Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere DROP all -- anywhere BASE-ADDRESS.MCAST.NET/8 DROP all -- anywhere 225.0.0.0/8 DROP all -- anywhere 226.0.0.0/8 DROP all -- anywhere 227.0.0.0/8 DROP all -- anywhere reserved-multicast-range-NOT-delegated.example.com/8 DROP all -- anywhere 229.0.0.0/8 DROP all -- anywhere reserved-multicast-range-NOT-delegated.example.com/8 DROP all -- anywhere reserved-multicast-range-NOT-delegated.example.com/8 DROP all -- anywhere 232.0.0.0/8 DROP all -- anywhere 233.0.0.0/8 DROP all -- anywhere 234.0.0.0/8 DROP all -- anywhere 235.0.0.0/8 DROP all -- anywhere 236.0.0.0/8 DROP all -- anywhere 237.0.0.0/8 DROP all -- anywhere 238.0.0.0/8 DROP all -- anywhere 239.0.0.0/8 DROP all -- anywhere 1.0.0.0/8 DROP all -- anywhere 2.0.0.0/8 DROP all -- anywhere 5.0.0.0/8 DROP all -- anywhere 7.0.0.0/8 DROP all -- anywhere 23.0.0.0/8 DROP all -- anywhere 27.0.0.0/8 DROP all -- anywhere 31.0.0.0/8 DROP all -- anywhere 36.0.0.0/8 DROP all -- anywhere 37.0.0.0/8 DROP all -- anywhere 39.0.0.0/8 DROP all -- anywhere 42.0.0.0/8 DROP all -- anywhere 77.0.0.0/8 DROP all -- anywhere 78.0.0.0/8 DROP all -- anywhere 79.0.0.0/8 DROP all -- anywhere 92.0.0.0/8 DROP all -- anywhere 93.0.0.0/8 DROP all -- anywhere 94.0.0.0/8 DROP all -- anywhere 95.0.0.0/8 DROP all -- anywhere 96.0.0.0/8 DROP all -- anywhere 97.0.0.0/8 DROP all -- anywhere 98.0.0.0/8 DROP all -- anywhere 99.0.0.0/8 DROP all -- anywhere 100.0.0.0/8 DROP all -- anywhere 101.0.0.0/8 DROP all -- anywhere 102.0.0.0/8 DROP all -- anywhere 103.0.0.0/8 DROP all -- anywhere 104.0.0.0/8 DROP all -- anywhere 105.0.0.0/8 DROP all -- anywhere 106.0.0.0/8 DROP all -- anywhere 107.0.0.0/8 DROP all -- anywhere 108.0.0.0/8 DROP all -- anywhere 109.0.0.0/8 DROP all -- anywhere 110.0.0.0/8 DROP all -- anywhere 111.0.0.0/8 DROP all -- anywhere 112.0.0.0/8 DROP all -- anywhere 113.0.0.0/8 DROP all -- anywhere 114.0.0.0/8 DROP all -- anywhere 115.0.0.0/8 DROP all -- anywhere 116.0.0.0/8 DROP all -- anywhere 117.0.0.0/8 DROP all -- anywhere 118.0.0.0/8 DROP all -- anywhere 119.0.0.0/8 DROP all -- anywhere 120.0.0.0/8 DROP all -- anywhere 121.0.0.0/8 DROP all -- anywhere 122.0.0.0/8 DROP all -- anywhere 123.0.0.0/8 DROP all -- anywhere 173.0.0.0/8 DROP all -- anywhere 174.0.0.0/8 DROP all -- anywhere 175.0.0.0/8 DROP all -- anywhere 176.0.0.0/8 DROP all -- anywhere 177.0.0.0/8 DROP all -- anywhere 178.0.0.0/8 DROP all -- anywhere 179.0.0.0/8 DROP all -- anywhere 180.0.0.0/8 DROP all -- anywhere 181.0.0.0/8 DROP all -- anywhere 182.0.0.0/8 DROP all -- anywhere 183.0.0.0/8 DROP all -- anywhere 184.0.0.0/8 DROP all -- anywhere 185.0.0.0/8 DROP all -- anywhere 186.0.0.0/8 DROP all -- anywhere 187.0.0.0/8 DROP all -- anywhere 197.0.0.0/8 DROP all -- anywhere 223.0.0.0/8 DROP all -- anywhere 240.0.0.0/8 DROP all -- anywhere 241.0.0.0/8 DROP all -- anywhere 242.0.0.0/8 DROP all -- anywhere 243.0.0.0/8 DROP all -- anywhere 244.0.0.0/8 DROP all -- anywhere 245.0.0.0/8 DROP all -- anywhere 246.0.0.0/8 DROP all -- anywhere 247.0.0.0/8 DROP all -- anywhere 248.0.0.0/8 DROP all -- anywhere 249.0.0.0/8 DROP all -- anywhere 250.0.0.0/8 DROP all -- anywhere 251.0.0.0/8 DROP all -- anywhere 252.0.0.0/8 DROP all -- anywhere 253.0.0.0/8 DROP all -- anywhere 254.0.0.0/8 DROP all -- anywhere 255.0.0.0/8 ACCEPT all -- anywhere 10.0.0.0/8 DROP all -- anywhere 66.221.211.184 OUT_SANITY tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE OUT_SANITY tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN OUT_SANITY tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST OUT_SANITY tcp -- anywhere anywhere tcp flags:FIN,RST/FIN,RST OUT_SANITY tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN OUT_SANITY tcp -- anywhere anywhere tcp flags:PSH,ACK/PSH OUT_SANITY tcp -- anywhere anywhere tcp flags:ACK,URG/URG DROP all -- anywhere anywhere state INVALID FUDP udp -f anywhere anywhere PZ udp -- anywhere anywhere udp dpt:0 PZ tcp -- anywhere anywhere tcp dpt:0 REJECT tcp -- anywhere anywhere tcp dpt:ident reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:auth reject-with icmp-port-unreachable DROP all -- BASE-ADDRESS.MCAST.NET/8 anywhere DROP all -- anywhere BASE-ADDRESS.MCAST.NET/8 REJECT tcp -- anywhere anywhere tcp dpt:kazaa reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:kazaa reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:3d-nfsd reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:3d-nfsd reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpts:smaclmgr:4678 reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpts:smaclmgr:4678 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:6257 reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:6257 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:6699 reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:6699 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:gnutella-svc reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:gnutella-svc reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:gnutella-rtr reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:gnutella-rtr reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpts:6881:6889 reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpts:6881:6889 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:gnutella-svc reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:gnutella-svc reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:interwise reject-with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:interwise reject-with icmp-port-unreachable ACCEPT tcp -- anywhere anywhere tcp dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT udp -- anywhere anywhere udp dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:1023:65535 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere multiport dports ftp,ftp-data state RELATED,ESTABLISHED ACCEPT udp -- anywhere anywhere multiport dports fsp,ftp-data state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp echo-request limit: avg 625/sec burst 5