rendered paste body#The following output is from ipTables -L with only 1 of these services running
at a time:
iptables by itself,
fail2ban
peerguardian
firehol
ipTables by itself:
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
---------------
Fail2Ban:
Chain INPUT (policy ACCEPT)
target prot opt source destination
fail2ban-SSH tcp -- anywhere anywhere tcp dpt:ssh
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain fail2ban-SSH (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
-----------------
PeerGuardian
Chain INPUT (policy ACCEPT)
target prot opt source destination
PEERGUARDIAN all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
PEERGUARDIAN all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
PEERGUARDIAN all -- anywhere anywhere
Chain PEERGUARDIAN (3 references)
target prot opt source destination
QUEUE all -- anywhere anywhere
----------------
Firehol
Chain BL_IN_BI (2 references)
target prot opt source destination
DROP all -- anywhere anywhere
Chain BL_IN_UNI (0 references)
target prot opt source destination
DROP all -- anywhere anywhere state NEW
Chain BL_OUT_BI (2 references)
target prot opt source destination
REJECT tcp -- anywhere anywhere reject-with tcp-reset
REJECT all -- anywhere anywhere reject-with icmp-host-unreachable
Chain INPUT (policy DROP)
target prot opt source destination
BL_IN_BI all -- 73.182.176.1 anywhere
ACCEPT all -- anywhere anywhere
in_world all -- anywhere anywhere
in_lan all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'IN-unknown:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
BL_OUT_BI all -- anywhere 73.182.176.1
BL_IN_BI all -- 73.182.176.1 anywhere
in_masq all -- anywhere anywhere
out_masq all -- anywhere anywhere
in_services all -- anywhere anywhere
out_services all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PASS-unknown:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain OUTPUT (policy DROP)
target prot opt source destination
BL_OUT_BI all -- anywhere 73.182.176.1
ACCEPT all -- anywhere anywhere
out_world all -- anywhere anywhere
out_lan all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'OUT-unknown:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain in_lan (1 references)
target prot opt source destination
DROP all -- anywhere anywhere state INVALID
pr_lan_fragments all -f anywhere anywhere
pr_lan_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN
pr_lan_icmpflood icmp -- anywhere anywhere icmp echo-request
pr_lan_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
pr_lan_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
pr_lan_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
pr_lan_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
pr_lan_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
pr_lan_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
pr_lan_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
in_lan_dhcp_s1 all -- anywhere anywhere
in_lan_dns_s2 all -- anywhere anywhere
in_lan_ssh_s3 all -- anywhere anywhere
in_lan_samba_s4 all -- anywhere anywhere
in_lan_ntp_s5 all -- anywhere anywhere
in_lan_cups_s6 all -- anywhere anywhere
in_lan_ping_s7 all -- anywhere anywhere
in_lan_all_c8 all -- anywhere anywhere
in_lan_irc_c9 all -- anywhere anywhere
in_lan_ftp_c10 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
ULOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-lan':'' queue_threshold 1
REJECT tcp -- anywhere anywhere reject-with tcp-reset
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-lan':'' queue_threshold 1
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain in_lan_all_c8 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state ESTABLISHED
Chain in_lan_cups_s6 (1 references)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ipp state NEW,ESTABLISHED
DROP tcp -- anywhere anywhere tcp spt:ipp dpt:ipp state NEW,ESTABLISHED
DROP udp -- anywhere anywhere udp spts:1024:65535 dpt:ipp state NEW,ESTABLISHED
DROP udp -- anywhere anywhere udp spt:ipp dpt:ipp state NEW,ESTABLISHED
Chain in_lan_dhcp_s1 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:bootpc dpt:bootps state NEW,ESTABLISHED
Chain in_lan_dns_s2 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt:domain state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:domain state NEW,ESTABLISHED
Chain in_lan_ftp_c10 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:32768:61000 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:32768:61000 state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:32768:61000 state ESTABLISHED
Chain in_lan_irc_c9 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:32768:61000 state ESTABLISHED
Chain in_lan_ntp_s5 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:ntp dpt:ntp state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:ntp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ntp dpt:ntp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ntp state NEW,ESTABLISHED
Chain in_lan_ping_s7 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state NEW,ESTABLISHED icmp echo-request
Chain in_lan_samba_s4 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:netbios-ssn state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:microsoft-ds state NEW,ESTABLISHED
Chain in_lan_ssh_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ssh state NEW,ESTABLISHED
Chain in_masq (1 references)
target prot opt source destination
DROP all -- anywhere anywhere state INVALID
pr_masq_fragments all -f anywhere anywhere
pr_masq_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN
pr_masq_icmpflood icmp -- anywhere anywhere icmp echo-request
pr_masq_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
pr_masq_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
pr_masq_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
pr_masq_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
pr_masq_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
pr_masq_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
pr_masq_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
in_masq_all_s1 all -- anywhere anywhere
in_masq_irc_s2 all -- anywhere anywhere
in_masq_ftp_s3 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
Chain in_masq_all_s1 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED
Chain in_masq_ftp_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp-data state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state RELATED,ESTABLISHED
Chain in_masq_irc_s2 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ircd state NEW,ESTABLISHED
Chain in_services (1 references)
target prot opt source destination
DROP all -- anywhere anywhere state INVALID
pr_services_fragments all -f anywhere anywhere
pr_services_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN
pr_services_icmpflood icmp -- anywhere anywhere icmp echo-request
pr_services_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
pr_services_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
pr_services_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
pr_services_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
pr_services_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
pr_services_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
pr_services_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
in_services_all_s1 all -- anywhere anywhere
in_services_irc_s2 all -- anywhere anywhere
in_services_ftp_s3 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
Chain in_services_all_s1 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED
Chain in_services_ftp_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp-data state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state RELATED,ESTABLISHED
Chain in_services_irc_s2 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ircd state NEW,ESTABLISHED
Chain in_world (1 references)
target prot opt source destination
DROP all -- anywhere anywhere state INVALID
pr_world_fragments all -f anywhere anywhere
pr_world_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN
pr_world_icmpflood icmp -- anywhere anywhere icmp echo-request
pr_world_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
pr_world_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
pr_world_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
pr_world_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
pr_world_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
pr_world_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
pr_world_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
in_world_ping_s1 all -- anywhere anywhere
in_world_ssh_s2 all -- anywhere anywhere
in_world_bt1_s3 all -- anywhere anywhere
in_world_dhcp_s4 all -- anywhere anywhere
in_world_all_c5 all -- anywhere anywhere
in_world_irc_c6 all -- anywhere anywhere
in_world_ftp_c7 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
ULOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-world':'' queue_threshold 1
REJECT tcp -- anywhere anywhere reject-with tcp-reset
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-world':'' queue_threshold 1
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain in_world_all_c5 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state ESTABLISHED
Chain in_world_bt1_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpts:49752:49800 state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp dpts:49752:49800 state NEW,ESTABLISHED
Chain in_world_dhcp_s4 (1 references)
target prot opt source destination
DROP udp -- anywhere anywhere udp spt:bootpc dpt:bootps state NEW,ESTABLISHED
Chain in_world_ftp_c7 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:32768:61000 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:32768:61000 state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:32768:61000 state ESTABLISHED
Chain in_world_irc_c6 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:32768:61000 state ESTABLISHED
Chain in_world_ping_s1 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state NEW,ESTABLISHED icmp echo-request
Chain in_world_ssh_s2 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ssh state NEW,ESTABLISHED
Chain out_lan (1 references)
target prot opt source destination
out_lan_dhcp_s1 all -- anywhere anywhere
out_lan_dns_s2 all -- anywhere anywhere
out_lan_ssh_s3 all -- anywhere anywhere
out_lan_samba_s4 all -- anywhere anywhere
out_lan_ntp_s5 all -- anywhere anywhere
out_lan_cups_s6 all -- anywhere anywhere
out_lan_ping_s7 all -- anywhere anywhere
out_lan_all_c8 all -- anywhere anywhere
out_lan_irc_c9 all -- anywhere anywhere
out_lan_ftp_c10 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
ULOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-lan':'' queue_threshold 1
REJECT tcp -- anywhere anywhere reject-with tcp-reset
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-lan':'' queue_threshold 1
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain out_lan_all_c8 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED
Chain out_lan_cups_s6 (1 references)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp spt:ipp dpts:1024:65535 state ESTABLISHED
DROP tcp -- anywhere anywhere tcp spt:ipp dpt:ipp state ESTABLISHED
DROP udp -- anywhere anywhere udp spt:ipp dpts:1024:65535 state ESTABLISHED
DROP udp -- anywhere anywhere udp spt:ipp dpt:ipp state ESTABLISHED
Chain out_lan_dhcp_s1 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc state ESTABLISHED
Chain out_lan_dns_s2 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:domain state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:domain state ESTABLISHED
Chain out_lan_ftp_c10 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp-data state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpts:1024:65535 state RELATED,ESTABLISHED
Chain out_lan_irc_c9 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ircd state NEW,ESTABLISHED
