[cougar@mercury:~]> sudo iptables -nL Chain INPUT (policy DROP) target prot opt source destination in_LAN all -- 10.0.0.0/24 0.0.0.0/0 in_INTERNET all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'IN-unknown:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP) target prot opt source destination in_NET2LAN all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PASS-unknown:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain MOBLOCK (30 references) target prot opt source destination NFQUEUE all -- 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0 Chain OUTPUT (policy DROP) target prot opt source destination out_LAN all -- 0.0.0.0/0 10.0.0.0/24 out_INTERNET all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'OUT-unknown:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain in_INTERNET (1 references) target prot opt source destination RETURN all -- 10.0.0.0/24 0.0.0.0/0 RETURN all -- 0.0.0.0/7 0.0.0.0/0 RETURN all -- 2.0.0.0/8 0.0.0.0/0 RETURN all -- 5.0.0.0/8 0.0.0.0/0 RETURN all -- 7.0.0.0/8 0.0.0.0/0 RETURN all -- 23.0.0.0/8 0.0.0.0/0 RETURN all -- 27.0.0.0/8 0.0.0.0/0 RETURN all -- 31.0.0.0/8 0.0.0.0/0 RETURN all -- 36.0.0.0/7 0.0.0.0/0 RETURN all -- 39.0.0.0/8 0.0.0.0/0 RETURN all -- 41.0.0.0/8 0.0.0.0/0 RETURN all -- 42.0.0.0/8 0.0.0.0/0 RETURN all -- 73.0.0.0/8 0.0.0.0/0 RETURN all -- 74.0.0.0/7 0.0.0.0/0 RETURN all -- 76.0.0.0/6 0.0.0.0/0 RETURN all -- 89.0.0.0/8 0.0.0.0/0 RETURN all -- 90.0.0.0/7 0.0.0.0/0 RETURN all -- 92.0.0.0/6 0.0.0.0/0 RETURN all -- 96.0.0.0/3 0.0.0.0/0 RETURN all -- 173.0.0.0/8 0.0.0.0/0 RETURN all -- 174.0.0.0/7 0.0.0.0/0 RETURN all -- 176.0.0.0/5 0.0.0.0/0 RETURN all -- 184.0.0.0/6 0.0.0.0/0 RETURN all -- 189.0.0.0/8 0.0.0.0/0 RETURN all -- 190.0.0.0/8 0.0.0.0/0 RETURN all -- 197.0.0.0/8 0.0.0.0/0 RETURN all -- 223.0.0.0/8 0.0.0.0/0 RETURN all -- 240.0.0.0/4 0.0.0.0/0 RETURN all -- 10.0.0.0/8 0.0.0.0/0 RETURN all -- 169.254.0.0/16 0.0.0.0/0 RETURN all -- 172.16.0.0/12 0.0.0.0/0 RETURN all -- 192.0.2.0/24 0.0.0.0/0 RETURN all -- 192.88.99.0/24 0.0.0.0/0 RETURN all -- 192.168.0.0/16 0.0.0.0/0 DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID pr_INTERNET_fragments all -f 0.0.0.0/0 0.0.0.0/0 pr_INTERNET_nosyn tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp flags:!0x17/0x02 pr_INTERNET_icmpflood icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 pr_INTERNET_synflood tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 pr_INTERNET_malxmas tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F pr_INTERNET_malnull tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 pr_INTERNET_malbad tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03 pr_INTERNET_malbad tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 pr_INTERNET_malbad tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x37 pr_INTERNET_malbad tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 in_INTERNET_aarmy_c1 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_dhcp_c2 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_dns_c3 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_http_c4 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_https_c5 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_icmp_c6 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_imap_c7 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_imaps_c8 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_smtps_c10 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_submission_c11 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_all_c12 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_irc_c13 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_ftp_c14 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_ssh_s15 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_ident_s16 all -- 0.0.0.0/0 0.0.0.0/0 in_INTERNET_bittorrent_s17 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-INTERNET':'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain in_INTERNET_aarmy_c1 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:20025 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:20045:20047 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:28900 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:28910 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1716:1718 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:8777 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:27900 state ESTABLISHED Chain in_INTERNET_all_c12 (1 references) target prot opt source destination MOBLOCK all -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED Chain in_INTERNET_bittorrent_s17 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:49752:49800 state NEW,ESTABLISHED MOBLOCK udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:49752:49800 state NEW,ESTABLISHED Chain in_INTERNET_dhcp_c2 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68 state ESTABLISHED Chain in_INTERNET_dns_c3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED Chain in_INTERNET_ftp_c14 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:21 dpts:32768:61000 state ESTABLISHED MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:20 dpts:32768:61000 state RELATED,ESTABLISHED MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpts:32768:61000 state ESTABLISHED Chain in_INTERNET_http_c4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:80 dpts:32768:61000 state ESTABLISHED