Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- localhost.localdomain 10.25.1.255 logaborted tcp -- anywhere anywhere state RELATED,ESTABLISHED tcp flags:RST/RST ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem nicfilt all -- anywhere anywhere srcfilt all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem srcfilt all -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem s1 all -- anywhere anywhere Chain f0to1 (3 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:imap state NEW ACCEPT udp -- anywhere anywhere udp dpt:imap ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:http state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8080 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8008 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8000 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8888 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:4661 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:4662 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:4665 ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:4666 ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:cvspserver state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:nicname state NEW ACCEPT udp -- anywhere anywhere udp dpt:nicname ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:6660:6669 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:pop3s state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:6881:6889 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:time ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:time state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:8118 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:smtp state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ssh state NEW ACCEPT tcp -- anywhere anywhere tcp spts:0:1023 dpt:ssh state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:rmt:bnet state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:af:dbstar state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpts:rmt:bnet ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpts:af:dbstar ACCEPT tcp -- anywhere anywhere tcp spts:af:dbstar state NEW ACCEPT udp -- anywhere anywhere udp spts:af:dbstar ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:mmcc state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:telnet state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:commplex-main:commplex-link state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:commplex-main ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:1863 state NEW ACCEPT udp -- anywhere anywhere udp dpt:ntp ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ntp state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:ldap state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:ulp state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:imtc-mcs state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:1720 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:1731 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:cvsup state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpts:1024:5999 ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-ds state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:smtps state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:1214 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:1214 ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ns state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ssn ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:acmsoda state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:jabber-client state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:5223 state NEW ACCEPT udp -- anywhere anywhere udp dpt:aol ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:pptp state NEW ACCEPT gre -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:svn state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:imaps state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:rsync state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:6346 state NEW ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT udp -- anywhere anywhere udp dpts:33434:33600 ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:pop3 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:domain state NEW ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:aol:aol-3 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpts:aol:aol-3 logreject tcp -- anywhere anywhere tcp spts:1024:65535 dpt:https state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:4662 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:4666 ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:6881:6889 state NEW ACCEPT tcp -- anywhere anywhere tcp dpts:af:dbstar state NEW ACCEPT udp -- anywhere anywhere udp dpts:af:dbstar ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:udt_os:3999 state NEW ACCEPT icmp -- anywhere anywhere icmp echo-reply logdrop all -- anywhere anywhere Chain f1to0 (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:4662 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:4666 ACCEPT icmp -- anywhere anywhere icmp redirect ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:6881:6889 state NEW ACCEPT tcp -- anywhere anywhere tcp dpts:af:dbstar state NEW ACCEPT udp -- anywhere anywhere udp dpts:af:dbstar ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:udt_os:3999 state NEW ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:imap state NEW ACCEPT udp -- anywhere anywhere udp dpt:imap ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:http state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8080 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8008 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8000 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8888 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:ftp state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:4661 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:4662 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:4665 ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:4666 ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:cvspserver state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:nicname state NEW ACCEPT udp -- anywhere anywhere udp dpt:nicname ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:6660:6669 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:pop3s state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:6881:6889 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:time ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:time state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:8118 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:smtp state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:ssh state NEW ACCEPT tcp -- anywhere anywhere tcp spts:0:1023 dpt:ssh state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:rmt:bnet state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:af:dbstar state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:rmt:bnet ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:af:dbstar ACCEPT tcp -- anywhere anywhere tcp spts:af:dbstar state NEW ACCEPT udp -- anywhere anywhere udp spts:af:dbstar ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:mmcc state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:telnet state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:commplex-main:commplex-link state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:commplex-main ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:1863 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:https state NEW ACCEPT udp -- anywhere anywhere udp dpt:ntp ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:ntp state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:ldap state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:ulp state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:imtc-mcs state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:1720 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:1731 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:1024:65535 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:1024:65535 ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:smtps state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:1214 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpt:1214 ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:acmsoda state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:jabber-client state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:5223 state NEW ACCEPT udp -- anywhere anywhere udp dpt:aol ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:svn state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:imaps state NEW ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:rsync state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:6346 state NEW ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT udp -- anywhere anywhere udp dpts:33434:33600 ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpt:pop3 state NEW ACCEPT tcp -- anywhere anywhere tcp dpt:domain state NEW ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp spts:1024:cvsup dpts:aol:aol-3 state NEW ACCEPT udp -- anywhere anywhere udp spts:1024:5999 dpts:aol:aol-3 logdrop all -- anywhere anywhere Chain logaborted (1 references) target prot opt source destination logaborted2 all -- anywhere anywhere limit: avg 1/sec burst 10 LOG all -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' Chain logaborted2 (1 references) target prot opt source destination LOG all -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED ' ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED Chain logdrop (4 references) target prot opt source destination logdrop2 all -- anywhere anywhere limit: avg 1/sec burst 10 LOG all -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' DROP all -- anywhere anywhere Chain logdrop2 (1 references) target prot opt source destination LOG all -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `DROPPED ' DROP all -- anywhere anywhere Chain logreject (1 references) target prot opt source destination logreject2 all -- anywhere anywhere limit: avg 1/sec burst 10 LOG all -- anywhere anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED ' REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable DROP all -- anywhere anywhere Chain logreject2 (1 references) target prot opt source destination LOG all -- anywhere anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `REJECTED ' REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable DROP all -- anywhere anywhere Chain nicfilt (1 references) target prot opt source destination RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere logdrop all -- anywhere anywhere Chain s0 (1 references) target prot opt source destination f0to1 all -- anywhere localhost.localdomain f0to1 all -- anywhere 10.25.1.255 f0to1 all -- anywhere localhost logdrop all -- anywhere anywhere Chain s1 (1 references) target prot opt source destination f1to0 all -- anywhere anywhere Chain srcfilt (2 references) target prot opt source destination s0 all -- anywhere anywhere