All pastes #961178 Raw Edit

Miscellany

public text v1 · immutable
#961178 ·published 2008-03-28 18:51 UTC
rendered paste body
[root@driftx ~]# iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere            state INVALID
REJECT     tcp  --  anywhere             anywhere            tcp flags:SYN,ACK/SYN,ACK state NEW reject-with tcp-reset
DROP       tcp  --  anywhere             anywhere            tcp flags:!FIN,SYN,RST,ACK/SYN state NEW
DROP       all  --  127.0.0.0/8          anywhere
DROP       all  --  169.254.0.0/16       anywhere
DROP       all  --  127.0.0.0/8          anywhere
DROP       all  --  169.254.0.0/16       anywhere
DROP       all  --  127.0.0.0/8          anywhere
DROP       all  --  169.254.0.0/16       anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded
ACCEPT     udp  --  anywhere             anywhere            udp spt:bootps dpt:bootpc
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:bootps dpt:bootpc
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded
ACCEPT     udp  --  anywhere             anywhere            udp spt:bootps dpt:bootpc
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:bootps dpt:bootpc
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded
ACCEPT     udp  --  anywhere             anywhere            udp spt:bootps dpt:bootpc
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:bootps dpt:bootpc
ACCEPT     tcp  --  anywhere             76.29.209.169       tcp dpt:1875
ACCEPT     tcp  --  anywhere             c-67-173-12-134.hsd1.il.comcast.net tcp dpt:1875
ACCEPT     tcp  --  anywhere             c-98-193-74-233.hsd1.il.comcast.net tcp dpt:1875
ACCEPT     udp  --  anywhere             76.29.209.169       udp dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             76.29.209.169       tcp dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere             c-67-173-12-134.hsd1.il.comcast.net udp dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             c-67-173-12-134.hsd1.il.comcast.net tcp dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere             c-98-193-74-233.hsd1.il.comcast.net udp dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             c-98-193-74-233.hsd1.il.comcast.net tcp dpts:1024:65535 state RELATED,ESTABLISHED
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpts:1023:1025
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpts:1400:1500
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpt:777
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpt:snpp
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpt:4192
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpt:snpp
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpt:1221
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpts:9000:9001
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpts:3000:3030
ACCEPT     udp  --  anywhere             192.168.6.200       udp dpts:1940:1970
ACCEPT     udp  --  anywhere             192.168.6.200       udp dpts:3000:3030
ACCEPT     udp  --  anywhere             192.168.6.200       udp dpt:tftp
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpt:tftp
ACCEPT     tcp  --  anywhere             192.168.6.200       tcp dpt:58964
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere            udp spt:bootpc dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:bootpc dpt:bootps
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere            udp spt:bootpc dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:bootpc dpt:bootps
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere            udp spt:bootpc dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:bootpc dpt:bootps
ACCEPT     tcp  --  76.29.209.169        anywhere            tcp spt:1875
ACCEPT     tcp  --  c-67-173-12-134.hsd1.il.comcast.net  anywhere            tcp spt:1875
ACCEPT     tcp  --  c-98-193-74-233.hsd1.il.comcast.net  anywhere            tcp spt:1875
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere

Chain drop-lan (0 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere