rendered paste bodyChain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
194K 66M ipac~o all -- * * 0.0.0.0/0 0.0.0.0/0
2 120 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW recent: UPDATE seconds: 300 hit_count: 4 name: DEFAULT side: source
56 3312 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW recent: SET name: DEFAULT side: source
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 reject-with tcp-reset
14310 1836K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x01 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F recent: SET name: DEFAULT side: source
0 0 BAD_FLAGS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=64 recent: SET name: DEFAULT side: source
0 0 BAD_FLAGS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=128 recent: SET name: DEFAULT side: source
0 0 SMALL udp -- * * 0.0.0.0/0 0.0.0.0/0 length 0:27 recent: SET name: DEFAULT side: source
0 0 SMALL tcp -- * * 0.0.0.0/0 0.0.0.0/0 length 0:39 recent: SET name: DEFAULT side: source
0 0 SMALL icmp -- * * 0.0.0.0/0 0.0.0.0/0 length 0:27 recent: SET name: DEFAULT side: source
0 0 SMALL 30 -- * * 0.0.0.0/0 0.0.0.0/0 length 0:31 recent: SET name: DEFAULT side: source
0 0 SMALL 47 -- * * 0.0.0.0/0 0.0.0.0/0 length 0:39 recent: SET name: DEFAULT side: source
0 0 SMALL esp -- * * 0.0.0.0/0 0.0.0.0/0 length 0:49 recent: SET name: DEFAULT side: source
0 0 SMALL ah -- * * 0.0.0.0/0 0.0.0.0/0 length 0:35 recent: SET name: DEFAULT side: source
0 0 SMALL all -- * * 0.0.0.0/0 0.0.0.0/0 length 0:19 recent: SET name: DEFAULT side: source
439 20196 BOGUS all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
0 0 NOFRAGS all -f * * 0.0.0.0/0 0.0.0.0/0
116 4640 SYN-FLOOD tcp -- eth+ * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 ctstate NEW LOG flags 0 level 4 prefix `reset spoof TWH: '
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 ctstate NEW reject-with tcp-reset
1206 96390 SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpt:137
947 220K SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:138 dpt:138
338 16380 SILENT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139
0 0 SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:389
0 0 SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:2967
0 0 SYN-ONLY tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x16/0x02 ctstate NEW
0 0 ANTI-SPOOF all -- eth2 * x.x.x.49 0.0.0.0/0
0 0 ANTI-SPOOF all -- eth0 * 10.1.6.1 0.0.0.0/0
0 0 ANTI-SPOOF all -- eth1 * 10.1.2.1 0.0.0.0/0
0 0 ANTI-SPOOF all -- eth3 * 10.1.4.1 0.0.0.0/0
178K 64M blocklist all -- * * 0.0.0.0/0 0.0.0.0/0
178K 64M SPAMHAUS all -- * * 0.0.0.0/0 0.0.0.0/0
92585 58M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
56 3312 RECENT-TRIGGER all -- * * 0.0.0.0/0 0.0.0.0/0 recent: CHECK seconds: 300 name: DEFAULT side: source
0 0 LOG icmp -f * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `Fragmented incoming ICMP: '
0 0 DROP icmp -f * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.1.6.1 icmp type 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.1.2.1 icmp type 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.1.4.1 icmp type 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 x.x.x.49 icmp type 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 12
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3
0 0 ACCEPT tcp -- eth2 * x.x.x.70 x.x.x.49 tcp dpt:5666 ctstate NEW
0 0 ACCEPT tcp -- eth0 * 10.1.6.0/23 10.1.6.1 tcp spts:1024:65535 dpt:53 ctstate NEW
0 0 ACCEPT tcp -- eth1 * 10.1.2.0/23 10.1.2.1 tcp spts:1024:65535 dpt:53 ctstate NEW
0 0 ACCEPT tcp -- eth3 * 10.1.4.0/23 10.1.4.1 tcp spts:1024:65535 dpt:53 ctstate NEW
299 18712 ACCEPT udp -- eth0 * 10.1.6.0/23 10.1.6.1 udp spts:1024:65535 dpt:53 ctstate NEW
35 2333 ACCEPT udp -- eth1 * 10.1.2.0/23 10.1.2.1 udp spts:1024:65535 dpt:53 ctstate NEW
178 11824 ACCEPT udp -- eth3 * 10.1.4.0/23 10.1.4.1 udp spts:1024:65535 dpt:53 ctstate NEW
0 0 ACCEPT tcp -- eth2 * 0.0.0.0/0 x.x.x.49 tcp spts:1024:65535 dpt:10000 ctstate NEW
14 672 ACCEPT tcp -- eth2 * 0.0.0.0/0 x.x.x.71 tcp spts:1024:65535 dpt:10000 ctstate NEW
21 1236 ACCEPT tcp -- eth2 * 0.0.0.0/0 x.x.x.49 tcp spts:1024:65535 dpt:22 ctstate NEW
124 7584 ACCEPT tcp -- eth2 * 0.0.0.0/0 x.x.x.71 tcp spts:1024:65535 dpt:25 ctstate NEW
