[root@Lost ~] sysctl -a sunrpc.tcp_slot_table_entries = 16 sunrpc.udp_slot_table_entries = 16 sunrpc.nlm_debug = 0 sunrpc.nfsd_debug = 0 sunrpc.nfs_debug = 0 sunrpc.rpc_debug = 0 abi.fake_utsname = 0 abi.trace = 0 abi.defhandler_libcso = 68157441 abi.defhandler_lcall7 = 68157441 abi.defhandler_elf = 0 abi.defhandler_coff = 117440515 dev.scsi.logging_level = 0 fs.nfs.nlm_tcpport = 0 fs.nfs.nlm_udpport = 0 fs.nfs.nlm_timeout = 10 fs.nfs.nlm_grace_period = 0 fs.aio-max-nr = 65536 fs.aio-nr = 0 fs.lease-break-time = 45 fs.dir-notify-enable = 1 fs.leases-enable = 1 fs.overflowgid = 65534 fs.overflowuid = 65534 fs.dentry-state = 5350 3270 45 0 0 0 fs.file-max = 8192 fs.file-nr = 300 0 8192 fs.inode-state = 5278 0 0 0 0 0 0 fs.inode-nr = 5278 0 net.unix.max_dgram_qlen = 10 net.ipv4.ip_conntrack_max = 2048 net.ipv4.netfilter.ip_conntrack_generic_timeout = 600 net.ipv4.netfilter.ip_conntrack_icmp_timeout = 4 net.ipv4.netfilter.ip_conntrack_udp_timeout_stream = 180 net.ipv4.netfilter.ip_conntrack_udp_timeout = 60 net.ipv4.netfilter.ip_conntrack_tcp_timeout_close = 10 net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120 net.ipv4.netfilter.ip_conntrack_tcp_timeout_last_ack = 30 net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60 net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120 net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 432000 net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_recv = 60 net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent = 120 net.ipv4.netfilter.ip_conntrack_buckets = 248 net.ipv4.netfilter.ip_conntrack_max = 2048 net.ipv4.conf.ppp0.force_igmp_version = 0 net.ipv4.conf.ppp0.disable_policy = 0 net.ipv4.conf.ppp0.disable_xfrm = 0 net.ipv4.conf.ppp0.arp_ignore = 0 net.ipv4.conf.ppp0.arp_announce = 0 net.ipv4.conf.ppp0.arp_filter = 0 net.ipv4.conf.ppp0.tag = 0 net.ipv4.conf.ppp0.log_martians = 0 net.ipv4.conf.ppp0.bootp_relay = 0 net.ipv4.conf.ppp0.medium_id = 0 net.ipv4.conf.ppp0.proxy_arp = 0 net.ipv4.conf.ppp0.accept_source_route = 1 net.ipv4.conf.ppp0.send_redirects = 1 net.ipv4.conf.ppp0.rp_filter = 1 net.ipv4.conf.ppp0.shared_media = 1 net.ipv4.conf.ppp0.secure_redirects = 1 net.ipv4.conf.ppp0.accept_redirects = 1 net.ipv4.conf.ppp0.mc_forwarding = 0 net.ipv4.conf.ppp0.forwarding = 1 net.ipv4.conf.br0.force_igmp_version = 0 net.ipv4.conf.br0.disable_policy = 0 net.ipv4.conf.br0.disable_xfrm = 0 net.ipv4.conf.br0.arp_ignore = 0 net.ipv4.conf.br0.arp_announce = 0 net.ipv4.conf.br0.arp_filter = 0 net.ipv4.conf.br0.tag = 0 net.ipv4.conf.br0.log_martians = 0 net.ipv4.conf.br0.bootp_relay = 0 net.ipv4.conf.br0.medium_id = 0 net.ipv4.conf.br0.proxy_arp = 0 net.ipv4.conf.br0.accept_source_route = 1 net.ipv4.conf.br0.send_redirects = 1 net.ipv4.conf.br0.rp_filter = 0 net.ipv4.conf.br0.shared_media = 1 net.ipv4.conf.br0.secure_redirects = 1 net.ipv4.conf.br0.accept_redirects = 1 net.ipv4.conf.br0.mc_forwarding = 0 net.ipv4.conf.br0.forwarding = 1 net.ipv4.conf.br1.force_igmp_version = 0 net.ipv4.conf.br1.disable_policy = 0 net.ipv4.conf.br1.disable_xfrm = 0 net.ipv4.conf.br1.arp_ignore = 0 net.ipv4.conf.br1.arp_announce = 0 net.ipv4.conf.br1.arp_filter = 0 net.ipv4.conf.br1.tag = 0 net.ipv4.conf.br1.log_martians = 0 net.ipv4.conf.br1.bootp_relay = 0 net.ipv4.conf.br1.medium_id = 0 net.ipv4.conf.br1.proxy_arp = 0 net.ipv4.conf.br1.accept_source_route = 1 net.ipv4.conf.br1.send_redirects = 1 net.ipv4.conf.br1.rp_filter = 0 net.ipv4.conf.br1.shared_media = 1 net.ipv4.conf.br1.secure_redirects = 1 net.ipv4.conf.br1.accept_redirects = 1 