rendered paste body # iptables -t nat -n -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
# iptables -L -v
Chain INPUT (policy ACCEPT 1904 packets, 152K bytes)
pkts bytes target prot opt in out source destination
81 5178 CFG tcp -- any any 10.1.1.2 anywhere tcp dpt:www Records Packet's Source Interface
0 0 ACCEPT all -- !br0 any anywhere anywhere state RELATED,ESTABLISHED
7056 423K synflood tcp -- any any anywhere anywhere state NEW
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:SYN,RST/SYN,RST
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
0 0 ACCEPT icmp -- !br0 any anywhere anywhere icmp echo-request state NEW
0 0 ACCEPT igmp -- any any anywhere anywhere
0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:161
0 0 ACCEPT all -- lo any anywhere anywhere
0 0 DROP all -- !br0 any anywhere anywhere
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS set 1360
0 0 ACCEPT all -- !br0 any anywhere anywhere state RELATED,ESTABLISHED
0 0 synflood tcp -- any any anywhere anywhere state NEW
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:SYN,RST/SYN,RST
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
0 0 DROP tcp -- !br0 any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
0 0 DROP tcp -- !br0 any anywhere anywhere tcp dpt:telnet
0 0 DROP tcp -- !br0 any anywhere anywhere tcp dpt:ftp
0 0 DROP tcp -- !br0 any anywhere anywhere tcp dpt:ftp-data
0 0 DROP udp -- !br0 any anywhere anywhere udp dpt:500
0 0 DROP tcp -- !br0 any anywhere anywhere tcp dpt:domain
0 0 DROP udp -- !br0 any anywhere anywhere udp dpt:domain
0 0 DROP udp -- !br0 any anywhere anywhere udp dpt:route
0 0 ACCEPT icmp -- !br0 any anywhere anywhere icmp echo-request state NEW
0 0 ACCEPT igmp -- any any anywhere anywhere
0 0 DROP all -- !br0 any anywhere anywhere
Chain OUTPUT (policy ACCEPT 8423 packets, 738K bytes)
pkts bytes target prot opt in out source destination
0 0 DROP icmp -- any !br0 anywhere anywhere icmp destination-unreachable
0 0 DROP icmp -- any !br0 anywhere anywhere state INVALID
Chain synflood (2 references)
pkts bytes target prot opt in out source destination
143 8268 RETURN tcp -- any any anywhere anywhere limit: avg 15/sec burst 25
6913 415K REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
#