rendered paste bodyChain Banned (0 references)
target prot opt source destination
LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[TCP Banned] '
LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[UDP Banned] '
LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[ICMP Banned] '
LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[FRAG Banned] '
DROP all -- anywhere anywhere
Chain DDoS (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 1/sec burst 10
LOG all -- anywhere anywhere LOG level warning prefix `[DOS Attack/SYN Scan?] '
DROP all -- anywhere anywhere
Chain IANA (244 references)
target prot opt source destination
LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[IANA Reserved - TCP] '
LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[IANA Reserved - UDP] '
LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[IANA Reserved - ICMP] '
LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[IANA Reserved - FRAG] '
DROP all -- anywhere anywhere
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
DROP all -- anywhere 192.168.1.0
DROP all -- anywhere 192.168.1.255
LOG all -- anywhere 255.255.255.255 limit: avg 1/sec burst 5 LOG level warning prefix `[Limited Broadcast] '
DROP all -- anywhere 255.255.255.255
ScanD tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
ScanD tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
ScanD tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
ScanD tcp -- anywhere anywhere tcp flags:FIN,RST/FIN,RST
ScanD tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN
ScanD tcp -- anywhere anywhere tcp flags:PSH,ACK/PSH
ScanD tcp -- anywhere anywhere tcp flags:ACK,URG/URG
DDoS tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN
ACCEPT all -- anywhere anywhere
IANA all -- 1.0.0.0/8 anywhere
IANA all -- anywhere 1.0.0.0/8
IANA all -- 2.0.0.0/8 anywhere
IANA all -- anywhere 2.0.0.0/8
IANA all -- 5.0.0.0/8 anywhere
IANA all -- anywhere 5.0.0.0/8
IANA all -- 7.0.0.0/8 anywhere
IANA all -- anywhere 7.0.0.0/8
IANA all -- 23.0.0.0/8 anywhere
IANA all -- anywhere 23.0.0.0/8
IANA all -- 27.0.0.0/8 anywhere
IANA all -- anywhere 27.0.0.0/8
IANA all -- 31.0.0.0/8 anywhere
IANA all -- anywhere 31.0.0.0/8
IANA all -- 36.0.0.0/8 anywhere
IANA all -- anywhere 36.0.0.0/8
IANA all -- 37.0.0.0/8 anywhere
IANA all -- anywhere 37.0.0.0/8
IANA all -- 39.0.0.0/8 anywhere
IANA all -- anywhere 39.0.0.0/8
IANA all -- 42.0.0.0/8 anywhere
IANA all -- anywhere 42.0.0.0/8
IANA all -- 77.0.0.0/8 anywhere
IANA all -- anywhere 77.0.0.0/8
IANA all -- 78.0.0.0/8 anywhere
IANA all -- anywhere 78.0.0.0/8
IANA all -- 79.0.0.0/8 anywhere
IANA all -- anywhere 79.0.0.0/8
IANA all -- 92.0.0.0/8 anywhere
IANA all -- anywhere 92.0.0.0/8
IANA all -- 93.0.0.0/8 anywhere
IANA all -- anywhere 93.0.0.0/8
IANA all -- 94.0.0.0/8 anywhere
IANA all -- anywhere 94.0.0.0/8
IANA all -- 95.0.0.0/8 anywhere
IANA all -- anywhere 95.0.0.0/8
IANA all -- 96.0.0.0/8 anywhere
IANA all -- anywhere 96.0.0.0/8
IANA all -- 97.0.0.0/8 anywhere
IANA all -- anywhere 97.0.0.0/8
IANA all -- 98.0.0.0/8 anywhere
IANA all -- anywhere 98.0.0.0/8
IANA all -- 99.0.0.0/8 anywhere
IANA all -- anywhere 99.0.0.0/8
IANA all -- 100.0.0.0/8 anywhere
IANA all -- anywhere 100.0.0.0/8
IANA all -- 101.0.0.0/8 anywhere
IANA all -- anywhere 101.0.0.0/8
IANA all -- 102.0.0.0/8 anywhere
IANA all -- anywhere 102.0.0.0/8
IANA all -- 103.0.0.0/8 anywhere
IANA all -- anywhere 103.0.0.0/8
IANA all -- 104.0.0.0/8 anywhere
IANA all -- anywhere 104.0.0.0/8
IANA all -- 105.0.0.0/8 anywhere
IANA all -- anywhere 105.0.0.0/8
IANA all -- 106.0.0.0/8 anywhere
IANA all -- anywhere 106.0.0.0/8
IANA all -- 107.0.0.0/8 anywhere
