Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere state NEW ACCEPT icmp -- anywhere anywhere icmp echo-request open-ports all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere state NEW forward-ports all -- anywhere anywhere LOG all -- anywhere anywhere limit: avg 3/hour burst 5 LOG level warning ACCEPT tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 1/sec burst 5 ACCEPT tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp echo-request limit: avg 1/sec burst 5 Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain forward-ports (1 references) target prot opt source destination DROP tcp -- anywhere anywhere tcp dpts:1025:65535 flags:SYN,RST,ACK/SYN Chain open-ports (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp dpt:ssh flags:SYN,RST,ACK/SYN Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- 192.168.0.0/24 anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination