All pastes #895794 Raw Edit

shorewall2

public text v1 · immutable
·published 2008-02-08 02:22 UTC
rendered paste body
iptables -nvL FORWARD

Chain FORWARD (policy DROP 1 packets, 66 bytes)
 pkts bytes target     prot opt in     out     source               destination
1087K  474M eth1_fwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0
    0     0 eth2_fwd   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0
1424K  380M eth0_fwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0          limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:'
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0



=======================================================================
iptables -nvL  -t nat

Chain PREROUTING (policy ACCEPT 148K packets, 21M bytes)
 pkts bytes target     prot opt in     out     source               destination
 160K   21M loc_dnat   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0

Chain POSTROUTING (policy ACCEPT 24567 packets, 1220K bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 eth2_masq  all  --  *      eth2    0.0.0.0/0            0.0.0.0/0
11364  740K eth0_masq  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 33 packets, 2242 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain eth0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination
11338  738K MASQUERADE  all  --  *      *       192.168.1.0/24       0.0.0.0/0

Chain eth2_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 MASQUERADE  all  --  *      *       192.168.1.0/24       0.0.0.0/0

Chain loc_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            172.9.23.87        tcp spt:80 dpt:81 to:192.168.1.5
12567  632K DNAT       tcp  --  *      *       0.0.0.0/0            172.9.1.30         multiport dports 80,53,21,3181,389,1352
,5900,3306 to:192.168.1.2
11958  586K DNAT       tcp  --  *      *       0.0.0.0/0            172.9.23.85        multiport dports 80,53,1433,3181,4899,5
900,389 to:192.168.1.5
    0     0 REDIRECT   tcp  --  *      *       0.0.0.0/0            192.168.1.5        tcp dpt:80 redir ports 81
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            172.9.1.85         multiport dports 80,1433,138,139,4899 t
o:192.168.1.3
    6   288 DNAT       tcp  --  *      *       172.9.23.89          0.0.0.0/0          multiport dports 221,389,1352,3181,80 t
o:192.168.1.2
    0     0 DNAT       tcp  --  *      *       172.95.23.25         0.0.0.0/0          multiport dports 221,80,3181,389 to:192
.168.1.2
    1    52 DNAT       tcp  --  *      *       172.9.23.47          0.0.0.0/0          multiport dports 221,80,3181,389 to:192
.168.1.2
    0     0 DNAT       tcp  --  *      *       172.95.23.43         0.0.0.0/0          multiport dports 221,3181,80,389 to:192
.168.1.2
    0     0 DNAT       tcp  --  *      *       172.9.12.75          0.0.0.0/0          multiport dports 3181,80,221,389 to:192
.168.1.2
    0     0 DNAT       tcp  --  *      *       172.9.23.89          0.0.0.0/0          multiport dports 221,3181 to:192.168.1.
2
    2    96 DNAT       tcp  --  *      *       0.0.0.0/0            172.9.44.167       multiport dports 137,138,139,1433,80,53,21,4899,5900,23 to:192.168.1.4