Attachment 825984 Details for Bug 1144670

iptables.txt

iptables.txt (text/plain), 36.04 KB, created by Freek de Kruijf on 2019-12-11 13:25:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Freek de Kruijf

Created: 2019-12-11 13:25:49 UTC

Size: 36.04 KB

patch

obsolete

># Generated by iptables-save v1.8.3 on Wed Dec 11 13:12:37 2019
>*nat
>:PREROUTING ACCEPT [13:944]
>:INPUT ACCEPT [5:656]
>:OUTPUT ACCEPT [445:28377]
>:POSTROUTING ACCEPT [445:28377]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_ZONES - [0:0]
>:POSTROUTING_direct - [0:0]
>:POST_drop - [0:0]
>:POST_drop_allow - [0:0]
>:POST_drop_deny - [0:0]
>:POST_drop_log - [0:0]
>:POST_drop_post - [0:0]
>:POST_drop_pre - [0:0]
>:POST_external - [0:0]
>:POST_external_allow - [0:0]
>:POST_external_deny - [0:0]
>:POST_external_log - [0:0]
>:POST_external_post - [0:0]
>:POST_external_pre - [0:0]
>:POST_internal - [0:0]
>:POST_internal_allow - [0:0]
>:POST_internal_deny - [0:0]
>:POST_internal_log - [0:0]
>:POST_internal_post - [0:0]
>:POST_internal_pre - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_drop - [0:0]
>:PRE_drop_allow - [0:0]
>:PRE_drop_deny - [0:0]
>:PRE_drop_log - [0:0]
>:PRE_drop_post - [0:0]
>:PRE_drop_pre - [0:0]
>:PRE_external - [0:0]
>:PRE_external_allow - [0:0]
>:PRE_external_deny - [0:0]
>:PRE_external_log - [0:0]
>:PRE_external_post - [0:0]
>:PRE_external_pre - [0:0]
>:PRE_internal - [0:0]
>:PRE_internal_allow - [0:0]
>:PRE_internal_deny - [0:0]
>:PRE_internal_log - [0:0]
>:PRE_internal_post - [0:0]
>:PRE_internal_pre - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A POSTROUTING -j POSTROUTING_ZONES
>-A POSTROUTING_ZONES -d 54.38.56.123/32 -g POST_drop
>-A POSTROUTING_ZONES -d 95.214.61.28/32 -g POST_drop
>-A POSTROUTING_ZONES -d 185.61.150.201/32 -g POST_drop
>-A POSTROUTING_ZONES -d 82.100.253.197/32 -g POST_drop
>-A POSTROUTING_ZONES -d 82.100.253.198/32 -g POST_drop
>-A POSTROUTING_ZONES -d 128.199.36.85/32 -g POST_drop
>-A POSTROUTING_ZONES -d 174.138.106.64/32 -g POST_drop
>-A POSTROUTING_ZONES -d 123.57.173.120/32 -g POST_drop
>-A POSTROUTING_ZONES -d 91.203.100.0/22 -g POST_drop
>-A POSTROUTING_ZONES -d 192.168.178.0/24 -g POST_internal
>-A POSTROUTING_ZONES -o enp1s0 -g POST_external
>-A POSTROUTING_ZONES -g POST_external
>-A POST_drop -j POST_drop_pre
>-A POST_drop -j POST_drop_log
>-A POST_drop -j POST_drop_deny
>-A POST_drop -j POST_drop_allow
>-A POST_drop -j POST_drop_post
>-A POST_external -j POST_external_pre
>-A POST_external -j POST_external_log
>-A POST_external -j POST_external_deny
>-A POST_external -j POST_external_allow
>-A POST_external -j POST_external_post
>-A POST_internal -j POST_internal_pre
>-A POST_internal -j POST_internal_log
>-A POST_internal -j POST_internal_deny
>-A POST_internal -j POST_internal_allow
>-A POST_internal -j POST_internal_post
>-A PREROUTING_ZONES -s 54.38.56.123/32 -g PRE_drop
>-A PREROUTING_ZONES -s 95.214.61.28/32 -g PRE_drop
>-A PREROUTING_ZONES -s 185.61.150.201/32 -g PRE_drop
>-A PREROUTING_ZONES -s 82.100.253.197/32 -g PRE_drop
>-A PREROUTING_ZONES -s 82.100.253.198/32 -g PRE_drop
>-A PREROUTING_ZONES -s 128.199.36.85/32 -g PRE_drop
>-A PREROUTING_ZONES -s 174.138.106.64/32 -g PRE_drop
>-A PREROUTING_ZONES -s 123.57.173.120/32 -g PRE_drop
>-A PREROUTING_ZONES -s 91.203.100.0/22 -g PRE_drop
>-A PREROUTING_ZONES -s 192.168.178.0/24 -g PRE_internal
>-A PREROUTING_ZONES -i enp1s0 -g PRE_external
>-A PREROUTING_ZONES -g PRE_external
>-A PRE_drop -j PRE_drop_pre
>-A PRE_drop -j PRE_drop_log
>-A PRE_drop -j PRE_drop_deny
>-A PRE_drop -j PRE_drop_allow
>-A PRE_drop -j PRE_drop_post
>-A PRE_external -j PRE_external_pre
>-A PRE_external -j PRE_external_log
>-A PRE_external -j PRE_external_deny
>-A PRE_external -j PRE_external_allow
