[root@localhost squid]# iptables -L Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:squid ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:10000 ACCEPT tcp -- anywhere anywhere tcp dpt:nameserver ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:bootpc ACCEPT udp -- anywhere anywhere udp dpt:bootpc Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere tcp dpt:ftp ACCEPT udp -- anywhere anywhere udp dpt:ftp-data ACCEPT udp -- anywhere anywhere udp dpt:ftp ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:smtp ACCEPT tcp -- anywhere anywhere tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere tcp dpt:imap ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https ACCEPT tcp -- anywhere anywhere tcp dpt:1863 ACCEPT tcp -- anywhere anywhere tcp dpt:5000 ACCEPT tcp -- anywhere anywhere tcp dpt:5001 ACCEPT tcp -- anywhere anywhere tcp dpt:5005 ACCEPT tcp -- anywhere anywhere tcp dpt:5050 ACCEPT tcp -- anywhere anywhere tcp dpt:5100 ACCEPT tcp -- anywhere anywhere tcp dpt:5005 ACCEPT tcp -- anywhere anywhere tcp dpt:5050 ACCEPT tcp -- anywhere anywhere tcp dpt:5100 ACCEPT tcp -- anywhere anywhere tcp dpts:6660:6670 ACCEPT tcp -- anywhere anywhere tcp dpt:afs3-fileserver ACCEPT tcp -- anywhere anywhere tcp dpt:28805 ACCEPT tcp -- anywhere anywhere tcp dpt:32196 ACCEPT tcp -- anywhere anywhere tcp dpt:27315 ACCEPT tcp -- anywhere anywhere tcp dpt:51215 ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp dpt:32196 ACCEPT tcp -- anywhere anywhere tcp dpt:11001 ACCEPT tcp -- anywhere anywhere tcp dpt:11001 ACCEPT tcp -- anywhere anywhere tcp dpt:ftp ACCEPT tcp -- anywhere anywhere tcp dpt:ftp-data ACCEPT udp -- anywhere anywhere udp dpt:ftp-data ACCEPT udp -- anywhere anywhere udp dpt:ftp ACCEPT tcp -- anywhere anywhere tcp dpt:ftp ACCEPT tcp -- anywhere anywhere tcp dpt:ftp ACCEPT tcp -- anywhere anywhere tcp dpt:ftp-data Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere tcp dpt:ftp ACCEPT udp -- anywhere anywhere udp dpt:ftp-data ACCEPT udp -- anywhere anywhere udp dpt:ftp [root@localhost squid]#