rendered paste body# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
SIP_ALLOW all -- anywhere anywhere
REMOTE_ACCESS tcp -- anywhere anywhere tcp dpt:https
DOS all -- anywhere anywhere
SPI all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpts:1863:1864
ACCEPT tcp -- anywhere anywhere tcp dpt:4443
ACCEPT tcp -- anywhere anywhere tcp dpt:5190
ACCEPT tcp -- anywhere anywhere tcp dpt:5566
ACCEPT tcp -- anywhere anywhere tcp dpts:40000:40099
LOG tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 6/hour burst 5 LOG level alert prefix `Intrusion -> '
DROP all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
DOS all -- anywhere anywhere
DMZ all -- anywhere anywhere
VRTSRV all -- anywhere anywhere
SPI all -- anywhere anywhere
ACCEPT all -- 0.0.0.0 anywhere
LOG tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 6/hour burst 5 LOG level alert prefix `Intrusion -> '
DROP all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain DMZ (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Chain DOS (2 references)
target prot opt source destination
dos_ping_of_death icmp -- anywhere anywhere icmp echo-request
dos_fragments all -f anywhere anywhere
dos_ripdefect udp -- anywhere anywhere udp dpt:route
dos_ipspoof all -- anywhere anywhere
RETURN tcp -- anywhere anywhere limit: avg 200/sec burst 250 tcp flags:SYN,RST,ACK/SYN
LOG tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN LOG level emerg prefix `"Echo::debugA'
DROP tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN
RETURN tcp -- anywhere anywhere limit: avg 200/sec burst 250 tcp flags:FIN,SYN,RST,ACK/RST
LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST LOG level emerg prefix `"Echo::debugB'
DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST
RETURN all -- anywhere anywhere
RETURN all -- anywhere anywhere
Chain REMOTE_ACCESS (1 references)
target prot opt source destination
DROP all -- anywhere anywhere
Chain SIP_ALLOW (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt:5060
ACCEPT udp -- anywhere anywhere udp dpts:16384:16400
RETURN all -- anywhere anywhere
Chain SPI (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
DROP all -f anywhere anywhere
DROP tcp -- anywhere anywhere
DROP udp -- anywhere anywhere
DROP all -- anywhere anywhere
Chain URLFILTER (0 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Chain VRTSRV (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere 10.1.1.11 tcp dpt:ssh
ACCEPT tcp -- anywhere 10.1.1.11 tcp dpt:ftp
RETURN all -- anywhere anywhere
RETURN all -- anywhere anywhere
Chain dos_fragments (1 references)
target prot opt source destination
LOG all -- anywhere anywhere LOG level emerg prefix `"Echo::debug'
DROP all -- anywhere anywhere
Chain dos_ipspoof (1 references)
target prot opt source destination
LOG all -- 255.255.255.255 0.0.0.0 LOG level emerg prefix `"Echo::debug'
DROP all -- 255.255.255.255 0.0.0.0
LOG all -- 240.0.0.0/4 anywhere LOG level emerg prefix `"Echo::debug'
DROP all -- 224.0.0.0/4 anywhere
LOG !udp -- anywhere 240.0.0.0/4 LOG level emerg prefix `"Echo::debug'
DROP !udp -- anywhere 240.0.0.0/4
LOG all -- 240.0.0.0/5 anywhere LOG level emerg prefix `"Echo::debug'
DROP all -- 240.0.0.0/5 anywhere
RETURN all -- anywhere anywhere
Chain dos_ping_of_death (1 references)
target prot opt source destination
DROP all -- anywhere anywhere limit: avg 1/sec burst 5
LOG all -- anywhere anywhere LOG level emerg prefix `"Echo::pingofdeath--->"'
DROP all -- anywhere anywhere
Chain dos_ripdefect (1 references)
target prot opt source destination
DROP udp -- anywhere anywhere udp dpt:route
#