[root@dbserver root]# iptables -L Chain INPUT (policy DROP) target prot opt source destination [root@dbserver root]# iptables -l iptables v1.2.7a: Unknown arg `-l' Try `iptables -h' or 'iptables --help' for more information. [root@dbserver root]# iptables iptables v1.2.7a: no command specified Try `iptables -h' or 'iptables --help' for more information. [root@dbserver root]# iptables -L Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- 192.168.0.0/16 anywhere ACCEPT all -- anywhere anywhere ACCEPT udp -- anywhere anywhere udp dpt:bootps INETIN all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- 192.168.0.0/16 anywhere ACCEPT all -- anywhere 192.168.0.0/16 Chain OUTPUT (policy ACCEPT) target prot opt source destination INETOUT all -- anywhere anywhere Chain DMZIN (0 references) target prot opt source destination Chain DMZOUT (0 references) target prot opt source destination Chain INETIN (1 references) target prot opt source destination TREJECT all -- anywhere anywhere state INVALID ACCEPT icmp -- anywhere anywhere icmp echo-request li mit: avg 1/sec burst 5 TREJECT icmp -- anywhere anywhere icmp echo-request ACCEPT icmp -- anywhere anywhere icmp !echo-request TCPACCEPT tcp -- anywhere anywhere tcp dpt:ssh TCPACCEPT tcp -- anywhere anywhere tcp dpt:smtp TCPACCEPT tcp -- anywhere anywhere tcp dpt:domain TCPACCEPT tcp -- anywhere anywhere tcp dpt:http TCPACCEPT tcp -- anywhere anywhere tcp dpt:85 TCPACCEPT tcp -- anywhere anywhere tcp dpt:pop3 TCPACCEPT tcp -- anywhere anywhere tcp dpt:auth TCPACCEPT tcp -- anywhere anywhere tcp dpt:imap TCPACCEPT tcp -- anywhere anywhere tcp dpt:imaps TCPACCEPT tcp -- anywhere anywhere tcp dpt:ldap UDPACCEPT udp -- anywhere anywhere udp dpt:domain UDPACCEPT udp -- anywhere anywhere udp dpt:auth ACCEPT all -- anywhere anywhere state ESTABLISHED TCPACCEPT tcp -- anywhere anywhere tcp dpts:1024:65535 state RELATED UDPACCEPT udp -- anywhere anywhere udp dpts:1024:65535 state RELATED TREJECT all -- anywhere anywhere Chain INETOUT (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere Chain LDROP (0 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `TCP Dropped ' LOG udp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `UDP Dropped ' LOG icmp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `ICMP Dropped ' LOG all -f anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `FRAGMENT Dropped ' DROP all -- anywhere anywhere Chain LREJECT (0 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `TCP Rejected ' LOG udp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `UDP Rejected ' LOG icmp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `ICMP Dropped ' LOG all -f anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `FRAGMENT Rejected ' REJECT all -- anywhere anywhere reject-with icmp-por t-unreachable Chain LTREJECT (0 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `TCP Rejected ' LOG udp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `UDP Rejected ' LOG icmp -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level info prefix `ICMP Dropped ' LOG all -f anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `FRAGMENT Rejected ' REJECT tcp -- anywhere anywhere reject-with tcp-rese t REJECT udp -- anywhere anywhere reject-with icmp-por t-unreachable DROP icmp -- anywhere anywhere REJECT all -- anywhere anywhere reject-with icmp-por t-unreachable Chain TCPACCEPT (11 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp flags:SYN,RST,AC K/SYN limit: avg 20/sec burst 5 LOG tcp -- anywhere anywhere tcp flags:SYN,RST,AC K/SYN limit: avg 2/sec burst 5 LOG level warning prefix `Possible SynFlood ' TREJECT tcp -- anywhere anywhere tcp flags:SYN,RST,AC K/SYN ACCEPT tcp -- anywhere anywhere tcp flags:!SYN,RST,A CK/SYN LOG all -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `Mismatch in TCPACCEPT ' TREJECT all -- anywhere anywhere Chain TREJECT (6 references) target prot opt source destination REJECT tcp -- anywhere anywhere reject-with tcp-rese t REJECT udp -- anywhere anywhere reject-with icmp-por t-unreachable DROP icmp -- anywhere anywhere REJECT all -- anywhere anywhere reject-with icmp-por t-unreachable Chain UDPACCEPT (3 references) target prot opt source destination ACCEPT udp -- anywhere anywhere LOG all -- anywhere anywhere limit: avg 2/sec bur st 5 LOG level warning prefix `Mismatch on UDPACCEPT ' TREJECT all -- anywhere anywhere [root@dbserver root]#