rendered paste body# ferm rules generated by import-ferm
# http://ferm.foo-projects.org/
domain ip {
table mangle {
chain PREROUTING policy ACCEPT;
chain INPUT policy ACCEPT;
chain FORWARD policy ACCEPT;
chain OUTPUT policy ACCEPT;
chain POSTROUTING policy ACCEPT;
}
table nat {
chain PREROUTING policy ACCEPT;
chain POSTROUTING policy ACCEPT;
chain OUTPUT policy ACCEPT;
}
table filter {
chain INPUT policy DROP;
chain FORWARD policy DROP;
chain OUTPUT policy ACCEPT;
chain PUB_IN;
chain PUB_OUT;
chain INPUT {
mod state NOP {
state INVALID NOP {
ULOG ulog-prefix INVALID:;
DROP;
}
state (RELATED ESTABLISHED) ACCEPT;
}
fragment NOP {
ULOG ulog-prefix FRAGMENT:;
DROP;
}
goto PUB_IN;
daddr 127.0.0.1 ACCEPT;
}
chain OUTPUT {
saddr 127.0.0.1 ACCEPT;
goto PUB_OUT;
ACCEPT;
}
chain PUB_IN {
proto tcp dport (50557 44662 42234:42244 1024:1044 113) ACCEPT;
proto udp dport (50557 44665 44672) ACCEPT;
proto tcp NOP {
saddr 85.17.16.10 dport 64172 ACCEPT;
dport 4662 ACCEPT;
}
proto udp dport (4672 4665) ACCEPT;
proto tcp dport 50000 ACCEPT;
}
chain PUB_OUT {
ACCEPT;
}
}
}