IANA all -- anywhere 107.0.0.0/8
IANA all -- 108.0.0.0/8 anywhere
IANA all -- anywhere 108.0.0.0/8
IANA all -- 109.0.0.0/8 anywhere
IANA all -- anywhere 109.0.0.0/8
IANA all -- 110.0.0.0/8 anywhere
IANA all -- anywhere 110.0.0.0/8
IANA all -- 111.0.0.0/8 anywhere
IANA all -- anywhere 111.0.0.0/8
IANA all -- 112.0.0.0/8 anywhere
IANA all -- anywhere 112.0.0.0/8
IANA all -- 113.0.0.0/8 anywhere
IANA all -- anywhere 113.0.0.0/8
IANA all -- 114.0.0.0/8 anywhere
IANA all -- anywhere 114.0.0.0/8
IANA all -- 115.0.0.0/8 anywhere
IANA all -- anywhere 115.0.0.0/8
IANA all -- 116.0.0.0/8 anywhere
IANA all -- anywhere 116.0.0.0/8
IANA all -- 117.0.0.0/8 anywhere
IANA all -- anywhere 117.0.0.0/8
IANA all -- 118.0.0.0/8 anywhere
IANA all -- anywhere 118.0.0.0/8
IANA all -- 119.0.0.0/8 anywhere
IANA all -- anywhere 119.0.0.0/8
IANA all -- 120.0.0.0/8 anywhere
IANA all -- anywhere 120.0.0.0/8
IANA all -- 127.0.0.0/8 anywhere
IANA all -- anywhere 127.0.0.0/8
IANA all -- 173.0.0.0/8 anywhere
IANA all -- anywhere 173.0.0.0/8
IANA all -- 174.0.0.0/8 anywhere
IANA all -- anywhere 174.0.0.0/8
IANA all -- 175.0.0.0/8 anywhere
IANA all -- anywhere 175.0.0.0/8
IANA all -- 176.0.0.0/8 anywhere
IANA all -- anywhere 176.0.0.0/8
IANA all -- 177.0.0.0/8 anywhere
IANA all -- anywhere 177.0.0.0/8
IANA all -- 178.0.0.0/8 anywhere
IANA all -- anywhere 178.0.0.0/8
IANA all -- 179.0.0.0/8 anywhere
IANA all -- anywhere 179.0.0.0/8
IANA all -- 180.0.0.0/8 anywhere
IANA all -- anywhere 180.0.0.0/8
IANA all -- 181.0.0.0/8 anywhere
IANA all -- anywhere 181.0.0.0/8
IANA all -- 182.0.0.0/8 anywhere
IANA all -- anywhere 182.0.0.0/8
IANA all -- 183.0.0.0/8 anywhere
IANA all -- anywhere 183.0.0.0/8
IANA all -- 184.0.0.0/8 anywhere
IANA all -- anywhere 184.0.0.0/8
IANA all -- 185.0.0.0/8 anywhere
IANA all -- anywhere 185.0.0.0/8
IANA all -- 186.0.0.0/8 anywhere
IANA all -- anywhere 186.0.0.0/8
IANA all -- 187.0.0.0/8 anywhere
IANA all -- anywhere 187.0.0.0/8
IANA all -- 197.0.0.0/8 anywhere
IANA all -- anywhere 197.0.0.0/8
IANA all -- 223.0.0.0/8 anywhere
IANA all -- anywhere 223.0.0.0/8
ACCEPT icmp -- anywhere 192.168.1.69 icmp source-quench
ACCEPT icmp -- anywhere 192.168.1.69 icmp parameter-problem
ACCEPT icmp -- anywhere 192.168.1.69 icmp destination-unreachable
ACCEPT icmp -- anywhere 192.168.1.69 icmp time-exceeded
ACCEPT icmp -- anywhere 192.168.1.69 icmp echo-reply
ACCEPT icmp -- anywhere 192.168.1.69 icmp echo-request
LnD tcp -- anywhere 192.168.1.69 state NEW tcp dpt:sieve
LnD tcp -- anywhere 192.168.1.69 state NEW tcp dpts:x11:6063
LnD tcp -- anywhere 192.168.1.69 state NEW tcp dpt:socks
LnD tcp -- anywhere 192.168.1.69 state NEW tcp dpt:nfs
LnD udp -- anywhere 192.168.1.69 udp dpt:nfs
ACCEPT udp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED udp spt:domain dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:domain dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:auth dpts:1024:65535
LnR tcp -- anywhere 192.168.1.69 tcp dpt:auth
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:ssmtp dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 tcp spts:1024:65535 dpt:smtp
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:pop3 dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:pop3s dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:imap2 dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:imaps dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:nntp dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:nntps dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:telnet dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:ssh dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:ssh dpts:login:1023
