[root@driftx ~]# iptables -L Chain INPUT (policy DROP) target prot opt source destination DROP all -- anywhere anywhere state INVALID REJECT tcp -- anywhere anywhere tcp flags:SYN,ACK/SYN,ACK state NEW reject-with tcp-reset DROP tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN state NEW DROP all -- 127.0.0.0/8 anywhere DROP all -- 169.254.0.0/16 anywhere DROP all -- 127.0.0.0/8 anywhere DROP all -- 169.254.0.0/16 anywhere DROP all -- 127.0.0.0/8 anywhere DROP all -- 169.254.0.0/16 anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc ACCEPT tcp -- anywhere anywhere tcp spt:bootps dpt:bootpc ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc ACCEPT tcp -- anywhere anywhere tcp spt:bootps dpt:bootpc ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc ACCEPT tcp -- anywhere anywhere tcp spt:bootps dpt:bootpc ACCEPT tcp -- anywhere 76.29.209.169 tcp dpt:1875 ACCEPT tcp -- anywhere c-67-173-12-134.hsd1.il.comcast.net tcp dpt:1875 ACCEPT tcp -- anywhere c-98-193-74-233.hsd1.il.comcast.net tcp dpt:1875 ACCEPT udp -- anywhere 76.29.209.169 udp dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere 76.29.209.169 tcp dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT udp -- anywhere c-67-173-12-134.hsd1.il.comcast.net udp dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere c-67-173-12-134.hsd1.il.comcast.net tcp dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT udp -- anywhere c-98-193-74-233.hsd1.il.comcast.net udp dpts:1024:65535 state RELATED,ESTABLISHED ACCEPT tcp -- anywhere c-98-193-74-233.hsd1.il.comcast.net tcp dpts:1024:65535 state RELATED,ESTABLISHED DROP all -- anywhere anywhere DROP all -- anywhere anywhere DROP all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT tcp -- anywhere 192.168.6.200 tcp dpts:1023:1025 ACCEPT tcp -- anywhere 192.168.6.200 tcp dpts:1400:1500 ACCEPT tcp -- anywhere 192.168.6.200 tcp dpt:777 ACCEPT tcp -- anywhere 192.168.6.200 tcp dpt:snpp ACCEPT tcp -- anywhere 192.168.6.200 tcp dpt:4192 ACCEPT tcp -- anywhere 192.168.6.200 tcp dpt:snpp ACCEPT tcp -- anywhere 192.168.6.200 tcp dpt:1221 ACCEPT tcp -- anywhere 192.168.6.200 tcp dpts:9000:9001 ACCEPT tcp -- anywhere 192.168.6.200 tcp dpts:3000:3030 ACCEPT udp -- anywhere 192.168.6.200 udp dpts:1940:1970 ACCEPT udp -- anywhere 192.168.6.200 udp dpts:3000:3030 ACCEPT udp -- anywhere 192.168.6.200 udp dpt:tftp ACCEPT tcp -- anywhere 192.168.6.200 tcp dpt:tftp ACCEPT tcp -- anywhere 192.168.6.200 tcp dpt:58964 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere DROP all -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere ACCEPT udp -- anywhere anywhere udp spt:bootpc dpt:bootps ACCEPT tcp -- anywhere anywhere tcp spt:bootpc dpt:bootps ACCEPT icmp -- anywhere anywhere ACCEPT udp -- anywhere anywhere udp spt:bootpc dpt:bootps ACCEPT tcp -- anywhere anywhere tcp spt:bootpc dpt:bootps ACCEPT icmp -- anywhere anywhere ACCEPT udp -- anywhere anywhere udp spt:bootpc dpt:bootps ACCEPT tcp -- anywhere anywhere tcp spt:bootpc dpt:bootps ACCEPT tcp -- 76.29.209.169 anywhere tcp spt:1875 ACCEPT tcp -- c-67-173-12-134.hsd1.il.comcast.net anywhere tcp spt:1875 ACCEPT tcp -- c-98-193-74-233.hsd1.il.comcast.net anywhere tcp spt:1875 ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere DROP all -- anywhere anywhere DROP all -- anywhere anywhere DROP all -- anywhere anywhere Chain drop-lan (0 references) target prot opt source destination DROP all -- anywhere anywhere