All pastes #707446 Raw Edit

Jemand

public text v1 · immutable
#707446 ·published 2007-09-22 22:44 UTC
rendered paste body
Chain INPUT (policy DROP 3 packets, 156 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 2973  291K ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED /* INPUT_ACCEPT_DEF */ 
   47  2820 in-icmp    icmp --  *      *       0.0.0.0/0            0.0.0.0/0           /* INPUT_ACCEPT_DEF */ 
   77  5677 ACCEPT     0    --  lo     *       0.0.0.0/0            0.0.0.0/0           /* INPUT_ACCEPT_DEF */ 
    0     0 in-drp-log  0    --  *      *       127.0.0.1            0.0.0.0/0           state NEW /* INPUT_ACCEPT_DEF */ 
    0     0 in-drp-log  0    --  *      *       0.0.0.0/0            127.0.0.1           state NEW /* INPUT_ACCEPT_DEF */ 
    0     0 in-ovpn    0    --  tun+   *       0.0.0.0/0            0.0.0.0/0           /* ovpn VPN traffic */ 
  195 21373 in-ovpn-ports  0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* ovpn access */ 
  251 27683 in-privoxy  0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* privoxy access */ 
    0     0 in-dhcpd   udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:67 /* dhcp access */ 
    0     0 ACCEPT     tcp  --  *      *       192.168.202.0/24     0.0.0.0/0           tcp dpt:53 /* INPUT_LIST_1='tmpl:dns IP_NET_2 ACCEPT' */ 
    2   143 ACCEPT     udp  --  *      *       192.168.202.0/24     0.0.0.0/0           udp dpt:53 /* INPUT_LIST_1='tmpl:dns IP_NET_2 ACCEPT' */ 
    0     0 ACCEPT     udp  --  *      *       192.168.202.0/24     0.0.0.0/0           udp dpt:123 /* INPUT_LIST_2='tmpl:ntp IP_NET_2 ACCEPT' */ 
    0     0 ACCEPT     tcp  --  *      *       192.168.223.0/24     0.0.0.0/0           tcp dpt:53 /* INPUT_LIST_3='tmpl:dns IP_NET_3 ACCEPT' */ 
    0     0 ACCEPT     udp  --  *      *       192.168.223.0/24     0.0.0.0/0           udp dpt:53 /* INPUT_LIST_3='tmpl:dns IP_NET_3 ACCEPT' */ 
    0     0 ACCEPT     udp  --  *      *       192.168.223.0/24     0.0.0.0/0           udp dpt:123 /* INPUT_LIST_4='tmpl:ntp IP_NET_3 ACCEPT' */ 
   79 10095 ACCEPT     0    --  *      *       192.168.101.0/24     0.0.0.0/0           /* INPUT_LIST_5='IP_NET_1 ACCEPT' */ 
    0     0 in-drp     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:139 /* INPUT_LIST_6='tmpl:samba DROP NOLOG' */ 
   79  3848 in-drp     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:445 /* INPUT_LIST_6='tmpl:samba DROP NOLOG' */ 
   86 12256 in-drp     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:138 /* INPUT_LIST_6='tmpl:samba DROP NOLOG' */ 
   28  3901 in-drp-log  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-drp-log  0    --  *      *       192.168.101.20       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.20       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-drp-log  0    --  *      *       192.168.101.19       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.19       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-ovpn    0    --  *      tun+    0.0.0.0/0            0.0.0.0/0           /* ovpn VPN traffic */ 
    0     0 fw-ovpn    0    --  tun+   *       0.0.0.0/0            0.0.0.0/0           /* ovpn VPN traffic */ 
    0     0 fw-drp-log  0    --  *      *       192.168.101.18       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.18       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-drp-log  0    --  *      *       192.168.101.17       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.17       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-drp-log  0    --  *      *       192.168.101.16       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.16       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-drp-log  0    --  *      *       192.168.101.15       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.15       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-drp-log  0    --  *      *       192.168.101.14       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.14       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-drp-log  0    --  *      *       192.168.101.13       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.13       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-drp-log  0    --  *      *       192.168.101.12       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.12       0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 fw-drp-log  0    --  *      *       192.168.101.11       0.0.0.0/0           
    0     0 fw-drp-log  0    --  *      *       192.168.101.11       0.0.0.0/0           state RELATED,ESTABLISHED 
  516 72825 accinlive  0    --  eth3   *       0.0.0.0/0            0.0.0.0/0           /* Accounting LiveTraf eth3 in */ 
  491 63595 accoutlive  0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           /* Accounting LiveTraf eth3 out */ 
  516 72825 accin      0    --  eth3   *       0.0.0.0/0            0.0.0.0/0           /* Accounting eth3 in */ 
  491 63595 accout     0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           /* Accounting eth3 out */ 
 1464  187K basehostsonly  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
 1416  184K ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED /* FORWARD_ACCEPT_DEF */ 
    0     0 fw-drp-log  0    --  *      *       127.0.0.1            0.0.0.0/0           state NEW /* FORWARD_ACCEPT_DEF */ 
    0     0 fw-drp-log  0    --  *      *       0.0.0.0/0            127.0.0.1           state NEW /* FORWARD_ACCEPT_DEF */ 
   48  2472 PORTFWACCESS  0    --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW /* state:NEW PORTFWACCESS */ 
   46  2376 ACCEPT     0    --  *      *       192.168.101.0/24     0.0.0.0/0           /* FORWARD_LIST_1='IP_NET_1 ACCEPT' */ 
    0     0 fw-drp-log  0    --  *      *       192.168.202.0/24     192.168.223.0/24    /* FORWARD_LIST_2='IP_NET_2 IP_NET_3 DROP BIDIRECTIONAL' */ 
    0     0 fw-drp-log  0    --  *      *       192.168.223.0/24     192.168.202.0/24    /* FORWARD_LIST_2='IP_NET_2 IP_NET_3 DROP BIDIRECTIONAL' */ 
    0     0 fw-drp-log  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:139 /* FORWARD_LIST_3='tmpl:samba DROP' */ 
    0     0 fw-drp-log  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:445 /* FORWARD_LIST_3='tmpl:samba DROP' */ 
    0     0 fw-drp-log  udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:138 /* FORWARD_LIST_3='tmpl:samba DROP' */ 
    0     0 ACCEPT     0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           /* FORWARD_LIST_4='if:any:eth3 ACCEPT' */ 
    0     0 fw-drp-log  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 3381 packets, 304K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain PORTFWACCESS (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    2    96 ACCEPT     tcp  --  eth3   *       0.0.0.0/0            192.168.202.1       tcp dpt:80 /* if:eth3:any tmpl:http prot:tcp dynamic:80 DNAT:@dmz */ 