ACCEPT tcp -- anywhere 192.168.1.69 tcp spts:1024:65535 dpt:ssh
ACCEPT tcp -- anywhere 192.168.1.69 tcp spts:login:1023 dpt:ssh
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:ftp dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state NEW tcp spt:ftp-data dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spts:1024:65535 dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:www dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:https dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:finger dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:whois dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:z3950 dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 tcp spt:rtsp
ACCEPT tcp -- anywhere 192.168.1.69 tcp spt:1723 dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT gre -- anywhere anywhere
ACCEPT gre -- anywhere anywhere
ACCEPT gre -- anywhere anywhere
ACCEPT udp -- anywhere 192.168.1.69 udp spts:32769:65535 dpts:33434:33523
ACCEPT udp -- anywhere 192.168.1.69 udp spt:ntp dpts:1024:65535
ACCEPT udp -- anywhere 192.168.1.69 udp spt:ntp dpt:ntp
ACCEPT udp -- anywhere 192.168.1.69 udp spt:4000 dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:microsoft-ds dpts:1024:65535
ACCEPT udp -- 192.168.1.0/24 192.168.1.69 udp spts:1024:65535 dpt:netbios-ns
ACCEPT udp -- 192.168.1.0/24 192.168.1.69 udp spts:1024:65535 dpt:netbios-dgm
ACCEPT tcp -- 192.168.1.0/24 192.168.1.69 tcp spts:1024:65535 dpt:netbios-ssn
ACCEPT tcp -- 192.168.1.0/24 192.168.1.69 tcp spts:1024:65535 dpt:microsoft-ds
LnD all -- 192.168.1.69 anywhere
LnD all -- 10.0.0.0/8 anywhere
LnD all -- anywhere 10.0.0.0/8
LnD all -- 172.16.0.0/12 anywhere
LnD all -- anywhere 172.16.0.0/12
LnD all -- 127.0.0.0/8 anywhere
LnD all -- 255.255.255.255 anywhere
LnD all -- anywhere 0.0.0.0
LnD all -- BASE-ADDRESS.MCAST.NET/4 anywhere
LnD all -- 240.0.0.0/5 anywhere
LnD tcp -- anywhere anywhere
LnD udp -- anywhere anywhere
LnD icmp -- anywhere anywhere
ACCEPT all -- 192.168.0.0/24 anywhere
ACCEPT all -- 192.168.2.0/24 anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere icmp source-quench
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp fragmentation-needed
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- 192.168.0.0/24 anywhere icmp echo-request
ACCEPT icmp -- anywhere 192.168.0.0/24 icmp echo-reply
ACCEPT icmp -- 192.168.2.0/24 anywhere icmp echo-request
ACCEPT icmp -- anywhere 192.168.2.0/24 icmp echo-reply
ACCEPT udp -- 192.168.0.0/24 anywhere udp spts:1024:65535 dpt:domain
ACCEPT udp -- anywhere 192.168.0.0/24 udp spt:domain dpts:1024:65535
ACCEPT udp -- 192.168.2.0/24 anywhere udp spts:1024:65535 dpt:domain
ACCEPT udp -- anywhere 192.168.2.0/24 udp spt:domain dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:domain
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:domain dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:domain
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:domain dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:auth
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:auth dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:auth
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:auth dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:smtp
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:smtp
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:pop3
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:pop3 dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:pop3
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:pop3 dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:pop3s
