All pastes #232066 Raw Edit

Miscellany

public text v1 · immutable
·published 2006-11-01 05:10 UTC
rendered paste body
bauer certs # iptables-save
# Generated by iptables-save v1.3.5 on Wed Nov  1 00:11:02 2006
*raw
:PREROUTING ACCEPT [1962548529:2241820898576]
:OUTPUT ACCEPT [1685392882:1469743641513]
COMMIT
# Completed on Wed Nov  1 00:11:02 2006
# Generated by iptables-save v1.3.5 on Wed Nov  1 00:11:02 2006
*nat
:PREROUTING ACCEPT [1819949:102943699]
:POSTROUTING ACCEPT [767514:47253469]
:OUTPUT ACCEPT [833345:52737250]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 20 -j DNAT --to-destination 192.168.                                                                                                                                                 0.1
-A PREROUTING -i eth0 -p tcp -m tcp --dport 21 -j DNAT --to-destination 192.168.                                                                                                                                                 0.1
-A PREROUTING -i eth0 -p tcp -m tcp --dport 3000:3200 -j DNAT --to-destination 1                                                                                                                                                 92.168.0.1
-A PREROUTING -i eth1 -p tcp -m tcp --dport 3000:3200 -j DNAT --to-destination 1                                                                                                                                                 92.168.0.1
-A PREROUTING -i eth0 -p tcp -m tcp --dport 41739 -j DNAT --to-destination 192.1                                                                                                                                                 68.0.145
-A PREROUTING -i eth0 -p udp -m udp --dport 27755 -j DNAT --to-destination 192.1                                                                                                                                                 68.0.145
-A PREROUTING -i eth0 -p tcp -m tcp --dport 4000 -j DNAT --to-destination 192.16                                                                                                                                                 8.0.1
-A PREROUTING -i eth1 -p tcp -m tcp --dport 4000 -j DNAT --to-destination 192.16                                                                                                                                                 8.0.1
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed on Wed Nov  1 00:11:02 2006
# Generated by iptables-save v1.3.5 on Wed Nov  1 00:11:02 2006
*mangle
:PREROUTING ACCEPT [1962548530:2241820898584]
:INPUT ACCEPT [1842786082:2135041002401]
:FORWARD ACCEPT [119760158:106778959263]
:OUTPUT ACCEPT [1685392555:1469743627761]
:POSTROUTING ACCEPT [1805152690:1576522532800]
COMMIT
# Completed on Wed Nov  1 00:11:02 2006
# Generated by iptables-save v1.3.5 on Wed Nov  1 00:11:02 2006
*filter
:INPUT ACCEPT [16702:679220]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [35579:50117333]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -j ACCEPT
-A INPUT -i ! eth1 -p udp -m udp --dport 67 -j REJECT --reject-with icmp-port-un                                                                                                                                                 reachable
-A INPUT -i ! eth1 -p udp -m udp --dport 53 -j REJECT --reject-with icmp-port-un                                                                                                                                                 reachable
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i ! eth1 -p tcp -m tcp --dport 0:112 -j DROP
-A INPUT -i ! eth1 -p udp -m udp --dport 114:1023 -j DROP
-A INPUT -i ! eth1 -p tcp -m tcp --dport 114:1023 -j DROP
-A INPUT -i ! eth1 -p udp -m udp --dport 0:112 -j DROP
-A INPUT -s 0.0.0.0 -p tcp -m tcp --dport 5000 -j DROP
-A FORWARD -d 192.168.0.0/255.255.0.0 -i eth1 -j DROP
-A FORWARD -s 192.168.0.0/255.255.0.0 -i eth1 -j ACCEPT
-A FORWARD -d 192.168.0.0/255.255.0.0 -i eth0 -j ACCEPT
COMMIT
# Completed on Wed Nov  1 00:11:02 2006