Attachment 159163 Details for Bug 300869

iptables -L output for slert2.0 beta3 firewall broken

iptables.broken (text/plain), 2.95 KB, created by Alex Tsariounov on 2007-08-22 18:13:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alex Tsariounov

Created: 2007-08-22 18:13:02 UTC

Size: 2.95 KB

patch

obsolete

>Chain INPUT (policy DROP)
>target     prot opt source               destination         
>ACCEPT     all  --  anywhere             anywhere            
>input_ext  all  --  anywhere             anywhere            
>input_ext  all  --  anywhere             anywhere            
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-IN-ILL-TARGET ' 
>DROP       all  --  anywhere             anywhere            
>
>Chain FORWARD (policy DROP)
>target     prot opt source               destination         
>ACCEPT     all  --  anywhere             anywhere            
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWD-ILL-ROUTING ' 
>
>Chain OUTPUT (policy ACCEPT)
>target     prot opt source               destination         
>ACCEPT     all  --  anywhere             anywhere            
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-OUT-ERROR ' 
>
>Chain forward_ext (0 references)
>target     prot opt source               destination         
>
>Chain input_ext (2 references)
>target     prot opt source               destination         
>DROP       all  --  anywhere             anywhere            PKTTYPE = broadcast 
>ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
>ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
>LOG        tcp  --  anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:ssh flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
>ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh 
>LOG        all  --  anywhere             anywhere            limit: avg 3/min burst 5 PKTTYPE = multicast LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
>DROP       all  --  anywhere             anywhere            PKTTYPE = multicast 
>LOG        tcp  --  anywhere             anywhere            limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
>LOG        icmp --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
>LOG        udp  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
>DROP       all  --  anywhere             anywhere            
>
>Chain reject_func (0 references)
>target     prot opt source               destination         
>REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset 
>REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable 
>REJECT     all  --  anywhere             anywhere            reject-with icmp-proto-unreachable

Actions: View

Attachments on bug 300869: 159162 | 159163