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:pop3s dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:pop3s
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:pop3s dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:imap2
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:imap2 dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:imap2
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:imap2 dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:imaps
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:imaps dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:imaps
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:imaps dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:nntp
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:nntp dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:nntp
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:nntp dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:nntps
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:nntps dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:nntps
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:nntps dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:telnet
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:telnet dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:telnet
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:telnet dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:ssh
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:ssh dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:login:1023 dpt:ssh
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:ssh dpts:login:1023
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:ssh
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:ssh dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:login:1023 dpt:ssh
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:ssh dpts:login:1023
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpts:ftp-data:ftp
ACCEPT tcp -- anywhere 192.168.0.0/24 tcp spts:ftp-data:ftp dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.0.0/24 tcp spts:1024:65535 dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpts:ftp-data:ftp
ACCEPT tcp -- anywhere 192.168.2.0/24 tcp spts:ftp-data:ftp dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpts:1024:65535
ACCEPT tcp -- anywhere 192.168.2.0/24 tcp spts:1024:65535 dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:www
ACCEPT tcp -- anywhere 192.168.0.0/24 tcp spt:www dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:www
ACCEPT tcp -- anywhere 192.168.2.0/24 tcp spt:www dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:https
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:https dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:https
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:https dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:finger
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:finger dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:finger
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:finger dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:whois
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:whois dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:whois
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:whois dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:z3950
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:z3950 dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:z3950
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:z3950 dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:rtsp