Chain out_lan_ntp_s5 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:ntp dpt:ntp state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:ntp dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ntp dpt:ntp state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ntp dpts:1024:65535 state ESTABLISHED
Chain out_lan_ping_s7 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state ESTABLISHED icmp echo-reply
Chain out_lan_samba_s4 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:netbios-ssn dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:microsoft-ds dpts:1024:65535 state ESTABLISHED
Chain out_lan_ssh_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ssh dpts:1024:65535 state ESTABLISHED
Chain out_masq (1 references)
target prot opt source destination
out_masq_all_s1 all -- anywhere anywhere
out_masq_irc_s2 all -- anywhere anywhere
out_masq_ftp_s3 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
Chain out_masq_all_s1 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state ESTABLISHED
Chain out_masq_ftp_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state ESTABLISHED
Chain out_masq_irc_s2 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:1024:65535 state ESTABLISHED
Chain out_services (1 references)
target prot opt source destination
out_services_all_s1 all -- anywhere anywhere
out_services_irc_s2 all -- anywhere anywhere
out_services_ftp_s3 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
Chain out_services_all_s1 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state ESTABLISHED
Chain out_services_ftp_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state ESTABLISHED
Chain out_services_irc_s2 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:1024:65535 state ESTABLISHED
Chain out_world (1 references)
target prot opt source destination
out_world_ping_s1 all -- anywhere anywhere
out_world_ssh_s2 all -- anywhere anywhere
out_world_bt1_s3 all -- anywhere anywhere
out_world_dhcp_s4 all -- anywhere anywhere
out_world_all_c5 all -- anywhere anywhere
out_world_irc_c6 all -- anywhere anywhere
out_world_ftp_c7 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
ULOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-world':'' queue_threshold 1
REJECT tcp -- anywhere anywhere reject-with tcp-reset
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-world':'' queue_threshold 1
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain out_world_all_c5 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED
Chain out_world_bt1_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:49752:49800 state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spts:49752:49800 state ESTABLISHED
Chain out_world_dhcp_s4 (1 references)
target prot opt source destination
DROP udp -- anywhere anywhere udp spt:bootps dpt:bootpc state ESTABLISHED
Chain out_world_ftp_c7 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp-data state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpts:1024:65535 state RELATED,ESTABLISHED
Chain out_world_irc_c6 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ircd state NEW,ESTABLISHED
Chain out_world_ping_s1 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state ESTABLISHED icmp echo-reply
Chain out_world_ssh_s2 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ssh dpts:1024:65535 state ESTABLISHED
Chain pr_lan_fragments (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_lan_icmpflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 100/sec burst 50
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_lan_malbad (4 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_lan_malnull (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_lan_malxmas (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_lan_nosyn (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_lan_synflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 100/sec burst 50
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_masq_fragments (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_masq_icmpflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 100/sec burst 50
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_masq_malbad (4 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_masq_malnull (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_masq_malxmas (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_masq_nosyn (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_masq_synflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 100/sec burst 50
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_services_fragments (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_services_icmpflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 100/sec burst 50
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_services_malbad (4 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_services_malnull (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_services_malxmas (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_services_nosyn (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_services_synflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 100/sec burst 50
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_world_fragments (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_world_icmpflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 100/sec burst 50
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_world_malbad (4 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_world_malnull (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_world_malxmas (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_world_nosyn (1 references)
target prot opt source destination
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1
DROP all -- anywhere anywhere
Chain pr_world_synflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 100/sec burst 50
ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1
DROP all -- anywhere anywhere