Chain accin (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.250     /* add from base.txt */ 
  328 57525 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.1       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.2       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.3       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.4       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.11      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.12      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.13      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.14      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.15      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.16      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.17      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.18      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.19      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.20      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.200     /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.201     /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.202     /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.203     /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.210     /* add from base.txt */ 
   22  2904 RETURN     0    --  *      *       0.0.0.0/0            192.168.202.1       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.52      /* add from index.acc */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.222.1       /* add from index.acc */ 

Chain accinlive (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.250     /* add from base.txt */ 
  494 69921 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.1       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.2       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.3       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.4       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.11      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.12      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.13      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.14      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.15      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.16      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.17      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.18      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.19      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.20      /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.200     /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.201     /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.202     /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.203     /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.210     /* add from base.txt */ 
   22  2904 RETURN     0    --  *      *       0.0.0.0/0            192.168.202.1       /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.101.52      /* add from index.acc */ 
    0     0 RETURN     0    --  *      *       0.0.0.0/0            192.168.222.1       /* add from index.acc */ 

Chain accout (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  *      *       192.168.101.250      0.0.0.0/0           /* add from base.txt */ 
  312 35274 RETURN     0    --  *      *       192.168.101.1        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.2        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.3        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.4        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.11       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.12       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.13       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.14       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.15       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.16       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.17       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.18       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.19       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.20       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.200      0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.201      0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.202      0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.203      0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.210      0.0.0.0/0           /* add from base.txt */ 
   22 17598 RETURN     0    --  *      *       192.168.202.1        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.52       0.0.0.0/0           /* add from index.acc */ 
    0     0 RETURN     0    --  *      *       192.168.222.1        0.0.0.0/0           /* add from index.acc */ 

Chain accoutlive (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  *      *       192.168.101.250      0.0.0.0/0           /* add from base.txt */ 
  469 45997 RETURN     0    --  *      *       192.168.101.1        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.2        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.3        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.4        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.11       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.12       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.13       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.14       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.15       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.16       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.17       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.18       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.19       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.20       0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.200      0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.201      0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.202      0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.203      0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.210      0.0.0.0/0           /* add from base.txt */ 
   22 17598 RETURN     0    --  *      *       192.168.202.1        0.0.0.0/0           /* add from base.txt */ 
    0     0 RETURN     0    --  *      *       192.168.101.52       0.0.0.0/0           /* add from index.acc */ 
    0     0 RETURN     0    --  *      *       192.168.222.1        0.0.0.0/0           /* add from index.acc */ 

Chain basehostsonly (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  246 50608 RETURN     0    --  *      *       192.168.202.1        0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.210      0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.203      0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.202      0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.201      0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.200      0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.20       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.19       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.18       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.17       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.16       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.15       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.14       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.13       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.12       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.11       0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.4        0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.3        0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.2        0.0.0.0/0           
  702 63247 RETURN     0    --  *      *       192.168.101.1        0.0.0.0/0           
    0     0 RETURN     0    --  *      *       192.168.101.250      0.0.0.0/0           

