*mangle :PREROUTING ACCEPT [20572636:2598908470] :INPUT ACCEPT [18356812:2400007471] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [19693135:2896959234] :POSTROUTING ACCEPT [19693135:2896959234] COMMIT # Taken from the old server 26/04/2010 *nat :PREROUTING ACCEPT [2364506:217878941] :POSTROUTING ACCEPT [3724:778017] :OUTPUT ACCEPT [3724:778017] -A PREROUTING -s 79.170.0.0/255.255.0.0 -j DROP -A PREROUTING -d 202.170.122.144 -p udp -m udp --dport 110 -j DNAT --to-destination 202.170.122.144:5060 -A PREROUTING -d 202.170.122.144 -p udp -m udp --dport 15060 -j DNAT --to-destination 202.170.122.144:5060 -A PREROUTING -d 202.170.122.144 -p udp -m udp --dport 5090 -j DNAT --to-destination 202.170.122.144:5060 -A PREROUTING -d 202.170.122.144 -p tcp -m tcp --dport 1975 -j DNAT --to-destination 202.170.122.144:80 COMMIT # Generated by iptables-save v1.3.8 on Thu Nov 1 14:36:29 2007 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [40412:60978549] :RH-Firewall-1-INPUT - [0:0] -A INPUT -s 79.170.45.169 -j DROP -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -s 192.168.11.0/24 -j ACCEPT -A FORWARD -d 192.168.11.0/24 -j ACCEPT #-A FORWARD -j RH-Firewall-1-INPUT -A FORWARD -j REJECT --reject-with icmp-host-prohibited -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -s 79.170.0.0/255.255.0.0 -j DROP -A RH-Firewall-1-INPUT -s 79.170.45.169 -j DROP -A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -p esp -j ACCEPT -A RH-Firewall-1-INPUT -p ah -j ACCEPT -A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 25 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 2049 -j ACCEPT #-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 2304 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 53 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 53 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 137 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 138 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 139 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 445 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 5038 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 5900:5905 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 4569 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 5036 -j ACCEPT -A RH-Firewall-1-INPUT -s 79.170.45.169 -p tcp --destination-port 5060 -j DROP -A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 5060 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 10000:20000 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited