rendered paste bodyChain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state ESTABLISHED
ACCEPT icmp -- anywhere anywhere state RELATED
input_ext all -- anywhere anywhere
input_ext all -- anywhere anywhere
input_ext all -- anywhere anywhere
input_ext all -- anywhere anywhere
LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-IN-ILL-TARGET '
DROP all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWD-ILL-ROUTING '
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state NEW,RELATED,ESTABLISHED
LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-OUT-ERROR '
Chain forward_ext (0 references)
target prot opt source destination
Chain input_ext (4 references)
target prot opt source destination
DROP all -- anywhere anywhere PKTTYPE = broadcast
ACCEPT icmp -- anywhere anywhere icmp source-quench
ACCEPT icmp -- anywhere anywhere icmp echo-request
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp dpt:sunrpc flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp -- anywhere anywhere tcp dpt:sunrpc
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp dpt:http flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp -- anywhere anywhere tcp dpt:http
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp dpt:https flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp -- anywhere anywhere tcp dpt:https
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp dpt:netbios-ssn flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp dpt:microsoft-ds flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-ds
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp dpt:ssh flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT udp -- anywhere anywhere udp dpt:sunrpc
ACCEPT udp -- anywhere anywhere udp dpt:http
ACCEPT udp -- anywhere anywhere udp dpt:https
LOG udp -- anywhere anywhere limit: avg 3/min burst 5 state NEW udp dpt:sunrpc LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT udp -- anywhere anywhere udp dpt:sunrpc
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 state NEW tcp dpt:sunrpc LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT tcp -- anywhere anywhere tcp dpt:sunrpc
LOG udp -- anywhere anywhere limit: avg 3/min burst 5 state NEW udp dpt:nfs LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT udp -- anywhere anywhere udp dpt:nfs
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 state NEW tcp dpt:nfs LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT tcp -- anywhere anywhere tcp dpt:nfs
LOG udp -- anywhere anywhere limit: avg 3/min burst 5 state NEW udp dpt:46366 LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT udp -- anywhere anywhere udp dpt:46366
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 state NEW tcp dpt:56052 LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT tcp -- anywhere anywhere tcp dpt:56052
LOG udp -- anywhere anywhere limit: avg 3/min burst 5 state NEW udp dpt:33877 LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT udp -- anywhere anywhere udp dpt:33877
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 state NEW tcp dpt:50153 LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT tcp -- anywhere anywhere tcp dpt:50153
LOG udp -- anywhere anywhere limit: avg 3/min burst 5 state NEW udp dpt:40300 LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT udp -- anywhere anywhere udp dpt:40300
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 state NEW tcp dpt:49750 LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-RPC '
ACCEPT tcp -- anywhere anywhere tcp dpt:49750
DROP all -- anywhere anywhere PKTTYPE = multicast
DROP all -- anywhere anywhere PKTTYPE = broadcast
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
LOG icmp -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
LOG udp -- anywhere anywhere limit: avg 3/min burst 5 state NEW LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
DROP all -- anywhere anywhere
Chain reject_func (0 references)
target prot opt source destination
REJECT tcp -- anywhere anywhere reject-with tcp-reset
REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable
REJECT all -- anywhere anywhere reject-with icmp-proto-unreachable