# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
SIP_ALLOW  all  --  anywhere             anywhere
REMOTE_ACCESS  tcp  --  anywhere             anywhere            tcp dpt:https
DOS        all  --  anywhere             anywhere
SPI        all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:1863:1864
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:4443
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:5190
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:5566
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:40000:40099
LOG        tcp  --  anywhere             anywhere            tcp flags:SYN,RST,ACK/SYN limit: avg 6/hour burst 5 LOG level alert prefix `Intrusion -> '
DROP       all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
TCPMSS     tcp  --  anywhere             anywhere            tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
TCPMSS     tcp  --  anywhere             anywhere            tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
DOS        all  --  anywhere             anywhere
DMZ        all  --  anywhere             anywhere
VRTSRV     all  --  anywhere             anywhere
SPI        all  --  anywhere             anywhere
ACCEPT     all  --  0.0.0.0              anywhere
LOG        tcp  --  anywhere             anywhere            tcp flags:SYN,RST,ACK/SYN limit: avg 6/hour burst 5 LOG level alert prefix `Intrusion -> '
DROP       all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain DMZ (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain DOS (2 references)
target     prot opt source               destination
dos_ping_of_death  icmp --  anywhere             anywhere            icmp echo-request
dos_fragments  all  -f  anywhere             anywhere
dos_ripdefect  udp  --  anywhere             anywhere            udp dpt:route
dos_ipspoof  all  --  anywhere             anywhere
RETURN     tcp  --  anywhere             anywhere            limit: avg 200/sec burst 250 tcp flags:SYN,RST,ACK/SYN
LOG        tcp  --  anywhere             anywhere            tcp flags:SYN,RST,ACK/SYN LOG level emerg prefix `"Echo::debugA'
DROP       tcp  --  anywhere             anywhere            tcp flags:SYN,RST,ACK/SYN
RETURN     tcp  --  anywhere             anywhere            limit: avg 200/sec burst 250 tcp flags:FIN,SYN,RST,ACK/RST
LOG        tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/RST LOG level emerg prefix `"Echo::debugB'
DROP       tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/RST
RETURN     all  --  anywhere             anywhere
RETURN     all  --  anywhere             anywhere

Chain REMOTE_ACCESS (1 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain SIP_ALLOW (1 references)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere            udp dpt:5060
ACCEPT     udp  --  anywhere             anywhere            udp dpts:16384:16400
RETURN     all  --  anywhere             anywhere

Chain SPI (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
DROP       all  -f  anywhere             anywhere
DROP       tcp  --  anywhere             anywhere
DROP       udp  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere

Chain URLFILTER (0 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain VRTSRV (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             10.1.1.11           tcp dpt:ssh
ACCEPT     tcp  --  anywhere             10.1.1.11           tcp dpt:ftp
RETURN     all  --  anywhere             anywhere
RETURN     all  --  anywhere             anywhere

Chain dos_fragments (1 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            LOG level emerg prefix `"Echo::debug'
DROP       all  --  anywhere             anywhere

Chain dos_ipspoof (1 references)
target     prot opt source               destination
LOG        all  --  255.255.255.255      0.0.0.0             LOG level emerg prefix `"Echo::debug'
DROP       all  --  255.255.255.255      0.0.0.0
LOG        all  --  240.0.0.0/4          anywhere            LOG level emerg prefix `"Echo::debug'
DROP       all  --  224.0.0.0/4          anywhere
LOG       !udp  --  anywhere             240.0.0.0/4         LOG level emerg prefix `"Echo::debug'
DROP      !udp  --  anywhere             240.0.0.0/4
LOG        all  --  240.0.0.0/5          anywhere            LOG level emerg prefix `"Echo::debug'
DROP       all  --  240.0.0.0/5          anywhere
RETURN     all  --  anywhere             anywhere

Chain dos_ping_of_death (1 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere            limit: avg 1/sec burst 5
LOG        all  --  anywhere             anywhere            LOG level emerg prefix `"Echo::pingofdeath--->"'
DROP       all  --  anywhere             anywhere

Chain dos_ripdefect (1 references)
target     prot opt source               destination
DROP       udp  --  anywhere             anywhere            udp dpt:route
#