All pastes #734247 Raw Edit

Mine

public text v1 · immutable
·published 2007-10-12 15:02 UTC
rendered paste body
root@Scranton:~$ iptables -L -v
Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  any    any     anywhere             anywhere            state INVALID
   47  5617 ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED
    0     0 DROP       tcp  --  any    any     anywhere             anywhere            tcp option=!2 flags:SYN/SYN
   59  8556 input_rule  all  --  any    any     anywhere             anywhere
   14  3448 input_wan  all  --  vlan1  any     anywhere             anywhere
   58  8508 LAN_ACCEPT  all  --  any    any     anywhere             anywhere
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere
    0     0 ACCEPT     gre  --  any    any     anywhere             anywhere
    3   120 REJECT     tcp  --  any    any     anywhere             anywhere            reject-with tcp-reset
   10  3280 REJECT     all  --  any    any     anywhere             anywhere            reject-with icmp-port-unreachable

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  any    any     anywhere             anywhere            state INVALID
   14   656 TCPMSS     tcp  --  any    any     anywhere             anywhere            tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
  314  124K ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED
   20  1470 forwarding_rule  all  --  any    any     anywhere             anywhere
    4   720 forwarding_wan  all  --  vlan1  any     anywhere             anywhere
    0     0 ACCEPT     all  --  br0    br0     anywhere             anywhere
   16   750 ACCEPT     all  --  br0    vlan1   anywhere             anywhere

Chain LAN_ACCEPT (1 references)
 pkts bytes target     prot opt in     out     source               destination
   13  3400 RETURN     all  --  vlan1  any     anywhere             anywhere
   45  5108 ACCEPT     all  --  any    any     anywhere             anywhere

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  any    any     anywhere             anywhere            state INVALID
   60  5793 ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED
    7   964 output_rule  all  --  any    any     anywhere             anywhere
    7   964 ACCEPT     all  --  any    any     anywhere             anywhere
    0     0 REJECT     tcp  --  any    any     anywhere             anywhere            reject-with tcp-reset
    0     0 REJECT     all  --  any    any     anywhere             anywhere            reject-with icmp-port-unreachable

Chain forwarding_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain forwarding_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination
    3   144 ACCEPT     tcp  --  any    any     anywhere             robinsonfamilyonline.net tcp dpt:80
    0     0 ACCEPT     tcp  --  any    any     anywhere             robinsonfamilyonline.net tcp dpt:21
    1   576 ACCEPT     tcp  --  any    any     anywhere             robinsonfamilyonline.net tcp dpt:6201

Chain input_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain input_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination
    1    48 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:22
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:8443

Chain output_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
root@Scranton:~$



root@Scranton:~$ iptables -t nat -L -v
Chain NEW (1 references)
 pkts bytes target     prot opt in     out     source               destination
   56  5276 RETURN     all  --  any    any     anywhere             anywhere            limit: avg 50/sec burst 100
    0     0 DROP       all  --  any    any     anywhere             anywhere

Chain PREROUTING (policy ACCEPT 82 packets, 13177 bytes)
 pkts bytes target     prot opt in     out     source               destination
   56  5276 NEW        tcp  --  any    any     anywhere             anywhere            state NEW
  112 17287 prerouting_rule  all  --  any    any     anywhere             anywhere
   50 10070 prerouting_wan  all  --  vlan1  any     anywhere             anywhere

Chain POSTROUTING (policy ACCEPT 15 packets, 2545 bytes)
 pkts bytes target     prot opt in     out     source               destination
   35  2549 postrouting_rule  all  --  any    any     anywhere             anywhere
   21  1033 MASQUERADE  all  --  any    vlan1   anywhere             anywhere

Chain OUTPUT (policy ACCEPT 6 packets, 1600 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain postrouting_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 SNAT       all  --  any    br0     robinsonfamilyonline.net  robinsonfamilyonline.net to:192.168.1.1

Chain prerouting_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain prerouting_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination
    1    48 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:22
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:8443
   14   708 DNAT       tcp  --  any    any     anywhere             anywhere            tcp dpt:80 to:192.168.1.201:80
    0     0 DNAT       tcp  --  any    any     anywhere             anywhere            tcp dpt:21 to:192.168.1.201:21
   15  3354 DNAT       tcp  --  any    any     anywhere             anywhere            tcp dpt:6201 to:192.168.1.201:6201
root@Scranton:~$