Chain INPUT (policy DROP 10 packets, 992 bytes) pkts bytes target prot opt in out source destination 1944 128K ACCEPT all -- lo any anywhere anywhere 0 0 vlan6_in all -- vlan6 any anywhere anywhere 857 504K br0_in all -- br0 any anywhere anywhere 6 6604 common all -- any any anywhere anywhere 6 6604 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:INPUT:REJECT:' 6 6604 reject all -- any any anywhere anywhere Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 vlan6_fwd all -- vlan6 any anywhere anywhere 0 0 br0_fwd all -- br0 any anywhere anywhere 0 0 common all -- any any anywhere anywhere 0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:FORWARD:REJECT:' 0 0 reject all -- any any anywhere anywhere Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- any vlan6 anywhere anywhere udp dpts:bootps:bootpc 1944 128K ACCEPT all -- any lo anywhere anywhere 2 1060 ACCEPT icmp -- any any anywhere anywhere state NEW,RELATED,ESTABLISHED 0 0 fw2net all -- any vlan6 anywhere anywhere 450 60114 fw2loc all -- any br0 anywhere anywhere 469 30250 common all -- any any anywhere anywhere 469 30250 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:OUTPUT:REJECT:' 469 30250 reject all -- any any anywhere anywhere Chain @net2all (2 references) pkts bytes target prot opt in out source destination 0 0 RETURN all -- any any anywhere anywhere limit: avg 10/sec burst 40 0 0 DROP all -- any any anywhere anywhere Chain all2all (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 common all -- any any anywhere anywhere 0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:all2all:REJECT:' 0 0 reject all -- any any anywhere anywhere Chain br0_fwd (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic all -- any any anywhere anywhere 0 0 loc2net all -- any vlan6 anywhere anywhere 0 0 loc2loc all -- any br0 anywhere anywhere Chain br0_in (1 references) pkts bytes target prot opt in out source destination 857 504K dynamic all -- any any anywhere anywhere 0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request 857 504K loc2fw all -- any any anywhere anywhere Chain common (5 references) pkts bytes target prot opt in out source destination 0 0 icmpdef icmp -- any any anywhere anywhere 0 0 DROP tcp -- any any anywhere anywhere state INVALID 0 0 REJECT udp -- any any anywhere anywhere udp dpts:netbios-ns:netbios-ssn reject-with icmp-port-unreachable 0 0 REJECT udp -- any any anywhere anywhere udp dpt:445 reject-with icmp-port-unreachable 0 0 reject tcp -- any any anywhere anywhere tcp dpt:135 0 0 DROP udp -- any any anywhere anywhere udp dpt:1900 0 0 DROP all -- any any anywhere 255.255.255.255 0 0 DROP all -- any any anywhere 224.0.0.0/4 0 0 reject tcp -- any any anywhere anywhere tcp dpt:auth 0 0 DROP udp -- any any anywhere anywhere state NEW udp spt:domain 0 0 DROP all -- any any anywhere 192.168.1.255 Chain dynamic (4 references) pkts bytes target prot opt in out source destination Chain fw2loc (1 references) pkts bytes target prot opt in out source destination 430 56064 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 20 4050 ACCEPT all -- any any anywhere anywhere Chain fw2net (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:domain 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:domain 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:ntp 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:smtp 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:www 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:2345 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:3495 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:7070 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ftp 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:5050 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:5050 0 0 all2all all -- any any anywhere anywhere Chain icmpdef (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request Chain loc2fw (1 references) pkts bytes target prot opt in out source destination 771 495K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 3 159 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ssh 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:domain 5 300 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:www 78 8404 ACCEPT all -- any any anywhere anywhere Chain loc2loc (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 ACCEPT all -- any any anywhere anywhere Chain loc2net (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 ACCEPT all -- any any anywhere anywhere Chain net2all (2 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 common all -- any any anywhere anywhere 0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:net2all:DROP:' 0 0 DROP all -- any any anywhere anywhere Chain net2fw (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 @net2all tcp -- any any anywhere anywhere tcp flags:SYN,RST,ACK/SYN 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:5050 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:5050 0 0 LOG tcp -- any any anywhere anywhere state NEW tcp dpt:ftp LOG level info prefix `Shorewall:net2fw:ACCEPT:' 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ftp 0 0 DROP tcp -- any any anywhere anywhere state NEW tcp dpt:135 0 0 DROP udp -- any any anywhere anywhere state NEW udp dpts:netbios-ns:netbios-ssn 0 0 DROP udp -- any any anywhere anywhere state NEW udp dpt:445 0 0 net2all all -- any any anywhere anywhere Chain net2loc (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 @net2all tcp -- any any anywhere anywhere tcp flags:SYN,RST,ACK/SYN 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 DROP tcp -- any any anywhere anywhere state NEW tcp dpt:135 0 0 DROP udp -- any any anywhere anywhere state NEW udp dpts:netbios-ns:netbios-ssn 0 0 DROP udp -- any any anywhere anywhere state NEW udp dpt:445 0 0 net2all all -- any any anywhere anywhere Chain newnotsyn (9 references) pkts bytes target prot opt in out source destination 3 159 DROP all -- any any anywhere anywhere Chain reject (6 references) pkts bytes target prot opt in out source destination 8 5760 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 467 31094 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain shorewall (0 references) pkts bytes target prot opt in out source destination Chain upnp_fwd (1 references) pkts bytes target prot opt in out source destination Chain vlan6_fwd (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic all -- any any anywhere anywhere 0 0 upnp_fwd all -- any any anywhere anywhere 0 0 net2loc all -- any br0 anywhere anywhere Chain vlan6_in (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic all -- any any anywhere anywhere 0 0 ACCEPT udp -- any any anywhere anywhere udp dpts:bootps:bootpc 0 0 DROP icmp -- any any anywhere anywhere icmp echo-request 0 0 net2fw all -- any any anywhere anywhere