root@mepis:/# iptables --list Chain INPUT (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- 192.168.0.100 192.168.0.255 logaborted tcp -- anywhere anywhere state RELATED,ESTA BLISHED tcp flags:RST/RST ACCEPT 0 -- anywhere anywhere state RELATED,ESTAB LISHED ACCEPT icmp -- anywhere anywhere icmp destination-un reachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-prob lem nicfilt 0 -- anywhere anywhere srcfilt 0 -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere state RELATED,ESTAB LISHED ACCEPT icmp -- anywhere anywhere icmp destination-un reachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-prob lem srcfilt 0 -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- anywhere anywhere state RELATED,ESTAB LISHED ACCEPT icmp -- anywhere anywhere icmp destination-un reachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-prob lem s1 0 -- anywhere anywhere Chain f0to1 (3 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ipp state NEW ACCEPT udp -- anywhere anywhere udp dpt:ipp ACCEPT udp -- anywhere anywhere udp dpt:mdns ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-d s state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:6881:6889 state NEW ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ns state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ssn ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:6969 state NEW ACCEPT udp -- anywhere anywhere udp dpts:6970:7170 ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:3900:3999 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:6881:6889 state NEW ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:5999 ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm logdrop 0 -- anywhere anywhere Chain f1to0 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpts:6881:6889 state NEW ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT udp -- anywhere anywhere udp dpt:sip ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:smtp state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:rsync state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:pop3 state NEW ACCEPT udp -- anywhere anywhere udp dpt:3478 ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:imap2 state NEW ACCEPT udp -- anywhere anywhere udp dpt:imap2 ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:1723 state NEW ACCEPT gre -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpts:6660:6669 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:whois state NEW ACCEPT udp -- anywhere anywhere udp dpt:43 ACCEPT tcp -- anywhere anywhere tcp dpt:3030 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:hkp state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:1755 state NEW ACCEPT udp -- anywhere anywhere udp dpt:1755 ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:ipp state NEW ACCEPT udp -- anywhere anywhere udp dpt:ipp ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:mmcc state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:telnet state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpts:5000:5001 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:5000 ACCEPT tcp -- anywhere anywhere tcp dpt:8765 state NEW ACCEPT udp -- anywhere anywhere udp dpt:ntp ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:ntp state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:ldap state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:522 state N EW ACCEPT tcp -- anywhere anywhere tcp dpt:1503 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:1720 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:1731 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpts:1024:65535 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:1024:65535 ACCEPT udp -- anywhere anywhere udp dpt:mdns ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:dict state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:ssh state NEW ACCEPT tcp -- anywhere anywhere tcp spts:0:1023 dpt :ssh state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:rtsp state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:7070 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-d s state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:ftp state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:nntp state NEW ACCEPT udp -- anywhere anywhere udp dpt:aol ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpts:6881:6889 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:domain stat e NEW ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:xmpp-client state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:5223 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:gnutella-sv c state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:pop3s state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:www state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:webcache state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:8008 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:8000 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:8888 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:kerberos st ate NEW ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ns state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:netbios-dgm ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:netbios-ssn ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpts:aol:5193 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:aol:5193 ACCEPT tcp -- anywhere anywhere tcp dpt:7741 state NEW ACCEPT udp -- anywhere anywhere udp dpts:33434:3360 0 ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:msnp state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:6969 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:printer sta te NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:imaps state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:5999 dpt:https state NEW logdrop 0 -- anywhere anywhere Chain logaborted (1 references) target prot opt source destination logaborted2 0 -- anywhere anywhere limit: avg 1/sec burst 10 LOG 0 -- anywhere anywhere limit: avg 2/min bu rst 1 LOG level warning prefix `LIMITED ' Chain logaborted2 (1 references) target prot opt source destination LOG 0 -- anywhere anywhere LOG level warning t cp-sequence tcp-options ip-options prefix `ABORTED ' ACCEPT 0 -- anywhere anywhere state RELATED,ESTAB LISHED Chain logdrop (4 references) target prot opt source destination logdrop2 0 -- anywhere anywhere Chain logdrop2 (1 references) target prot opt source destination DROP 0 -- anywhere anywhere Chain logreject (0 references) target prot opt source destination logreject2 0 -- anywhere anywhere Chain logreject2 (1 references) target prot opt source destination REJECT tcp -- anywhere anywhere reject-with tcp-res et REJECT udp -- anywhere anywhere reject-with icmp-po rt-unreachable DROP 0 -- anywhere anywhere Chain nicfilt (1 references) target prot opt source destination RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere RETURN 0 -- anywhere anywhere logdrop 0 -- anywhere anywhere Chain s0 (1 references) target prot opt source destination f0to1 0 -- anywhere 192.168.0.100 f0to1 0 -- anywhere 192.168.0.255 f0to1 0 -- anywhere localhost logdrop 0 -- anywhere anywhere Chain s1 (1 references) target prot opt source destination f1to0 0 -- anywhere anywhere Chain srcfilt (2 references) target prot opt source destination s0 0 -- anywhere anywhere root@mepis:/#