>-A PRE_external -j PRE_external_post
>-A PRE_internal -j PRE_internal_pre
>-A PRE_internal -j PRE_internal_log
>-A PRE_internal -j PRE_internal_deny
>-A PRE_internal -j PRE_internal_allow
>-A PRE_internal -j PRE_internal_post
>COMMIT
># Completed on Wed Dec 11 13:12:37 2019
># Generated by iptables-save v1.8.3 on Wed Dec 11 13:12:37 2019
>*mangle
>:PREROUTING ACCEPT [1337:270650]
>:INPUT ACCEPT [1337:270650]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [1360:121558]
>:POSTROUTING ACCEPT [1383:126583]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_direct - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_drop - [0:0]
>:PRE_drop_allow - [0:0]
>:PRE_drop_deny - [0:0]
>:PRE_drop_log - [0:0]
>:PRE_drop_post - [0:0]
>:PRE_drop_pre - [0:0]
>:PRE_external - [0:0]
>:PRE_external_allow - [0:0]
>:PRE_external_deny - [0:0]
>:PRE_external_log - [0:0]
>:PRE_external_post - [0:0]
>:PRE_external_pre - [0:0]
>:PRE_internal - [0:0]
>:PRE_internal_allow - [0:0]
>:PRE_internal_deny - [0:0]
>:PRE_internal_log - [0:0]
>:PRE_internal_post - [0:0]
>:PRE_internal_pre - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A INPUT -j INPUT_direct
>-A FORWARD -j FORWARD_direct
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A PREROUTING_ZONES -s 54.38.56.123/32 -g PRE_drop
>-A PREROUTING_ZONES -s 95.214.61.28/32 -g PRE_drop
>-A PREROUTING_ZONES -s 185.61.150.201/32 -g PRE_drop
>-A PREROUTING_ZONES -s 82.100.253.197/32 -g PRE_drop
>-A PREROUTING_ZONES -s 82.100.253.198/32 -g PRE_drop
>-A PREROUTING_ZONES -s 128.199.36.85/32 -g PRE_drop
>-A PREROUTING_ZONES -s 174.138.106.64/32 -g PRE_drop
>-A PREROUTING_ZONES -s 123.57.173.120/32 -g PRE_drop
>-A PREROUTING_ZONES -s 91.203.100.0/22 -g PRE_drop
>-A PREROUTING_ZONES -s 192.168.178.0/24 -g PRE_internal
>-A PREROUTING_ZONES -i enp1s0 -g PRE_external
>-A PREROUTING_ZONES -g PRE_external
>-A PRE_drop -j PRE_drop_pre
>-A PRE_drop -j PRE_drop_log
>-A PRE_drop -j PRE_drop_deny
>-A PRE_drop -j PRE_drop_allow
>-A PRE_drop -j PRE_drop_post
>-A PRE_external -j PRE_external_pre
>-A PRE_external -j PRE_external_log
>-A PRE_external -j PRE_external_deny
>-A PRE_external -j PRE_external_allow
>-A PRE_external -j PRE_external_post
>-A PRE_internal -j PRE_internal_pre
>-A PRE_internal -j PRE_internal_log
>-A PRE_internal -j PRE_internal_deny
>-A PRE_internal -j PRE_internal_allow
>-A PRE_internal -j PRE_internal_post
>COMMIT
># Completed on Wed Dec 11 13:12:37 2019
># Generated by iptables-save v1.8.3 on Wed Dec 11 13:12:37 2019
>*raw
>:PREROUTING ACCEPT [1337:270650]
>:OUTPUT ACCEPT [1360:121558]
>:OUTPUT_direct - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_drop - [0:0]
>:PRE_drop_allow - [0:0]
>:PRE_drop_deny - [0:0]
>:PRE_drop_log - [0:0]
>:PRE_drop_post - [0:0]
>:PRE_drop_pre - [0:0]
>:PRE_external - [0:0]
>:PRE_external_allow - [0:0]
>:PRE_external_deny - [0:0]
>:PRE_external_log - [0:0]
>:PRE_external_post - [0:0]
>:PRE_external_pre - [0:0]
>:PRE_internal - [0:0]
>:PRE_internal_allow - [0:0]
>:PRE_internal_deny - [0:0]
>:PRE_internal_log - [0:0]
>:PRE_internal_post - [0:0]
>:PRE_internal_pre - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A OUTPUT -j OUTPUT_direct
>-A PREROUTING_ZONES -s 54.38.56.123/32 -g PRE_drop
>-A PREROUTING_ZONES -s 95.214.61.28/32 -g PRE_drop
>-A PREROUTING_ZONES -s 185.61.150.201/32 -g PRE_drop
>-A PREROUTING_ZONES -s 82.100.253.197/32 -g PRE_drop
>-A PREROUTING_ZONES -s 82.100.253.198/32 -g PRE_drop
>-A PREROUTING_ZONES -s 128.199.36.85/32 -g PRE_drop
>-A PREROUTING_ZONES -s 174.138.106.64/32 -g PRE_drop
>-A PREROUTING_ZONES -s 123.57.173.120/32 -g PRE_drop
>-A PREROUTING_ZONES -s 91.203.100.0/22 -g PRE_drop
>-A PREROUTING_ZONES -s 192.168.178.0/24 -g PRE_internal
>-A PREROUTING_ZONES -i enp1s0 -g PRE_external
