Attachment 159162 Details for Bug 300869

iptables -L output for sles10sp1 firewall functional

iptables.works (text/plain), 4.24 KB, created by Alex Tsariounov on 2007-08-22 18:12:19 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alex Tsariounov

Created: 2007-08-22 18:12:19 UTC

Size: 4.24 KB

patch

obsolete

>Chain INPUT (policy DROP)
>target     prot opt source               destination         
>ACCEPT     all  --  anywhere             anywhere            
>ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
>input_ext  all  --  anywhere             anywhere            
>input_ext  all  --  anywhere             anywhere            
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-IN-ILL-TARGET ' 
>DROP       all  --  anywhere             anywhere            
>
>Chain FORWARD (policy DROP)
>target     prot opt source               destination         
>ACCEPT     all  --  anywhere             anywhere            
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWD-ILL-ROUTING ' 
>
>Chain OUTPUT (policy ACCEPT)
>target     prot opt source               destination         
>ACCEPT     all  --  anywhere             anywhere            
>ACCEPT     all  --  anywhere             anywhere            state NEW,RELATED,ESTABLISHED 
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-OUT-ERROR ' 
>
>Chain forward_ext (0 references)
>target     prot opt source               destination         
>
>Chain input_ext (2 references)
>target     prot opt source               destination         
>DROP       all  --  anywhere             anywhere            PKTTYPE = broadcast 
>ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
>ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
>ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp echo-reply 
>ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp destination-unreachable 
>ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp time-exceeded 
>ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp parameter-problem 
>ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp timestamp-reply 
>ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp address-mask-reply 
>ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp protocol-unreachable 
>ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp redirect 
>LOG        tcp  --  anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:ssh flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
>ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh 
>reject_func  tcp  --  anywhere             anywhere            tcp dpt:ident state NEW 
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 PKTTYPE = multicast LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
>DROP       all  --  anywhere             anywhere            PKTTYPE = multicast 
>LOG        tcp  --  anywhere             anywhere            limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
>LOG        icmp --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
>LOG        udp  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 state INVALID LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT-INV ' 
>DROP       all  --  anywhere             anywhere            
>
>Chain reject_func (1 references)
>target     prot opt source               destination         
>REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset 
>REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable 
>REJECT     all  --  anywhere             anywhere            reject-with icmp-proto-unreachable

Actions: View

Attachments on bug 300869: 159162 | 159163