Chain fw-drp (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-drp-log (28 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 0 level 4 prefix `fw-forward-drop ' 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-ovpn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-ovpn-mdpztun  0    --  *      tun1    0.0.0.0/0            0.0.0.0/0           /* if:any:tun1 fw-ovpn-mdpztun */ 
    0     0 fw-ovpn-mdpztun  0    --  tun1   *       0.0.0.0/0            0.0.0.0/0           /* if:tun1:any fw-ovpn-mdpztun */ 
    0     0 fw-ovpn-hrpztun  0    --  *      tun0    0.0.0.0/0            0.0.0.0/0           /* if:any:tun0 fw-ovpn-hrpztun */ 
    0     0 fw-ovpn-hrpztun  0    --  tun0   *       0.0.0.0/0            0.0.0.0/0           /* if:tun0:any fw-ovpn-hrpztun */ 
    0     0 PORTFWACCESS  0    --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW /* state:NEW PORTFWACCESS */ 
    0     0 ACCEPT     icmp --  *      tun+    0.0.0.0/0            0.0.0.0/0           icmp type 8 /* if:any:tun+ prot:icmp:8 ACCEPT */ 
    0     0 ACCEPT     icmp --  tun+   *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* if:tun+:any prot:icmp:8 ACCEPT */ 
    0     0 fw-rej-log  0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* fw-rej-log */ 

Chain fw-ovpn-hrpztun (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED /* state:ESTABLISHED,RELATED ACCEPT */ 
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* ACCEPT BIDIRECTIONAL */ 
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* ACCEPT BIDIRECTIONAL */ 

Chain fw-ovpn-mdpztun (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED /* state:ESTABLISHED,RELATED ACCEPT */ 
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* ACCEPT BIDIRECTIONAL */ 
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* ACCEPT BIDIRECTIONAL */ 

Chain fw-rej (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-rej-fin  udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 1/sec burst 5 
    0     0 fw-rej-fin !udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 1/sec burst 5 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-rej-fin (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT    !icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-admin-prohibited 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-rej-log (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 0 level 4 prefix `fw-forward-reject ' 
    0     0 fw-rej     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain in-dhcpd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  br0    *       0.0.0.0/0            0.0.0.0/0           /* if:IP_NET_1_DEV:any ACCEPT */ 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* DROP */ 

Chain in-drp (3 references)
 pkts bytes target     prot opt in     out     source               destination         
  165 16104 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain in-drp-log (3 references)
 pkts bytes target     prot opt in     out     source               destination         
   28  3901 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 0 level 4 prefix `fw-input-drop ' 
   28  3901 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain in-icmp (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   47  2820 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 length 0:100 limit: avg 1/sec burst 5 /* INPUT_ACCEPT_DEF */ 

Chain in-ovpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 in-ovpn-mdpztun  0    --  tun1   *       0.0.0.0/0            0.0.0.0/0           /* if:tun1:any in-ovpn-mdpztun */ 
    0     0 in-ovpn-hrpztun  0    --  tun0   *       0.0.0.0/0            0.0.0.0/0           /* if:tun0:any in-ovpn-hrpztun */ 
    0     0 ACCEPT     icmp --  tun+   *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* if:tun+:any prot:icmp:8 ACCEPT */ 
    0     0 in-rej-log  0    --  *      *       0.0.0.0/0            0.0.0.0/0           /* in-rej-log */ 

Chain in-ovpn-hrpztun (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED /* state:ESTABLISHED,RELATED ACCEPT */ 
    0     0 ACCEPT     0    --  tun0   *       0.0.0.0/0            0.0.0.0/0           /* if:tun0:any ACCEPT */ 

Chain in-ovpn-mdpztun (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED /* state:ESTABLISHED,RELATED ACCEPT */ 
    0     0 ACCEPT     0    --  tun1   *       0.0.0.0/0            0.0.0.0/0           /* if:tun1:any ACCEPT */ 

Chain in-ovpn-ports (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    2   176 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10002 /* prot:udp if:any:any any any:10002 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10004 /* prot:udp if:any:any any any:10004 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10050 /* prot:udp if:any:any any any:10050 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10051 /* prot:udp if:any:any any any:10051 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10052 /* prot:udp if:any:any any any:10052 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10053 /* prot:udp if:any:any any any:10053 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10054 /* prot:udp if:any:any any any:10054 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10101 /* prot:udp if:any:any any any:10101 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10102 /* prot:udp if:any:any any any:10102 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10103 /* prot:udp if:any:any any any:10103 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10104 /* prot:udp if:any:any any any:10104 ACCEPT */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:10105 /* prot:udp if:any:any any any:10105 ACCEPT */ 

Chain in-privoxy (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  *      *       192.168.101.0/24     192.168.101.250     tcp dpt:8118 /* prot:tcp 192.168.101.250/24 192.168.101.250:8118 ACCEPT */ 
    0     0 ACCEPT     tcp  --  *      *       192.168.101.0/24     192.168.101.250     tcp dpt:8118 /* prot:tcp 192.168.101.0/24 192.168.101.250:8118 ACCEPT */ 

Chain in-rej (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 in-rej-fin  udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 1/sec burst 5 
    0     0 in-rej-fin !udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 1/sec burst 5 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain in-rej-fin (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT    !icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-proto-unreachable 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain in-rej-log (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 0 level 4 prefix `fw-input-reject ' 
    0     0 in-rej     0    --  *      *       0.0.0.0/0            0.0.0.0/0