>-A PREROUTING_ZONES -g PRE_external
>-A PRE_drop -j PRE_drop_pre
>-A PRE_drop -j PRE_drop_log
>-A PRE_drop -j PRE_drop_deny
>-A PRE_drop -j PRE_drop_allow
>-A PRE_drop -j PRE_drop_post
>-A PRE_external -j PRE_external_pre
>-A PRE_external -j PRE_external_log
>-A PRE_external -j PRE_external_deny
>-A PRE_external -j PRE_external_allow
>-A PRE_external -j PRE_external_post
>-A PRE_internal -j PRE_internal_pre
>-A PRE_internal -j PRE_internal_log
>-A PRE_internal -j PRE_internal_deny
>-A PRE_internal -j PRE_internal_allow
>-A PRE_internal -j PRE_internal_post
>-A PRE_internal_allow -p udp -m udp --dport 137 -j CT --helper netbios-ns
>COMMIT
># Completed on Wed Dec 11 13:12:37 2019
># Generated by iptables-save v1.8.3 on Wed Dec 11 13:12:37 2019
>*security
>:INPUT ACCEPT [1329:270362]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [1360:121558]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>:OUTPUT_direct - [0:0]
>-A INPUT -j INPUT_direct
>-A FORWARD -j FORWARD_direct
>-A OUTPUT -j OUTPUT_direct
>COMMIT
># Completed on Wed Dec 11 13:12:37 2019
># Generated by iptables-save v1.8.3 on Wed Dec 11 13:12:37 2019
>*filter
>:INPUT ACCEPT [0:0]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [889:92806]
>:FORWARD_IN_ZONES - [0:0]
>:FORWARD_OUT_ZONES - [0:0]
>:FORWARD_direct - [0:0]
>:FWDI_drop - [0:0]
>:FWDI_drop_allow - [0:0]
>:FWDI_drop_deny - [0:0]
>:FWDI_drop_log - [0:0]
>:FWDI_drop_post - [0:0]
>:FWDI_drop_pre - [0:0]
>:FWDI_external - [0:0]
>:FWDI_external_allow - [0:0]
>:FWDI_external_deny - [0:0]
>:FWDI_external_log - [0:0]
>:FWDI_external_post - [0:0]
>:FWDI_external_pre - [0:0]
>:FWDI_internal - [0:0]
>:FWDI_internal_allow - [0:0]
>:FWDI_internal_deny - [0:0]
>:FWDI_internal_log - [0:0]
>:FWDI_internal_post - [0:0]
>:FWDI_internal_pre - [0:0]
>:FWDO_drop - [0:0]
>:FWDO_drop_allow - [0:0]
>:FWDO_drop_deny - [0:0]
>:FWDO_drop_log - [0:0]
>:FWDO_drop_post - [0:0]
>:FWDO_drop_pre - [0:0]
>:FWDO_external - [0:0]
>:FWDO_external_allow - [0:0]
>:FWDO_external_deny - [0:0]
>:FWDO_external_log - [0:0]
>:FWDO_external_post - [0:0]
>:FWDO_external_pre - [0:0]
>:FWDO_internal - [0:0]
>:FWDO_internal_allow - [0:0]
>:FWDO_internal_deny - [0:0]
>:FWDO_internal_log - [0:0]
>:FWDO_internal_post - [0:0]
>:FWDO_internal_pre - [0:0]
>:INPUT_ZONES - [0:0]
>:INPUT_direct - [0:0]
>:IN_drop - [0:0]
>:IN_drop_allow - [0:0]
>:IN_drop_deny - [0:0]
>:IN_drop_log - [0:0]
>:IN_drop_post - [0:0]
>:IN_drop_pre - [0:0]
>:IN_external - [0:0]
>:IN_external_allow - [0:0]
>:IN_external_deny - [0:0]
>:IN_external_log - [0:0]
>:IN_external_post - [0:0]
>:IN_external_pre - [0:0]
>:IN_internal - [0:0]
>:IN_internal_allow - [0:0]
>:IN_internal_deny - [0:0]
>:IN_internal_log - [0:0]
>:IN_internal_post - [0:0]
>:IN_internal_pre - [0:0]
>:OUTPUT_direct - [0:0]
>-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED,DNAT -j ACCEPT
>-A INPUT -i lo -j ACCEPT
>-A INPUT -j INPUT_direct
>-A INPUT -j INPUT_ZONES
>-A INPUT -m conntrack --ctstate INVALID -j LOG --log-prefix "STATE_INVALID_DROP: "
>-A INPUT -m conntrack --ctstate INVALID -j DROP
>-A INPUT -j LOG --log-prefix "FINAL_REJECT: "
>-A INPUT -j REJECT --reject-with icmp-host-prohibited
>-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED,DNAT -j ACCEPT
>-A FORWARD -i lo -j ACCEPT
>-A FORWARD -j FORWARD_direct
>-A FORWARD -j FORWARD_IN_ZONES
>-A FORWARD -j FORWARD_OUT_ZONES
>-A FORWARD -m conntrack --ctstate INVALID -j LOG --log-prefix "STATE_INVALID_DROP: "
>-A FORWARD -m conntrack --ctstate INVALID -j DROP
>-A FORWARD -j LOG --log-prefix "FINAL_REJECT: "
>-A FORWARD -j REJECT --reject-with icmp-host-prohibited
>-A OUTPUT -o lo -j ACCEPT
>-A OUTPUT -j OUTPUT_direct