2 96 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW
0 0 ACCEPT tcp -- eth2 * x.x.x.0/24 0.0.0.0/0 tcp spts:1024:65535 dpt:3000 ctstate NEW
9 516 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW
0 0 ACCEPT tcp -- !eth2 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:67:68 ctstate NEW
793 301K ACCEPT udp -- !eth2 * 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68 ctstate NEW
0 0 ACCEPT tcp -- eth2 * x.x.x.0/24 0.0.0.0/0 tcp spts:1024:65535 dpt:21 ctstate NEW
23082 1776K ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 ctstate NEW
0 0 ACCEPT tcp -- eth2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:161 ctstate NEW
35389 2555K ACCEPT udp -- eth2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 ctstate NEW
0 0 ACCEPT udp -- eth2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:162 ctstate NEW
25410 1654K FINAL-DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
54405 24M ipac~fi all -- * * 0.0.0.0/0 0.0.0.0/0
54405 24M ipac~fo all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.78 reject-with icmp-port-unreachable
0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.47 reject-with icmp-port-unreachable
0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.46 reject-with icmp-port-unreachable
0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.45 reject-with icmp-port-unreachable
0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.44 reject-with icmp-port-unreachable
0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.88 reject-with icmp-port-unreachable
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x01 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 recent: SET name: DEFAULT side: source
0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F recent: SET name: DEFAULT side: source
654 26432 BOGUS all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
0 0 NOFRAGS all -f * * 0.0.0.0/0 0.0.0.0/0
699 27960 SYN-FLOOD tcp -- eth+ * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 ctstate NEW LOG flags 0 level 4 prefix `reset spoof TWH: '
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 ctstate NEW reject-with tcp-reset
0 0 SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:389
0 0 SYN-ONLY tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x16/0x02 ctstate NEW
49472 24M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
0 0 LOG icmp -f * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `Fragmented forwarded ICMP: '
0 0 DROP icmp -f * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 12
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4
0 0 ACCEPT icmp -- * eth2 0.0.0.0/0 0.0.0.0/0 icmp type 11
923 47972 ACCEPT tcp -- eth0 eth2 10.1.6.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW
736 35328 ACCEPT tcp -- eth1 eth2 10.1.2.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW
298 14304 ACCEPT tcp -- eth3 eth2 10.1.4.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW
24 1152 ACCEPT tcp -- * eth2 10.1.0.0/16 x.x.x.3 tcp spts:1024:65535 dpt:81 ctstate NEW
0 0 ACCEPT tcp -- * eth2 10.1.0.0/16 x.x.x.130 tcp spts:1024:65535 dpt:81 ctstate NEW
187 9724 ACCEPT tcp -- eth0 eth2 10.1.6.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW
73 3504 ACCEPT tcp -- eth1 eth2 10.1.2.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW
30 1440 ACCEPT tcp -- eth3 eth2 10.1.4.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW
0 0 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpts:5190:5193 ctstate NEW
0 0 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpts:6891:6901 ctstate NEW
21 1008 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpt:1863 ctstate NEW
0 0 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpt:5050 ctstate NEW
0 0 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpt:21 ctstate NEW
0 0 ACCEPT icmp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 icmp type 8 ctstate NEW
2261 186K FINAL-DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP 8 packets, 2768 bytes)
pkts bytes target prot opt in out source destination
151K 13M ipac~i all -- * * 0.0.0.0/0 0.0.0.0/0
14310 1836K ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
168 9872 BOGUS all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
0 0 NOFRAGS all -f * * 0.0.0.0/0 0.0.0.0/0
134K 11M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
