All pastes #469933 Raw Edit

Mine

public text v1 · immutable
·published 2007-05-03 23:44 UTC
rendered paste body
Firewall Management
View Configuration

This page shows the iptables configuration :
FILTER
Chain INPUT (policy DROP)
target prot opt source destination
state_chk all -- anywhere anywhere
local_chk all -- anywhere anywhere
PPPconn all -- anywhere anywhere
denylog all -- BASE-ADDRESS.MCAST.NET/4 anywhere
denylog all -- anywhere BASE-ADDRESS.MCAST.NET/4
InboundICMP icmp -- anywhere anywhere
denylog icmp -- anywhere anywhere
InboundTCP tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN
denylog tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN
InboundUDP udp -- anywhere anywhere
denylog udp -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp spts:bootps:bootpc
gre-in gre -- anywhere anywhere
denylog gre -- anywhere anywhere
denylog all -- anywhere anywhere

Chain FORWARD (policy DROP)
target prot opt source destination
ForwardDenyLocals all -- anywhere anywhere
state_chk all -- anywhere anywhere
local_chk all -- anywhere anywhere
ForwardedTCP tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN
ForwardedUDP udp -- anywhere anywhere
denylog all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
PPPconn all -- anywhere anywhere
denylog all -- BASE-ADDRESS.MCAST.NET/4 anywhere
denylog all -- anywhere BASE-ADDRESS.MCAST.NET/4
OutboundICMP icmp -- anywhere anywhere
denylog icmp -- anywhere anywhere
ACCEPT all -- anywhere anywhere

Chain ForwardDenyLocals (1 references)
target prot opt source destination

Chain ForwardedTCP (1 references)
target prot opt source destination
ForwardedTCP_32642 all -- anywhere anywhere
denylog tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN

Chain ForwardedTCP_32642 (1 references)
target prot opt source destination

Chain ForwardedUDP (1 references)
target prot opt source destination
ForwardedUDP_32642 all -- anywhere anywhere
denylog udp -- anywhere anywhere

Chain ForwardedUDP_32642 (1 references)
target prot opt source destination

Chain InboundICMP (1 references)
target prot opt source destination
InboundICMP_32642 all -- anywhere anywhere
denylog icmp -- anywhere anywhere

Chain InboundICMP_32642 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp source-quench
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
denylog all -- anywhere anywhere

Chain InboundTCP (1 references)
target prot opt source destination
InboundTCP_32642 all -- anywhere anywhere
denylog tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN

Chain InboundTCP_32642 (1 references)
target prot opt source destination
denylog all -- anywhere !dsl1027-xxx-xxx.xxx1.dsl.xxxxxx.net
ACCEPT tcp -- anywhere dsl1027-xxx-xxx.xxx1.dsl.xxxxxx.nettcp dpt:smtp
ACCEPT tcp -- anywhere dsl1027-xxx-xxx.xxx1.dsl.xxxxxx.nettcp dpt:ssmtp
ACCEPT tcp -- anywhere anywhere tcp dpt:auth
denylog tcp -- anywhere anywhere tcp dpt:ftp
ACCEPT tcp -- anywhere anywhere tcp dpt:www
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:5222
denylog tcp -- anywhere anywhere tcp dpt:imap2
denylog tcp -- anywhere anywhere tcp dpt:imaps
ACCEPT tcp -- anywhere anywhere tcp dpt:5223
denylog tcp -- anywhere anywhere tcp dpt:ldap
denylog tcp -- anywhere anywhere tcp dpt:pop3
denylog tcp -- anywhere anywhere tcp dpt:pop3s
denylog tcp -- anywhere anywhere tcp dpt:1723
ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
denylog tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:ssmtp
denylog tcp -- anywhere anywhere tcp dpt:telnet

Chain InboundUDP (1 references)
target prot opt source destination
InboundUDP_32642 all -- anywhere anywhere
denylog udp -- anywhere anywhere

Chain InboundUDP_32642 (1 references)
target prot opt source destination
denylog all -- anywhere !dsl1027-xxx-xxx.xxx1.dsl.xxxxxx.net
ACCEPT udp -- anywhere anywhere udp dpt:1194

Chain OutboundICMP (1 references)
target prot opt source destination
OutboundICMP_32642 all -- anywhere anywhere
denylog icmp -- anywhere anywhere

Chain OutboundICMP_32642 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp source-quench
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
denylog all -- anywhere anywhere

Chain PPPconn (2 references)
target prot opt source destination
PPPconn_1 all -- anywhere anywhere

Chain PPPconn_1 (1 references)
target prot opt source destination

Chain denylog (32 references)
target prot opt source destination
DROP udp -- anywhere anywhere udp dpt:route
DROP udp -- anywhere anywhere udp dpts:netbios-ns:netbios-ssn
DROP tcp -- anywhere anywhere tcp dpts:netbios-ns:netbios-ssn
LOG all -- anywhere anywhere LOG level warning prefix `denylog:'
DROP all -- anywhere anywhere

Chain gre-in (1 references)
target prot opt source destination
denylog all -- anywhere !dsl1027-xxx-xxx.xxx1.dsl.xxxxxx.net
denylog all -- anywhere anywhere

Chain local_chk (2 references)
target prot opt source destination
local_chk_32642 all -- anywhere anywhere

Chain local_chk_32642 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- 192.168.234.0/24 anywhere
ACCEPT all -- 192.168.1.0/24 anywhere

Chain state_chk (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED

NAT
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
PortForwarding all -- anywhere anywhere
TransProxy tcp -- anywhere anywhere tcp dpt:www

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
PostroutingOutbound all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain PortForwarding (1 references)
target prot opt source destination
PortForwarding_32642 all -- anywhere dsl1027-xxx-xxx.xxx1.dsl.xxxxxx.net

Chain PortForwarding_32642 (1 references)
target prot opt source destination

Chain PostroutingOutbound (1 references)
target prot opt source destination
ACCEPT all -- dsl1027-xxx-xxx.xxx1.dsl.xxxxxx.net anywhere
MASQUERADE all -- anywhere anywhere

Chain TransProxy (1 references)
target prot opt source destination
ACCEPT all -- anywhere localhost
ACCEPT all -- anywhere server.xxxxxx.com
ACCEPT all -- anywhere dsl1027-xxx-xxx.xxx1.dsl.xxxxxx.net
DNAT tcp -- anywhere anywhere to:192.168.1.14:3128

MANGLE
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
TOS tcp -- anywhere anywhere tcp dpt:ssh TOS set Minimize-Delay

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination