Chain INPUT (policy DROP 10 packets, 992 bytes)
pkts bytes target prot opt in out source destination
1944 128K ACCEPT all -- lo any anywhere anywhere
0 0 vlan6_in all -- vlan6 any anywhere anywhere
857 504K br0_in all -- br0 any anywhere anywhere
6 6604 common all -- any any anywhere anywhere
6 6604 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:INPUT:REJECT:'
6 6604 reject all -- any any anywhere anywhere
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 vlan6_fwd all -- vlan6 any anywhere anywhere
0 0 br0_fwd all -- br0 any anywhere anywhere
0 0 common all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:FORWARD:REJECT:'
0 0 reject all -- any any anywhere anywhere
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- any vlan6 anywhere anywhere udp dpts:bootps:bootpc
1944 128K ACCEPT all -- any lo anywhere anywhere
2 1060 ACCEPT icmp -- any any anywhere anywhere state NEW,RELATED,ESTABLISHED
0 0 fw2net all -- any vlan6 anywhere anywhere
450 60114 fw2loc all -- any br0 anywhere anywhere
469 30250 common all -- any any anywhere anywhere
469 30250 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:OUTPUT:REJECT:'
469 30250 reject all -- any any anywhere anywhere
Chain @net2all (2 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- any any anywhere anywhere limit: avg 10/sec burst 40
0 0 DROP all -- any any anywhere anywhere
Chain all2all (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
0 0 common all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:all2all:REJECT:'
0 0 reject all -- any any anywhere anywhere
Chain br0_fwd (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- any any anywhere anywhere
0 0 loc2net all -- any vlan6 anywhere anywhere
0 0 loc2loc all -- any br0 anywhere anywhere
Chain br0_in (1 references)
pkts bytes target prot opt in out source destination
857 504K dynamic all -- any any anywhere anywhere
0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request
857 504K loc2fw all -- any any anywhere anywhere
Chain common (5 references)
pkts bytes target prot opt in out source destination
0 0 icmpdef icmp -- any any anywhere anywhere
0 0 DROP tcp -- any any anywhere anywhere state INVALID
0 0 REJECT udp -- any any anywhere anywhere udp dpts:netbios-ns:netbios-ssn reject-with icmp-port-unreachable
0 0 REJECT udp -- any any anywhere anywhere udp dpt:445 reject-with icmp-port-unreachable
0 0 reject tcp -- any any anywhere anywhere tcp dpt:135
0 0 DROP udp -- any any anywhere anywhere udp dpt:1900
0 0 DROP all -- any any anywhere 255.255.255.255
0 0 DROP all -- any any anywhere 224.0.0.0/4
0 0 reject tcp -- any any anywhere anywhere tcp dpt:auth
0 0 DROP udp -- any any anywhere anywhere state NEW udp spt:domain
0 0 DROP all -- any any anywhere 192.168.1.255
Chain dynamic (4 references)
pkts bytes target prot opt in out source destination
Chain fw2loc (1 references)
pkts bytes target prot opt in out source destination
430 56064 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
20 4050 ACCEPT all -- any any anywhere anywhere
Chain fw2net (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:domain
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:domain
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:ntp
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:smtp
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:www
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:2345
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:3495
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:7070
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ftp
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:5050
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:5050
0 0 all2all all -- any any anywhere anywhere
Chain icmpdef (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request
Chain loc2fw (1 references)
pkts bytes target prot opt in out source destination
771 495K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
3 159 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ssh
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:domain
5 300 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:www
78 8404 ACCEPT all -- any any anywhere anywhere
Chain loc2loc (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
0 0 ACCEPT all -- any any anywhere anywhere
Chain loc2net (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
0 0 ACCEPT all -- any any anywhere anywhere
Chain net2all (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
0 0 common all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:net2all:DROP:'
0 0 DROP all -- any any anywhere anywhere
Chain net2fw (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 @net2all tcp -- any any anywhere anywhere tcp flags:SYN,RST,ACK/SYN
0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:5050
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:5050
0 0 LOG tcp -- any any anywhere anywhere state NEW tcp dpt:ftp LOG level info prefix `Shorewall:net2fw:ACCEPT:'
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ftp
0 0 DROP tcp -- any any anywhere anywhere state NEW tcp dpt:135
0 0 DROP udp -- any any anywhere anywhere state NEW udp dpts:netbios-ns:netbios-ssn
0 0 DROP udp -- any any anywhere anywhere state NEW udp dpt:445
0 0 net2all all -- any any anywhere anywhere
Chain net2loc (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 @net2all tcp -- any any anywhere anywhere tcp flags:SYN,RST,ACK/SYN
0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
0 0 DROP tcp -- any any anywhere anywhere state NEW tcp dpt:135
0 0 DROP udp -- any any anywhere anywhere state NEW udp dpts:netbios-ns:netbios-ssn
0 0 DROP udp -- any any anywhere anywhere state NEW udp dpt:445
0 0 net2all all -- any any anywhere anywhere
Chain newnotsyn (9 references)
pkts bytes target prot opt in out source destination
3 159 DROP all -- any any anywhere anywhere
Chain reject (6 references)
pkts bytes target prot opt in out source destination
8 5760 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
467 31094 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain shorewall (0 references)
pkts bytes target prot opt in out source destination
Chain upnp_fwd (1 references)
pkts bytes target prot opt in out source destination
Chain vlan6_fwd (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- any any anywhere anywhere
0 0 upnp_fwd all -- any any anywhere anywhere
0 0 net2loc all -- any br0 anywhere anywhere
Chain vlan6_in (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- any any anywhere anywhere
0 0 ACCEPT udp -- any any anywhere anywhere udp dpts:bootps:bootpc
0 0 DROP icmp -- any any anywhere anywhere icmp echo-request
0 0 net2fw all -- any any anywhere anywhere