iptables -L Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp dpts:5800:5901 ACCEPT udp -- anywhere anywhere udp dpts:5800:5901 DROP all -- 192.168.2.0/24 192.168.3.0/24 DROP all -- 192.168.2.0/24 192.168.4.0/24 DROP all -- 192.168.3.0/24 192.168.2.0/24 DROP all -- 192.168.3.0/24 192.168.4.0/24 DROP all -- 192.168.4.0/24 192.168.2.0/24 DROP all -- 192.168.4.0/24 192.168.3.0/24 ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED ACCEPT tcp -- anywhere anywhere tcp dpt:squid ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:10000 ACCEPT tcp -- anywhere anywhere tcp dpt:nameserver ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:bootpc ACCEPT udp -- anywhere anywhere udp dpt:bootpc Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere tcp dpt:ftp ACCEPT udp -- anywhere anywhere udp dpt:ftp-data ACCEPT udp -- anywhere anywhere udp dpt:ftp ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:smtp ACCEPT tcp -- anywhere anywhere tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere tcp dpt:imap ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https ACCEPT tcp -- anywhere anywhere tcp dpt:1863 ACCEPT tcp -- anywhere anywhere tcp dpt:5000 ACCEPT tcp -- anywhere anywhere tcp dpt:5001 ACCEPT tcp -- anywhere anywhere tcp dpt:5005 ACCEPT tcp -- anywhere anywhere tcp dpt:5050 ACCEPT tcp -- anywhere anywhere tcp dpt:5100 ACCEPT tcp -- anywhere anywhere tcp dpts:6660:6670 ACCEPT tcp -- anywhere anywhere tcp dpt:afs3-filese rver ACCEPT tcp -- anywhere anywhere tcp dpt:28805 ACCEPT tcp -- anywhere anywhere tcp dpt:32196 ACCEPT tcp -- anywhere anywhere tcp dpt:27315 ACCEPT tcp -- anywhere anywhere tcp dpt:51215 ACCEPT tcp -- anywhere anywhere tcp dpt:5125 ACCEPT tcp -- anywhere anywhere tcp dpt:12141 ACCEPT tcp -- anywhere anywhere tcp dpt:11999 ACCEPT tcp -- anywhere anywhere tcp dpt:19127 ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp dpts:6112:6119 ACCEPT tcp -- anywhere anywhere tcp dpts:27000:2701 5 ACCEPT udp -- anywhere anywhere udp dpts:27000:2701 5 ACCEPT tcp -- anywhere anywhere tcp dpt:27016 ACCEPT udp -- anywhere anywhere udp dpt:27016 ACCEPT tcp -- anywhere anywhere tcp dpts:27030:2703 9 ACCEPT udp -- anywhere anywhere udp dpts:27030:2703 9 REJECT tcp -- anywhere anywhere tcp dpt:http reject -with icmp-port-unreachable REJECT udp -- anywhere anywhere udp dpt:http reject -with icmp-port-unreachable Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED Chain RH-Firewall-1-INPUT (0 references) target prot opt source destination