All pastes #73633 Raw Edit

Someone

public text v1 · immutable
#73633 ·published 2006-06-28 02:32 UTC
rendered paste body
Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ipac~o     all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 BADTCP     all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0            tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x16/0x02 limit: avg 10/sec burst 5
    0     0 CUSTOMINPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 GUIINPUT   all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 DROP       all  --  *      *       127.0.0.0/8          0.0.0.0/0           state NEW
    0     0 DROP       all  --  *      *       0.0.0.0/0            127.0.0.0/8         state NEW
    0     0 ACCEPT    !icmp --  eth0   *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 ACCEPT     all  --  ipsec+ *       0.0.0.0/0            0.0.0.0/0
    0     0 DHCPBLUEINPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 IPSECRED   all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 IPSECBLUE  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 WIRELESSINPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 REDINPUT   all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 XTACCESS   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `INPUT '

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ipac~fi    all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ipac~fo    all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 BADTCP     all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU
    0     0 CUSTOMFORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 DROP       all  --  *      *       127.0.0.0/8          0.0.0.0/0           state NEW
    0     0 DROP       all  --  *      *       0.0.0.0/0            127.0.0.0/8         state NEW
    0     0 ACCEPT     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 ACCEPT     all  --  eth2   eth2    0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 ACCEPT     all  --  ipsec+ *       0.0.0.0/0            0.0.0.0/0
    0     0 WIRELESSFORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 REDFORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 DMZHOLES   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 PORTFWACCESS  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `OUTPUT '

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ipac~i     all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 CUSTOMOUTPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain BADTCP (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 PSCAN      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x29
    0     0 PSCAN      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x00
    0     0 PSCAN      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x01
    0     0 PSCAN      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x06
    0     0 PSCAN      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x03/0x03
    0     0 NEWNOTSYN  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x16/0x02 state NEW

Chain CUSTOMFORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain CUSTOMINPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain CUSTOMOUTPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain DHCPBLUEINPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain DMZHOLES (2 references)
 pkts bytes target     prot opt in     out     source               destination

Chain GUIINPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     icmp --  !eth3  *       0.0.0.0/0            0.0.0.0/0           icmp type 8

Chain IPSECBLUE (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain IPSECRED (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain LOG_DROP (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain LOG_REJECT (0 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable

Chain NEWNOTSYN (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `NEW not SYN? '
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain PORTFWACCESS (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  eth3   *       0.0.0.0/0            192.168.3.5         tcp dpt:80
    0     0 ACCEPT     tcp  --  eth3   *       0.0.0.0/0            192.168.3.5         tcp dpt:22
    0     0 ACCEPT     tcp  --  eth3   *       0.0.0.0/0            192.168.3.3         tcp dpt:25
    0     0 ACCEPT     udp  --  eth3   *       0.0.0.0/0            192.168.3.3         udp dpt:5060
    0     0 ACCEPT     udp  --  eth3   *       0.0.0.0/0            192.168.3.3         udp dpt:4569

Chain PSCAN (5 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `TCP Scan? '
    0     0 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `UDP Scan? '
    0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `ICMP Scan? '
    0     0 LOG        all  -f  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `FRAG Scan? '
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain REDFORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  eth2   eth3    0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     udp  --  eth2   eth3    0.0.0.0/0            0.0.0.0/0

Chain REDINPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  eth3   *       0.0.0.0/0            0.0.0.0/0           tcp spt:67 dpt:68
    0     0 ACCEPT     udp  --  eth3   *       0.0.0.0/0            0.0.0.0/0           udp spt:67 dpt:68

Chain WIRELESSFORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  eth1   !eth0   192.168.5.2          0.0.0.0/0           MAC 00:16:B6:11:XX:XX
    0     0 DMZHOLES   all  --  eth1   *       192.168.5.2          0.0.0.0/0           MAC 00:16:B6:11:XX:XX
    0     0 LOG_DROP   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0

Chain WIRELESSINPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  eth1   *       192.168.5.2          0.0.0.0/0           MAC 00:16:B6:11:XX:XX
    0     0 LOG_DROP   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0

Chain XTACCESS (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  eth3   *       0.0.0.0/0            24.169.142.23       tcp dpt:113

Chain ipac~fi (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0            all  --  eth0   *       0.0.0.0/0            0.0.0.0/0
    0     0            all  --  eth2   *       0.0.0.0/0            0.0.0.0/0
    0     0            all  --  eth1   *       0.0.0.0/0            0.0.0.0/0
    0     0            all  --  eth3   *       0.0.0.0/0            0.0.0.0/0

Chain ipac~fo (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0            all  --  *      eth0    0.0.0.0/0            0.0.0.0/0
    0     0            all  --  *      eth2    0.0.0.0/0            0.0.0.0/0
    0     0            all  --  *      eth1    0.0.0.0/0            0.0.0.0/0
    0     0            all  --  *      eth3    0.0.0.0/0            0.0.0.0/0

Chain ipac~i (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0            all  --  *      eth0    0.0.0.0/0            0.0.0.0/0
    0     0            all  --  *      eth2    0.0.0.0/0            0.0.0.0/0
    0     0            all  --  *      eth1    0.0.0.0/0            0.0.0.0/0
    0     0            all  --  *      eth3    0.0.0.0/0            0.0.0.0/0

Chain ipac~o (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0            all  --  eth0   *       0.0.0.0/0            0.0.0.0/0
    0     0            all  --  eth2   *       0.0.0.0/0            0.0.0.0/0
    0     0            all  --  eth1   *       0.0.0.0/0            0.0.0.0/0
    0     0            all  --  eth3   *       0.0.0.0/0            0.0.0.0/0