0 0 LOG icmp -f * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `Fragmented outboing ICMP: '
0 0 DROP icmp -f * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 12
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4
0 0 ACCEPT icmp -- * eth2 0.0.0.0/0 0.0.0.0/0 icmp type 11
5 300 ACCEPT tcp -- * eth2 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:53 ctstate NEW
2402 185K ACCEPT udp -- * eth2 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:53 ctstate NEW
150 9000 ACCEPT tcp -- * eth2 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 ctstate NEW
0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:22 ctstate NEW
30 1800 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:25 ctstate NEW
0 0 ACCEPT tcp -- * eth2 x.x.x.71 0.0.0.0/0 tcp spts:1024:65535 dpt:25 ctstate NEW
461 27660 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW
0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW
0 0 ACCEPT tcp -- * !eth2 0.0.0.0/0 0.0.0.0/0 tcp spt:67
189 61992 ACCEPT udp -- * !eth2 0.0.0.0/0 0.0.0.0/0 udp spt:67
0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:21 ctstate NEW
0 0 ACCEPT tcp -- * eth0 10.1.6.1 0.0.0.0/0 tcp spts:1024:65535 dpt:23 ctstate NEW
0 0 ACCEPT tcp -- * eth1 10.1.2.1 0.0.0.0/0 tcp spts:1024:65535 dpt:23 ctstate NEW
0 0 ACCEPT tcp -- * eth3 10.1.4.1 0.0.0.0/0 tcp spts:1024:65535 dpt:23 ctstate NEW
0 0 ACCEPT udp -- * eth2 x.x.x.49 0.0.0.0/0 udp spts:1024:65535 dpt:123 ctstate NEW
0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:123 ctstate NEW
0 0 ACCEPT udp -- * eth2 x.x.x.49 0.0.0.0/0 udp spt:123 dpt:123 ctstate NEW
0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spt:123 dpt:123 ctstate NEW
10 552 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 ctstate NEW
0 0 ACCEPT tcp -- * eth2 0.0.0.0/0 0.0.0.0/0 tcp spt:161 ctstate NEW
0 0 ACCEPT udp -- * eth2 0.0.0.0/0 0.0.0.0/0 udp spt:161 ctstate NEW
0 0 ACCEPT udp -- * eth2 0.0.0.0/0 0.0.0.0/0 udp spt:162 ctstate NEW
0 0 FINAL-DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain ANTI-SPOOF (4 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `Spoofing IN--DROP: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain BAD_FLAGS (2 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `BAD_FLAGS--SHUN: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain BOGUS (3 references)
pkts bytes target prot opt in out source destination
1261 56500 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain FINAL-DROP (3 references)
pkts bytes target prot opt in out source destination
27671 1840K DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain LOGBLOCK (162 references)
pkts bytes target prot opt in out source destination
2 372 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `filter: BLOCKLIST: '
2 372 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain NOFRAGS (3 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `Fragment--DROP: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain PORTSCAN (14 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `PORTSCAN--SHUN: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain RECENT-TRIGGER (1 references)
pkts bytes target prot opt in out source destination
56 3312 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `RECENT_TRAP: '
Chain SILENT (6 references)
pkts bytes target prot opt in out source destination
2491 333K DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain SMALL (8 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `SMALL--SHUN: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain SYN-FLOOD (2 references)
pkts bytes target prot opt in out source destination
815 32600 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 75/sec burst 100
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `SYN-FLOOD--DROP: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain SYN-ONLY (2 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 7 level 6 prefix `New not SYN--DROP: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain PREROUTING (policy ACCEPT 151M packets, 8340M bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 19M packets, 1027M bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 1885K packets, 147M bytes)
pkts bytes target prot opt in out source destination