Chain in_INTERNET_https_c5 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:443 dpts:32768:61000 state ESTABLISHED Chain in_INTERNET_icmp_c6 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED Chain in_INTERNET_ident_s16 (1 references) target prot opt source destination REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:113 state NEW,ESTABLISHED reject-with tcp-reset Chain in_INTERNET_imap_c7 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:143 dpts:32768:61000 state ESTABLISHED Chain in_INTERNET_imaps_c8 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:993 dpts:32768:61000 state ESTABLISHED Chain in_INTERNET_irc_c13 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:6667 dpts:32768:61000 state ESTABLISHED Chain in_INTERNET_smtp_c9 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:25 dpts:32768:61000 state ESTABLISHED Chain in_INTERNET_smtps_c10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:465 dpts:32768:61000 state ESTABLISHED Chain in_INTERNET_ssh_s15 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:22 state NEW,ESTABLISHED Chain in_INTERNET_submission_c11 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:587 dpts:32768:61000 state ESTABLISHED Chain in_LAN (1 references) target prot opt source destination in_LAN_dhcp_c1 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_icmp_c2 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_samba_c3 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_ssh_c4 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_dns_s5 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_dhcp_s6 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_icmp_s7 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_ntp_s8 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_samba_s9 all -- 0.0.0.0/0 0.0.0.0/0 in_LAN_ssh_s10 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED ULOG tcp -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-LAN':'' queue_threshold 1 REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-LAN':'' queue_threshold 1 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain in_LAN_dhcp_c1 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68 state ESTABLISHED Chain in_LAN_dhcp_s6 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:68 dpt:67 state NEW,ESTABLISHED Chain in_LAN_dns_s5 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED Chain in_LAN_icmp_c2 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED Chain in_LAN_icmp_s7 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED Chain in_LAN_ntp_s8 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:123 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:123 state NEW,ESTABLISHED Chain in_LAN_samba_c3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpt:137 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:32768:61000 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:138 dpt:138 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:138 dpts:32768:61000 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:139 dpts:32768:61000 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:445 dpts:32768:61000 state ESTABLISHED Chain in_LAN_samba_s9 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpt:137 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:137 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:138 dpt:138 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:138 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:139 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:445 state NEW,ESTABLISHED Chain in_LAN_ssh_c4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:32768:61000 state ESTABLISHED Chain in_LAN_ssh_s10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:22 state NEW,ESTABLISHED Chain in_NET2LAN (1 references) target prot opt source destination RETURN all -- 0.0.0.0/7 0.0.0.0/0 RETURN all -- 2.0.0.0/8 0.0.0.0/0 RETURN all -- 5.0.0.0/8 0.0.0.0/0 RETURN all -- 7.0.0.0/8 0.0.0.0/0 RETURN all -- 23.0.0.0/8 0.0.0.0/0 RETURN all -- 27.0.0.0/8 0.0.0.0/0 RETURN all -- 31.0.0.0/8 0.0.0.0/0 RETURN all -- 36.0.0.0/7 0.0.0.0/0 RETURN all -- 39.0.0.0/8 0.0.0.0/0 RETURN all -- 41.0.0.0/8 0.0.0.0/0 RETURN all -- 42.0.0.0/8 0.0.0.0/0 RETURN all -- 73.0.0.0/8 0.0.0.0/0 RETURN all -- 74.0.0.0/7 0.0.0.0/0 RETURN all -- 76.0.0.0/6 0.0.0.0/0 RETURN all -- 89.0.0.0/8 0.0.0.0/0 RETURN all -- 90.0.0.0/7 0.0.0.0/0 RETURN all -- 92.0.0.0/6 0.0.0.0/0 RETURN all -- 96.0.0.0/3 0.0.0.0/0 RETURN all -- 173.0.0.0/8 0.0.0.0/0 RETURN all -- 174.0.0.0/7 0.0.0.0/0 RETURN all -- 176.0.0.0/5 0.0.0.0/0 RETURN all -- 184.0.0.0/6 0.0.0.0/0 RETURN all -- 189.0.0.0/8 0.0.0.0/0 RETURN all -- 190.0.0.0/8 0.0.0.0/0 RETURN all -- 197.0.0.0/8 0.0.0.0/0 RETURN all -- 223.0.0.0/8 0.0.0.0/0 RETURN all -- 240.0.0.0/4 0.0.0.0/0 RETURN all -- 10.0.0.0/8 0.0.0.0/0 RETURN all -- 169.254.0.0/16 0.0.0.0/0 RETURN all -- 172.16.0.0/12 0.0.0.0/0 RETURN all -- 192.0.2.0/24 0.0.0.0/0 RETURN all -- 192.88.99.0/24 0.0.0.0/0 RETURN all -- 192.168.0.0/16 0.0.0.0/0 in_NET2LAN_aarmy_c1 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_dhcp_c2 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_dns_c3 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_http_c4 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_https_c5 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_icmp_c6 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_imap_c7 