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:rtsp dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:rtsp
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:rtsp dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:1723
ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:1723 dpts:1024:65535
ACCEPT gre -- 192.168.2.0/24 anywhere
ACCEPT gre -- anywhere 192.168.2.0/24
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:1723
ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:1723 dpts:1024:65535
ACCEPT udp -- 192.168.0.0/24 anywhere udp spts:32769:65535 dpts:33434:33523
ACCEPT udp -- anywhere 192.168.0.0/24 udp spts:33434:33523 dpts:32769:65535
ACCEPT udp -- 192.168.2.0/24 anywhere udp spts:32769:65535 dpts:33434:33523
ACCEPT udp -- anywhere 192.168.2.0/24 udp spts:33434:33523 dpts:32769:65535
ACCEPT udp -- anywhere 192.168.0.0/24 udp spts:32769:65535 dpts:33434:33523
ACCEPT udp -- anywhere 192.168.2.0/24 udp spts:32769:65535 dpts:33434:33523
ACCEPT udp -- 192.168.0.0/24 anywhere udp spts:1024:65535 dpt:ntp
ACCEPT udp -- anywhere 192.168.0.0/24 udp spt:ntp dpts:1024:65535
ACCEPT udp -- 192.168.0.0/24 anywhere udp spt:ntp dpt:ntp
ACCEPT udp -- anywhere 192.168.0.0/24 udp spt:ntp dpt:ntp
ACCEPT udp -- 192.168.2.0/24 anywhere udp spts:1024:65535 dpt:ntp
ACCEPT udp -- anywhere 192.168.2.0/24 udp spt:ntp dpts:1024:65535
ACCEPT udp -- 192.168.2.0/24 anywhere udp spt:ntp dpt:ntp
ACCEPT udp -- anywhere 192.168.2.0/24 udp spt:ntp dpt:ntp
ACCEPT udp -- 192.168.0.0/24 anywhere udp spts:1024:65535 dpt:4000
ACCEPT udp -- anywhere 192.168.0.0/24 udp spt:4000 dpts:1024:65535
ACCEPT udp -- 192.168.2.0/24 anywhere udp spts:1024:65535 dpt:4000
ACCEPT udp -- anywhere 192.168.2.0/24 udp spt:4000 dpts:1024:65535
ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:microsoft-ds
ACCEPT tcp -- anywhere 192.168.0.0/24 tcp spt:microsoft-ds dpts:1024:65535
ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:microsoft-ds
ACCEPT tcp -- anywhere 192.168.2.0/24 tcp spt:microsoft-ds dpts:1024:65535
Chain LnD (25 references)
target prot opt source destination
LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[TCP drop] '
LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[UDP drop] '
LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[ICMP drop] '
LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[FRAG drop] '
DROP all -- anywhere anywhere
Chain LnR (11 references)
target prot opt source destination
LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[TCP reject] '
LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[UDP reject] '
LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[ICMP reject] '
LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[FRAG reject] '
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
IANA all -- 1.0.0.0/8 anywhere
IANA all -- anywhere 1.0.0.0/8
IANA all -- 2.0.0.0/8 anywhere
IANA all -- anywhere 2.0.0.0/8
IANA all -- 5.0.0.0/8 anywhere
IANA all -- anywhere 5.0.0.0/8
IANA all -- 7.0.0.0/8 anywhere
IANA all -- anywhere 7.0.0.0/8
IANA all -- 23.0.0.0/8 anywhere
IANA all -- anywhere 23.0.0.0/8
IANA all -- 27.0.0.0/8 anywhere
IANA all -- anywhere 27.0.0.0/8
IANA all -- 31.0.0.0/8 anywhere
IANA all -- anywhere 31.0.0.0/8
IANA all -- 36.0.0.0/8 anywhere
IANA all -- anywhere 36.0.0.0/8
IANA all -- 37.0.0.0/8 anywhere
IANA all -- anywhere 37.0.0.0/8
IANA all -- 39.0.0.0/8 anywhere
IANA all -- anywhere 39.0.0.0/8
IANA all -- 42.0.0.0/8 anywhere
IANA all -- anywhere 42.0.0.0/8
IANA all -- 77.0.0.0/8 anywhere
IANA all -- anywhere 77.0.0.0/8
IANA all -- 78.0.0.0/8 anywhere
IANA all -- anywhere 78.0.0.0/8
IANA all -- 79.0.0.0/8 anywhere
