All pastes #495456 Raw Edit

Someone

public text v1 · immutable
·published 2007-05-18 19:35 UTC
rendered paste body
Chain INPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     0    --  anywhere             anywhere            
ACCEPT     0    --  darknode             192.168.2.255       
logaborted  tcp  --  anywhere             anywhere            state RELATED,ESTABLISHED tcp flags:RST/RST 
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable 
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem 
ACCEPT     0    --  anywhere             anywhere            
ACCEPT     0    --  darknode             192.168.2.255       
logaborted  tcp  --  anywhere             anywhere            state RELATED,ESTABLISHED tcp flags:RST/RST 
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem 
nicfilt    0    --  anywhere             anywhere            
srcfilt    0    --  anywhere             anywhere            
nicfilt    0    --  anywhere             anywhere            
srcfilt    0    --  anywhere             anywhere            

Chain FORWARD (policy DROP)
target     prot opt source               destination         
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable 
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem 
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable 
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem 
srcfilt    0    --  anywhere             anywhere            
srcfilt    0    --  anywhere             anywhere            

Chain OUTPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     0    --  anywhere             anywhere            
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable 
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem 
ACCEPT     0    --  anywhere             anywhere            
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable 
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem 
s1         0    --  anywhere             anywhere            
s1         0    --  anywhere             anywhere            

Chain f0to1 (5 references)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere            udp dpt:52552 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:52987:52989 state NEW 
ACCEPT     tcp  --  anywhere             anywhere            tcp spts:1024:65535 dpt:auth state NEW 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:113 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:52552 state NEW 
ACCEPT     icmp --  anywhere             anywhere            icmp redirect 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply 
logdrop    0    --  anywhere             anywhere            
ACCEPT     udp  --  anywhere             anywhere            udp dpt:52552 
ACCEPT     tcp  --  anywhere             anywhere            tcp spts:1024:65535 dpt:auth state NEW 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:52552 state NEW 
ACCEPT     icmp --  anywhere             anywhere            icmp redirect 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply 
logdrop    0    --  anywhere             anywhere            

Chain f0to2 (2 references)
target     prot opt source               destination         
logdrop    0    --  anywhere             anywhere            
logdrop    0    --  anywhere             anywhere            

Chain f1to0 (2 references)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere            udp dpts:1:65535 
ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:tcpmux:65535 state NEW 
logdrop    0    --  anywhere             anywhere            
ACCEPT     udp  --  anywhere             anywhere            udp dpts:1:65535 
ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:tcpmux:65535 state NEW 
logdrop    0    --  anywhere             anywhere            

Chain f1to2 (2 references)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere            udp dpts:1:65535 
ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:tcpmux:65535 state NEW 
ACCEPT     icmp --  anywhere             anywhere            icmp redirect 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-ns dpts:1024:65535 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-ns dpt:netbios-ns 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-dgm dpt:netbios-dgm 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply 
logdrop    0    --  anywhere             anywhere            
ACCEPT     udp  --  anywhere             anywhere            udp dpts:1:65535 
ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:tcpmux:65535 state NEW 
ACCEPT     icmp --  anywhere             anywhere            icmp redirect 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-ns dpts:1024:65535 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-ns dpt:netbios-ns 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-dgm dpt:netbios-dgm 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply 
logdrop    0    --  anywhere             anywhere            

Chain f2to0 (2 references)
target     prot opt source               destination         
logdrop    0    --  anywhere             anywhere            
logdrop    0    --  anywhere             anywhere            

Chain f2to1 (6 references)
target     prot opt source               destination         
ACCEPT     icmp --  anywhere             anywhere            icmp redirect 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:microsoft-ds state NEW 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:netbios-ns state NEW 
ACCEPT     udp  --  anywhere             anywhere            udp spts:1024:65535 dpt:netbios-ns 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-ns dpt:netbios-ns 
ACCEPT     udp  --  anywhere             anywhere            udp spts:1024:65535 dpt:netbios-dgm 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-dgm dpt:netbios-dgm 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:netbios-ssn state NEW 
ACCEPT     udp  --  anywhere             anywhere            udp spts:1024:65535 dpt:netbios-ssn 
ACCEPT     tcp  --  anywhere             anywhere            tcp spts:1024:65535 dpt:auth state NEW 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:113 
ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
ACCEPT     udp  --  anywhere             anywhere            udp dpts:33434:33600 
logdrop    0    --  anywhere             anywhere            
ACCEPT     icmp --  anywhere             anywhere            icmp redirect 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:microsoft-ds state NEW 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:netbios-ns state NEW 
ACCEPT     udp  --  anywhere             anywhere            udp spts:1024:65535 dpt:netbios-ns 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-ns dpt:netbios-ns 
ACCEPT     udp  --  anywhere             anywhere            udp spts:1024:65535 dpt:netbios-dgm 
ACCEPT     udp  --  anywhere             anywhere            udp spt:netbios-dgm dpt:netbios-dgm 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:netbios-ssn state NEW 
ACCEPT     udp  --  anywhere             anywhere            udp spts:1024:65535 dpt:netbios-ssn 
ACCEPT     tcp  --  anywhere             anywhere            tcp spts:1024:65535 dpt:auth state NEW 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:113 
ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
ACCEPT     udp  --  anywhere             anywhere            udp dpts:33434:33600 
logdrop    0    --  anywhere             anywhere            