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_imaps_c8 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_smtps_c10 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_submission_c11 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_all_c12 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_irc_c13 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_ftp_c14 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_ident_s15 all -- 0.0.0.0/0 0.0.0.0/0 in_NET2LAN_bittorrent_s16 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED Chain in_NET2LAN_aarmy_c1 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:20025 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:20045:20047 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:28900 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:28910 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1716:1718 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:8777 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:27900 state ESTABLISHED Chain in_NET2LAN_all_c12 (1 references) target prot opt source destination MOBLOCK all -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED Chain in_NET2LAN_bittorrent_s16 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:49752:49800 state NEW,ESTABLISHED MOBLOCK udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:49752:49800 state NEW,ESTABLISHED Chain in_NET2LAN_dhcp_c2 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68 state ESTABLISHED Chain in_NET2LAN_dns_c3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED Chain in_NET2LAN_ftp_c14 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:21 dpts:1024:65535 state ESTABLISHED MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:20 dpts:1024:65535 state RELATED,ESTABLISHED MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpts:1024:65535 state ESTABLISHED Chain in_NET2LAN_http_c4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:80 dpts:1024:65535 state ESTABLISHED Chain in_NET2LAN_https_c5 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:443 dpts:1024:65535 state ESTABLISHED Chain in_NET2LAN_icmp_c6 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED Chain in_NET2LAN_ident_s15 (1 references) target prot opt source destination REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:113 state NEW,ESTABLISHED reject-with tcp-reset Chain in_NET2LAN_imap_c7 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:143 dpts:1024:65535 state ESTABLISHED Chain in_NET2LAN_imaps_c8 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:993 dpts:1024:65535 state ESTABLISHED Chain in_NET2LAN_irc_c13 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:6667 dpts:1024:65535 state ESTABLISHED Chain in_NET2LAN_smtp_c9 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:25 dpts:1024:65535 state ESTABLISHED Chain in_NET2LAN_smtps_c10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:465 dpts:1024:65535 state ESTABLISHED Chain in_NET2LAN_submission_c11 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:587 dpts:1024:65535 state ESTABLISHED Chain out_INTERNET (1 references) target prot opt source destination RETURN all -- 0.0.0.0/0 10.0.0.0/24 RETURN all -- 0.0.0.0/0 0.0.0.0/7 RETURN all -- 0.0.0.0/0 2.0.0.0/8 RETURN all -- 0.0.0.0/0 5.0.0.0/8 RETURN all -- 0.0.0.0/0 7.0.0.0/8 RETURN all -- 0.0.0.0/0 23.0.0.0/8 RETURN all -- 0.0.0.0/0 27.0.0.0/8 RETURN all -- 0.0.0.0/0 31.0.0.0/8 RETURN all -- 0.0.0.0/0 36.0.0.0/7 RETURN all -- 0.0.0.0/0 39.0.0.0/8 RETURN all -- 0.0.0.0/0 41.0.0.0/8 RETURN all -- 0.0.0.0/0 42.0.0.0/8 RETURN all -- 0.0.0.0/0 73.0.0.0/8 RETURN all -- 0.0.0.0/0 74.0.0.0/7 RETURN all -- 0.0.0.0/0 76.0.0.0/6 RETURN all -- 0.0.0.0/0 89.0.0.0/8 RETURN all -- 0.0.0.0/0 90.0.0.0/7 RETURN all -- 0.0.0.0/0 92.0.0.0/6 RETURN all -- 0.0.0.0/0 96.0.0.0/3 RETURN all -- 0.0.0.0/0 173.0.0.0/8 RETURN all -- 0.0.0.0/0 174.0.0.0/7 RETURN all -- 0.0.0.0/0 176.0.0.0/5 RETURN all -- 0.0.0.0/0 184.0.0.0/6 RETURN all -- 0.0.0.0/0 189.0.0.0/8 RETURN all -- 0.0.0.0/0 190.0.0.0/8 RETURN all -- 0.0.0.0/0 197.0.0.0/8 RETURN all -- 0.0.0.0/0 223.0.0.0/8 RETURN all -- 0.0.0.0/0 240.0.0.0/4 RETURN all -- 0.0.0.0/0 10.0.0.0/8 RETURN all -- 0.0.0.0/0 169.254.0.0/16 RETURN all -- 0.0.0.0/0 172.16.0.0/12 RETURN all -- 0.0.0.0/0 192.0.2.0/24 RETURN all -- 0.0.0.0/0 192.88.99.0/24 RETURN all -- 0.0.0.0/0 192.168.0.0/16 out_INTERNET_aarmy_c1 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_dhcp_c2 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_dns_c3 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_http_c4 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_https_c5 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_icmp_c6 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_imap_c7 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_imaps_c8 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_smtps_c10 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_submission_c11 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_all_c12 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_irc_c13 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_ftp_c14 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_ssh_s15 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_ident_s16 all -- 0.0.0.0/0 0.0.0.0/0 out_INTERNET_bittorrent_s17 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-INTERNET':'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain out_INTERNET_aarmy_c1 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:20025 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:20045:20047 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:28900 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:28910 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:1716:1718 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:8777 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:27900 state NEW,ESTABLISHED Chain out_INTERNET_all_c12 (1 references) target prot opt source destination MOBLOCK all -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED Chain out_INTERNET_bittorrent_s17 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:49752:49800 state ESTABLISHED MOBLOCK udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:49752:49800 state ESTABLISHED Chain out_INTERNET_dhcp_c2 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:68 dpt:67 state NEW,ESTABLISHED Chain out_INTERNET_dns_c3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED Chain out_INTERNET_ftp_c14 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:21 state NEW,ESTABLISHED MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:20 state ESTABLISHED MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpts:1024:65535 state RELATED,ESTABLISHED Chain out_INTERNET_http_c4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:80 state NEW,ESTABLISHED Chain out_INTERNET_https_c5 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:443 state NEW,ESTABLISHED Chain out_INTERNET_icmp_c6 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED Chain out_INTERNET_ident_s16 (1 references) target prot opt source destination REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:113 dpts:1024:65535 state ESTABLISHED reject-with tcp-reset Chain out_INTERNET_imap_c7 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:143 state NEW,ESTABLISHED Chain out_INTERNET_imaps_c8 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:993 state NEW,ESTABLISHED Chain out_INTERNET_irc_c13 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:6667 state NEW,ESTABLISHED Chain out_INTERNET_smtp_c9 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:25 state NEW,ESTABLISHED Chain out_INTERNET_smtps_c10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:465 state NEW,ESTABLISHED Chain out_INTERNET_ssh_s15 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:1024:65535 state ESTABLISHED Chain out_INTERNET_submission_c11 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:587 state NEW,ESTABLISHED Chain out_LAN (1 references) target prot opt source destination out_LAN_dhcp_c1 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_icmp_c2 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_samba_c3 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_ssh_c4 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_dns_s5 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_dhcp_s6 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_icmp_s7 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_ntp_s8 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_samba_s9 all -- 0.0.0.0/0 0.0.0.0/0 out_LAN_ssh_s10 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED ULOG tcp -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-LAN':'' queue_threshold 1 REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-LAN':'' queue_threshold 1 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain out_LAN_dhcp_c1 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:68 dpt:67 state NEW,ESTABLISHED Chain out_LAN_dhcp_s6 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68 state ESTABLISHED Chain out_LAN_dns_s5 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED Chain out_LAN_icmp_c2 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED Chain out_LAN_icmp_s7 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED Chain out_LAN_ntp_s8 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpts:1024:65535 state ESTABLISHED Chain out_LAN_samba_c3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpt:137 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:32768:61000 dpt:137 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:138 dpt:138 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:32768:61000 dpt:138 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:139 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:445 state NEW,ESTABLISHED Chain out_LAN_samba_s9 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpt:137 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:138 dpt:138 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:138 dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:139 dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:445 dpts:1024:65535 state ESTABLISHED Chain out_LAN_ssh_c4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:22 state NEW,ESTABLISHED Chain out_LAN_ssh_s10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:1024:65535 state ESTABLISHED Chain out_NET2LAN (1 references) target prot opt source destination RETURN all -- 0.0.0.0/0 0.0.0.0/7 RETURN all -- 0.0.0.0/0 2.0.0.0/8 RETURN all -- 0.0.0.0/0 5.0.0.0/8 RETURN all -- 0.0.0.0/0 7.0.0.0/8 RETURN all -- 0.0.0.0/0 23.0.0.0/8 RETURN all -- 0.0.0.0/0 27.0.0.0/8 RETURN all -- 0.0.0.0/0 31.0.0.0/8 RETURN all -- 0.0.0.0/0 36.0.0.0/7 RETURN all -- 0.0.0.0/0 39.0.0.0/8 