net.ipv4.conf.br1.mc_forwarding = 0 net.ipv4.conf.br1.forwarding = 1 net.ipv4.conf.lo.force_igmp_version = 0 net.ipv4.conf.lo.disable_policy = 1 net.ipv4.conf.lo.disable_xfrm = 1 net.ipv4.conf.lo.arp_ignore = 0 net.ipv4.conf.lo.arp_announce = 0 net.ipv4.conf.lo.arp_filter = 0 net.ipv4.conf.lo.tag = 0 net.ipv4.conf.lo.log_martians = 0 net.ipv4.conf.lo.bootp_relay = 0 net.ipv4.conf.lo.medium_id = 0 net.ipv4.conf.lo.proxy_arp = 0 net.ipv4.conf.lo.accept_source_route = 1 net.ipv4.conf.lo.send_redirects = 1 net.ipv4.conf.lo.rp_filter = 0 net.ipv4.conf.lo.shared_media = 1 net.ipv4.conf.lo.secure_redirects = 1 net.ipv4.conf.lo.accept_redirects = 1 net.ipv4.conf.lo.mc_forwarding = 0 net.ipv4.conf.lo.forwarding = 1 net.ipv4.conf.default.force_igmp_version = 0 net.ipv4.conf.default.disable_policy = 0 net.ipv4.conf.default.disable_xfrm = 0 net.ipv4.conf.default.arp_ignore = 0 net.ipv4.conf.default.arp_announce = 0 net.ipv4.conf.default.arp_filter = 0 net.ipv4.conf.default.tag = 0 net.ipv4.conf.default.log_martians = 0 net.ipv4.conf.default.bootp_relay = 0 net.ipv4.conf.default.medium_id = 0 net.ipv4.conf.default.proxy_arp = 0 net.ipv4.conf.default.accept_source_route = 1 net.ipv4.conf.default.send_redirects = 1 net.ipv4.conf.default.rp_filter = 1 net.ipv4.conf.default.shared_media = 1 net.ipv4.conf.default.secure_redirects = 1 net.ipv4.conf.default.accept_redirects = 1 net.ipv4.conf.default.mc_forwarding = 0 net.ipv4.conf.default.forwarding = 1 net.ipv4.conf.all.force_igmp_version = 0 net.ipv4.conf.all.disable_policy = 0 net.ipv4.conf.all.disable_xfrm = 0 net.ipv4.conf.all.arp_ignore = 0 net.ipv4.conf.all.arp_announce = 0 net.ipv4.conf.all.arp_filter = 0 net.ipv4.conf.all.tag = 0 net.ipv4.conf.all.log_martians = 0 net.ipv4.conf.all.bootp_relay = 0 net.ipv4.conf.all.medium_id = 0 net.ipv4.conf.all.proxy_arp = 0 net.ipv4.conf.all.accept_source_route = 0 net.ipv4.conf.all.send_redirects = 1 net.ipv4.conf.all.rp_filter = 1 net.ipv4.conf.all.shared_media = 1 net.ipv4.conf.all.secure_redirects = 1 net.ipv4.conf.all.accept_redirects = 0 net.ipv4.conf.all.mc_forwarding = 0 net.ipv4.conf.all.forwarding = 1 net.ipv4.neigh.ppp0.locktime = 100 net.ipv4.neigh.ppp0.proxy_delay = 80 net.ipv4.neigh.ppp0.anycast_delay = 100 net.ipv4.neigh.ppp0.proxy_qlen = 64 net.ipv4.neigh.ppp0.unres_qlen = 3 net.ipv4.neigh.ppp0.gc_stale_time = 60 net.ipv4.neigh.ppp0.delay_first_probe_time = 5 net.ipv4.neigh.ppp0.base_reachable_time = 30 net.ipv4.neigh.ppp0.retrans_time = 100 net.ipv4.neigh.ppp0.app_solicit = 0 net.ipv4.neigh.ppp0.ucast_solicit = 3 net.ipv4.neigh.ppp0.mcast_solicit = 3 net.ipv4.neigh.br0.locktime = 100 net.ipv4.neigh.br0.proxy_delay = 80 net.ipv4.neigh.br0.anycast_delay = 100 net.ipv4.neigh.br0.proxy_qlen = 64 net.ipv4.neigh.br0.unres_qlen = 3 net.ipv4.neigh.br0.gc_stale_time = 60 net.ipv4.neigh.br0.delay_first_probe_time = 5 net.ipv4.neigh.br0.base_reachable_time = 30 net.ipv4.neigh.br0.retrans_time = 100 net.ipv4.neigh.br0.app_solicit = 0 net.ipv4.neigh.br0.ucast_solicit = 3 net.ipv4.neigh.br0.mcast_solicit = 3 net.ipv4.neigh.br1.locktime = 100 net.ipv4.neigh.br1.proxy_delay = 80 net.ipv4.neigh.br1.anycast_delay = 100 net.ipv4.neigh.br1.proxy_qlen = 64 net.ipv4.neigh.br1.unres_qlen = 3 net.ipv4.neigh.br1.gc_stale_time = 60 net.ipv4.neigh.br1.delay_first_probe_time = 5 net.ipv4.neigh.br1.base_reachable_time = 30 net.ipv4.neigh.br1.retrans_time = 100 net.ipv4.neigh.br1.app_solicit = 0 net.ipv4.neigh.br1.ucast_solicit = 3 net.ipv4.neigh.br1.mcast_solicit = 3 net.ipv4.neigh.lo.locktime = 100 net.ipv4.neigh.lo.proxy_delay = 80 