iptables -L -v -n -x Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 2 100 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 134 95155 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:6667 state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:1863 state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:6891 state RELATED,ESTABLISHED 222 160578 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 state RELATED,ESTABLISHED 1 40 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 limit: avg 6/min burst 1 LOG flags 0 level 4 prefix `Accept final INPUT tcp 53' 1 40 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 5 746 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 limit: avg 6/min burst 1 LOG flags 0 level 4 prefix `Accept final INPUT udp 53' 30 6298 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 0 0 ACCEPT all -- eth0 * 127.0.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- eth0 * 0.0.0.0/0 127.0.0.0/24 1697 73056 LOG all -- eth0 * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 7 prefix `Drop final INPUT ' 1697 73056 ACCEPT all -- eth0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 2 100 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 2 80 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 2 80 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:68 2 80 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 2 80 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 2 80 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:745 2 80 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:748 2 80 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:835 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:60000 2 80 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:32776 233 32345 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 state NEW,ESTABLISHED 1 40 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 limit: avg 6/min burst 1 LOG flags 0 level 4 prefix `Drop final OUTPUT tcp 53' 1 40 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 limit: avg 6/min burst 1 LOG flags 0 level 4 prefix `Drop final OUTPUT udp 53' 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 0 0 ACCEPT all -- * eth0 127.0.0.0/24 0.0.0.0/0 0 0 ACCEPT all -- * eth0 0.0.0.0/0 127.0.0.0/24 1851 81372 LOG all -- * eth0 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 7 prefix `Drop final OUTPUT ' 1851 81372 ACCEPT all -- * eth0 0.0.0.0/0 0.0.0.0/0 ==================================================================================================================================================== nmap 212.147.18.58 Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2006-07-05 04:32 CEST sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted sendto in send_ip_packet: sendto(3, packet, 40, 0, 212.147.18.58, 16) => Operation not permitted Interesting ports on adsl-soho-1-c18-p058.vtx.ch (212.147.18.58): (The 1652 ports scanned but not shown below are in state: closed) PORT STATE SERVICE 22/tcp filtered ssh 68/tcp filtered dhcpclient 80/tcp open http 111/tcp filtered rpcbind 113/tcp filtered auth 745/tcp filtered unknown 748/tcp filtered ris-cm 835/tcp filtered unknown 2601/tcp open zebra 2602/tcp open ripd 32776/tcp filtered sometimes-rpc15 Nmap finished: 1 IP address (1 host up) scanned in 2.157 seconds