Chain Banned (0 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[TCP Banned] ' LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[UDP Banned] ' LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[ICMP Banned] ' LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[FRAG Banned] ' DROP all -- anywhere anywhere Chain DDoS (1 references) target prot opt source destination RETURN all -- anywhere anywhere limit: avg 1/sec burst 10 LOG all -- anywhere anywhere LOG level warning prefix `[DOS Attack/SYN Scan?] ' DROP all -- anywhere anywhere Chain IANA (244 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[IANA Reserved - TCP] ' LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[IANA Reserved - UDP] ' LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[IANA Reserved - ICMP] ' LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[IANA Reserved - FRAG] ' DROP all -- anywhere anywhere Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere DROP all -- anywhere 192.168.1.0 DROP all -- anywhere 192.168.1.255 LOG all -- anywhere 255.255.255.255 limit: avg 1/sec burst 5 LOG level warning prefix `[Limited Broadcast] ' DROP all -- anywhere 255.255.255.255 ScanD tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE ScanD tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN ScanD tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST ScanD tcp -- anywhere anywhere tcp flags:FIN,RST/FIN,RST ScanD tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN ScanD tcp -- anywhere anywhere tcp flags:PSH,ACK/PSH ScanD tcp -- anywhere anywhere tcp flags:ACK,URG/URG DDoS tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN ACCEPT all -- anywhere anywhere IANA all -- 1.0.0.0/8 anywhere IANA all -- anywhere 1.0.0.0/8 IANA all -- 2.0.0.0/8 anywhere IANA all -- anywhere 2.0.0.0/8 IANA all -- 5.0.0.0/8 anywhere IANA all -- anywhere 5.0.0.0/8 IANA all -- 7.0.0.0/8 anywhere IANA all -- anywhere 7.0.0.0/8 IANA all -- 23.0.0.0/8 anywhere IANA all -- anywhere 23.0.0.0/8 IANA all -- 27.0.0.0/8 anywhere IANA all -- anywhere 27.0.0.0/8 IANA all -- 31.0.0.0/8 anywhere IANA all -- anywhere 31.0.0.0/8 IANA all -- 36.0.0.0/8 anywhere IANA all -- anywhere 36.0.0.0/8 IANA all -- 37.0.0.0/8 anywhere IANA all -- anywhere 37.0.0.0/8 IANA all -- 39.0.0.0/8 anywhere IANA all -- anywhere 39.0.0.0/8 IANA all -- 42.0.0.0/8 anywhere IANA all -- anywhere 42.0.0.0/8 IANA all -- 77.0.0.0/8 anywhere IANA all -- anywhere 77.0.0.0/8 IANA all -- 78.0.0.0/8 anywhere IANA all -- anywhere 78.0.0.0/8 IANA all -- 79.0.0.0/8 anywhere IANA all -- anywhere 79.0.0.0/8 IANA all -- 92.0.0.0/8 anywhere IANA all -- anywhere 92.0.0.0/8 IANA all -- 93.0.0.0/8 anywhere IANA all -- anywhere 93.0.0.0/8 IANA all -- 94.0.0.0/8 anywhere IANA all -- anywhere 94.0.0.0/8 IANA all -- 95.0.0.0/8 anywhere IANA all -- anywhere 95.0.0.0/8 IANA all -- 96.0.0.0/8 anywhere IANA all -- anywhere 96.0.0.0/8 IANA all -- 97.0.0.0/8 anywhere IANA all -- anywhere 97.0.0.0/8 IANA all -- 98.0.0.0/8 anywhere IANA all -- anywhere 98.0.0.0/8 IANA all -- 99.0.0.0/8 anywhere IANA all -- anywhere 99.0.0.0/8 IANA all -- 100.0.0.0/8 anywhere IANA all -- anywhere 100.0.0.0/8 IANA all -- 101.0.0.0/8 anywhere IANA all -- anywhere 101.0.0.0/8 IANA all -- 102.0.0.0/8 anywhere IANA all -- anywhere 102.0.0.0/8 IANA all -- 103.0.0.0/8 anywhere IANA all -- anywhere 103.0.0.0/8 IANA all -- 104.0.0.0/8 anywhere IANA all -- anywhere 104.0.0.0/8 IANA all -- 105.0.0.0/8 anywhere IANA all -- anywhere 105.0.0.0/8 IANA all -- 106.0.0.0/8 anywhere IANA all -- anywhere 106.0.0.0/8 IANA all -- 107.0.0.0/8 anywhere IANA all -- anywhere 107.0.0.0/8 IANA all -- 108.0.0.0/8 anywhere