Chain INPUT (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- darknode 192.168.2.255 logaborted tcp -- anywhere anywhere state RELATED,ESTABLISHED tcp flags:RST/RST ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- darknode 192.168.2.255 logaborted tcp -- anywhere anywhere state RELATED,ESTABLISHED tcp flags:RST/RST ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem nicfilt 0 -- anywhere anywhere srcfilt 0 -- anywhere anywhere nicfilt 0 -- anywhere anywhere srcfilt 0 -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem srcfilt 0 -- anywhere anywhere srcfilt 0 -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem s1 0 -- anywhere anywhere s1 0 -- anywhere anywhere Chain f0to1 (5 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:52552 ACCEPT tcp -- anywhere anywhere tcp dpts:52987:52989 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:auth state NEW ACCEPT udp -- anywhere anywhere udp dpt:113 ACCEPT tcp -- anywhere anywhere tcp dpt:52552 state NEW ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT icmp -- anywhere anywhere icmp echo-reply logdrop 0 -- anywhere anywhere ACCEPT udp -- anywhere anywhere udp dpt:52552 ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:auth state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:52552 state NEW ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT icmp -- anywhere anywhere icmp echo-reply logdrop 0 -- anywhere anywhere Chain f0to2 (2 references) target prot opt source destination logdrop 0 -- anywhere anywhere logdrop 0 -- anywhere anywhere Chain f1to0 (2 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpts:1:65535 ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT tcp -- anywhere anywhere tcp dpts:tcpmux:65535 state NEW logdrop 0 -- anywhere anywhere ACCEPT udp -- anywhere anywhere udp dpts:1:65535 ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT tcp -- anywhere anywhere tcp dpts:tcpmux:65535 state NEW logdrop 0 -- anywhere anywhere Chain f1to2 (2 references) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpts:1:65535 ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT tcp -- anywhere anywhere tcp dpts:tcpmux:65535 state NEW ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT icmp -- anywhere anywhere icmp echo-reply logdrop 0 -- anywhere anywhere ACCEPT udp -- anywhere anywhere udp dpts:1:65535 ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT tcp -- anywhere anywhere tcp dpts:tcpmux:65535 state NEW ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT icmp -- anywhere anywhere icmp echo-reply logdrop 0 -- anywhere anywhere Chain f2to0 (2 references) target prot opt source destination logdrop 0 -- anywhere anywhere logdrop 0 -- anywhere anywhere Chain f2to1 (6 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-ds state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ns state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ssn ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:auth state NEW ACCEPT udp -- anywhere anywhere udp dpt:113 ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT udp -- anywhere anywhere udp dpts:33434:33600 logdrop 0 -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-ds state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ns state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ssn ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:auth state NEW ACCEPT udp -- anywhere anywhere udp dpt:113 ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT udp -- anywhere anywhere udp dpts:33434:33600 logdrop 0 -- anywhere anywhere Chain logaborted (2 references) target prot opt source destination logaborted2 0 -- anywhere anywhere limit: avg 1/sec burst 10 LOG 0 -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' logaborted2 0 -- anywhere anywhere limit: avg 1/sec burst 10 LOG 0 -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' Chain logaborted2 (2 references) target prot opt source destination LOG 0 -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED ' ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED LOG 0 -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED ' ACCEPT 0 -- anywhere anywhere state RELATED,ESTABLISHED Chain logdrop (16 references) target prot opt source destination logdrop2 0 -- anywhere anywhere limit: avg 1/sec burst 10 LOG 0 -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' DROP 0 -- anywhere anywhere Chain logdrop2 (1 references) target prot opt source destination LOG 0 -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `DROPPED ' DROP 0 -- anywhere anywhere Chain logreject (0 references) target prot opt source destination logreject2 0 -- anywhere anywhere limit: avg 1/sec burst 10 LOG 0 -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable DROP 0 -- anywhere anywhere logreject2 0 -- anywhere anywhere limit: avg 1/sec burst 10 REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable DROP 0 -- anywhere anywhere Chain logreject2 (2 references) target prot opt source destination LOG 0 -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `REJECTED ' REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable DROP 0 -- anywhere anywhere REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable DROP 0 -- anywhere anywhere Chain nicfilt (2 references) target prot opt source destination RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere logdrop 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere logdrop 0 -- anywhere anywhere Chain s0 (2 references) target prot opt source destination f0to1 0 -- anywhere darknode f0to1 0 -- anywhere localhost f0to2 0 -- anywhere laptop logdrop 0 -- anywhere anywhere f0to1 0 -- anywhere darknode f0to1 0 -- anywhere 192.168.2.255 f0to1 0 -- anywhere localhost f0to2 0 -- anywhere laptop logdrop 0 -- anywhere anywhere Chain s1 (2 references) target prot opt source destination f1to2 0 -- anywhere laptop f1to0 0 -- anywhere anywhere f1to2 0 -- anywhere laptop f1to0 0 -- anywhere anywhere Chain s2 (2 references) target prot opt source destination f2to1 0 -- anywhere darknode f2to1 0 -- anywhere 192.168.2.255 f2to1 0 -- anywhere localhost f2to0 0 -- anywhere anywhere f2to1 0 -- anywhere darknode f2to1 0 -- anywhere 192.168.2.255 f2to1 0 -- anywhere localhost f2to0 0 -- anywhere anywhere Chain srcfilt (4 references) target prot opt source destination s2 0 -- laptop anywhere s0 0 -- anywhere anywhere s2 0 -- laptop anywhere s0 0 -- anywhere anywhere