[root@p4.joshr.com 2006-12-06 12:19pm /root] # iptables -L -n Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip all -- 0.0.0.0/0 192.168.0.144 in_dst-outside all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `'IN-unknown:'' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `'PASS-unknown:'' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip all -- 192.168.0.144 0.0.0.0/0 out_dst-outside all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `'OUT-unknown:'' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain in_dst-outside (1 references) target prot opt source destination RETURN all -- 0.0.0.0/0 192.168.0.144 in_dst-outside_ftp_s1 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_ICMP_s2 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_ntp_s3 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_webmin_s4 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_ssh_s5 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_dns_s6 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_ssh_c7 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_dns_c8 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-outside_http_c10 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `''IN-dst-outside':'' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain in_dst-outside_ICMP_s2 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED Chain in_dst-outside_dns_c8 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED Chain in_dst-outside_dns_s6 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED Chain in_dst-outside_ftp_s1 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:21 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:20 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpts:32768:61000 state RELATED,ESTABLISHED Chain in_dst-outside_http_c10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:80 dpts:32768:61000 state ESTABLISHED Chain in_dst-outside_ntp_s3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:123 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:123 state NEW,ESTABLISHED Chain in_dst-outside_smtp_c9 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:25 dpts:32768:61000 state ESTABLISHED Chain in_dst-outside_ssh_c7 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:32768:61000 state ESTABLISHED Chain in_dst-outside_ssh_s5 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:22 state NEW,ESTABLISHED Chain in_dst-outside_webmin_s4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:10000 state NEW,ESTABLISHED Chain in_dst-privateip (1 references) target prot opt source destination in_dst-privateip_ftp_s1 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_ICMP_s2 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_ntp_s3 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_webmin_s4 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_ssh_s5 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_dns_s6 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_ssh_c7 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_dns_c8 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0 in_dst-privateip_http_c10 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `''IN-dst-privateip':'' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain in_dst-privateip_ICMP_s2 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW,ESTABLISHED Chain in_dst-privateip_dns_c8 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED Chain in_dst-privateip_dns_s6 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED Chain in_dst-privateip_ftp_s1 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:21 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:20 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpts:32768:61000 state RELATED,ESTABLISHED Chain in_dst-privateip_http_c10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:80 dpts:32768:61000 state ESTABLISHED Chain in_dst-privateip_ntp_s3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state NEW,ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:123 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:123 state NEW,ESTABLISHED Chain in_dst-privateip_smtp_c9 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:25 dpts:32768:61000 state ESTABLISHED Chain in_dst-privateip_ssh_c7 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:32768:61000 state ESTABLISHED Chain in_dst-privateip_ssh_s5 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:22 state NEW,ESTABLISHED Chain in_dst-privateip_webmin_s4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:10000 state NEW,ESTABLISHED Chain out_dst-outside (1 references) target prot opt source destination RETURN all -- 192.168.0.144 0.0.0.0/0 out_dst-outside_ftp_s1 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_ICMP_s2 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_ntp_s3 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_webmin_s4 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_ssh_s5 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_dns_s6 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_ssh_c7 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_dns_c8 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-outside_http_c10 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `''OUT-dst-outside':'' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain out_dst-outside_ICMP_s2 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED Chain out_dst-outside_dns_c8 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED Chain out_dst-outside_dns_s6 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED Chain out_dst-outside_ftp_s1 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:21 dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:20 dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpts:1024:65535 state ESTABLISHED Chain out_dst-outside_http_c10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:80 state NEW,ESTABLISHED Chain out_dst-outside_ntp_s3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpts:1024:65535 state ESTABLISHED Chain out_dst-outside_smtp_c9 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:25 state NEW,ESTABLISHED Chain out_dst-outside_ssh_c7 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:22 state NEW,ESTABLISHED Chain out_dst-outside_ssh_s5 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:1024:65535 state ESTABLISHED Chain out_dst-outside_webmin_s4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:10000 dpts:1024:65535 state ESTABLISHED Chain out_dst-privateip (1 references) target prot opt source destination out_dst-privateip_ftp_s1 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_ICMP_s2 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_ntp_s3 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_webmin_s4 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_ssh_s5 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_dns_s6 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_ssh_c7 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_dns_c8 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_smtp_c9 all -- 0.0.0.0/0 0.0.0.0/0 out_dst-privateip_http_c10 all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 4 prefix `''OUT-dst-privateip':'' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain out_dst-privateip_ICMP_s2 (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED Chain out_dst-privateip_dns_c8 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 state NEW,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW,ESTABLISHED Chain out_dst-privateip_dns_s6 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state ESTABLISHED Chain out_dst-privateip_ftp_s1 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:21 dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:20 dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpts:1024:65535 state ESTABLISHED Chain out_dst-privateip_http_c10 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:80 state NEW,ESTABLISHED Chain out_dst-privateip_ntp_s3 (1 references) target prot opt source destination ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpt:123 state ESTABLISHED ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpt:123 state ESTABLISHED ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:123 dpts:1024:65535 state ESTABLISHED Chain out_dst-privateip_smtp_c9 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:25 state NEW,ESTABLISHED Chain out_dst-privateip_ssh_c7 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spts:32768:61000 dpt:22 state NEW,ESTABLISHED Chain out_dst-privateip_ssh_s5 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 dpts:1024:65535 state ESTABLISHED Chain out_dst-privateip_webmin_s4 (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:10000 dpts:1024:65535 state ESTABLISHED