Chain INPUT (policy DROP 101 packets, 11518 bytes) pkts bytes target prot opt in out source destination 167 16436 BADTCP 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02 limit: avg 10/sec burst 5 66 4918 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 state NEW 0 0 DROP 0 -- * * 127.0.0.0/8 0.0.0.0/0 state NEW 0 0 DROP 0 -- * * 0.0.0.0/0 127.0.0.0/8 state NEW 0 0 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT 0 -- ipsec+ * 0.0.0.0/0 0.0.0.0/0 84 10083 IPSECRED 0 -- eth1 * 0.0.0.0/0 0.0.0.0/0 84 10083 PPTPD 0 -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- ppp0 * 0.0.0.0/0 0.0.0.0/0 101 11518 REDINPUT 0 -- * * 0.0.0.0/0 0.0.0.0/0 101 11518 INTERNALACCESS 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW 101 11518 EXTERNALACCESS 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 1 48 BADTCP 0 -- * * 0.0.0.0/0 0.0.0.0/0 1 48 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 state NEW 0 0 DROP 0 -- * * 127.0.0.0/8 0.0.0.0/0 state NEW 0 0 DROP 0 -- * * 0.0.0.0/0 127.0.0.0/8 state NEW 0 0 ACCEPT 0 -- eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW 0 0 ACCEPT 0 -- ipsec+ * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- ppp0 * 0.0.0.0/0 0.0.0.0/0 1 48 REDFORWARD 0 -- * * 0.0.0.0/0 0.0.0.0/0 1 48 DMZHOLES 0 -- eth2 * 0.0.0.0/0 0.0.0.0/0 state NEW 1 48 PORTFORWARD 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW Chain OUTPUT (policy ACCEPT 120 packets, 16105 bytes) pkts bytes target prot opt in out source destination Chain BADTCP (2 references) pkts bytes target prot opt in out source destination 0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x01 0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 0 0 PSCAN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03 0 0 NEWNOTSYN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW Chain DMZHOLES (1 references) pkts bytes target prot opt in out source destination Chain EXTERNALACCESS (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- eth1 * 10.10.136.13 0.0.0.0/0 MAC 00:16:76:91:7C:CB tcp dpt:80 0 0 ACCEPT tcp -- eth1 * 10.10.136.6 0.0.0.0/0 MAC 00:00:E8:11:95:B8 tcp dpt:80 0 0 ACCEPT tcp -- eth1 * 10.10.136.45 0.0.0.0/0 MAC 00:19:5B:7D:61:D6 tcp dpt:80 Chain INTERNALACCESS (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- eth0 * 192.168.1.1 0.0.0.0/0 0 0 ACCEPT 0 -- eth0 * 10.10.136.43 0.0.0.0/0 MAC 00:19:5B:82:54:59 Chain IPSECRED (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT esp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT ah -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:500 dpt:500 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 Chain LOG_DROP (0 references) pkts bytes target prot opt in out source destination 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain LOG_REJECT (0 references) pkts bytes target prot opt in out source destination 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 0 0 REJECT 0 -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain NEWNOTSYN (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain PORTFORWARD (1 references) pkts bytes target prot opt in out source destination 1 48 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.1 tcp dpt:80 state NEW Chain PPTPD (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1723 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1723 0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0 Chain PSCAN (5 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain REDFORWARD (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- eth2 eth1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT udp -- eth2 eth1 0.0.0.0/0 0.0.0.0/0 Chain REDINPUT (1 references) pkts bytes target prot opt in out source destination