net.ipv4.neigh.lo.anycast_delay = 100 net.ipv4.neigh.lo.proxy_qlen = 64 net.ipv4.neigh.lo.unres_qlen = 3 net.ipv4.neigh.lo.gc_stale_time = 60 net.ipv4.neigh.lo.delay_first_probe_time = 5 net.ipv4.neigh.lo.base_reachable_time = 30 net.ipv4.neigh.lo.retrans_time = 100 net.ipv4.neigh.lo.app_solicit = 0 net.ipv4.neigh.lo.ucast_solicit = 3 net.ipv4.neigh.lo.mcast_solicit = 3 net.ipv4.neigh.default.gc_thresh3 = 1024 net.ipv4.neigh.default.gc_thresh2 = 512 net.ipv4.neigh.default.gc_thresh1 = 128 net.ipv4.neigh.default.gc_interval = 30 net.ipv4.neigh.default.locktime = 100 net.ipv4.neigh.default.proxy_delay = 80 net.ipv4.neigh.default.anycast_delay = 100 net.ipv4.neigh.default.proxy_qlen = 64 net.ipv4.neigh.default.unres_qlen = 3 net.ipv4.neigh.default.gc_stale_time = 60 net.ipv4.neigh.default.delay_first_probe_time = 5 net.ipv4.neigh.default.base_reachable_time = 30 net.ipv4.neigh.default.retrans_time = 100 net.ipv4.neigh.default.app_solicit = 0 net.ipv4.neigh.default.ucast_solicit = 3 net.ipv4.neigh.default.mcast_solicit = 3 net.ipv4.tcp_moderate_rcvbuf = 1 net.ipv4.tcp_default_win_scale = 0 net.ipv4.tcp_bic_low_window = 14 net.ipv4.tcp_bic_fast_convergence = 1 net.ipv4.tcp_bic = 1 net.ipv4.tcp_vegas_gamma = 2 net.ipv4.tcp_vegas_beta = 6 net.ipv4.tcp_vegas_alpha = 2 net.ipv4.tcp_vegas_cong_avoid = 0 net.ipv4.tcp_westwood = 0 net.ipv4.tcp_no_metrics_save = 0 net.ipv4.ipfrag_secret_interval = 600 net.ipv4.tcp_low_latency = 0 net.ipv4.tcp_frto = 0 net.ipv4.tcp_tw_reuse = 0 net.ipv4.icmp_ratemask = 6168 net.ipv4.icmp_ratelimit = 200 net.ipv4.tcp_adv_win_scale = 2 net.ipv4.tcp_app_win = 31 net.ipv4.tcp_rmem = 4096 43689 87378 net.ipv4.tcp_wmem = 4096 16384 65536 net.ipv4.tcp_mem = 3072 4096 6144 net.ipv4.tcp_dsack = 1 net.ipv4.tcp_ecn = 0 net.ipv4.tcp_reordering = 3 net.ipv4.tcp_fack = 1 net.ipv4.tcp_orphan_retries = 0 net.ipv4.inet_peer_gc_maxtime = 120 net.ipv4.inet_peer_gc_mintime = 10 net.ipv4.inet_peer_maxttl = 600 net.ipv4.inet_peer_minttl = 120 net.ipv4.inet_peer_threshold = 32832 net.ipv4.igmp_max_msf = 10 net.ipv4.igmp_max_memberships = 20 net.ipv4.route.secret_interval = 600 net.ipv4.route.min_adv_mss = 256 net.ipv4.route.min_pmtu = 552 net.ipv4.route.mtu_expires = 600 net.ipv4.route.gc_elasticity = 1 net.ipv4.route.error_burst = 1000 net.ipv4.route.error_cost = 200 net.ipv4.route.redirect_silence = 4096 net.ipv4.route.redirect_number = 9 net.ipv4.route.redirect_load = 4 net.ipv4.route.gc_interval = 60 net.ipv4.route.gc_timeout = 300 net.ipv4.route.gc_min_interval = 0 net.ipv4.route.max_size = 4096 net.ipv4.route.gc_thresh = 512 net.ipv4.route.max_delay = 10 net.ipv4.route.min_delay = 2 net.ipv4.icmp_ignore_bogus_error_responses = 0 net.ipv4.icmp_echo_ignore_broadcasts = 0 net.ipv4.icmp_echo_ignore_all = 0 net.ipv4.ip_local_port_range = 1024 4999 net.ipv4.tcp_max_syn_backlog = 128 net.ipv4.tcp_rfc1337 = 0 net.ipv4.tcp_stdurg = 0 net.ipv4.tcp_abort_on_overflow = 0 net.ipv4.tcp_tw_recycle = 0 net.ipv4.tcp_syncookies = 1 net.ipv4.tcp_fin_timeout = 60 net.ipv4.tcp_retries2 = 15 net.ipv4.tcp_retries1 = 3 net.ipv4.tcp_keepalive_intvl = 75 net.ipv4.tcp_keepalive_probes = 9 net.ipv4.tcp_keepalive_time = 7200 net.ipv4.ipfrag_time = 30 net.ipv4.ip_dynaddr = 0 net.ipv4.ipfrag_low_thresh = 196608 net.ipv4.ipfrag_high_thresh = 262144 net.ipv4.tcp_max_tw_buckets = 8192 net.ipv4.tcp_max_orphans = 4096 net.ipv4.tcp_synack_retries = 5 net.ipv4.tcp_syn_retries = 5 net.ipv4.ip_nonlocal_bind = 0 net.ipv4.ip_no_pmtu_disc = 0 net.ipv4.ip_autoconfig = 0 net.ipv4.ip_default_ttl = 64 net.ipv4.ip_forward = 1 net.ipv4.tcp_retrans_collapse = 1 net.ipv4.tcp_sack = 1 net.ipv4.tcp_window_scaling = 0 net.ipv4.tcp_timestamps = 1 net.core.somaxconn = 128 net.core.optmem_max = 10240 net.core.message_burst = 10 net.core.message_cost = 5 net.core.mod_cong = 290 net.core.lo_cong = 100 net.core.no_cong = 20 net.core.no_cong_thresh = 10 net.core.netdev_max_backlog = 300 net.core.dev_weight = 64 net.core.rmem_default = 134144 net.core.wmem_default = 134144 net.core.rmem_max = 134144 net.core.wmem_max = 134144 vm.vfs_cache_pressure = 100 vm.block_dump = 0 vm.laptop_mode = 0 vm.max_map_count = 65536 vm.min_free_kbytes = 178 vm.lower_zone_protection = 0 vm.swappiness = 60 vm.nr_pdflush_threads = 2 vm.dirty_expire_centisecs = 3000 vm.dirty_writeback_centisecs = 500 vm.dirty_ratio = 40 vm.dirty_background_ratio = 10 vm.page-cluster = 3 vm.overcommit_ratio = 50 vm.overcommit_memory = 0 kernel.ngroups_max = 65536 kernel.printk_ratelimit_burst = 10 kernel.printk_ratelimit = 5 kernel.panic_on_oops = 0 kernel.pid_max = 32768 kernel.overflowgid = 65534 kernel.overflowuid = 65534 kernel.pty.nr = 0 kernel.pty.max = 4096 kernel.random.uuid = 9f00a2db-1e85-4e84-84a1-aac628900dea kernel.random.boot_id = 70265746-f5d6-4b96-ad99-83d327245deb kernel.random.write_wakeup_threshold = 128 kernel.random.read_wakeup_threshold = 64 kernel.random.entropy_avail = 3491 kernel.random.poolsize = 512 kernel.threads-max = 496 kernel.cad_pid = 1 kernel.sem = 250 32000 32 128 kernel.msgmnb = 16384 kernel.msgmni = 16 kernel.msgmax = 8192 kernel.shmmni = 4096 kernel.shmall = 2097152 kernel.shmmax = 33554432 kernel.sg-big-buff = 32768 kernel.hotplug = /sbin/hotplug kernel.modprobe = /sbin/modprobe kernel.printk = 8 4 1 7 kernel.ctrl-alt-del = 0 kernel.cap-bound = -257 kernel.tainted = 1 kernel.core_pattern = core kernel.core_uses_pid = 0 kernel.defer_softirqs = 1 kernel.panic = 1 kernel.domainname = (none) kernel.hostname = Lost kernel.version = #1 Tue Oct 9 18:48:19 CEST 2007 kernel.osrelease = 2.6.8.1 kernel.ostype = Linux [root@Lost ~] iptables -L Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED CHILLI_FILTER all -- anywhere anywhere PPP_FILTER all -- anywhere anywhere WAN_FILTER all -- anywhere anywhere ACLS_FILTER all -- anywhere anywhere LAN_FILTER all -- anywhere anywhere ACCEPT udp -- anywhere anywhere udp dpt:1900 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:49152 state NEW Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU USER_FILTER all -- anywhere anywhere CHILLI_FILTER_FW all -- anywhere anywhere DROP tcp -- anywhere anywhere tcp dpt:135 DROP tcp -- anywhere anywhere tcp dpts:netbios-ns:netbios-ssn DROP tcp -- anywhere anywhere tcp dpt:445 DROP udp -- anywhere anywhere udp dpt:135 DROP udp -- anywhere anywhere udp dpts:netbios-ns:netbios-ssn DROP udp -- anywhere anywhere udp dpt:445 DROP tcp -- anywhere anywhere tcp dpt:135 DROP tcp -- anywhere anywhere tcp dpts:netbios-ns:netbios-ssn DROP tcp -- anywhere anywhere tcp dpt:445 DROP udp -- anywhere anywhere udp dpt:135 DROP udp -- anywhere anywhere udp dpts:netbios-ns:netbios-ssn DROP udp -- anywhere anywhere udp dpt:445 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:54177 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:54990 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:58921 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:56718 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:56960 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:55702 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:55702 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:55702 