rendered paste body# Generated by iptables-save v1.3.5 on Mon Jun 25 15:48:07 2007
*mangle
:PREROUTING ACCEPT [5248:900806]
:INPUT ACCEPT [5246:900534]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [3983:634857]
:POSTROUTING ACCEPT [4008:635837]
COMMIT
# Completed on Mon Jun 25 15:48:07 2007
# Generated by iptables-save v1.3.5 on Mon Jun 25 15:48:07 2007
*nat
:PREROUTING ACCEPT [227:34497]
:POSTROUTING ACCEPT [161:9832]
:OUTPUT ACCEPT [161:9832]
COMMIT
# Completed on Mon Jun 25 15:48:07 2007
# Generated by iptables-save v1.3.5 on Mon Jun 25 15:48:07 2007
*filter
:INPUT ACCEPT [36:1104]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [982:118394]
-A INPUT -p icmp -m icmp --icmp-type 18 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 17 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 10 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 9 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 5 -j DROP
-A INPUT -s 127.0.0.0/255.0.0.0 -i eth0 -j DROP
-A INPUT -s 192.168.0.0/255.255.0.0 -i eth0 -j DROP
-A INPUT -s 172.16.0.0/255.240.0.0 -i eth0 -j DROP
-A INPUT -s 10.0.0.0/255.0.0.0 -i eth0 -j DROP
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p icmp -m icmp --icmp-type 8 -j DROP
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 22 -m state --state NEW -j LOG --log-prefix "VALID-SSH: "
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 22 -m state --state NEW -j ACCEPT
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 28518 -m state --state NEW -j LOG --log-prefix "VALID-INTEL: "
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 28518 -m state --state NEW -j ACCEPT
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 7496 -m state --state NEW -j LOG --log-prefix "VALID-PGI: "
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 7496 -m state --state NEW -j ACCEPT
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 27000 -m state --state NEW -j LOG --log-prefix "VALID-ABAQUS: "
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 27000 -m state --state NEW -j ACCEPT
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 31010 -m state --state NEW -j LOG --log-prefix "VALID-LSDYNA: "
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 31010 -m state --state NEW -j ACCEPT
-A INPUT -s 163.1.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 1024:65535 -m state --state NEW -j ACCEPT
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 22 -m state --state NEW -j LOG --log-prefix "VALID-SSH: "
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 22 -m state --state NEW -j ACCEPT
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 28518 -m state --state NEW -j LOG --log-prefix "VALID-INTEL: "
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 28518 -m state --state NEW -j ACCEPT
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 7496 -m state --state NEW -j LOG --log-prefix "VALID-PGI: "
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 7496 -m state --state NEW -j ACCEPT
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 27000 -m state --state NEW -j LOG --log-prefix "VALID-ABAQUS: "
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 27000 -m state --state NEW -j ACCEPT
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 31010 -m state --state NEW -j LOG --log-prefix "VALID-LSDYNA: "
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 31010 -m state --state NEW -j ACCEPT
-A INPUT -s 129.67.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 1024:65535 -m state --state NEW -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j LOG --log-prefix "DROP22: "
-A INPUT -i eth0 -p udp -m udp --dport 22 -j LOG --log-prefix "DROP22: "
-A INPUT -i eth0 -p tcp -m tcp -j DROP
-A INPUT -i eth0 -p udp -m udp -j DROP
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -p icmp -m state --state NEW -j ACCEPT
COMMIT
# Completed on Mon Jun 25 15:48:07 2007