IANA all -- anywhere 108.0.0.0/8 IANA all -- 109.0.0.0/8 anywhere IANA all -- anywhere 109.0.0.0/8 IANA all -- 110.0.0.0/8 anywhere IANA all -- anywhere 110.0.0.0/8 IANA all -- 111.0.0.0/8 anywhere IANA all -- anywhere 111.0.0.0/8 IANA all -- 112.0.0.0/8 anywhere IANA all -- anywhere 112.0.0.0/8 IANA all -- 113.0.0.0/8 anywhere IANA all -- anywhere 113.0.0.0/8 IANA all -- 114.0.0.0/8 anywhere IANA all -- anywhere 114.0.0.0/8 IANA all -- 115.0.0.0/8 anywhere IANA all -- anywhere 115.0.0.0/8 IANA all -- 116.0.0.0/8 anywhere IANA all -- anywhere 116.0.0.0/8 IANA all -- 117.0.0.0/8 anywhere IANA all -- anywhere 117.0.0.0/8 IANA all -- 118.0.0.0/8 anywhere IANA all -- anywhere 118.0.0.0/8 IANA all -- 119.0.0.0/8 anywhere IANA all -- anywhere 119.0.0.0/8 IANA all -- 120.0.0.0/8 anywhere IANA all -- anywhere 120.0.0.0/8 IANA all -- 127.0.0.0/8 anywhere IANA all -- anywhere 127.0.0.0/8 IANA all -- 173.0.0.0/8 anywhere IANA all -- anywhere 173.0.0.0/8 IANA all -- 174.0.0.0/8 anywhere IANA all -- anywhere 174.0.0.0/8 IANA all -- 175.0.0.0/8 anywhere IANA all -- anywhere 175.0.0.0/8 IANA all -- 176.0.0.0/8 anywhere IANA all -- anywhere 176.0.0.0/8 IANA all -- 177.0.0.0/8 anywhere IANA all -- anywhere 177.0.0.0/8 IANA all -- 178.0.0.0/8 anywhere IANA all -- anywhere 178.0.0.0/8 IANA all -- 179.0.0.0/8 anywhere IANA all -- anywhere 179.0.0.0/8 IANA all -- 180.0.0.0/8 anywhere IANA all -- anywhere 180.0.0.0/8 IANA all -- 181.0.0.0/8 anywhere IANA all -- anywhere 181.0.0.0/8 IANA all -- 182.0.0.0/8 anywhere IANA all -- anywhere 182.0.0.0/8 IANA all -- 183.0.0.0/8 anywhere IANA all -- anywhere 183.0.0.0/8 IANA all -- 184.0.0.0/8 anywhere IANA all -- anywhere 184.0.0.0/8 IANA all -- 185.0.0.0/8 anywhere IANA all -- anywhere 185.0.0.0/8 IANA all -- 186.0.0.0/8 anywhere IANA all -- anywhere 186.0.0.0/8 IANA all -- 187.0.0.0/8 anywhere IANA all -- anywhere 187.0.0.0/8 IANA all -- 197.0.0.0/8 anywhere IANA all -- anywhere 197.0.0.0/8 IANA all -- 223.0.0.0/8 anywhere IANA all -- anywhere 223.0.0.0/8 ACCEPT icmp -- anywhere 192.168.1.69 icmp source-quench ACCEPT icmp -- anywhere 192.168.1.69 icmp parameter-problem ACCEPT icmp -- anywhere 192.168.1.69 icmp destination-unreachable ACCEPT icmp -- anywhere 192.168.1.69 icmp time-exceeded ACCEPT icmp -- anywhere 192.168.1.69 icmp echo-reply ACCEPT icmp -- anywhere 192.168.1.69 icmp echo-request LnD tcp -- anywhere 192.168.1.69 state NEW tcp dpt:sieve LnD tcp -- anywhere 192.168.1.69 state NEW tcp dpts:x11:6063 LnD tcp -- anywhere 192.168.1.69 state NEW tcp dpt:socks LnD tcp -- anywhere 192.168.1.69 state NEW tcp dpt:nfs LnD udp -- anywhere 192.168.1.69 udp dpt:nfs ACCEPT udp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED udp spt:domain dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:domain dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:auth dpts:1024:65535 LnR tcp -- anywhere 192.168.1.69 tcp dpt:auth ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:ssmtp dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 tcp spts:1024:65535 dpt:smtp ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:pop3 dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:pop3s dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:imap2 dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:imaps dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:nntp dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:nntps dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:telnet dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:ssh dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:ssh dpts:login:1023 ACCEPT tcp -- anywhere 192.168.1.69 tcp