[root@keymaster ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT all -- 127.0.0.0/24 127.0.0.0/24 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpt:ftp ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpt:smtp ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpt:http ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpt:kerberos ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpt:pop3 ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpt:imap ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpt:https ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpt:rockwell-csp2 ACCEPT tcp -- anywhere keymaster.domain1.com tcp dpts:32555:32565 ACCEPT tcp -- anywhere dns.domain2.com tcp dpt:domain ACCEPT tcp -- anywhere dns.domain2.com tcp dpt:domain ACCEPT udp -- anywhere dns.domain2.com udp dpt:domain ACCEPT udp -- anywhere dns.domain2.com udp dpt:domain ACCEPT tcp -- anywhere games.domain3.com tcp dpt:kerberos ACCEPT tcp -- anywhere games.domain3.com tcp dpt:ftp ACCEPT udp -- anywhere games.domain3.com udp dpt:27012 ACCEPT udp -- anywhere games.domain3.com udp dpt:27015 ACCEPT udp -- anywhere games.domain3.com udp dpt:27025 ACCEPT udp -- anywhere games.domain3.com udp dpt:27035 ACCEPT udp -- anywhere games.domain3.com udp dpt:27045 ACCEPT udp -- anywhere games.domain3.com udp dpt:27055 ACCEPT udp -- anywhere games.domain3.com udp dpt:27065 ACCEPT tcp -- anywhere bnc.domain4.com tcp dpt:31337 ACCEPT tcp -- anywhere bnc.domain4.com tcp dpt:auth ACCEPT tcp -- anywhere games.domain3.com tcp dpt:51234 ACCEPT tcp -- anywhere games.domain3.com tcp dpt:14534 ACCEPT udp -- anywhere games.domain3.com udp dpt:8767 DROP all -- anywhere anywhere