[root@barbie dino]# iptables -L Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere Ifw all -- anywhere anywhere eth0_in all -- anywhere anywhere Reject all -- anywhere anywhere LOG all -- anywhere anywhere LOG level info pref ix `Shorewall:INPUT:REJECT:' reject all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination eth0_fwd all -- anywhere anywhere Reject all -- anywhere anywhere LOG all -- anywhere anywhere LOG level info pref ix `Shorewall:FORWARD:REJECT:' reject all -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere fw2net all -- anywhere anywhere policy match dir ou t pol none Reject all -- anywhere anywhere LOG all -- anywhere anywhere LOG level info pref ix `Shorewall:OUTPUT:REJECT:' reject all -- anywhere anywhere Chain Drop (1 references) target prot opt source destination reject tcp -- anywhere anywhere tcp dpt:auth dropBcast all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp fragmentation- needed ACCEPT icmp -- anywhere anywhere icmp time-exceeded dropInvalid all -- anywhere anywhere DROP udp -- anywhere anywhere multiport dports 13 5,microsoft-ds DROP udp -- anywhere anywhere udp dpts:netbios-ns :netbios-ssn DROP udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 DROP tcp -- anywhere anywhere multiport dports 13 5,netbios-ssn,microsoft-ds DROP udp -- anywhere anywhere udp dpt:1900 dropNotSyn tcp -- anywhere anywhere DROP udp -- anywhere anywhere udp spt:domain Chain Ifw (1 references) target prot opt source destination RETURN all -- anywhere anywhere set ifw_wl src DROP all -- anywhere anywhere set ifw_bl src IFWLOG all -- anywhere anywhere state INVALID,NEW p sd weight-threshold: 10 delay-threshold: 10000 lo-ports-weight: 2 hi-ports-weigh t: 1 IFWLOG prefix 'SCAN' Chain Reject (4 references) target prot opt source destination reject tcp -- anywhere anywhere tcp dpt:auth dropBcast all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp fragmentation- needed ACCEPT icmp -- anywhere anywhere icmp time-exceeded dropInvalid all -- anywhere anywhere reject udp -- anywhere anywhere multiport dports 13 5,microsoft-ds reject udp -- anywhere anywhere udp dpts:netbios-ns :netbios-ssn reject udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 reject tcp -- anywhere anywhere multiport dports 13 5,netbios-ssn,microsoft-ds DROP udp -- anywhere anywhere udp dpt:1900 dropNotSyn tcp -- anywhere anywhere DROP udp -- anywhere anywhere udp spt:domain Chain all2all (0 references) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED Reject all -- anywhere anywhere LOG all -- anywhere anywhere LOG level info pref ix `Shorewall:all2all:REJECT:' reject all -- anywhere anywhere Chain dropBcast (2 references) target prot opt source destination DROP all -- anywhere anywhere PKTTYPE = broadcast DROP all -- anywhere anywhere PKTTYPE = multicast Chain dropInvalid (2 references) target prot opt source destination DROP all -- anywhere anywhere state INVALID Chain dropNotSyn (2 references) target prot opt source destination DROP tcp -- anywhere anywhere tcp flags:!FIN,SYN, RST,ACK/SYN Chain dynamic (2 references) target prot opt source destination Chain eth0_fwd (1 references) target prot opt source destination dynamic all -- anywhere anywhere state INVALID,NEW Chain eth0_in (1 references) target prot opt source destination dynamic all -- anywhere anywhere state INVALID,NEW net2fw all -- anywhere anywhere policy match dir in pol none Chain fw2net (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED ACCEPT all -- anywhere anywhere Chain logdrop (0 references) target prot opt source destination LOG all -- anywhere anywhere LOG level info pref ix `Shorewall:logdrop:DROP:' DROP all -- anywhere anywhere Chain logreject (0 references) target prot opt source destination LOG all -- anywhere anywhere LOG level info pref ix `Shorewall:logreject:REJECT:' reject all -- anywhere anywhere Chain net2all (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED Drop all -- anywhere anywhere LOG all -- anywhere anywhere LOG level info pref ix `Shorewall:net2all:DROP:' DROP all -- anywhere anywhere Chain net2fw (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED ACCEPT icmp -- anywhere anywhere icmp echo-request net2all all -- anywhere anywhere Chain reject (11 references) target prot opt source destination DROP all -- 255.255.255.255 anywhere DROP all -- base-address.mcast.net/4 anywhere DROP all -- anywhere anywhere PKTTYPE = broadcast DROP all -- anywhere anywhere PKTTYPE = multicast DROP all -- 255.255.255.255 anywhere DROP all -- base-address.mcast.net/4 anywhere REJECT tcp -- anywhere anywhere reject-with tcp-res et REJECT udp -- anywhere anywhere reject-with icmp-po rt-unreachable REJECT icmp -- anywhere anywhere reject-with icmp-ho st-unreachable REJECT all -- anywhere anywhere reject-with icmp-ho st-prohibited Chain shorewall (0 references) target prot opt source destination Chain smurfs (0 references) target prot opt source destination LOG all -- 192.168.1.255 anywhere LOG level info pref ix `Shorewall:smurfs:DROP:' DROP all -- 192.168.1.255 anywhere LOG all -- 255.255.255.255 anywhere LOG level info pref ix `Shorewall:smurfs:DROP:' DROP all -- 255.255.255.255 anywhere LOG all -- base-address.mcast.net/4 anywhere LOG level info prefix `Shorewall:smurfs:DROP:' DROP all -- base-address.mcast.net/4 anywhere [root@barbie dino]#