rendered paste body# Generated by iptables-save v1.3.5 on Fri Nov 3 18:46:41 2006
*nat
:PREROUTING ACCEPT [217551:13812622]
:POSTROUTING ACCEPT [1413863:81246910]
:OUTPUT ACCEPT [34783:2425792]
:ARIA-IN - [0:0]
:CONNTRACK-INCOMING - [0:0]
:ICMP-IN - [0:0]
:ICMP-IN-ALLOWED - [0:0]
:ICMP-OUT - [0:0]
:ICMP-REPLY-ALLOWED - [0:0]
:LAN-OUT - [0:0]
:LUXOR-IN - [0:0]
:MANTRA-IN - [0:0]
:VSERVER-IN - [0:0]
:VSERVER-OUT - [0:0]
:VSERVER-ROUTE - [0:0]
:ZEN-IN - [0:0]
[40:2979] -A PREROUTING -j VSERVER-IN
[28:2403] -A PREROUTING -j VSERVER-ROUTE
[27:2351] -A PREROUTING -j ZEN-IN
[19:1837] -A PREROUTING -j LUXOR-IN
[19:1837] -A PREROUTING -j ARIA-IN
[19:1837] -A PREROUTING -j MANTRA-IN
[19:1837] -A PREROUTING -j DROP
[26:1279] -A POSTROUTING -j LAN-OUT
[1:53] -A POSTROUTING -j VSERVER-OUT
[0:0] -A POSTROUTING -j ICMP-OUT
[20:1049] -A OUTPUT -j VSERVER-ROUTE
[20:1049] -A OUTPUT -j ZEN-IN
[1:53] -A OUTPUT -j ICMP-OUT
[0:0] -A ARIA-IN -p tcp -m tcp --dport 25461 -j DNAT --to-destination 192.168.0.3
[0:0] -A ARIA-IN -p udp -m udp --dport 25461 -j DNAT --to-destination 192.168.0.3
[0:0] -A CONNTRACK-INCOMING -m conntrack --ctstate RELATED -j ACCEPT
[0:0] -A CONNTRACK-INCOMING -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
[0:0] -A CONNTRACK-INCOMING -m conntrack --ctstate ESTABLISHED -j ACCEPT
[1:229] -A ICMP-IN -i ! eth1 -j ICMP-IN-ALLOWED
[4:1321] -A ICMP-IN -j ICMP-REPLY-ALLOWED
[0:0] -A ICMP-IN-ALLOWED -p icmp -m icmp --icmp-type 8 -j ACCEPT
[0:0] -A ICMP-IN-ALLOWED -p icmp -m icmp --icmp-type 13 -j ACCEPT
[0:0] -A ICMP-IN-ALLOWED -p icmp -m icmp --icmp-type 3 -j ACCEPT
[0:0] -A ICMP-IN-ALLOWED -p icmp -m icmp --icmp-type 4 -j ACCEPT
[0:0] -A ICMP-IN-ALLOWED -p icmp -m icmp --icmp-type 11 -j ACCEPT
[0:0] -A ICMP-IN-ALLOWED -p icmp -m icmp --icmp-type 17 -j ACCEPT
[0:0] -A ICMP-OUT -s 192.168.0.0/255.255.255.0 -j ICMP-REPLY-ALLOWED
[0:0] -A ICMP-OUT -s 127.0.0.1 -j ICMP-REPLY-ALLOWED
[1:53] -A ICMP-OUT -o eth1 -j ICMP-IN-ALLOWED
[0:0] -A ICMP-OUT -o eth1 -p icmp -m icmp --icmp-type any -j DROP
[0:0] -A ICMP-REPLY-ALLOWED -p icmp -m icmp --icmp-type 0 -j ACCEPT
[0:0] -A ICMP-REPLY-ALLOWED -p icmp -m icmp --icmp-type 3 -j ACCEPT
[0:0] -A ICMP-REPLY-ALLOWED -p icmp -m icmp --icmp-type 11 -j ACCEPT
[0:0] -A ICMP-REPLY-ALLOWED -p icmp -m icmp --icmp-type 4 -j ACCEPT
[25:1226] -A LAN-OUT -s 192.168.0.0/255.255.255.0 -d ! 192.168.0.0/255.255.255.0 -j MASQUERADE
[0:0] -A LAN-OUT -s 192.168.0.0/255.255.255.0 -d ! 192.168.0.0/255.255.255.0 -j MASQUERADE
[0:0] -A LUXOR-IN -p tcp -m tcp --dport 4662 -j DNAT --to-destination 192.168.0.2
[0:0] -A LUXOR-IN -p udp -m udp --dport 4672 -j DNAT --to-destination 192.168.0.2
[1:229] -A MANTRA-IN -p tcp -m tcp --dport 443 -j DNAT --to-destination 192.168.0.5
[0:0] -A VSERVER-IN -d 192.168.0.201 -p udp -m udp --dport 53 -j ACCEPT