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:59451 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:59451 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:59451 ACCEPT udp -- anywhere 192.168.1.10 udp dpt:16402 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:64287 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:64287 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:64287 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:65162 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:65162 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:65162 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:54757 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:54757 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:54757 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:60452 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:60452 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:60452 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:49499 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:49499 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:49499 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:49648 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:49648 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:49648 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:50334 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:50334 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:50334 ACCEPT tcp -- anywhere 192.168.83.1 tcp dpt:51890 ACCEPT tcp -- anywhere 192.168.189.1 tcp dpt:51890 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:51890 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:10405 ACCEPT udp -- anywhere 192.168.1.12 udp dpt:10405 ACCEPT tcp -- anywhere 192.168.1.11 tcp dpt:62864 ACCEPT udp -- anywhere 192.168.1.11 udp dpt:62864 ACCEPT udp -- anywhere 192.168.1.11 udp dpt:14022 ACCEPT tcp -- anywhere 192.168.1.12 tcp dpt:456 Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain ACLS_FILTER (1 references) target prot opt source destination ACCEPT tcp -- 192.168.0.0/21 anywhere tcp dpt:1287 state NEW ACCEPT tcp -- 192.168.0.0/21 anywhere tcp dpt:ssh state NEW Chain CHILLI_FILTER (1 references) target prot opt source destination Chain CHILLI_FILTER_FW (1 references) target prot opt source destination Chain LAN_FILTER (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere state NEW ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT udp -- anywhere anywhere udp dpt:bootps state NEW ACCEPT udp -- anywhere anywhere udp dpt:bootpc state NEW ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:domain state NEW ACCEPT udp -- 192.168.1.0/24 anywhere udp dpt:domain state NEW ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:www state NEW ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:www state NEW ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:webcache state NEW ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:webcache state NEW ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:1287 state NEW ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:1287 state NEW Chain PPP_FILTER (1 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere icmp echo-request Chain USER_FILTER (1 references) target prot opt source destination Chain WAN_FILTER (1 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT udp -- anywhere anywhere udp dpt:2427 state NEW ACCEPT udp -- anywhere anywhere udp dpt:2727 state NEW ACCEPT udp -- anywhere anywhere udp dpts:53456:63456 state NEW [root@Lost ~]