IANA all -- anywhere 79.0.0.0/8
IANA all -- 92.0.0.0/8 anywhere
IANA all -- anywhere 92.0.0.0/8
IANA all -- 93.0.0.0/8 anywhere
IANA all -- anywhere 93.0.0.0/8
IANA all -- 94.0.0.0/8 anywhere
IANA all -- anywhere 94.0.0.0/8
IANA all -- 95.0.0.0/8 anywhere
IANA all -- anywhere 95.0.0.0/8
IANA all -- 96.0.0.0/8 anywhere
IANA all -- anywhere 96.0.0.0/8
IANA all -- 97.0.0.0/8 anywhere
IANA all -- anywhere 97.0.0.0/8
IANA all -- 98.0.0.0/8 anywhere
IANA all -- anywhere 98.0.0.0/8
IANA all -- 99.0.0.0/8 anywhere
IANA all -- anywhere 99.0.0.0/8
IANA all -- 100.0.0.0/8 anywhere
IANA all -- anywhere 100.0.0.0/8
IANA all -- 101.0.0.0/8 anywhere
IANA all -- anywhere 101.0.0.0/8
IANA all -- 102.0.0.0/8 anywhere
IANA all -- anywhere 102.0.0.0/8
IANA all -- 103.0.0.0/8 anywhere
IANA all -- anywhere 103.0.0.0/8
IANA all -- 104.0.0.0/8 anywhere
IANA all -- anywhere 104.0.0.0/8
IANA all -- 105.0.0.0/8 anywhere
IANA all -- anywhere 105.0.0.0/8
IANA all -- 106.0.0.0/8 anywhere
IANA all -- anywhere 106.0.0.0/8
IANA all -- 107.0.0.0/8 anywhere
IANA all -- anywhere 107.0.0.0/8
IANA all -- 108.0.0.0/8 anywhere
IANA all -- anywhere 108.0.0.0/8
IANA all -- 109.0.0.0/8 anywhere
IANA all -- anywhere 109.0.0.0/8
IANA all -- 110.0.0.0/8 anywhere
IANA all -- anywhere 110.0.0.0/8
IANA all -- 111.0.0.0/8 anywhere
IANA all -- anywhere 111.0.0.0/8
IANA all -- 112.0.0.0/8 anywhere
IANA all -- anywhere 112.0.0.0/8
IANA all -- 113.0.0.0/8 anywhere
IANA all -- anywhere 113.0.0.0/8
IANA all -- 114.0.0.0/8 anywhere
IANA all -- anywhere 114.0.0.0/8
IANA all -- 115.0.0.0/8 anywhere
IANA all -- anywhere 115.0.0.0/8
IANA all -- 116.0.0.0/8 anywhere
IANA all -- anywhere 116.0.0.0/8
IANA all -- 117.0.0.0/8 anywhere
IANA all -- anywhere 117.0.0.0/8
IANA all -- 118.0.0.0/8 anywhere
IANA all -- anywhere 118.0.0.0/8
IANA all -- 119.0.0.0/8 anywhere
IANA all -- anywhere 119.0.0.0/8
IANA all -- 120.0.0.0/8 anywhere
IANA all -- anywhere 120.0.0.0/8
IANA all -- 127.0.0.0/8 anywhere
IANA all -- anywhere 127.0.0.0/8
IANA all -- 173.0.0.0/8 anywhere
IANA all -- anywhere 173.0.0.0/8
IANA all -- 174.0.0.0/8 anywhere
IANA all -- anywhere 174.0.0.0/8
IANA all -- 175.0.0.0/8 anywhere
IANA all -- anywhere 175.0.0.0/8
IANA all -- 176.0.0.0/8 anywhere
IANA all -- anywhere 176.0.0.0/8
IANA all -- 177.0.0.0/8 anywhere
IANA all -- anywhere 177.0.0.0/8
IANA all -- 178.0.0.0/8 anywhere
IANA all -- anywhere 178.0.0.0/8
IANA all -- 179.0.0.0/8 anywhere
IANA all -- anywhere 179.0.0.0/8
IANA all -- 180.0.0.0/8 anywhere
IANA all -- anywhere 180.0.0.0/8
IANA all -- 181.0.0.0/8 anywhere
IANA all -- anywhere 181.0.0.0/8
IANA all -- 182.0.0.0/8 anywhere
IANA all -- anywhere 182.0.0.0/8
IANA all -- 183.0.0.0/8 anywhere
IANA all -- anywhere 183.0.0.0/8
IANA all -- 184.0.0.0/8 anywhere
IANA all -- anywhere 184.0.0.0/8
IANA all -- 185.0.0.0/8 anywhere
IANA all -- anywhere 185.0.0.0/8
IANA all -- 186.0.0.0/8 anywhere
IANA all -- anywhere 186.0.0.0/8
IANA all -- 187.0.0.0/8 anywhere
IANA all -- anywhere 187.0.0.0/8
IANA all -- 197.0.0.0/8 anywhere
IANA all -- anywhere 197.0.0.0/8
IANA all -- 223.0.0.0/8 anywhere
IANA all -- anywhere 223.0.0.0/8
ACCEPT icmp -- 192.168.1.69 anywhere icmp source-quench
ACCEPT icmp -- 192.168.1.69 anywhere icmp parameter-problem
ACCEPT icmp -- 192.168.1.69 anywhere icmp destination-unreachable
ACCEPT icmp -- 192.168.1.69 anywhere icmp fragmentation-needed
ACCEPT icmp -- 192.168.1.69 anywhere icmp time-exceeded
ACCEPT icmp -- 192.168.1.69 anywhere icmp echo-request
ACCEPT icmp -- 192.168.1.69 anywhere icmp echo-reply
LnR tcp -- 192.168.1.69 anywhere state NEW tcp dpt:sieve
LnR tcp -- 192.168.1.69 anywhere state NEW tcp dpts:x11:6063
