#The following output is from ipTables -L with only 1 of these services running at a time: iptables by itself, fail2ban peerguardian firehol ipTables by itself: Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination --------------- Fail2Ban: Chain INPUT (policy ACCEPT) target prot opt source destination fail2ban-SSH tcp -- anywhere anywhere tcp dpt:ssh Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain fail2ban-SSH (1 references) target prot opt source destination RETURN all -- anywhere anywhere ----------------- PeerGuardian Chain INPUT (policy ACCEPT) target prot opt source destination PEERGUARDIAN all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination PEERGUARDIAN all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination PEERGUARDIAN all -- anywhere anywhere Chain PEERGUARDIAN (3 references) target prot opt source destination QUEUE all -- anywhere anywhere ---------------- Firehol Chain BL_IN_BI (2 references) target prot opt source destination DROP all -- anywhere anywhere Chain BL_IN_UNI (0 references) target prot opt source destination DROP all -- anywhere anywhere state NEW Chain BL_OUT_BI (2 references) target prot opt source destination REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT all -- anywhere anywhere reject-with icmp-host-unreachable Chain INPUT (policy DROP) target prot opt source destination BL_IN_BI all -- 73.182.176.1 anywhere ACCEPT all -- anywhere anywhere in_world all -- anywhere anywhere in_lan all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'IN-unknown:'' queue_threshold 1 DROP all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination BL_OUT_BI all -- anywhere 73.182.176.1 BL_IN_BI all -- 73.182.176.1 anywhere in_masq all -- anywhere anywhere out_masq all -- anywhere anywhere in_services all -- anywhere anywhere out_services all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PASS-unknown:'' queue_threshold 1 DROP all -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination BL_OUT_BI all -- anywhere 73.182.176.1 ACCEPT all -- anywhere anywhere out_world all -- anywhere anywhere out_lan all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'OUT-unknown:'' queue_threshold 1 DROP all -- anywhere anywhere Chain in_lan (1 references) target prot opt source destination DROP all -- anywhere anywhere state INVALID pr_lan_fragments all -f anywhere anywhere pr_lan_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN pr_lan_icmpflood icmp -- anywhere anywhere icmp echo-request pr_lan_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN pr_lan_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG pr_lan_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE pr_lan_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN pr_lan_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST pr_lan_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG pr_lan_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG in_lan_dhcp_s1 all -- anywhere anywhere in_lan_dns_s2 all -- anywhere anywhere in_lan_ssh_s3 all -- anywhere anywhere in_lan_samba_s4 all -- anywhere anywhere in_lan_ntp_s5 all -- anywhere anywhere in_lan_cups_s6 all -- anywhere anywhere in_lan_ping_s7 all -- anywhere anywhere in_lan_all_c8 all -- anywhere anywhere in_lan_irc_c9 all -- anywhere anywhere in_lan_ftp_c10 all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED ULOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-lan':'' queue_threshold 1 REJECT tcp -- anywhere anywhere reject-with tcp-reset ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-lan':'' queue_threshold 1 REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain in_lan_all_c8 (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state ESTABLISHED Chain in_lan_cups_s6 (1 references) target prot opt source destination DROP tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ipp state NEW,ESTABLISHED DROP tcp -- anywhere anywhere tcp spt:ipp dpt:ipp state NEW,ESTABLISHED DROP udp -- anywhere anywhere udp spts:1024:65535 dpt:ipp state NEW,ESTABLISHED DROP udp -- anywhere anywhere udp spt:ipp dpt:ipp state NEW,ESTABLISHED Chain in_lan_dhcp_s1 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp spt:bootpc dpt:bootps state NEW,ESTABLISHED Chain in_lan_dns_s2 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:domain state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:domain state NEW,ESTABLISHED Chain in_lan_ftp_c10 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:32768:61000 state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:32768:61000 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:32768:61000 state ESTABLISHED Chain in_lan_irc_c9 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:32768:61000 state ESTABLISHED Chain in_lan_ntp_s5 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp spt:ntp dpt:ntp state NEW,ESTABLISHED ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:ntp state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:ntp dpt:ntp state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ntp state NEW,ESTABLISHED Chain in_lan_ping_s7 (1 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere state NEW,ESTABLISHED icmp echo-request Chain in_lan_samba_s4 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns state NEW,ESTABLISHED ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns state NEW,ESTABLISHED ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm state NEW,ESTABLISHED ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:netbios-ssn state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:microsoft-ds state NEW,ESTABLISHED Chain in_lan_ssh_s3 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ssh state NEW,ESTABLISHED Chain in_masq (1 references) target prot opt source destination DROP all -- anywhere anywhere state INVALID pr_masq_fragments all -f anywhere anywhere pr_masq_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN pr_masq_icmpflood icmp -- anywhere anywhere icmp echo-request pr_masq_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN pr_masq_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG pr_masq_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE pr_masq_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN pr_masq_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST pr_masq_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG pr_masq_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG in_masq_all_s1 all -- anywhere anywhere in_masq_irc_s2 all -- anywhere anywhere in_masq_ftp_s3 all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED Chain in_masq_all_s1 (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED Chain in_masq_ftp_s3 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp-data state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state RELATED,ESTABLISHED Chain in_masq_irc_s2 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ircd state NEW,ESTABLISHED Chain in_services (1 references) target prot opt source destination DROP all -- anywhere anywhere state INVALID pr_services_fragments all -f anywhere anywhere pr_services_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN pr_services_icmpflood icmp -- anywhere anywhere icmp echo-request pr_services_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN pr_services_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG pr_services_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE pr_services_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN pr_services_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST pr_services_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG pr_services_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG in_services_all_s1 all -- anywhere anywhere in_services_irc_s2 all -- anywhere anywhere in_services_ftp_s3 all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED Chain in_services_all_s1 (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED Chain in_services_ftp_s3 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp-data state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state RELATED,ESTABLISHED Chain in_services_irc_s2 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ircd state NEW,ESTABLISHED Chain in_world (1 references) target prot opt source destination DROP all -- anywhere anywhere state INVALID pr_world_fragments all -f anywhere anywhere pr_world_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN pr_world_icmpflood icmp -- anywhere anywhere icmp echo-request pr_world_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN pr_world_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG pr_world_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE pr_world_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN pr_world_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST pr_world_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG pr_world_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG in_world_ping_s1 all -- anywhere anywhere in_world_ssh_s2 all -- anywhere anywhere in_world_bt1_s3 all -- anywhere anywhere in_world_dhcp_s4 all -- anywhere anywhere in_world_all_c5 all -- anywhere anywhere in_world_irc_c6 all -- anywhere anywhere in_world_ftp_c7 all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED ULOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-world':'' queue_threshold 1 REJECT tcp -- anywhere anywhere reject-with tcp-reset ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''IN-world':'' queue_threshold 1 REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain in_world_all_c5 (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state ESTABLISHED Chain in_world_bt1_s3 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp dpts:49752:49800 state NEW,ESTABLISHED ACCEPT udp -- anywhere anywhere udp dpts:49752:49800 state NEW,ESTABLISHED Chain in_world_dhcp_s4 (1 references) target prot opt source destination DROP udp -- anywhere anywhere udp spt:bootpc dpt:bootps state NEW,ESTABLISHED Chain in_world_ftp_c7 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:32768:61000 state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:32768:61000 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:32768:61000 state ESTABLISHED Chain in_world_irc_c6 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:32768:61000 state ESTABLISHED Chain in_world_ping_s1 (1 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere state NEW,ESTABLISHED icmp echo-request Chain in_world_ssh_s2 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ssh state NEW,ESTABLISHED Chain out_lan (1 references) target prot opt source destination out_lan_dhcp_s1 all -- anywhere anywhere out_lan_dns_s2 all -- anywhere anywhere out_lan_ssh_s3 all -- anywhere anywhere out_lan_samba_s4 all -- anywhere anywhere out_lan_ntp_s5 all -- anywhere anywhere out_lan_cups_s6 all -- anywhere anywhere out_lan_ping_s7 all -- anywhere anywhere out_lan_all_c8 all -- anywhere anywhere out_lan_irc_c9 all -- anywhere anywhere out_lan_ftp_c10 all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED ULOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-lan':'' queue_threshold 1 REJECT tcp -- anywhere anywhere reject-with tcp-reset ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-lan':'' queue_threshold 1 REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain out_lan_all_c8 (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED Chain out_lan_cups_s6 (1 references) target prot opt source destination DROP tcp -- anywhere anywhere tcp spt:ipp dpts:1024:65535 state ESTABLISHED DROP tcp -- anywhere anywhere tcp spt:ipp dpt:ipp state ESTABLISHED DROP udp -- anywhere anywhere udp spt:ipp dpts:1024:65535 state ESTABLISHED DROP udp -- anywhere anywhere udp spt:ipp dpt:ipp state ESTABLISHED Chain out_lan_dhcp_s1 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc state ESTABLISHED Chain out_lan_dns_s2 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp spt:domain state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:domain state ESTABLISHED Chain out_lan_ftp_c10 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp-data state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpts:1024:65535 state RELATED,ESTABLISHED Chain out_lan_irc_c9 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ircd state NEW,ESTABLISHED Chain out_lan_ntp_s5 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp spt:ntp dpt:ntp state ESTABLISHED ACCEPT udp -- anywhere anywhere udp spt:ntp dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:ntp dpt:ntp state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:ntp dpts:1024:65535 state ESTABLISHED Chain out_lan_ping_s7 (1 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere state ESTABLISHED icmp echo-reply Chain out_lan_samba_s4 (1 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns state NEW,ESTABLISHED ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 state NEW,ESTABLISHED ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm state ESTABLISHED ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:netbios-ssn dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:microsoft-ds dpts:1024:65535 state ESTABLISHED Chain out_lan_ssh_s3 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ssh dpts:1024:65535 state ESTABLISHED Chain out_masq (1 references) target prot opt source destination out_masq_all_s1 all -- anywhere anywhere out_masq_irc_s2 all -- anywhere anywhere out_masq_ftp_s3 all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED Chain out_masq_all_s1 (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state ESTABLISHED Chain out_masq_ftp_s3 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state ESTABLISHED Chain out_masq_irc_s2 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:1024:65535 state ESTABLISHED Chain out_services (1 references) target prot opt source destination out_services_all_s1 all -- anywhere anywhere out_services_irc_s2 all -- anywhere anywhere out_services_ftp_s3 all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED Chain out_services_all_s1 (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state ESTABLISHED Chain out_services_ftp_s3 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:1024:65535 state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state ESTABLISHED Chain out_services_irc_s2 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:1024:65535 state ESTABLISHED Chain out_world (1 references) target prot opt source destination out_world_ping_s1 all -- anywhere anywhere out_world_ssh_s2 all -- anywhere anywhere out_world_bt1_s3 all -- anywhere anywhere out_world_dhcp_s4 all -- anywhere anywhere out_world_all_c5 all -- anywhere anywhere out_world_irc_c6 all -- anywhere anywhere out_world_ftp_c7 all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED ULOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-world':'' queue_threshold 1 REJECT tcp -- anywhere anywhere reject-with tcp-reset ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `''OUT-world':'' queue_threshold 1 REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain out_world_all_c5 (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED Chain out_world_bt1_s3 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:49752:49800 state ESTABLISHED ACCEPT udp -- anywhere anywhere udp spts:49752:49800 state ESTABLISHED Chain out_world_dhcp_s4 (1 references) target prot opt source destination DROP udp -- anywhere anywhere udp spt:bootps dpt:bootpc state ESTABLISHED Chain out_world_ftp_c7 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp state NEW,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp-data state ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpts:1024:65535 state RELATED,ESTABLISHED Chain out_world_irc_c6 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ircd state NEW,ESTABLISHED Chain out_world_ping_s1 (1 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere state ESTABLISHED icmp echo-reply Chain out_world_ssh_s2 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:ssh dpts:1024:65535 state ESTABLISHED Chain pr_lan_fragments (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_lan_icmpflood (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 100/sec burst 50 ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_lan_malbad (4 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_lan_malnull (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_lan_malxmas (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_lan_nosyn (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_lan_synflood (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 100/sec burst 50 ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_masq_fragments (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_masq_icmpflood (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 100/sec burst 50 ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_masq_malbad (4 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_masq_malnull (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_masq_malxmas (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_masq_nosyn (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_masq_synflood (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 100/sec burst 50 ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_services_fragments (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_services_icmpflood (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 100/sec burst 50 ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_services_malbad (4 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_services_malnull (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_services_malxmas (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_services_nosyn (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_services_synflood (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 100/sec burst 50 ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_world_fragments (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'PACKET FRAGMENTS:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_world_icmpflood (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 100/sec burst 50 ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'ICMP FLOOD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_world_malbad (4 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED BAD:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_world_malnull (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED NULL:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_world_malxmas (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'MALFORMED XMAS:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_world_nosyn (1 references) target prot opt source destination ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'NEW TCP w/o SYN:'' queue_threshold 1 DROP all -- anywhere anywhere Chain pr_world_synflood (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 100/sec burst 50 ULOG all -- anywhere anywhere limit: avg 1/sec burst 5 ULOG copy_range 0 nlgroup 1 prefix `'SYN FLOOD:'' queue_threshold 1 DROP all -- anywhere anywhere