[root@blargh stijn]# iptables -L Chain INPUT (policy DROP) target prot opt source destination DROP all -- 127.0.0.0/8 anywhere DROP all -- 192.168.0.0/16 anywhere DROP all -- 172.16.0.0/12 anywhere DROP all -- 10.0.0.0/8 anywhere LOG icmp -- anywhere anywhere icmp echo-request limit: avg 15/min burst 5 LOG level warning prefix `Ping request:' BADBOYS tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN state NEW BADBOYS tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG BADBOYS tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG BADBOYS tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG BADBOYS tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE BADBOYS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST BADBOYS tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN ACCEPT tcp -- anywhere anywhere tcp dpt:16384 ACCEPT tcp -- anywhere anywhere tcp dpt:http REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable ACCEPT all -- anywhere anywhere DROP all -f anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain BADBOYS (7 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `Bad boy alert:' DROP all -- anywhere anywhere