[1:40] -A allowed -p tcp -j DROP
[242:332798] -A bad_tcp_packets -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j LOG --log-prefix "New not syn:"
[242:332798] -A bad_tcp_packets -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
[0:0] -A bad_tcp_packets -s 192.168.0.0/255.255.0.0 -i eth1 -j DROP
[0:0] -A bad_tcp_packets -s 10.0.0.0/255.0.0.0 -i eth1 -j DROP
[0:0] -A bad_tcp_packets -s 172.16.0.0/255.240.0.0 -i eth1 -j DROP
[5008:319658] -A icmp_packets -p icmp -m icmp --icmp-type 8 -j ACCEPT
[6:336] -A icmp_packets -p icmp -m icmp --icmp-type 11 -j ACCEPT
[221:12960] -A tcp_packets -p tcp -m tcp --dport 80 -j ACCEPT
[8:468] -A tcp_packets -p tcp -m tcp --dport 443 -j allowed
[16:852] -A tcp_packets -p tcp -m tcp --dport 8080 -j allowed
[0:0] -A tcp_packets -p tcp -m tcp --dport 8443 -j allowed
[0:0] -A tcp_packets -p tcp -m tcp --dport 2401 -j allowed
[8966:537804] -A tcp_packets -p tcp -m tcp --dport 22 -j allowed
[200:9828] -A tcp_packets -p tcp -m tcp --dport 25 -j allowed
[0:0] -A tcp_packets -p tcp -m tcp --dport 465 -j allowed
[12:576] -A tcp_packets -p tcp -m tcp --dport 21 -j allowed
[0:0] -A udp_packets -p udp -m udp --dport 2074 -j ACCEPT
[0:0] -A udp_packets -p udp -m udp --dport 4000 -j ACCEPT
COMMIT
# Completed on Mon Sep 18 08:40:22 2006