root@rms-desktop:/home/rms# iptables -L -v Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 615 65355 ACCEPT 0 -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP 0 -- any any anywhere anywhere state INVALID 25 3439 ETH0-IF 0 -- eth0 any 192.168.0.0/24 anywhere 14 2732 ETH1-IF 0 -- eth1 any 10.0.0.0/8 anywhere 473 31321 ACCEPT 0 -- lo any anywhere anywhere 40 8463 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `DFT_INPUT_DROP' queue_threshold 1 40 8463 DROP 0 -- any any anywhere anywhere Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 30 4544 ACCEPT 0 -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP 0 -- any any anywhere anywhere state INVALID 4 240 ETH0-ETH1 0 -- eth0 eth1 192.168.0.0/24 10.0.0.0/8 0 0 ETH1-ETH0 0 -- eth1 eth0 10.0.0.0/8 192.168.0.0/24 0 0 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `DFT_FORWARD_DROP' queue_threshold 1 0 0 DROP 0 -- any any anywhere anywhere Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 621 64755 ACCEPT 0 -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP 0 -- any any anywhere anywhere state INVALID 0 0 IF-ETH1 0 -- any eth1 anywhere 10.0.0.0/8 0 0 IF-ETH0 0 -- any eth0 anywhere 192.168.0.0/24 473 31321 ACCEPT 0 -- any lo anywhere anywhere 0 0 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `DFT_OUTPUT_DROP' queue_threshold 1 0 0 DROP 0 -- any any anywhere anywhere Chain ETH0-ETH1 (1 references) pkts bytes target prot opt in out source destination 3 180 NFQUEUE tcp -- any any anywhere anywhere tcp spts:1024:65535 dpt:www flags:FIN,SYN,RST,ACK/SYN state NEW NFQUEUE num 0 1 60 NFQUEUE tcp -- any any anywhere anywhere tcp spts:1024:65535 dpt:ssh flags:FIN,SYN,RST,ACK/SYN state NEW NFQUEUE num 0 0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request state NEW 0 0 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `F0D:ETH0-ETH1 DROP' queue_threshold 1 0 0 DROP 0 -- any any anywhere anywhere Chain ETH0-IF (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request state NEW 9 540 ACCEPT tcp -- any any anywhere anywhere tcp spts:1024:65535 dpt:4129 flags:FIN,SYN,RST,ACK/SYN state NEW 0 0 ACCEPT tcp -- any any anywhere anywhere tcp spts:1024:65535 dpt:ssh flags:FIN,SYN,RST,ACK/SYN state NEW 16 2899 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `I0D:ETH0-IF DROP' queue_threshold 1 16 2899 DROP 0 -- any any anywhere anywhere Chain ETH1-ETH0 (1 references) pkts bytes target prot opt in out source destination 0 0 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `F0D:ETH1-ETH0 DROP' queue_threshold 1 0 0 DROP 0 -- any any anywhere anywhere Chain ETH1-IF (1 references) pkts bytes target prot opt in out source destination 14 2732 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `I0D:ETH1-IF DROP' queue_threshold 1 14 2732 DROP 0 -- any any anywhere anywhere Chain IF-ETH0 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request state NEW 0 0 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `O0D:IF-ETH0 DROP' queue_threshold 1 0 0 DROP 0 -- any any anywhere anywhere Chain IF-ETH1 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- any any anywhere anywhere tcp spts:1024:65535 dpt:www flags:FIN,SYN,RST,ACK/SYN state NEW 0 0 ULOG 0 -- any any anywhere anywhere ULOG copy_range 0 nlgroup 1 prefix `O0D:IF-ETH1 DROP' queue_threshold 1 0 0 DROP 0 -- any any anywhere anywhere