root@mpatsos:~ # iptables -L -n Chain BADTCP (2 references) target prot opt source destination PSCAN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 PSCAN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 PSCAN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x01 PSCAN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 PSCAN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03 NEWNOTSYN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW Chain CUSTOMFORWARD (1 references) target prot opt source destination GRAY1_FORWARD all -- 0.0.0.0/0 0.0.0.0/0 Chain CUSTOMINPUT (1 references) target prot opt source destination GRAY1_INPUT all -- 0.0.0.0/0 0.0.0.0/0 Chain CUSTOMOUTPUT (1 references) target prot opt source destination Chain DHCPBLUEINPUT (1 references) target prot opt source destination Chain DHCPGRAY1_INPUT (1 references) target prot opt source destination Chain DMZHOLES (0 references) target prot opt source destination Chain GRAY1_FORWARD (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 Chain GRAY1_INPUT (1 references) target prot opt source destination DHCPGRAY1_INPUT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 Chain GUIINPUT (1 references) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 Chain INPUT (policy DROP) target prot opt source destination ipac~o all -- 0.0.0.0/0 0.0.0.0/0 BADTCP all -- 0.0.0.0/0 0.0.0.0/0 CUSTOMINPUT all -- 0.0.0.0/0 0.0.0.0/0 GUIINPUT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED IPSECVIRTUAL all -- 0.0.0.0/0 0.0.0.0/0 OPENSSLVIRTUAL all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state NEW DROP all -- 127.0.0.0/8 0.0.0.0/0 state NEW DROP all -- 0.0.0.0/0 127.0.0.0/8 state NEW ACCEPT !icmp -- 0.0.0.0/0 0.0.0.0/0 state NEW DHCPBLUEINPUT all -- 0.0.0.0/0 0.0.0.0/0 IPSECPHYSICAL all -- 0.0.0.0/0 0.0.0.0/0 OPENSSLPHYSICAL all -- 0.0.0.0/0 0.0.0.0/0 WIRELESSINPUT all -- 0.0.0.0/0 0.0.0.0/0 state NEW REDINPUT all -- 0.0.0.0/0 0.0.0.0/0 XTACCESS all -- 0.0.0.0/0 0.0.0.0/0 state NEW LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `INPUT ' Chain FORWARD (policy DROP) target prot opt source destination ipac~fi all -- 0.0.0.0/0 0.0.0.0/0 ipac~fo all -- 0.0.0.0/0 0.0.0.0/0 BADTCP all -- 0.0.0.0/0 0.0.0.0/0 TCPMSS tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU CUSTOMFORWARD all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED IPSECVIRTUAL all -- 0.0.0.0/0 0.0.0.0/0 OPENSSLVIRTUAL all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state NEW DROP all -- 127.0.0.0/8 0.0.0.0/0 state NEW DROP all -- 0.0.0.0/0 127.0.0.0/8 state NEW ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state NEW WIRELESSFORWARD all -- 0.0.0.0/0 0.0.0.0/0 state NEW REDFORWARD all -- 0.0.0.0/0 0.0.0.0/0 PORTFWACCESS all -- 0.0.0.0/0 0.0.0.0/0 state NEW LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `OUTPUT ' Chain IPSECPHYSICAL (1 references) target prot opt source destination Chain IPSECVIRTUAL (2 references) target prot opt source destination Chain LOG_DROP (0 references) target prot opt source destination LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain LOG_REJECT (0 references) target prot opt source destination LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain NEWNOTSYN (1 references) target prot opt source destination LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `NEW not SYN? ' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain OPENSSLPHYSICAL (1 references) target prot opt source destination Chain OPENSSLVIRTUAL (2 references) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination ipac~i all -- 0.0.0.0/0 0.0.0.0/0 CUSTOMOUTPUT all -- 0.0.0.0/0 0.0.0.0/0 Chain PORTFWACCESS (1 references) target prot opt source destination Chain PSCAN (5 references) target prot opt source destination LOG tcp -- 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `TCP Scan? ' LOG udp -- 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `UDP Scan? ' LOG icmp -- 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `ICMP Scan? ' LOG all -f 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5 LOG flags 0 level 4 prefix `FRAG Scan? ' DROP all -- 0.0.0.0/0 0.0.0.0/0 Chain REDFORWARD (1 references) target prot opt source destination Chain REDINPUT (1 references) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Chain WIRELESSFORWARD (1 references) target prot opt source destination Chain WIRELESSINPUT (1 references) target prot opt source destination Chain XTACCESS (1 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 194.219.204.241 tcp dpt:113 Chain ipac~fi (1 references) target prot opt source destination all -- 0.0.0.0/0 0.0.0.0/0 all -- 0.0.0.0/0 0.0.0.0/0 Chain ipac~fo (1 references) target prot opt source destination all -- 0.0.0.0/0 0.0.0.0/0 all -- 0.0.0.0/0 0.0.0.0/0 Chain ipac~i (1 references) target prot opt source destination all -- 0.0.0.0/0 0.0.0.0/0 all -- 0.0.0.0/0 0.0.0.0/0 Chain ipac~o (1 references) target prot opt source destination all -- 0.0.0.0/0 0.0.0.0/0 all -- 0.0.0.0/0 0.0.0.0/0