rendered paste body# Generated by iptables-save v1.2.11 on Fri Jan 20 17:16:28 2006
*nat
:PREROUTING ACCEPT [42200:5431164]
:POSTROUTING ACCEPT [641:39816]
:OUTPUT ACCEPT [7646:564955]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.9.1
-A PREROUTING -i eth0 -p tcp -m tcp --dport 10102 -j DNAT --to 192.168.9.1:10101
-A PREROUTING -i eth0 -p udp -m udp --dport 5060 -j DNAT --to-destination 192.168.9.1
-A PREROUTING -i eth0 -p udp -m udp --dport 10000:20000 -j DNAT --to-destination 192.168.9.1
-A POSTROUTING -o eth0 -j SNAT --to-source 66.235.69.219
COMMIT
# Completed on Fri Jan 20 17:16:28 2006
# Generated by iptables-save v1.2.11 on Fri Jan 20 17:16:28 2006
*filter
:INPUT DROP [6464:3094427]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
:bad_packets - [0:0]
:bad_tcp_packets - [0:0]
:icmp_packets - [0:0]
:tcp_inbound - [0:0]
:tcp_outbound - [0:0]
:udp_inbound - [0:0]
:udp_outbound - [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -j bad_packets
-A INPUT -d 224.0.0.1 -j DROP
-A INPUT -s 192.168.9.0/255.255.255.0 -i eth1 -j ACCEPT
-A INPUT -d 192.168.9.255 -i eth1 -j ACCEPT
-A INPUT -i eth1 -p udp -m udp --sport 68 --dport 67 -j ACCEPT
-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp -j tcp_inbound
-A INPUT -i eth0 -p udp -j udp_inbound
-A INPUT -i eth0 -p icmp -j icmp_packets
-A INPUT -d 255.255.255.255 -j DROP
-A INPUT -j LOG --log-prefix "fp=INPUT:99 a=DROP "
-A FORWARD -j bad_packets
-A FORWARD -i eth1 -p tcp -j tcp_outbound
-A FORWARD -i eth1 -p udp -j udp_outbound
-A FORWARD -i eth1 -j ACCEPT
-A FORWARD -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -j LOG --log-prefix "fp=FORWARD:99 a=DROP "
-A OUTPUT -p icmp -m state --state INVALID -j DROP
-A OUTPUT -s 127.0.0.1 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -s 192.168.9.254 -j ACCEPT
-A OUTPUT -o eth1 -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
-A OUTPUT -j LOG --log-prefix "fp=OUTPUT:99 a=DROP "
-A bad_packets -m state --state INVALID -j LOG --log-prefix "fp=bad_packets:1 a=DROP "
-A bad_packets -m state --state INVALID -j DROP
-A bad_packets -p tcp -j bad_tcp_packets
-A bad_packets -j RETURN
-A bad_tcp_packets -i eth1 -p tcp -j RETURN
-A bad_tcp_packets -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j LOG --log-prefix "fp=bad_tcp_packets:1 a=DROP "
-A bad_tcp_packets -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j DROP
-A bad_tcp_packets -p tcp -j RETURN
-A icmp_packets -p icmp -f -j LOG --log-prefix "fp=icmp_packets:1 a=DROP "
-A icmp_packets -p icmp -f -j DROP
-A icmp_packets -p icmp -m icmp --icmp-type 11 -j ACCEPT
-A icmp_packets -p icmp -j RETURN
-A tcp_inbound -p tcp -m tcp -m iprange --dport 22 --src-range 66.235.66.33-66.235.66.38 -j ACCEPT
-A tcp_inbound -p tcp -m tcp -m iprange --dport 22 --src-range 209.166.88.153-209.166.88.158 -j ACCEPT
-A tcp_inbound -p tcp -m tcp -m iprange --dport 22 --src-range 209.162.213.16-209.162.213.31 -j ACCEPT
-A tcp_inbound -p tcp -m tcp --dport 22 --src 68.144.85.171 -j ACCEPT
-A tcp_inbound -p tcp -m tcp -m iprange --dport 80 --src-range 209.162.213.16-209.162.213.31 -j ACCEPT
-A tcp_inbound -p tcp -m tcp -m iprange --dport 10102 --src-range 209.162.213.16-209.162.213.31 -j ACCEPT
-A tcp_inbound -p tcp -m tcp -m iprange --dport 10101 --src-range 209.162.213.16-209.162.213.31 -j ACCEPT
-A tcp_inbound -p tcp -j RETURN
-A tcp_outbound -p tcp -j ACCEPT
-A udp_inbound -p udp -m udp --dport 137 -j DROP
-A udp_inbound -p udp -m udp --dport 138 -j DROP
-A udp_inbound -p udp -m udp --dport 5060 -j ACCEPT
-A udp_inbound -p udp -m udp --dport 10000:20000 -j ACCEPT
-A udp_inbound -p udp -j RETURN
-A udp_outbound -p udp -j ACCEPT
COMMIT
# Completed on Fri Jan 20 17:16:28 2006
# Generated by iptables-save v1.2.11 on Fri Jan 20 17:16:28 2006
*mangle
:PREROUTING ACCEPT [16829497:4760373323]
:INPUT ACCEPT [981494:423836118]
:FORWARD ACCEPT [15835806:4335933389]
:OUTPUT ACCEPT [964676:402792944]
:POSTROUTING ACCEPT [16800245:4738713991]
COMMIT
# Completed on Fri Jan 20 17:16:28 2006