iptables --list -n; iptables --list -n -t nat Chain AllowICMPs (2 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 11 Chain Drop (1 references) target prot opt source destination RejectAuth all -- 0.0.0.0/0 0.0.0.0/0 dropBcast all -- 0.0.0.0/0 0.0.0.0/0 AllowICMPs icmp -- 0.0.0.0/0 0.0.0.0/0 dropInvalid all -- 0.0.0.0/0 0.0.0.0/0 DropSMB all -- 0.0.0.0/0 0.0.0.0/0 DropUPnP all -- 0.0.0.0/0 0.0.0.0/0 dropNotSyn tcp -- 0.0.0.0/0 0.0.0.0/0 DropDNSrep all -- 0.0.0.0/0 0.0.0.0/0 Chain DropDNSrep (2 references) target prot opt source destination DROP udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 Chain DropSMB (1 references) target prot opt source destination DROP udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:135 DROP udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 DROP udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:445 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:135 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 Chain DropUPnP (2 references) target prot opt source destination DROP udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Ifw all -- 0.0.0.0/0 0.0.0.0/0 eth2_in all -- 0.0.0.0/0 0.0.0.0/0 eth0_in all -- 0.0.0.0/0 0.0.0.0/0 eth1_in all -- 0.0.0.0/0 0.0.0.0/0 Reject all -- 0.0.0.0/0 0.0.0.0/0 LOG all -- 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' reject all -- 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP) target prot opt source destination eth2_fwd all -- 0.0.0.0/0 0.0.0.0/0 eth0_fwd all -- 0.0.0.0/0 0.0.0.0/0 eth1_fwd all -- 0.0.0.0/0 0.0.0.0/0 Reject all -- 0.0.0.0/0 0.0.0.0/0 LOG all -- 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' reject all -- 0.0.0.0/0 0.0.0.0/0 Chain Ifw (1 references) target prot opt source destination RETURN all -- 0.0.0.0/0 0.0.0.0/0 set ifw_wl src DROP all -- 0.0.0.0/0 0.0.0.0/0 set ifw_bl src IFWLOG all -- 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW psd weight-threshold: 10 delay-threshold: 10000 lo-ports-weight: 1 hi-ports-weight: 2 IFWLOG prefix 'SCAN' Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68 fw2net all -- 0.0.0.0/0 0.0.0.0/0 fw2loc all -- 0.0.0.0/0 0.0.0.0/0 fw2loc all -- 0.0.0.0/0 0.0.0.0/0 Reject all -- 0.0.0.0/0 0.0.0.0/0 LOG all -- 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' reject all -- 0.0.0.0/0 0.0.0.0/0 Chain Reject (4 references) target prot opt source destination RejectAuth all -- 0.0.0.0/0 0.0.0.0/0 dropBcast all -- 0.0.0.0/0 0.0.0.0/0 AllowICMPs icmp -- 0.0.0.0/0 0.0.0.0/0 dropInvalid all -- 0.0.0.0/0 0.0.0.0/0 RejectSMB all -- 0.0.0.0/0 0.0.0.0/0 DropUPnP all -- 0.0.0.0/0 0.0.0.0/0 dropNotSyn tcp -- 0.0.0.0/0 0.0.0.0/0 DropDNSrep all -- 0.0.0.0/0 0.0.0.0/0 Chain RejectAuth (2 references) target prot opt source destination reject tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 Chain RejectSMB (1 references) target prot opt source destination reject udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:135 reject udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 reject udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:445 reject tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:135 reject tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 reject tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 Chain all2all (0 references) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED Reject all -- 0.0.0.0/0 0.0.0.0/0 LOG all -- 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:' reject all -- 0.0.0.0/0 0.0.0.0/0 Chain dropBcast (2 references) target prot opt source destination DROP all -- 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast DROP all -- 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast Chain dropInvalid (2 references) target prot opt source destination DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID Chain dropNotSyn (2 references) target prot opt source destination DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 Chain dynamic (6 references) target prot opt source destination Chain eth0_fwd (1 references) target prot opt source destination dynamic all -- 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW loc2net all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Chain eth0_in (1 references) target prot opt source destination dynamic all -- 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW loc2fw all -- 0.0.0.0/0 0.0.0.0/0 Chain eth1_fwd (1 references) target prot opt source destination dynamic all -- 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW loc2net all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Chain eth1_in (1 references) target prot opt source destination dynamic all -- 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW loc2fw all -- 0.0.0.0/0 0.0.0.0/0 Chain eth2_fwd (1 references) target prot opt source destination dynamic all -- 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW net2all all -- 0.0.0.0/0 0.0.0.0/0 net2all all -- 0.0.0.0/0 0.0.0.0/0 Chain eth2_in (1 references) target prot opt source destination dynamic all -- 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68 net2fw all -- 0.0.0.0/0 0.0.0.0/0 Chain fw2loc (2 references) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Chain fw2net (1 references) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Chain loc2fw (2 references) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Chain loc2net (2 references) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Chain net2all (3 references) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED Drop all -- 0.0.0.0/0 0.0.0.0/0 LOG all -- 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2all:DROP:' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain net2fw (1 references) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 80,443,22,20,21 net2all all -- 0.0.0.0/0 0.0.0.0/0 Chain reject (11 references) target prot opt source destination DROP all -- 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast DROP all -- 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast DROP all -- 69.65.79.255 0.0.0.0/0 DROP all -- 192.168.1.255 0.0.0.0/0 DROP all -- 192.168.2.255 0.0.0.0/0 DROP all -- 255.255.255.255 0.0.0.0/0 DROP all -- 224.0.0.0/4 0.0.0.0/0 REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset REJECT udp -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable REJECT icmp -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain shorewall (0 references) target prot opt source destination Chain smurfs (0 references) target prot opt source destination LOG all -- 69.65.79.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' DROP all -- 69.65.79.255 0.0.0.0/0 LOG all -- 192.168.1.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' DROP all -- 192.168.1.255 0.0.0.0/0 LOG all -- 192.168.2.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' DROP all -- 192.168.2.255 0.0.0.0/0 LOG all -- 255.255.255.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' DROP all -- 255.255.255.255 0.0.0.0/0 LOG all -- 224.0.0.0/4 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' DROP all -- 224.0.0.0/4 0.0.0.0/0 Chain PREROUTING (policy ACCEPT) target prot opt source destination loc_dnat all -- 0.0.0.0/0 0.0.0.0/0 loc_dnat all -- 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT) target prot opt source destination eth2_masq all -- 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain eth2_masq (1 references) target prot opt source destination MASQUERADE all -- 192.168.1.0/24 0.0.0.0/0 MASQUERADE all -- 192.168.2.0/24 0.0.0.0/0 Chain loc_dnat (2 references) target prot opt source destination REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 redir ports 3128 [root@crlspr-69 shorewall]#