Sparky ~ # iptables -L -n -v Chain DMZIN (0 references) pkts bytes target prot opt in out source destination Chain DMZOUT (0 references) pkts bytes target prot opt in out source destination Chain INETIN (2 references) pkts bytes target prot opt in out source destination 0 0 TREJECT all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 0 0 TREJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 5 0 0 TREJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 9 0 0 TREJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 10 0 0 TREJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 15 0 0 TREJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 16 0 0 TREJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 17 0 0 TREJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 18 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 1/sec burst 5 0 0 TREJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp !type 8 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:222 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:221 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6112 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6113 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6114 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6115 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6116 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4000 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:60010 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:60011 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:60012 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:60013 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:60049 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:60048 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10050 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:27147 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:21 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:6112 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:6113 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:6114 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:6115 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:6116 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:60010 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:60011 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:60012 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:60013 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:60049 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:60048 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10050 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:27147 1136 1213K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED 0 0 TCPACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:1024:65535 state RELATED 0 0 UDPACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:1024:65535 state RELATED 5 2022 TREJECT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INETOUT (2 references) pkts bytes target prot opt in out source destination 1564 82056 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INPUT (policy ACCEPT 35 packets, 3220 bytes) pkts bytes target prot opt in out source destination 811 1188K INETIN all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * * 192.168.0.0/24 0.0.0.0/0 943 85569 ACCEPT all -- * * 192.168.1.0/24 0.0.0.0/0 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy ACCEPT 13 packets, 589 bytes) pkts bytes target prot opt in out source destination 330 26767 INETIN all -- eth1 eth0 0.0.0.0/0 0.0.0.0/0 1323 68549 INETOUT all -- eth0 eth1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- !eth1 !eth1 192.168.0.0/24 0.0.0.0/0 1195 53356 ACCEPT all -- !eth1 !eth1 192.168.1.0/24 0.0.0.0/0 Chain LDROP (0 references) pkts bytes target prot opt in out source destination 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 0 level 6 prefix `TCP Dropped ' 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 0 level 6 prefix `UDP Dropped ' 0 0 LOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 0 level 6 prefix `ICMP Dropped ' 0 0 LOG all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `FRAGMENT Dropped ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain LREJECTLTREJECT (0 references) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 1469 packets, 142K bytes) pkts bytes target prot opt in out source destination 247 13775 INETOUT all -- * eth1 0.0.0.0/0 0.0.0.0/0 Chain TCPACCEPT (19 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02 limit: avg 20/sec burst 5 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02 limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `Possible SynFlood ' 0 0 TREJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x16/0x02 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `Mismatch in TCPACCEPT ' 0 0 TREJECT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain TREJECT (13 references) pkts bytes target prot opt in out source destination 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 5 2022 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain UDPACCEPT (15 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `Mismatch on UDPACCEPT ' 0 0 TREJECT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ULDROP (0 references) pkts bytes target prot opt in out source destination 0 0 ULOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LDROP_TCP' queue_threshold 1 0 0 ULOG udp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LDROP_UDP' queue_threshold 1 0 0 ULOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LDROP_ICMP' queue_threshold 1 0 0 ULOG all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LDROP_FRAG' queue_threshold 1 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ULREJECT (0 references) pkts bytes target prot opt in out source destination 0 0 ULOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LREJECT_TCP' queue_threshold 1 0 0 ULOG udp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LREJECT_UDP' queue_threshold 1 0 0 ULOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LREJECT_UDP' queue_threshold 1 0 0 ULOG all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LREJECT_FRAG' queue_threshold 1 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain ULTREJECT (0 references) pkts bytes target prot opt in out source destination 0 0 ULOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LTREJECT_TCP' queue_threshold 1 0 0 ULOG udp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LTREJECT_UDP' queue_threshold 1 0 0 ULOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LTREJECT_ICMP' queue_threshold 1 0 0 ULOG all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `LTREJECT_FRAG' queue_threshold 1 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable