rendered paste bodyChain INPUT (policy DROP 101 packets, 11518 bytes)
pkts bytes target prot opt in out source destination
167 16436 BADTCP 0 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02 limit: avg 10/sec burst 5
66 4918 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 state NEW
0 0 DROP 0 -- * * 127.0.0.0/8 0.0.0.0/0 state NEW
0 0 DROP 0 -- * * 0.0.0.0/0 127.0.0.0/8 state NEW
0 0 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67
0 0 ACCEPT 0 -- ipsec+ * 0.0.0.0/0 0.0.0.0/0
84 10083 IPSECRED 0 -- eth1 * 0.0.0.0/0 0.0.0.0/0
84 10083 PPTPD 0 -- eth1 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- ppp0 * 0.0.0.0/0 0.0.0.0/0
101 11518 REDINPUT 0 -- * * 0.0.0.0/0 0.0.0.0/0
101 11518 INTERNALACCESS 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
101 11518 EXTERNALACCESS 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
1 48 BADTCP 0 -- * * 0.0.0.0/0 0.0.0.0/0
1 48 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 state NEW
0 0 DROP 0 -- * * 127.0.0.0/8 0.0.0.0/0 state NEW
0 0 DROP 0 -- * * 0.0.0.0/0 127.0.0.0/8 state NEW
0 0 ACCEPT 0 -- eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW
0 0 ACCEPT 0 -- ipsec+ * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- ppp0 * 0.0.0.0/0 0.0.0.0/0
1 48 REDFORWARD 0 -- * * 0.0.0.0/0 0.0.0.0/0
1 48 DMZHOLES 0 -- eth2 * 0.0.0.0/0 0.0.0.0/0 state NEW
1 48 PORTFORWARD 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
Chain OUTPUT (policy ACCEPT 120 packets, 16105 bytes)
pkts bytes target prot opt in out source destination
Chain BADTCP (2 references)
pkts bytes target prot opt in out source destination
0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29
0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00
0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x01
0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06
0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03
0 0 NEWNOTSYN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW
Chain DMZHOLES (1 references)
pkts bytes target prot opt in out source destination
Chain EXTERNALACCESS (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- eth1 * 10.10.136.13 0.0.0.0/0 MAC 00:16:76:91:7C:CB tcp dpt:80
0 0 ACCEPT tcp -- eth1 * 10.10.136.6 0.0.0.0/0 MAC 00:00:E8:11:95:B8 tcp dpt:80
0 0 ACCEPT tcp -- eth1 * 10.10.136.45 0.0.0.0/0 MAC 00:19:5B:7D:61:D6 tcp dpt:80
Chain INTERNALACCESS (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 0 -- eth0 * 192.168.1.1 0.0.0.0/0
0 0 ACCEPT 0 -- eth0 * 10.10.136.43 0.0.0.0/0 MAC 00:19:5B:82:54:59
Chain IPSECRED (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT esp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT ah -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:500 dpt:500
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500
Chain LOG_DROP (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4
0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0
Chain LOG_REJECT (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4
0 0 REJECT 0 -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain NEWNOTSYN (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0
Chain PORTFORWARD (1 references)
pkts bytes target prot opt in out source destination
1 48 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.1 tcp dpt:80 state NEW
Chain PPTPD (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1723
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1723
0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0
Chain PSCAN (5 references)
pkts bytes target prot opt in out source destination
0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0
Chain REDFORWARD (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- eth2 eth1 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT udp -- eth2 eth1 0.0.0.0/0 0.0.0.0/0
Chain REDINPUT (1 references)
pkts bytes target prot opt in out source destination