[0:0] -A VSERVER-IN -d 192.168.0.204 -p tcp -m tcp --dport 4001 -j ACCEPT
[12:576] -A VSERVER-IN -d 192.168.0.204 -p tcp -m tcp --dport 4080 -j ACCEPT
[0:0] -A VSERVER-OUT -s 192.168.0.201 -p udp -m udp --dport 53 -j MASQUERADE
[0:0] -A VSERVER-OUT -s 192.168.0.202 -p tcp -m tcp --dport 80 -j MASQUERADE
[0:0] -A VSERVER-OUT -s 192.168.0.202 -p tcp -m tcp --dport 21 -j MASQUERADE
[0:0] -A VSERVER-OUT -s 192.168.0.202 -p tcp -m tcp --dport 873 -j MASQUERADE
[0:0] -A VSERVER-OUT -s 192.168.0.202 -p tcp -m tcp --dport 2401 -j MASQUERADE
[0:0] -A VSERVER-OUT -s 192.168.0.203 -j MASQUERADE
[1:53] -A VSERVER-OUT -s 192.168.0.204 -j MASQUERADE
[1:53] -A VSERVER-OUT -s 192.168.0.205 -j MASQUERADE
[0:0] -A VSERVER-ROUTE -s 127.0.0.1 -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.0.201:53
[0:0] -A VSERVER-ROUTE -s 192.168.0.0/255.255.255.0 -d 192.168.0.0/255.255.255.0 -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.0.201:53
[0:0] -A VSERVER-ROUTE -s 192.168.0.202 -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.0.201:53
[0:0] -A VSERVER-ROUTE -s 192.168.0.203 -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.0.201:53
[0:0] -A VSERVER-ROUTE -s 192.168.0.204 -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.0.201:53
[0:0] -A VSERVER-ROUTE -s 192.168.0.205 -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.0.201:53
[0:0] -A VSERVER-ROUTE -i eth1 -p tcp -m tcp --dport 4663 -j DNAT --to-destination 192.168.0.204
[0:0] -A VSERVER-ROUTE -i eth1 -p udp -m udp --dport 4667 -j DNAT --to-destination 192.168.0.204
[0:0] -A VSERVER-ROUTE -i eth1 -p tcp -m tcp --dport 6881 -j DNAT --to-destination 192.168.0.204
[1:52] -A VSERVER-ROUTE -i eth1 -p tcp -m tcp --dport 6882 -j DNAT --to-destination 192.168.0.204
[0:0] -A VSERVER-ROUTE -i eth1 -p tcp -m tcp --dport 1214 -j DNAT --to-destination 192.168.0.204
[0:0] -A VSERVER-ROUTE -i eth1 -p tcp -m tcp --dport 6346 -j DNAT --to-destination 192.168.0.204
[0:0] -A VSERVER-ROUTE -i eth1 -p tcp -m tcp --dport 6347 -j DNAT --to-destination 192.168.0.204
[0:0] -A VSERVER-ROUTE -i eth1 -p tcp -m tcp --dport 18594 -j DNAT --to-destination 192.168.0.204
[0:0] -A VSERVER-ROUTE -i eth1 -p udp -m udp --dport 18598 -j DNAT --to-destination 192.168.0.204
[0:0] -A VSERVER-ROUTE -i eth1 -p tcp -m tcp --dport 3150 -j DNAT --to-destination 192.168.0.204
[26:1455] -A ZEN-IN -s 192.168.0.0/255.255.255.0 -j ACCEPT
[2:284] -A ZEN-IN -i br0 -j ACCEPT
[0:0] -A ZEN-IN -s 127.0.0.1 -j ACCEPT
[20:1890] -A ZEN-IN -j CONNTRACK-INCOMING
COMMIT
# Completed on Fri Nov 3 18:46:41 2006
# Generated by iptables-save v1.3.5 on Fri Nov 3 18:46:41 2006
*mangle
:PREROUTING ACCEPT [22565210:8237912422]
:INPUT ACCEPT [14537314:7169246240]
:FORWARD ACCEPT [1509166:730739796]
:OUTPUT ACCEPT [16808473:10983711177]
:POSTROUTING ACCEPT [18318038:11714738807]
COMMIT
# Completed on Fri Nov 3 18:46:41 2006