rendered paste body*mangle
:PREROUTING ACCEPT [20572636:2598908470]
:INPUT ACCEPT [18356812:2400007471]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [19693135:2896959234]
:POSTROUTING ACCEPT [19693135:2896959234]
COMMIT
# Taken from the old server 26/04/2010
*nat
:PREROUTING ACCEPT [2364506:217878941]
:POSTROUTING ACCEPT [3724:778017]
:OUTPUT ACCEPT [3724:778017]
-A PREROUTING -s 79.170.0.0/255.255.0.0 -j DROP
-A PREROUTING -d 202.170.122.144 -p udp -m udp --dport 110 -j DNAT --to-destination 202.170.122.144:5060
-A PREROUTING -d 202.170.122.144 -p udp -m udp --dport 15060 -j DNAT --to-destination 202.170.122.144:5060
-A PREROUTING -d 202.170.122.144 -p udp -m udp --dport 5090 -j DNAT --to-destination 202.170.122.144:5060
-A PREROUTING -d 202.170.122.144 -p tcp -m tcp --dport 1975 -j DNAT --to-destination 202.170.122.144:80
COMMIT
# Generated by iptables-save v1.3.8 on Thu Nov 1 14:36:29 2007
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [40412:60978549]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -s 79.170.45.169 -j DROP
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -s 192.168.11.0/24 -j ACCEPT
-A FORWARD -d 192.168.11.0/24 -j ACCEPT
#-A FORWARD -j RH-Firewall-1-INPUT
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -s 79.170.0.0/255.255.0.0 -j DROP
-A RH-Firewall-1-INPUT -s 79.170.45.169 -j DROP
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p esp -j ACCEPT
-A RH-Firewall-1-INPUT -p ah -j ACCEPT
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 25 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 2049 -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 2304 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 137 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 138 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 139 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 445 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 5038 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 5900:5905 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 4569 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 5036 -j ACCEPT
-A RH-Firewall-1-INPUT -s 79.170.45.169 -p tcp --destination-port 5060 -j DROP
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 5060 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 10000:20000 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited