Chain INPUT (policy DROP 17 packets, 15459 bytes) pkts bytes target prot opt in out source destination 683 51552 ACCEPT all -- lo any anywhere anywhere 598 460K TCPFLAG tcp -- any any anywhere anywhere 14 2186 IPLIST_IN all -- any any anywhere anywhere state NEW 700 471K FLOOD all -- any any anywhere anywhere 683 455K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy DROP 3 packets, 120 bytes) pkts bytes target prot opt in out source destination 683 51552 ACCEPT all -- any lo anywhere anywhere 727 64637 IPLIST_OUT all -- any any anywhere anywhere state NEW,RELATED,ESTABLISHED 697 62579 ACCEPT all -- any any anywhere anywhere state NEW,RELATED,ESTABLISHED Chain FLOOD (1 references) pkts bytes target prot opt in out source destination 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 15/sec burst 5 recent: UPDATE seconds: 60 name: DEFAULT side: source 0 0 DROP icmp -- any any anywhere anywhere icmp echo-request limit: avg 15/sec burst 5 recent: UPDATE seconds: 60 name: DEFAULT side: source 700 471K RETURN all -- any any anywhere anywhere recent: SET name: DEFAULT side: source Chain IPLIST_IN (1 references) pkts bytes target prot opt in out source destination 0 0 RETURN icmp -- any any anywhere anywhere icmp echo-reply 0 0 DROP all -- any any anywhere anywhere MARK match 0x2 7 1093 NFQUEUE all -- any any anywhere anywhere MARK match !0x1 NFQUEUE num 0 Chain IPLIST_OUT (1 references) pkts bytes target prot opt in out source destination 2 168 RETURN icmp -- any any anywhere anywhere icmp echo-request 0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:ftp-data 0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:ftp 0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:time 0 0 RETURN udp -- any any anywhere anywhere udp dpt:time 271 18606 RETURN tcp -- any any anywhere anywhere tcp dpt:http 31 2808 RETURN tcp -- any any anywhere anywhere tcp dpt:https 0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:smtps 0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:submission 0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:pop3s 101 13130 RETURN tcp -- any any anywhere anywhere tcp dpt:1863 35 5654 RETURN tcp -- any any anywhere anywhere tcp dpt:5222 0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:ircd 0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:6697 8 480 RETURN tcp -- any any anywhere anywhere tcp dpt:webcache 0 0 RETURN tcp -- any any anywhere anywhere tcp spt:51718 10 667 RETURN udp -- any any anywhere anywhere udp spt:51718 210 19084 RETURN all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP all -- any any anywhere anywhere MARK match 0x2 29 1982 NFQUEUE all -- any any anywhere anywhere MARK match !0x1 NFQUEUE num 0 Chain TCPFLAG (1 references) pkts bytes target prot opt in out source destination 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,ACK/FIN 0 0 DROP tcp -- any any anywhere anywhere tcp flags:PSH,ACK/PSH 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,RST/FIN,RST 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN 0 0 DROP tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN,RST 0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN/FIN,SYN 0 0 DROP tcp -- any any anywhere anywhere tcp option=128 0 0 DROP tcp -- any any anywhere anywhere tcp option=64 0 0 DROP all -f any any anywhere anywhere