$ sudo iptables -nL Chain INPUT (policy DROP) target prot opt source destination ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 LOGDROP 0 -- 127.0.0.1 0.0.0.0/0 LOGDROP 0 -- 0.0.0.0/0 127.0.0.1 ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED LOGDROP icmp -- 0.0.0.0/0 0.0.0.0/0 LOGDROP tcp -- 0.0.0.0/0 0.0.0.0/0 LOGDROP udp -- 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP) target prot opt source destination ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 LOGDROP 0 -- 127.0.0.1 0.0.0.0/0 LOGDROP 0 -- 0.0.0.0/0 127.0.0.1 ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED Chain LOGDROP (7 references) target prot opt source destination LOG tcp -- 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 10 LOG flags 0 level 4 prefix `TCP LOGDROP: ' LOG udp -- 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 10 LOG flags 0 level 4 prefix `UDP LOGDROP: ' LOG icmp -- 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 10 LOG flags 0 level 4 prefix `ICMP LOGDROP: ' LOG 0 -f 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 10 LOG flags 0 level 4 prefix `FRAGMENT LOGDROP: ' DROP 0 -- 0.0.0.0/0 0.0.0.0/0 -------------------- $ sudo iptables -v -L Chain INPUT (policy DROP 1 packets, 32 bytes) pkts bytes target prot opt in out source destination 1475 458K ACCEPT 0 -- lo any anywhere anywhere 0 0 LOGDROP 0 -- !lo any localhost anywhere 0 0 LOGDROP 0 -- !lo any anywhere localhost 190K 137M ACCEPT 0 -- any any anywhere anywhere state RELATED,ESTABLISHED 38 2128 LOGDROP icmp -- eth1 any anywhere anywhere 612 63439 LOGDROP tcp -- eth1 any anywhere anywhere 1403 216K LOGDROP udp -- eth1 any anywhere anywhere Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- eth1 any anywhere anywhere state RELATED,ESTABLISHED Chain OUTPUT (policy DROP 31 packets, 2756 bytes) pkts bytes target prot opt in out source destination 1475 458K ACCEPT 0 -- any lo anywhere anywhere 0 0 LOGDROP 0 -- any !lo localhost anywhere 0 0 LOGDROP 0 -- any !lo anywhere localhost 207K 59M ACCEPT 0 -- any any anywhere anywhere state NEW,RELATED,ESTABLISHED Chain LOGDROP (7 references) pkts bytes target prot opt in out source destination 560 61359 LOG tcp -- any any anywhere anywhere limit: avg 2/sec burst 10 LOG level warning prefix `TCP LOGDROP: ' 1400 215K LOG udp -- any any anywhere anywhere limit: avg 2/sec burst 10 LOG level warning prefix `UDP LOGDROP: ' 38 2128 LOG icmp -- any any anywhere anywhere limit: avg 2/sec burst 10 LOG level warning prefix `ICMP LOGDROP: ' 0 0 LOG 0 -f any any anywhere anywhere limit: avg 2/sec burst 10 LOG level warning prefix `FRAGMENT LOGDROP: ' 2053 281K DROP 0 -- any any anywhere anywhere