All pastes #746556 Raw Edit

Unnamed

public text v1 · immutable
·published 2007-10-23 09:39 UTC
rendered paste body
$ sudo iptables -nL
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     0    --  0.0.0.0/0            0.0.0.0/0
LOGDROP    0    --  127.0.0.1            0.0.0.0/0
LOGDROP    0    --  0.0.0.0/0            127.0.0.1
ACCEPT     0    --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
LOGDROP    icmp --  0.0.0.0/0            0.0.0.0/0
LOGDROP    tcp  --  0.0.0.0/0            0.0.0.0/0
LOGDROP    udp  --  0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     0    --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     0    --  0.0.0.0/0            0.0.0.0/0
LOGDROP    0    --  127.0.0.1            0.0.0.0/0
LOGDROP    0    --  0.0.0.0/0            127.0.0.1
ACCEPT     0    --  0.0.0.0/0            0.0.0.0/0           state NEW,RELATED,ESTABLISHED

Chain LOGDROP (7 references)
target     prot opt source               destination
LOG        tcp  --  0.0.0.0/0            0.0.0.0/0           limit: avg 2/sec burst 10 LOG flags 0 level 4 prefix `TCP LOGDROP: '
LOG        udp  --  0.0.0.0/0            0.0.0.0/0           limit: avg 2/sec burst 10 LOG flags 0 level 4 prefix `UDP LOGDROP: '
LOG        icmp --  0.0.0.0/0            0.0.0.0/0           limit: avg 2/sec burst 10 LOG flags 0 level 4 prefix `ICMP LOGDROP: '
LOG        0    -f  0.0.0.0/0            0.0.0.0/0           limit: avg 2/sec burst 10 LOG flags 0 level 4 prefix `FRAGMENT LOGDROP: '
DROP       0    --  0.0.0.0/0            0.0.0.0/0


--------------------


$ sudo iptables -v -L
Chain INPUT (policy DROP 1 packets, 32 bytes)
 pkts bytes target     prot opt in     out     source               destination
 1475  458K ACCEPT     0    --  lo     any     anywhere             anywhere
    0     0 LOGDROP    0    --  !lo    any     localhost            anywhere
    0     0 LOGDROP    0    --  !lo    any     anywhere             localhost
 190K  137M ACCEPT     0    --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED
   38  2128 LOGDROP    icmp --  eth1   any     anywhere             anywhere
  612 63439 LOGDROP    tcp  --  eth1   any     anywhere             anywhere
 1403  216K LOGDROP    udp  --  eth1   any     anywhere             anywhere

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     0    --  eth1   any     anywhere             anywhere            state RELATED,ESTABLISHED

Chain OUTPUT (policy DROP 31 packets, 2756 bytes)
 pkts bytes target     prot opt in     out     source               destination
 1475  458K ACCEPT     0    --  any    lo      anywhere             anywhere
    0     0 LOGDROP    0    --  any    !lo     localhost            anywhere
    0     0 LOGDROP    0    --  any    !lo     anywhere             localhost
 207K   59M ACCEPT     0    --  any    any     anywhere             anywhere            state NEW,RELATED,ESTABLISHED

Chain LOGDROP (7 references)
 pkts bytes target     prot opt in     out     source               destination
  560 61359 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 2/sec burst 10 LOG level warning prefix `TCP LOGDROP: '
 1400  215K LOG        udp  --  any    any     anywhere             anywhere            limit: avg 2/sec burst 10 LOG level warning prefix `UDP LOGDROP: '
   38  2128 LOG        icmp --  any    any     anywhere             anywhere            limit: avg 2/sec burst 10 LOG level warning prefix `ICMP LOGDROP: '
    0     0 LOG        0    -f  any    any     anywhere             anywhere            limit: avg 2/sec burst 10 LOG level warning prefix `FRAGMENT LOGDROP: '
 2053  281K DROP       0    --  any    any     anywhere             anywhere