rendered paste bodyChain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- localhost.localdomain 10.25.1.255
logaborted tcp -- anywhere anywhere state RELATED,ESTABLISHED tcp flags:RST/RST
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
nicfilt all -- anywhere anywhere
srcfilt all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
srcfilt all -- anywhere anywhere
Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
s1 all -- anywhere anywhere
Chain f0to1 (3 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:imap state NEW
ACCEPT udp -- anywhere anywhere udp dpt:imap
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:http state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8080 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8008 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8000 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8888 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:4661 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:4662 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:4665
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:4666
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:cvspserver state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:nicname state NEW
ACCEPT udp -- anywhere anywhere udp dpt:nicname
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:6660:6669 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:pop3s state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:6881:6889 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:time
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:time state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8118 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:smtp state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ssh state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:0:1023 dpt:ssh state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:rmt:bnet state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:af:dbstar state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpts:rmt:bnet
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpts:af:dbstar
ACCEPT tcp -- anywhere anywhere tcp spts:af:dbstar state NEW
ACCEPT udp -- anywhere anywhere udp spts:af:dbstar
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:mmcc state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:telnet state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:commplex-main:commplex-link state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:commplex-main
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:1863 state NEW
ACCEPT udp -- anywhere anywhere udp dpt:ntp
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ntp state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:ldap state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:ulp state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:imtc-mcs state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:1720 state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:1731 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:cvsup state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpts:1024:5999
ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-ds state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:smtps state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:1214 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:1214
ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ns state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm
ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ssn
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:acmsoda state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:jabber-client state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:5223 state NEW
ACCEPT udp -- anywhere anywhere udp dpt:aol
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:pptp state NEW
ACCEPT gre -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:svn state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:imaps state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:rsync state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:6346 state NEW
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT udp -- anywhere anywhere udp dpts:33434:33600
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:pop3 state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:domain state NEW
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:aol:aol-3 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpts:aol:aol-3
logreject tcp -- anywhere anywhere tcp spts:1024:65535 dpt:https state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:4662 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:4666
ACCEPT icmp -- anywhere anywhere icmp redirect
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:6881:6889 state NEW
ACCEPT tcp -- anywhere anywhere tcp dpts:af:dbstar state NEW
ACCEPT udp -- anywhere anywhere udp dpts:af:dbstar
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:udt_os:3999 state NEW
ACCEPT icmp -- anywhere anywhere icmp echo-reply
logdrop all -- anywhere anywhere
Chain f1to0 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:4662 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:4666
ACCEPT icmp -- anywhere anywhere icmp redirect
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:6881:6889 state NEW
ACCEPT tcp -- anywhere anywhere tcp dpts:af:dbstar state NEW
ACCEPT udp -- anywhere anywhere udp dpts:af:dbstar
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:udt_os:3999 state NEW
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:imap state NEW
ACCEPT udp -- anywhere anywhere udp dpt:imap
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:http state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8080 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8008 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8000 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8888 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:ftp state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:4661 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:4662 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:4665
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:4666
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:cvspserver state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:nicname state NEW
ACCEPT udp -- anywhere anywhere udp dpt:nicname
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:6660:6669 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:pop3s state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:6881:6889 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:time
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:time state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8118 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:smtp state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:ssh state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:0:1023 dpt:ssh state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:rmt:bnet state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:af:dbstar state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:rmt:bnet
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:af:dbstar
ACCEPT tcp -- anywhere anywhere tcp spts:af:dbstar state NEW
ACCEPT udp -- anywhere anywhere udp spts:af:dbstar
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:mmcc state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:telnet state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:commplex-main:commplex-link state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:commplex-main
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:1863 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:https state NEW
ACCEPT udp -- anywhere anywhere udp dpt:ntp
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:ntp state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:ldap state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:ulp state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:imtc-mcs state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:1720 state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:1731 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:1024:65535 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:1024:65535
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:smtps state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:1214 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:1214
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:acmsoda state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:jabber-client state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:5223 state NEW
ACCEPT udp -- anywhere anywhere udp dpt:aol
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:svn state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:imaps state NEW
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:rsync state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:6346 state NEW
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT udp -- anywhere anywhere udp dpts:33434:33600
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:pop3 state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:domain state NEW
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:aol:aol-3 state NEW
ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:aol:aol-3
logdrop all -- anywhere anywhere
Chain logaborted (1 references)
target prot opt source destination
logaborted2 all -- anywhere anywhere limit: avg 1/sec burst 10
LOG all -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED '
Chain logaborted2 (1 references)
target prot opt source destination
LOG all -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED '
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
Chain logdrop (4 references)
target prot opt source destination
logdrop2 all -- anywhere anywhere limit: avg 1/sec burst 10
LOG all -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED '
DROP all -- anywhere anywhere
Chain logdrop2 (1 references)
target prot opt source destination
LOG all -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `DROPPED '
DROP all -- anywhere anywhere
Chain logreject (1 references)
target prot opt source destination
logreject2 all -- anywhere anywhere limit: avg 1/sec burst 10
LOG all -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED '
REJECT tcp -- anywhere anywhere reject-with tcp-reset
REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable
DROP all -- anywhere anywhere
Chain logreject2 (1 references)
target prot opt source destination
LOG all -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `REJECTED '
REJECT tcp -- anywhere anywhere reject-with tcp-reset
REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable
DROP all -- anywhere anywhere
Chain nicfilt (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
RETURN all -- anywhere anywhere
RETURN all -- anywhere anywhere
logdrop all -- anywhere anywhere
Chain s0 (1 references)
target prot opt source destination
f0to1 all -- anywhere localhost.localdomain
f0to1 all -- anywhere 10.25.1.255
f0to1 all -- anywhere localhost
logdrop all -- anywhere anywhere
Chain s1 (1 references)
target prot opt source destination
f1to0 all -- anywhere anywhere
Chain srcfilt (2 references)
target prot opt source destination
s0 all -- anywhere anywhere