05:34:22@jindal # vi /etc/network/interfaces Xlib: connection to ":0.0" refused by server Xlib: No protocol specified Xlib: connection to ":0.0" refused by server Xlib: No protocol specified Xlib: connection to ":0.0" refused by server Xlib: No protocol specified 05:51:32@jindal # ifdown eth0 05:51:36@jindal # ifup eth0 05:51:39@jindal # iptables -L Chain INPUT (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- 10.9.1.187 10.9.1.255 ACCEPT 0 -- 172.16.38.1 172.16.38.255 ACCEPT 0 -- 192.168.202.1 192.168.202.255 ACCEPT 0 -- 192.168.97.1 192.168.97.255 logaborted tcp -- anywhere anywhere state RELATED,ESTABLISHED tcp flags:RST/RST ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem nicfilt 0 -- anywhere anywhere srcfilt 0 -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem srcfilt 0 -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem s1 0 -- anywhere anywhere Chain f0to1 (9 references) target prot opt source destination logdrop 0 -- anywhere anywhere Chain f1to0 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpts:33434:33600 logdrop 0 -- anywhere anywhere Chain logaborted (1 references) target prot opt source destination logaborted2 0 -- anywhere anywhere limit: avg 1/sec burst 10 LOG 0 -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' Chain logaborted2 (1 references) target prot opt source destination LOG 0 -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED ' ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED Chain logdrop (4 references) target prot opt source destination logdrop2 0 -- anywhere anywhere Chain logdrop2 (1 references) target prot opt source destination DROP 0 -- anywhere anywhere Chain logreject (0 references) target prot opt source destination logreject2 0 -- anywhere anywhere Chain logreject2 (1 references) target prot opt source destination REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable DROP 0 -- anywhere anywhere Chain nicfilt (1 references) target prot opt source destination RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere logdrop 0 -- anywhere anywhere Chain s0 (1 references) target prot opt source destination f0to1 0 -- anywhere 10.9.1.187 f0to1 0 -- anywhere 10.9.1.255 f0to1 0 -- anywhere localhost.localdomain f0to1 0 -- anywhere 172.16.38.1 f0to1 0 -- anywhere 172.16.38.255 f0to1 0 -- anywhere 192.168.202.1 f0to1 0 -- anywhere 192.168.202.255 f0to1 0 -- anywhere 192.168.97.1 f0to1 0 -- anywhere 192.168.97.255 logdrop 0 -- anywhere anywhere Chain s1 (1 references) target prot opt source destination f1to0 0 -- anywhere anywhere Chain srcfilt (2 references) target prot opt source destination s0 0 -- anywhere anywhere 05:51:43@jindal # cat /etc/network/interfaces # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). # The loopback network interface auto lo iface lo inet loopback address 127.0.0.1 netmask 255.0.0.0 # The primary network interface auto eth0 iface eth0 inet static # pre-up /etc/myfirewall.sh stop address 10.9.1.187 netmask 255.255.255.0 broadcast 10.9.1.255 gateway 10.9.1.1 # post-down /etc/myfirewall.sh stop 05:51:55@jindal #