All pastes #923643 Raw Edit

Someone

public text v1 · immutable
#923643 ·published 2008-02-29 18:59 UTC
rendered paste body
 iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:5800:5901
ACCEPT     udp  --  anywhere             anywhere            udp dpts:5800:5901
DROP       all  --  192.168.2.0/24       192.168.3.0/24
DROP       all  --  192.168.2.0/24       192.168.4.0/24
DROP       all  --  192.168.3.0/24       192.168.2.0/24
DROP       all  --  192.168.3.0/24       192.168.4.0/24
DROP       all  --  192.168.4.0/24       192.168.2.0/24
DROP       all  --  192.168.4.0/24       192.168.3.0/24
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTAB                                             LISHED
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:squid
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:10000
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:nameserver
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     udp  --  anywhere             anywhere            udp dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:bootpc
ACCEPT     udp  --  anywhere             anywhere            udp dpt:bootpc

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTAB                                             LISHED
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp-data
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ftp-data
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ftp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:imap
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:1863
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:5000
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:5001
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:5005
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:5050
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:5100
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:6660:6670
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:afs3-filese                                             rver
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:28805
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:32196
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:27315
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:51215
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:5125
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:12141
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:11999
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:19127
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:6112:6119
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:27000:2701                                             5
ACCEPT     udp  --  anywhere             anywhere            udp dpts:27000:2701                                             5
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:27016
ACCEPT     udp  --  anywhere             anywhere            udp dpt:27016
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:27030:2703                                             9
ACCEPT     udp  --  anywhere             anywhere            udp dpts:27030:2703                                             9
REJECT     tcp  --  anywhere             anywhere            tcp dpt:http reject                                             -with icmp-port-unreachable
REJECT     udp  --  anywhere             anywhere            udp dpt:http reject                                             -with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTAB                                             LISHED

Chain RH-Firewall-1-INPUT (0 references)
target     prot opt source               destination