spts:1024:65535 dpt:ssh ACCEPT tcp -- anywhere 192.168.1.69 tcp spts:login:1023 dpt:ssh ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:ftp dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state NEW tcp spt:ftp-data dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spts:1024:65535 dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:www dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:https dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:finger dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:whois dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:z3950 dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 tcp spt:rtsp ACCEPT tcp -- anywhere 192.168.1.69 tcp spt:1723 dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT gre -- anywhere anywhere ACCEPT gre -- anywhere anywhere ACCEPT gre -- anywhere anywhere ACCEPT udp -- anywhere 192.168.1.69 udp spts:32769:65535 dpts:33434:33523 ACCEPT udp -- anywhere 192.168.1.69 udp spt:ntp dpts:1024:65535 ACCEPT udp -- anywhere 192.168.1.69 udp spt:ntp dpt:ntp ACCEPT udp -- anywhere 192.168.1.69 udp spt:4000 dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.1.69 state RELATED,ESTABLISHED tcp spt:microsoft-ds dpts:1024:65535 ACCEPT udp -- 192.168.1.0/24 192.168.1.69 udp spts:1024:65535 dpt:netbios-ns ACCEPT udp -- 192.168.1.0/24 192.168.1.69 udp spts:1024:65535 dpt:netbios-dgm ACCEPT tcp -- 192.168.1.0/24 192.168.1.69 tcp spts:1024:65535 dpt:netbios-ssn ACCEPT tcp -- 192.168.1.0/24 192.168.1.69 tcp spts:1024:65535 dpt:microsoft-ds LnD all -- 192.168.1.69 anywhere LnD all -- 10.0.0.0/8 anywhere LnD all -- anywhere 10.0.0.0/8 LnD all -- 172.16.0.0/12 anywhere LnD all -- anywhere 172.16.0.0/12 LnD all -- 127.0.0.0/8 anywhere LnD all -- 255.255.255.255 anywhere LnD all -- anywhere 0.0.0.0 LnD all -- BASE-ADDRESS.MCAST.NET/4 anywhere LnD all -- 240.0.0.0/5 anywhere LnD tcp -- anywhere anywhere LnD udp -- anywhere anywhere LnD icmp -- anywhere anywhere ACCEPT all -- 192.168.0.0/24 anywhere ACCEPT all -- 192.168.2.0/24 anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp parameter-problem ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp fragmentation-needed ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- 192.168.0.0/24 anywhere icmp echo-request ACCEPT icmp -- anywhere 192.168.0.0/24 icmp echo-reply ACCEPT icmp -- 192.168.2.0/24 anywhere icmp echo-request ACCEPT icmp -- anywhere 192.168.2.0/24 icmp echo-reply ACCEPT udp -- 192.168.0.0/24 anywhere udp spts:1024:65535 dpt:domain ACCEPT udp -- anywhere 192.168.0.0/24 udp spt:domain dpts:1024:65535 ACCEPT udp -- 192.168.2.0/24 anywhere udp spts:1024:65535 dpt:domain ACCEPT udp -- anywhere 192.168.2.0/24 udp spt:domain dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:domain ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:domain dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:domain ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:domain dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:auth ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:auth dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:auth ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:auth dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:smtp ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:smtp ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:pop3 ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:pop3 dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:pop3 ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:pop3 dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:pop3s ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:pop3s dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:pop3s ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:pop3s dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:imap2 ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:imap2 dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:imap2 ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:imap2 dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:imaps ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:imaps dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:imaps ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:imaps dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:nntp ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:nntp dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:nntp ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:nntp dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:nntps ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:nntps dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:nntps ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:nntps dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:telnet ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:telnet dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:telnet ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:telnet dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:ssh ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:ssh dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:login:1023 dpt:ssh ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:ssh dpts:login:1023 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:ssh ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:ssh dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:login:1023 dpt:ssh ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:ssh dpts:login:1023 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpts:ftp-data:ftp ACCEPT tcp -- anywhere 192.168.0.0/24 tcp spts:ftp-data:ftp dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.0.0/24 tcp spts:1024:65535 dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpts:ftp-data:ftp ACCEPT tcp -- anywhere 192.168.2.0/24 tcp spts:ftp-data:ftp dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpts:1024:65535 ACCEPT tcp -- anywhere 192.168.2.0/24 tcp spts:1024:65535 dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:www ACCEPT tcp -- anywhere 192.168.0.0/24 tcp spt:www dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:www ACCEPT tcp -- anywhere 192.168.2.0/24 tcp spt:www dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:https ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:https dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:https ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:https dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:finger ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:finger dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:finger ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:finger dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:whois ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:whois dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:whois ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:whois dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:z3950 ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:z3950 dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:z3950 ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:z3950 dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:rtsp ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:rtsp dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:rtsp ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:rtsp dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:1723 ACCEPT tcp -- anywhere 192.168.0.0/24 state RELATED,ESTABLISHED tcp spt:1723 dpts:1024:65535 ACCEPT gre -- 192.168.2.0/24 anywhere ACCEPT gre -- anywhere 192.168.2.0/24 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:1723 ACCEPT tcp -- anywhere 192.168.2.0/24 state RELATED,ESTABLISHED tcp spt:1723 dpts:1024:65535 ACCEPT udp -- 192.168.0.0/24 anywhere udp spts:32769:65535 dpts:33434:33523 ACCEPT udp -- anywhere 192.168.0.0/24 udp spts:33434:33523 dpts:32769:65535 ACCEPT udp -- 192.168.2.0/24 anywhere udp spts:32769:65535 dpts:33434:33523 ACCEPT udp -- anywhere 192.168.2.0/24 udp spts:33434:33523 dpts:32769:65535 ACCEPT udp -- anywhere 192.168.0.0/24 udp spts:32769:65535 dpts:33434:33523 ACCEPT udp -- anywhere 192.168.2.0/24 udp spts:32769:65535 dpts:33434:33523 ACCEPT udp -- 192.168.0.0/24 anywhere udp spts:1024:65535 dpt:ntp ACCEPT udp -- anywhere 192.168.0.0/24 udp spt:ntp dpts:1024:65535 ACCEPT udp -- 192.168.0.0/24 anywhere udp spt:ntp dpt:ntp ACCEPT udp -- anywhere 192.168.0.0/24 udp spt:ntp dpt:ntp ACCEPT udp -- 192.168.2.0/24 anywhere udp spts:1024:65535 dpt:ntp ACCEPT udp -- anywhere 192.168.2.0/24 udp spt:ntp dpts:1024:65535 ACCEPT udp -- 192.168.2.0/24 anywhere udp spt:ntp dpt:ntp ACCEPT udp -- anywhere 192.168.2.0/24 udp spt:ntp dpt:ntp ACCEPT udp -- 192.168.0.0/24 anywhere udp spts:1024:65535 dpt:4000 ACCEPT udp -- anywhere 192.168.0.0/24 udp spt:4000 dpts:1024:65535 ACCEPT udp -- 192.168.2.0/24 anywhere udp spts:1024:65535 dpt:4000 ACCEPT udp -- anywhere 192.168.2.0/24 udp spt:4000 dpts:1024:65535 ACCEPT tcp -- 192.168.0.0/24 anywhere tcp spts:1024:65535 dpt:microsoft-ds ACCEPT tcp -- anywhere 192.168.0.0/24 tcp spt:microsoft-ds dpts:1024:65535 ACCEPT tcp -- 192.168.2.0/24 anywhere tcp spts:1024:65535 dpt:microsoft-ds ACCEPT tcp -- anywhere 192.168.2.0/24 tcp spt:microsoft-ds dpts:1024:65535 Chain LnD (25 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[TCP drop] ' LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[UDP drop] ' LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[ICMP drop] ' LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[FRAG drop] ' DROP all -- anywhere anywhere Chain LnR (11 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[TCP reject] ' LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[UDP reject] ' LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[ICMP reject] ' LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `[FRAG reject] ' REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere IANA all -- 1.0.0.0/8 anywhere IANA all -- anywhere 1.0.0.0/8 IANA all -- 2.0.0.0/8 anywhere IANA all -- anywhere 2.0.0.0/8 IANA all -- 5.0.0.0/8 anywhere IANA all -- anywhere 5.0.0.0/8 IANA all -- 7.0.0.0/8 anywhere IANA all -- anywhere 7.0.0.0/8 IANA all -- 23.0.0.0/8 anywhere IANA all -- anywhere 23.0.0.0/8 IANA all -- 27.0.0.0/8 anywhere IANA all -- anywhere 27.0.0.0/8 IANA all -- 31.0.0.0/8 anywhere IANA all -- anywhere 31.0.0.0/8 IANA all -- 36.0.0.0/8 anywhere IANA all -- anywhere 36.0.0.0/8 IANA all -- 37.0.0.0/8 anywhere IANA all -- anywhere 37.0.0.0/8 IANA all -- 39.0.0.0/8 anywhere IANA all -- anywhere 39.0.0.0/8 IANA all -- 42.0.0.0/8 anywhere IANA all -- anywhere 42.0.0.0/8 IANA all -- 77.0.0.0/8 anywhere IANA all -- anywhere 77.0.0.0/8 IANA all -- 78.0.0.0/8 anywhere IANA all -- anywhere 78.0.0.0/8 IANA all -- 79.0.0.0/8 anywhere IANA all -- anywhere 79.0.0.0/8 IANA all -- 92.0.0.0/8 anywhere IANA all -- anywhere 92.0.0.0/8 