Chain logaborted (2 references)
target     prot opt source               destination         
logaborted2  0    --  anywhere             anywhere            limit: avg 1/sec burst 10 
LOG        0    --  anywhere             anywhere            limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' 
logaborted2  0    --  anywhere             anywhere            limit: avg 1/sec burst 10 
LOG        0    --  anywhere             anywhere            limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' 

Chain logaborted2 (2 references)
target     prot opt source               destination         
LOG        0    --  anywhere             anywhere            LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED ' 
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 
LOG        0    --  anywhere             anywhere            LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED ' 
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 

Chain logdrop (16 references)
target     prot opt source               destination         
logdrop2   0    --  anywhere             anywhere            limit: avg 1/sec burst 10 
LOG        0    --  anywhere             anywhere            limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' 
DROP       0    --  anywhere             anywhere            

Chain logdrop2 (1 references)
target     prot opt source               destination         
LOG        0    --  anywhere             anywhere            LOG level warning tcp-sequence tcp-options ip-options prefix `DROPPED ' 
DROP       0    --  anywhere             anywhere            

Chain logreject (0 references)
target     prot opt source               destination         
logreject2  0    --  anywhere             anywhere            limit: avg 1/sec burst 10 
LOG        0    --  anywhere             anywhere            limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' 
REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset 
REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable 
DROP       0    --  anywhere             anywhere            
logreject2  0    --  anywhere             anywhere            limit: avg 1/sec burst 10 
REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset 
REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable 
DROP       0    --  anywhere             anywhere            

Chain logreject2 (2 references)
target     prot opt source               destination         
LOG        0    --  anywhere             anywhere            LOG level warning tcp-sequence tcp-options ip-options prefix `REJECTED ' 
REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset 
REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable 
DROP       0    --  anywhere             anywhere            
REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset 
REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable 
DROP       0    --  anywhere             anywhere            

Chain nicfilt (2 references)
target     prot opt source               destination         
RETURN     0    --  anywhere             anywhere            
RETURN     0    --  anywhere             anywhere            
RETURN     0    --  anywhere             anywhere            
logdrop    0    --  anywhere             anywhere            
RETURN     0    --  anywhere             anywhere            
RETURN     0    --  anywhere             anywhere            
RETURN     0    --  anywhere             anywhere            
logdrop    0    --  anywhere             anywhere            

Chain s0 (2 references)
target     prot opt source               destination         
f0to1      0    --  anywhere             darknode            
f0to1      0    --  anywhere             localhost           
f0to2      0    --  anywhere             laptop              
logdrop    0    --  anywhere             anywhere            
f0to1      0    --  anywhere             darknode            
f0to1      0    --  anywhere             192.168.2.255       
f0to1      0    --  anywhere             localhost           
f0to2      0    --  anywhere             laptop              
logdrop    0    --  anywhere             anywhere            

Chain s1 (2 references)
target     prot opt source               destination         
f1to2      0    --  anywhere             laptop              
f1to0      0    --  anywhere             anywhere            
f1to2      0    --  anywhere             laptop              
f1to0      0    --  anywhere             anywhere            

Chain s2 (2 references)
target     prot opt source               destination         
f2to1      0    --  anywhere             darknode            
f2to1      0    --  anywhere             192.168.2.255       
f2to1      0    --  anywhere             localhost           
f2to0      0    --  anywhere             anywhere            
f2to1      0    --  anywhere             darknode            
f2to1      0    --  anywhere             192.168.2.255       
f2to1      0    --  anywhere             localhost           
f2to0      0    --  anywhere             anywhere            

Chain srcfilt (4 references)
target     prot opt source               destination         
s2         0    --  laptop               anywhere            
s0         0    --  anywhere             anywhere            
s2         0    --  laptop               anywhere            
s0         0    --  anywhere             anywhere