RETURN all -- 0.0.0.0/0 41.0.0.0/8 RETURN all -- 0.0.0.0/0 42.0.0.0/8 RETURN all -- 0.0.0.0/0 73.0.0.0/8 RETURN all -- 0.0.0.0/0 74.0.0.0/7 RETURN all -- 0.0.0.0/0 76.0.0.0/6 RETURN all -- 0.0.0.0/0 89.0.0.0/8 RETURN all -- 0.0.0.0/0 90.0.0.0/7 RETURN all -- 0.0.0.0/0 92.0.0.0/6 RETURN all -- 0.0.0.0/0 96.0.0.0/3 RETURN all -- 0.0.0.0/0 173.0.0.0/8 RETURN all -- 0.0.0.0/0 174.0.0.0/7 RETURN all -- 0.0.0.0/0 176.0.0.0/5 RETURN all -- 0.0.0.0/0 184.0.0.0/6 RETURN all -- 0.0.0.0/0 189.0.0.0/8 RETURN all -- 0.0.0.0/0 190.0.0.0/8 RETURN all -- 0.0.0.0/0 197.0.0.0/8 RETURN all -- 0.0.0.0/0 223.0.0.0/8 RETURN all -- 0.0.0.0/0 240.0.0.0/4 RETURN all -- 0.0.0.0/0 10.0.0.0/8 RETURN all -- 0.0.0.0/0 169.254.0.0/16 RETURN all -- 0.0.0.0/0 172.16.0.0/12 RETURN all -- 0.0.0.0/0 192.0.2.0/24 RETURN all -- 0.0.0.0/0 192.88.99.0/24 RETURN all -- 0.0.0.0/0 192.168.0.0/16 out_NET2LAN_aarmy_c1 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_dhcp_c2 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_dns_c3 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_http_c4 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_https_c5 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_icmp_c6 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_imap_c7 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_imaps_c8 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_smtps_c10 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_submission_c11 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_all_c12 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_irc_c13 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_ftp_c14 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_ident_s15 all -- 0.0.0.0/0 0.0.0.0/0 out_NET2LAN_bittorrent_s16 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED Chain out_NET2LAN_aarmy_c1 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:20025 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:20045:20047 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:28900 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:28910 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:1716:1718 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:8777 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:27900 state NEW,ESTABLISHED Chain out_NET2LAN_all_c12 (1 references) target prot opt source destination MOBLOCK all -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED Chain out_NET2LAN_bittorrent_s16 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:49752:49800 state ESTABLISHED MOBLOCK udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:49752:49800 state ESTABLISHED Chain out_NET2LAN_dhcp_c2 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:68 dpt:67 state NEW,ESTABLISHED Chain out_NET2LAN_dns_c3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED Chain out_NET2LAN_ftp_c14 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:21 state NEW,ESTABLISHED MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:20 state ESTABLISHED MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpts:1024:65535 state RELATED,ESTABLISHED Chain out_NET2LAN_http_c4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:80 state NEW,ESTABLISHED Chain out_NET2LAN_https_c5 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:443 state NEW,ESTABLISHED Chain out_NET2LAN_icmp_c6 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED Chain out_NET2LAN_ident_s15 (1 references) target prot opt source destination REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:113 dpts:1024:65535 state ESTABLISHED reject-with tcp-reset Chain out_NET2LAN_imap_c7 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:143 state NEW,ESTABLISHED Chain out_NET2LAN_imaps_c8 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:993 state NEW,ESTABLISHED Chain out_NET2LAN_irc_c13 (1 references) target prot opt source destination MOBLOCK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:6667 state NEW,ESTABLISHED Chain out_NET2LAN_smtp_c9 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:25 state NEW,ESTABLISHED Chain out_NET2LAN_smtps_c10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:465 state NEW,ESTABLISHED Chain out_NET2LAN_submission_c11 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:587 state NEW,ESTABLISHED Chain pr_INTERNET_fragments (1 references) target prot opt source destination ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain pr_INTERNET_icmpflood (1 references) target prot opt source destination RETURN all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 100/sec burst 50 ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain pr_INTERNET_malbad (4 references) target prot opt source destination ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain pr_INTERNET_malnull (1 references) target prot opt source destination ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain pr_INTERNET_malxmas (1 references) target prot opt source destination ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain pr_INTERNET_nosyn (1 references) target prot opt source destination ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain pr_INTERNET_synflood (1 references) target prot opt source destination RETURN all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 100/sec burst 50 ULOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1 DROP all -- 0.0.0.0/0 0.0.0.0/0