IANA all -- 93.0.0.0/8 anywhere IANA all -- anywhere 93.0.0.0/8 IANA all -- 94.0.0.0/8 anywhere IANA all -- anywhere 94.0.0.0/8 IANA all -- 95.0.0.0/8 anywhere IANA all -- anywhere 95.0.0.0/8 IANA all -- 96.0.0.0/8 anywhere IANA all -- anywhere 96.0.0.0/8 IANA all -- 97.0.0.0/8 anywhere IANA all -- anywhere 97.0.0.0/8 IANA all -- 98.0.0.0/8 anywhere IANA all -- anywhere 98.0.0.0/8 IANA all -- 99.0.0.0/8 anywhere IANA all -- anywhere 99.0.0.0/8 IANA all -- 100.0.0.0/8 anywhere IANA all -- anywhere 100.0.0.0/8 IANA all -- 101.0.0.0/8 anywhere IANA all -- anywhere 101.0.0.0/8 IANA all -- 102.0.0.0/8 anywhere IANA all -- anywhere 102.0.0.0/8 IANA all -- 103.0.0.0/8 anywhere IANA all -- anywhere 103.0.0.0/8 IANA all -- 104.0.0.0/8 anywhere IANA all -- anywhere 104.0.0.0/8 IANA all -- 105.0.0.0/8 anywhere IANA all -- anywhere 105.0.0.0/8 IANA all -- 106.0.0.0/8 anywhere IANA all -- anywhere 106.0.0.0/8 IANA all -- 107.0.0.0/8 anywhere IANA all -- anywhere 107.0.0.0/8 IANA all -- 108.0.0.0/8 anywhere IANA all -- anywhere 108.0.0.0/8 IANA all -- 109.0.0.0/8 anywhere IANA all -- anywhere 109.0.0.0/8 IANA all -- 110.0.0.0/8 anywhere IANA all -- anywhere 110.0.0.0/8 IANA all -- 111.0.0.0/8 anywhere IANA all -- anywhere 111.0.0.0/8 IANA all -- 112.0.0.0/8 anywhere IANA all -- anywhere 112.0.0.0/8 IANA all -- 113.0.0.0/8 anywhere IANA all -- anywhere 113.0.0.0/8 IANA all -- 114.0.0.0/8 anywhere IANA all -- anywhere 114.0.0.0/8 IANA all -- 115.0.0.0/8 anywhere IANA all -- anywhere 115.0.0.0/8 IANA all -- 116.0.0.0/8 anywhere IANA all -- anywhere 116.0.0.0/8 IANA all -- 117.0.0.0/8 anywhere IANA all -- anywhere 117.0.0.0/8 IANA all -- 118.0.0.0/8 anywhere IANA all -- anywhere 118.0.0.0/8 IANA all -- 119.0.0.0/8 anywhere IANA all -- anywhere 119.0.0.0/8 IANA all -- 120.0.0.0/8 anywhere IANA all -- anywhere 120.0.0.0/8 IANA all -- 127.0.0.0/8 anywhere IANA all -- anywhere 127.0.0.0/8 IANA all -- 173.0.0.0/8 anywhere IANA all -- anywhere 173.0.0.0/8 IANA all -- 174.0.0.0/8 anywhere IANA all -- anywhere 174.0.0.0/8 IANA all -- 175.0.0.0/8 anywhere IANA all -- anywhere 175.0.0.0/8 IANA all -- 176.0.0.0/8 anywhere IANA all -- anywhere 176.0.0.0/8 IANA all -- 177.0.0.0/8 anywhere IANA all -- anywhere 177.0.0.0/8 IANA all -- 178.0.0.0/8 anywhere IANA all -- anywhere 178.0.0.0/8 IANA all -- 179.0.0.0/8 anywhere IANA all -- anywhere 179.0.0.0/8 IANA all -- 180.0.0.0/8 anywhere IANA all -- anywhere 180.0.0.0/8 IANA all -- 181.0.0.0/8 anywhere IANA all -- anywhere 181.0.0.0/8 IANA all -- 182.0.0.0/8 anywhere IANA all -- anywhere 182.0.0.0/8 IANA all -- 183.0.0.0/8 anywhere IANA all -- anywhere 183.0.0.0/8 IANA all -- 184.0.0.0/8 anywhere IANA all -- anywhere 184.0.0.0/8 IANA all -- 185.0.0.0/8 anywhere IANA all -- anywhere 185.0.0.0/8 IANA all -- 186.0.0.0/8 anywhere IANA all -- anywhere 186.0.0.0/8 IANA all -- 187.0.0.0/8 anywhere IANA all -- anywhere 187.0.0.0/8 IANA all -- 197.0.0.0/8 anywhere IANA all -- anywhere 197.0.0.0/8 IANA all -- 223.0.0.0/8 anywhere IANA all -- anywhere 223.0.0.0/8 ACCEPT icmp -- 192.168.1.69 anywhere icmp source-quench ACCEPT icmp -- 192.168.1.69 anywhere icmp parameter-problem ACCEPT icmp -- 192.168.1.69 anywhere icmp destination-unreachable ACCEPT icmp -- 192.168.1.69 anywhere icmp fragmentation-needed ACCEPT icmp -- 192.168.1.69 anywhere icmp time-exceeded ACCEPT icmp -- 192.168.1.69 anywhere icmp echo-request ACCEPT icmp -- 192.168.1.69 anywhere icmp echo-reply LnR tcp -- 192.168.1.69 anywhere state NEW tcp dpt:sieve LnR tcp -- 192.168.1.69 anywhere state NEW tcp dpts:x11:6063 LnR tcp -- 192.168.1.69 anywhere state NEW tcp dpt:socks LnR tcp -- anywhere anywhere state NEW