rendered paste body# Generated by iptables-save v1.3.8 on Fri Mar 28 15:38:40 2008
*nat
:PREROUTING ACCEPT [2576:181701]
:POSTROUTING ACCEPT [8464:508321]
:OUTPUT ACCEPT [9868:596999]
-A PREROUTING -s 10.0.0.6 -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.29 -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.9 -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.83 -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.84 -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.4 -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.29 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 10.0.0.2 -i eth+ -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.2 -i eth+ -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 10.0.0.82 -i eth+ -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.82 -i eth+ -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 10.0.0.22 -i eth+ -p tcp -m tcp --dport 1863 -j REDIRECT --to-ports 1864
-A PREROUTING -s 10.0.0.22 -i eth+ -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 10.0.0.9 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.13 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.6.5 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.6.4 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.6.3 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.6.2 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.6.1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.16 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.15 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.14 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.12 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.11 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.10 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.8 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.7 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.6 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.4 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.3 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.2 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.9 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.0.40 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.5.5 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 10.0.0.4 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.5 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.16 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.15 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.14 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.13 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.12 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.11 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.10 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.9 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.8 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.7 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.6 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.4 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.3 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.2 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.0.41 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 10000
-A POSTROUTING -o eth1 -j MASQUERADE
-A POSTROUTING -o eth1 -p icmp -j MASQUERADE
COMMIT
# Completed on Fri Mar 28 15:38:40 2008
# Generated by iptables-save v1.3.8 on Fri Mar 28 15:38:40 2008
*mangle
:PREROUTING ACCEPT [1471454:351792215]
:INPUT ACCEPT [1453878:341566024]
:FORWARD ACCEPT [16713:10171331]
:OUTPUT ACCEPT [1455736:346496607]
:POSTROUTING ACCEPT [1472384:356658261]
-A OUTPUT -p tcp -m multiport --dports 443 -j TOS --set-tos 0x04
-A OUTPUT -p tcp -m multiport --dports 20,21,22,53,80,5000,10000,3128 -j TOS --set-tos 0x10
-A OUTPUT -p udp -m multiport --dports 53,1189 -j TOS --set-tos 0x10
-A OUTPUT -p icmp -j TOS --set-tos 0x10
COMMIT
# Completed on Fri Mar 28 15:38:40 2008
# Generated by iptables-save v1.3.8 on Fri Mar 28 15:38:40 2008
*filter
:INPUT DROP [846:80528]
:FORWARD DROP [27:10256]
:OUTPUT DROP [40:2400]
-A INPUT -s 10.0.0.6 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 10.0.0.3 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 10.0.0.29 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 10.0.0.9 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 10.0.0.60 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 10.0.0.83 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 10.0.0.84 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 10.0.0.13 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.13 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.6.5 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.6.4 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.6.3 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.6.2 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.6.1 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.16 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.15 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.14 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.12 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.11 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.10 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.8 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.7 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.6 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.4 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.3 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.2 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.9 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.1 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.0.40 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.5.5 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 10.0.0.4 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.5 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.16 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.15 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.14 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.13 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.12 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.11 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.10 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.9 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.8 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.7 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.6 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.4 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.3 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.2 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.1.1 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -s 192.168.0.41 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5000 -j ACCEPT
-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -p udp -m udp --dport 21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 110 -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 143 -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 5000 -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -i eth+ -p tcp -m tcp --dport 10001 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 1864 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 3128 -j ACCEPT
-A INPUT -i eth+ -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i eth+ -p udp -m udp --dport 123 -j ACCEPT
-A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p icmp -j REJECT --reject-with icmp-port-unreachable
-A INPUT -i eth+ -p tcp -m tcp --dport 1863 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 25000:30000 -j ACCEPT
-A FORWARD -s 10.0.0.3 -p tcp -m tcp --dport 1863 -j ACCEPT
-A FORWARD -s 10.0.0.60 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 10.0.0.13 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.13 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.6.5 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.6.4 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.6.3 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.6.2 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.6.1 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.16 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.15 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.14 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.12 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.11 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.10 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.8 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.7 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.6 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.4 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.3 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.2 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.9 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.1 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.0.40 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.5.5 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.5 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.16 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.15 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.14 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.13 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.12 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.11 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.10 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.9 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.8 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.7 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.6 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.4 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.3 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.2 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.1.1 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 192.168.0.41 -p tcp -m tcp --dport 1863 -j DROP
-A FORWARD -s 10.0.0.2 -j ACCEPT
-A FORWARD -s 10.0.0.82 -j ACCEPT
-A FORWARD -s 10.0.0.22 -j ACCEPT
-A FORWARD -s 10.0.0.0/255.255.255.0 -d 10.0.0.1 -i eth0 -j ACCEPT
-A FORWARD -s 192.168.1.17 -j ACCEPT
-A FORWARD -s 10.0.0.0/255.255.255.0 -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o eth+ -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -o eth+ -p udp -m udp --dport 123 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 22 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 53 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 80 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 110 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 143 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 5000 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 10000 -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 10001 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
-A OUTPUT -o ppp+ -j ACCEPT
-A OUTPUT -o tun+ -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o eth+ -p tcp -m tcp --dport 1863 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 25000:30000 -j ACCEPT
COMMIT
# Completed on Fri Mar 28 15:38:40 2008