hain INPUT (policy DROP) target prot opt source destination ipac~o all -- anywhere anywhere BADTCP all -- anywhere anywhere tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 10/sec burst 5 CUSTOMINPUT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT all -- anywhere anywhere state NEW DROP all -- 127.0.0.0/8 anywhere state NEW DROP all -- anywhere 127.0.0.0/8 state NEW ACCEPT !icmp -- anywhere anywhere state NEW ACCEPT all -- anywhere anywhere DHCPBLUEINPUT all -- anywhere anywhere IPSECRED all -- anywhere anywhere IPSECBLUE all -- anywhere anywhere WIRELESSINPUT all -- anywhere anywhere state NEW REDINPUT all -- anywhere anywhere XTACCESS all -- anywhere anywhere state NEW LOG all -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `INPUT ' Chain FORWARD (policy DROP) target prot opt source destination ipac~fi all -- anywhere anywhere ipac~fo all -- anywhere anywhere BADTCP all -- anywhere anywhere TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU CUSTOMFORWARD all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere state NEW DROP all -- 127.0.0.0/8 anywhere state NEW DROP all -- anywhere 127.0.0.0/8 state NEW ACCEPT all -- anywhere anywhere state NEW ACCEPT all -- anywhere anywhere WIRELESSFORWARD all -- anywhere anywhere state NEW REDFORWARD all -- anywhere anywhere PORTFWACCESS all -- anywhere anywhere state NEW LOG all -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `OUTPUT ' Chain OUTPUT (policy ACCEPT) target prot opt source destination ipac~i all -- anywhere anywhere CUSTOMOUTPUT all -- anywhere anywhere Chain BADTCP (2 references) target prot opt source destination PSCAN tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG PSCAN tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE PSCAN tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN PSCAN tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST PSCAN tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN NEWNOTSYN tcp -- anywhere anywhere tcp flags:!SYN,RST,ACK/SYN state NEW Chain CUSTOMFORWARD (1 references) target prot opt source destination Chain CUSTOMINPUT (1 references) target prot opt source destination Chain CUSTOMOUTPUT (1 references) target prot opt source destination Chain DHCPBLUEINPUT (1 references) target prot opt source destination Chain DMZHOLES (0 references) target prot opt source destination Chain IPSECBLUE (1 references) target prot opt source destination Chain IPSECRED (1 references) target prot opt source destination Chain LOG_DROP (0 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning DROP all -- anywhere anywhere Chain LOG_REJECT (0 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain NEWNOTSYN (1 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `NEW not SYN? ' DROP all -- anywhere anywhere Chain PORTFWACCESS (1 references) target prot opt source destination ACCEPT tcp -- anywhere 10.0.0.5 tcp dpt:ftp ACCEPT tcp -- anywhere bdasilva.meiga tcp dpt:ms-wbt-server ACCEPT tcp -- anywhere 10.0.0.10 tcp dpt:ssh ACCEPT udp -- anywhere 10.0.0.10 udp dpt:sip ACCEPT udp -- anywhere 10.0.0.10 udp dpts:ndmp:dnp Chain PSCAN (5 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `TCP Scan? ' LOG udp -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `UDP Scan? ' LOG icmp -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `ICMP Scan? ' LOG all -f anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `FRAG Scan? ' DROP all -- anywhere anywhere Chain REDFORWARD (1 references) target prot opt source destination Chain REDINPUT (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere Chain WIRELESSFORWARD (1 references) target prot opt source destination Chain WIRELESSINPUT (1 references) target prot opt source destination Chain XTACCESS (1 references) target prot opt source destination ACCEPT tcp -- anywhere pool-70-111-174-120.nwrk.east.verizon.net tcp dpt:ident ACCEPT tcp -- anywhere pool-70-111-174-120.nwrk.east.verizon.net tcp dpt:ms-wbt-server ACCEPT tcp -- anywhere pool-70-111-174-120.nwrk.east.verizon.net tcp dpt:ssh ACCEPT udp -- anywhere pool-70-111-174-120.nwrk.east.verizon.net udp dpt:sip ACCEPT udp -- anywhere pool-70-111-174-120.nwrk.east.verizon.net udp dpts:ndmp:dnp Chain ipac~fi (1 references) target prot opt source destination all -- anywhere anywhere all -- anywhere anywhere Chain ipac~fo (1 references) target prot opt source destination all -- anywhere anywhere all -- anywhere anywhere Chain ipac~i (1 references) target prot opt source destination all -- anywhere anywhere all -- anywhere anywhere Chain ipac~o (1 references) target prot opt source destination all -- anywhere anywhere all -- anywhere anywhere