tcp dpt:nfs LnR udp -- anywhere anywhere udp dpt:nfs ACCEPT udp -- 192.168.1.69 anywhere udp spts:1024:65535 dpt:domain ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:domain ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:auth ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:smtp ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:ssmtp ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:smtp ACCEPT tcp -- 192.168.1.69 anywhere state RELATED,ESTABLISHED tcp spt:smtp dpts:1024:65535 ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:pop3 ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:pop3s ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:imap2 ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:imaps ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:nntp ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:nntps ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:telnet ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:ssh ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:login:1023 dpt:ssh ACCEPT tcp -- 192.168.1.69 anywhere state RELATED,ESTABLISHED tcp spt:ssh dpts:1024:65535 ACCEPT tcp -- 192.168.1.69 anywhere state RELATED,ESTABLISHED tcp spt:ssh dpts:login:1023 ACCEPT tcp -- 192.168.1.69 anywhere state NEW,ESTABLISHED tcp spts:1024:65535 dpt:ftp ACCEPT tcp -- 192.168.1.69 anywhere state RELATED,ESTABLISHED tcp spts:1024:65535 dpt:ftp-data ACCEPT tcp -- 192.168.1.69 anywhere state NEW,ESTABLISHED tcp spts:1024:65535 dpts:1024:65535 ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:www ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:https ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:finger ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:whois ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:z3950 ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:rtsp ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:1723 ACCEPT gre -- anywhere anywhere ACCEPT gre -- anywhere anywhere ACCEPT gre -- anywhere anywhere ACCEPT udp -- 192.168.1.69 anywhere udp spts:32769:65535 dpts:33434:33523 ACCEPT udp -- 192.168.1.69 anywhere udp spts:1024:65535 dpt:ntp ACCEPT udp -- 192.168.1.69 anywhere udp spt:ntp dpt:ntp ACCEPT udp -- 192.168.1.69 anywhere udp spts:1024:65535 dpt:4000 ACCEPT tcp -- 192.168.1.69 anywhere tcp spts:1024:65535 dpt:microsoft-ds ACCEPT udp -- 192.168.1.69 192.168.1.0/24 state RELATED,ESTABLISHED udp spt:netbios-ns dpts:1024:65535 ACCEPT udp -- 192.168.1.69 192.168.1.0/24 state RELATED,ESTABLISHED udp spt:netbios-dgm dpts:1024:65535 ACCEPT tcp -- 192.168.1.69 192.168.1.0/24 state RELATED,ESTABLISHED tcp spt:netbios-ssn dpts:1024:65535 ACCEPT tcp -- 192.168.1.69 192.168.1.0/24 state RELATED,ESTABLISHED tcp spt:microsoft-ds dpts:1024:65535 LnD all -- 10.0.0.0/8 anywhere LnD all -- anywhere 10.0.0.0/8 LnD all -- 172.16.0.0/12 anywhere LnD all -- anywhere 172.16.0.0/12 LnD all -- 127.0.0.0/8 anywhere LnD all -- 255.255.255.255 anywhere LnD all -- anywhere 0.0.0.0 LnR all -- BASE-ADDRESS.MCAST.NET/4 anywhere LnR all -- anywhere 240.0.0.0/5 LnR tcp -- anywhere anywhere LnR udp -- anywhere anywhere LnR icmp -- anywhere anywhere ACCEPT all -- anywhere 192.168.0.0/24 ACCEPT all -- anywhere 192.168.2.0/24 Chain ScanD (7 references) target prot opt source destination LOG tcp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `[TCP Scan?] ' LOG udp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `[UDP Scan?] ' LOG icmp -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `[ICMP Scan?] ' LOG all -f anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `[FRAG Scan?] ' DROP all -- anywhere anywhere