Chain INPUT (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- anywhere anywhere DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE DROP tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN DROP tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST DROP tcp -- anywhere anywhere tcp flags:FIN,RST/FIN,RST DROP tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN DROP tcp -- anywhere anywhere tcp flags:PSH,ACK/PSH DROP tcp -- anywhere anywhere tcp flags:ACK,URG/URG DROP tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN,ACK state NEW DROP tcp -- anywhere anywhere tcp flags:FIN,PSH/FIN,PSH state NEW DROP tcp -- anywhere anywhere tcp flags:FIN,URG/FIN,URG DROP tcp -- anywhere anywhere tcp flags:FIN,PSH,URG/FIN,PSH,URG DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG DROP icmp -- anywhere anywhere icmp echo-request DROP icmp -- anywhere anywhere icmp router-advertisement DROP icmp -- anywhere anywhere icmp router-solicitation ACCEPT icmp -- anywhere anywhere icmp time-exceeded limit: avg 10/sec burst 5 DROP icmp -- anywhere anywhere icmp parameter-problem DROP icmp -- anywhere anywhere icmp timestamp-request DROP icmp -- anywhere anywhere icmp address-mask-request ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT 0 -- anywhere anywhere state ESTABLISHED LOG 0 -- anywhere anywhere state INVALID LOG level warning prefix `INVALID input: ' LOG icmp -- anywhere anywhere icmp echo-reply LOG level warning prefix `ECHO-REPLY' ACCEPT icmp -- anywhere anywhere icmp echo-reply limit: avg 3/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp destination-unreachable limit: avg 3/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp any state RELATED ACCEPT 0 -- anywhere anywhere state RELATED LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning prefix `REQUESTED CONNS: ' DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN ACCEPT tcp -- anywhere anywhere tcp flags:SYN,ACK/SYN,ACK DROP tcp -- anywhere anywhere tcp flags:ACK/ACK state NEW DROP 0 -- anywhere anywhere state INVALID DROP 0 -- loopback/8 anywhere DROP 0 -- 10.0.0.0/8 anywhere DROP 0 -- 172.16.0.0/12 anywhere ACCEPT 0 -- 192.168.1.244 anywhere DROP 0 -- 192.168.0.0/16 anywhere DROP 0 -- default anywhere DROP 0 -- 255.255.255.255 anywhere DROP 0 -- anywhere default DROP 0 -- anywhere 255.255.255.255 DROP 0 -- loopback/8 anywhere DROP 0 -- 10.0.0.0/8 anywhere DROP 0 -- 172.16.0.0/12 anywhere DROP 0 -- 192.168.0.0/16 anywhere DROP 0 -- default anywhere DROP 0 -- 255.255.255.255 anywhere DROP 0 -- anywhere default DROP 0 -- anywhere 255.255.255.255 Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination