# Generated by iptables-save v1.4.2 on Wed Aug 11 17:15:33 2010 *raw :PREROUTING ACCEPT [661126:638355293] :OUTPUT ACCEPT [213025:212018334] -A PREROUTING -d 10.2.0.0/24 -p tcp -j TRACE -A OUTPUT -d 10.2.0.0/24 -p tcp -j TRACE COMMIT # Completed on Wed Aug 11 17:15:33 2010 # Generated by iptables-save v1.4.2 on Wed Aug 11 17:15:33 2010 *filter :INPUT ACCEPT [563506:574318870] :FORWARD ACCEPT [1062652:1025112711] :OUTPUT ACCEPT [522843:524684998] :10.3.5.34 - [0:0] :openvpn-firewaller - [0:0] -A 10.3.5.34 -d 10.2.2.120/32 -j ACCEPT -A 10.3.5.34 -j DROP -A openvpn-firewaller -s 10.3.5.34/32 -j 10.3.5.34 COMMIT # Completed on Wed Aug 11 17:15:33 2010 # Generated by iptables-save v1.4.2 on Wed Aug 11 17:15:33 2010 *nat :PREROUTING ACCEPT [21867:2227892] :POSTROUTING ACCEPT [15339:1232049] :OUTPUT ACCEPT [155:11252] COMMIT # Completed on Wed Aug 11 17:15:33 2010 1: lo: mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether e6:92:58:95:58:2e brd ff:ff:ff:ff:ff:ff inet 10.2.2.14/16 brd 10.2.255.255 scope global eth0 inet6 fe80::e492:58ff:fe95:582e/64 scope link valid_lft forever preferred_lft forever 16: tun0: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100 link/[65534] inet 10.3.2.1 peer 10.3.2.2/32 scope global tun0 17: tun1: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100 link/[65534] inet 10.3.1.77 peer 10.3.1.78/32 scope global tun1 24: tun2: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100 link/[65534] inet 10.3.5.1 peer 10.3.5.2/32 scope global tun2 10.3.2.2 dev tun0 proto kernel scope link src 10.3.2.1 10.3.1.78 dev tun1 proto kernel scope link src 10.3.1.77 10.3.5.2 dev tun2 proto kernel scope link src 10.3.5.1 10.4.1.0/24 via 10.3.1.78 dev tun1 192.168.64.0/24 via 10.3.1.78 dev tun1 192.168.2.0/24 via 10.3.1.78 dev tun1 192.168.66.0/24 via 10.3.1.78 dev tun1 192.168.15.0/24 via 10.3.1.78 dev tun1 10.3.5.0/24 via 10.3.5.2 dev tun2 192.168.78.0/24 via 10.3.1.78 dev tun1 10.3.1.0/24 via 10.3.1.78 dev tun1 10.3.2.0/24 via 10.3.2.2 dev tun0 10.20.30.0/24 via 10.3.2.2 dev tun0 10.2.0.0/16 dev eth0 proto kernel scope link src 10.2.2.14 10.1.0.0/16 via 10.3.1.78 dev tun1 default via 10.2.1.1 dev eth0 broadcast 10.2.0.0 dev eth0 table local proto kernel scope link src 10.2.2.14 broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1 local 10.3.2.1 dev tun0 table local proto kernel scope host src 10.3.2.1 local 10.3.1.77 dev tun1 table local proto kernel scope host src 10.3.1.77 local 10.3.5.1 dev tun2 table local proto kernel scope host src 10.3.5.1 broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1 broadcast 10.2.255.255 dev eth0 table local proto kernel scope link src 10.2.2.14 local 10.2.2.14 dev eth0 table local proto kernel scope host src 10.2.2.14 local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1 local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1 fe80::/64 dev eth0 metric 256 mtu 1500 advmss 1440 hoplimit 4294967295 unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255 local ::1 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295 local fe80::e492:58ff:fe95:582e via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295 ff02::2 via ff02::2 dev eth0 metric 0 cache mtu 1500 advmss 1440 hoplimit 4294967295 ff02::c via ff02::c dev eth0 metric 0 cache mtu 1500 advmss 1440 hoplimit 4294967295 ff02::1:2 via ff02::1:2 dev eth0 metric 0 cache mtu 1500 advmss 1440 hoplimit 4294967295 ff02::1:ff8d:96c2 via ff02::1:ff8d:96c2 dev eth0 metric 0 cache mtu 1500 advmss 1440 hoplimit 4294967295 ff02::1:ff9e:c01a via ff02::1:ff9e:c01a dev eth0 metric 0 cache mtu 1500 advmss 1440 hoplimit 4294967295 ff02::1:ffbb:6fd0 via ff02::1:ffbb:6fd0 dev eth0 metric 0 cache mtu 1500 advmss 1440 hoplimit 4294967295 ff00::/8 dev eth0 table local metric 256 mtu 1500 advmss 1440 hoplimit 4294967295 unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255