LnR tcp -- 192.168.1.69 anywhere state NEW tcp dpt:socks
LnR tcp -- anywhere anywhere state NEW tcp dpt:nfs
LnR udp -- anywhere anywhere udp dpt:nfs
ACCEPT udp -- 192.168.1.69 anywhere udp spts:1024:65535 dpt:domain
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:domain
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:auth
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:smtp
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:ssmtp
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:smtp
ACCEPT tcp -- 192.168.1.69 anywhere state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:pop3
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:pop3s
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:imap2
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:imaps
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:nntp
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:nntps
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:telnet
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:ssh
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:login:1023 dpt:ssh
ACCEPT tcp -- 192.168.1.69 anywhere state RELATED,ESTABLISHED tcp spt:ssh dpts:1024:65535
ACCEPT tcp -- 192.168.1.69 anywhere state RELATED,ESTABLISHED tcp spt:ssh dpts:login:1023
ACCEPT tcp -- 192.168.1.69 anywhere state NEW,ESTABLISHED tcp spts:1024:65535 dpt:ftp
ACCEPT tcp -- 192.168.1.69 anywhere state RELATED,ESTABLISHED tcp spts:1024:65535 dpt:ftp-data
ACCEPT tcp -- 192.168.1.69 anywhere state NEW,ESTABLISHED tcp spts:1024:65535 dpts:1024:65535
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:www
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:https
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:finger
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:whois
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:z3950
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:rtsp
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:1723
ACCEPT gre -- anywhere anywhere
ACCEPT gre -- anywhere anywhere
ACCEPT gre -- anywhere anywhere
ACCEPT udp -- 192.168.1.69 anywhere udp spts:32769:65535 dpts:33434:33523
ACCEPT udp -- 192.168.1.69 anywhere udp spts:1024:65535 dpt:ntp
ACCEPT udp -- 192.168.1.69 anywhere udp spt:ntp dpt:ntp
ACCEPT udp -- 192.168.1.69 anywhere udp spts:1024:65535 dpt:4000
ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:microsoft-ds
ACCEPT udp -- 192.168.1.69 192.168.1.0/24 state RELATED,ESTABLISHED udp spt:netbios-ns dpts:1024:65535
ACCEPT udp -- 192.168.1.69 192.168.1.0/24 state RELATED,ESTABLISHED udp spt:netbios-dgm dpts:1024:65535
ACCEPT tcp -- 192.168.1.69 192.168.1.0/24 state RELATED,ESTABLISHED tcp spt:netbios-ssn dpts:1024:65535
ACCEPT tcp -- 192.168.1.69 192.168.1.0/24 state RELATED,ESTABLISHED tcp spt:microsoft-ds dpts:1024:65535
LnD all -- 10.0.0.0/8 anywhere
LnD all -- anywhere 10.0.0.0/8
LnD all -- 172.16.0.0/12 anywhere
LnD all -- anywhere 172.16.0.0/12
LnD all -- 127.0.0.0/8 anywhere
LnD all -- 255.255.255.255 anywhere
LnD all -- anywhere 0.0.0.0
LnR all -- BASE-ADDRESS.MCAST.NET/4 anywhere
LnR all -- anywhere 240.0.0.0/5
LnR tcp -- anywhere anywhere
LnR udp -- anywhere anywhere
LnR icmp -- anywhere anywhere
ACCEPT all -- anywhere 192.168.0.0/24
ACCEPT all -- anywhere 192.168.2.0/24
Chain ScanD (7 references)
target prot opt source destination
LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `[TCP Scan?] '
LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `[UDP Scan?] '
LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `[ICMP Scan?] '
LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `[FRAG Scan?] '
DROP all -- anywhere anywhere