rendered paste body[root@p4.joshr.com 2006-12-06 12:19pm /root] # iptables -L -n
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip all -- 0.0.0.0/0 192.168.0.144
in_dst-outside all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED
LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `'IN-unknown:''
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED
LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `'PASS-unknown:''
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip all -- 192.168.0.144 0.0.0.0/0
out_dst-outside all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED
LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `'OUT-unknown:''
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain in_dst-outside (1 references)
target prot opt source destination
RETURN all -- 0.0.0.0/0 192.168.0.144
in_dst-outside_ftp_s1 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_ICMP_s2 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_ntp_s3 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_webmin_s4 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_ssh_s5 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_dns_s6 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_ssh_c7 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_dns_c8 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-outside_http_c10 all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED
LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `''IN-dst-outside':''
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain in_dst-outside_ICMP_s2 (1 references)
target prot opt source destination
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED
Chain in_dst-outside_dns_c8 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED
Chain in_dst-outside_dns_s6 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED
Chain in_dst-outside_ftp_s1 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:21 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:20 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpts:32768:61000 state RELATED,ESTABLISHED
Chain in_dst-outside_http_c10 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:80 dpts:32768:61000 state ESTABLISHED
Chain in_dst-outside_ntp_s3 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state NEW,ESTABLISHED
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:123 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:123 state NEW,ESTABLISHED
Chain in_dst-outside_smtp_c9 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:25 dpts:32768:61000 state ESTABLISHED
Chain in_dst-outside_ssh_c7 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:32768:61000 state ESTABLISHED
Chain in_dst-outside_ssh_s5 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:22 state NEW,ESTABLISHED
Chain in_dst-outside_webmin_s4 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:10000 state NEW,ESTABLISHED
Chain in_dst-privateip (1 references)
target prot opt source destination
in_dst-privateip_ftp_s1 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_ICMP_s2 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_ntp_s3 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_webmin_s4 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_ssh_s5 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_dns_s6 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_ssh_c7 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_dns_c8 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0
in_dst-privateip_http_c10 all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED
LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `''IN-dst-privateip':''
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain in_dst-privateip_ICMP_s2 (1 references)
target prot opt source destination
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED
Chain in_dst-privateip_dns_c8 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED
Chain in_dst-privateip_dns_s6 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED
Chain in_dst-privateip_ftp_s1 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:21 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:20 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpts:32768:61000 state RELATED,ESTABLISHED
Chain in_dst-privateip_http_c10 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:80 dpts:32768:61000 state ESTABLISHED
Chain in_dst-privateip_ntp_s3 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state NEW,ESTABLISHED
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:123 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:123 state NEW,ESTABLISHED
Chain in_dst-privateip_smtp_c9 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:25 dpts:32768:61000 state ESTABLISHED
Chain in_dst-privateip_ssh_c7 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:32768:61000 state ESTABLISHED
Chain in_dst-privateip_ssh_s5 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:22 state NEW,ESTABLISHED
Chain in_dst-privateip_webmin_s4 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:10000 state NEW,ESTABLISHED
Chain out_dst-outside (1 references)
target prot opt source destination
RETURN all -- 192.168.0.144 0.0.0.0/0
out_dst-outside_ftp_s1 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_ICMP_s2 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_ntp_s3 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_webmin_s4 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_ssh_s5 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_dns_s6 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_ssh_c7 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_dns_c8 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-outside_http_c10 all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED
LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `''OUT-dst-outside':''
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain out_dst-outside_ICMP_s2 (1 references)
target prot opt source destination
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED
Chain out_dst-outside_dns_c8 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED
Chain out_dst-outside_dns_s6 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED
Chain out_dst-outside_ftp_s1 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:21 dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:20 dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpts:1024:65535 state ESTABLISHED
Chain out_dst-outside_http_c10 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:80 state NEW,ESTABLISHED
Chain out_dst-outside_ntp_s3 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state ESTABLISHED
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpts:1024:65535 state ESTABLISHED
Chain out_dst-outside_smtp_c9 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:25 state NEW,ESTABLISHED
Chain out_dst-outside_ssh_c7 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:22 state NEW,ESTABLISHED
Chain out_dst-outside_ssh_s5 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:1024:65535 state ESTABLISHED
Chain out_dst-outside_webmin_s4 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:10000 dpts:1024:65535 state ESTABLISHED
Chain out_dst-privateip (1 references)
target prot opt source destination
out_dst-privateip_ftp_s1 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_ICMP_s2 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_ntp_s3 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_webmin_s4 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_ssh_s5 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_dns_s6 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_ssh_c7 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_dns_c8 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0
out_dst-privateip_http_c10 all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED
LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `''OUT-dst-privateip':''
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain out_dst-privateip_ICMP_s2 (1 references)
target prot opt source destination
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED
Chain out_dst-privateip_dns_c8 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED
Chain out_dst-privateip_dns_s6 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED
Chain out_dst-privateip_ftp_s1 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:21 dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:20 dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpts:1024:65535 state ESTABLISHED
Chain out_dst-privateip_http_c10 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:80 state NEW,ESTABLISHED
Chain out_dst-privateip_ntp_s3 (1 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state ESTABLISHED
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpts:1024:65535 state ESTABLISHED
Chain out_dst-privateip_smtp_c9 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:25 state NEW,ESTABLISHED
Chain out_dst-privateip_ssh_c7 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:22 state NEW,ESTABLISHED
Chain out_dst-privateip_ssh_s5 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:1024:65535 state ESTABLISHED
Chain out_dst-privateip_webmin_s4 (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:10000 dpts:1024:65535 state ESTABLISHED