>-A FORWARD_IN_ZONES -s 54.38.56.123/32 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 95.214.61.28/32 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 185.61.150.201/32 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 82.100.253.197/32 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 82.100.253.198/32 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 128.199.36.85/32 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 174.138.106.64/32 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 123.57.173.120/32 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 91.203.100.0/22 -g FWDI_drop
>-A FORWARD_IN_ZONES -s 192.168.178.0/24 -g FWDI_internal
>-A FORWARD_IN_ZONES -i enp1s0 -g FWDI_external
>-A FORWARD_IN_ZONES -g FWDI_external
>-A FORWARD_OUT_ZONES -d 54.38.56.123/32 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 95.214.61.28/32 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 185.61.150.201/32 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 82.100.253.197/32 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 82.100.253.198/32 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 128.199.36.85/32 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 174.138.106.64/32 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 123.57.173.120/32 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 91.203.100.0/22 -g FWDO_drop
>-A FORWARD_OUT_ZONES -d 192.168.178.0/24 -g FWDO_internal
>-A FORWARD_OUT_ZONES -o enp1s0 -g FWDO_external
>-A FORWARD_OUT_ZONES -g FWDO_external
>-A FWDI_drop -j FWDI_drop_pre
>-A FWDI_drop -j FWDI_drop_log
>-A FWDI_drop -j FWDI_drop_deny
>-A FWDI_drop -j FWDI_drop_allow
>-A FWDI_drop -j FWDI_drop_post
>-A FWDI_drop -j LOG --log-prefix "FWDI_drop_DROP: "
>-A FWDI_drop -j DROP
>-A FWDI_external -j FWDI_external_pre
>-A FWDI_external -j FWDI_external_log
>-A FWDI_external -j FWDI_external_deny
>-A FWDI_external -j FWDI_external_allow
>-A FWDI_external -j FWDI_external_post
>-A FWDI_external -p icmp -j ACCEPT
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 0 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 0 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/4 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/4 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/14 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/14 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/10 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/10 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 5/1 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 5/1 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/7 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/7 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/1 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/1 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 12/0 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 12/0 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/9 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/9 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 5/0 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 5/0 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/6 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/6 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/0 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/0 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 12 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 12 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/15 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/15 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/2 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/2 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 12/1 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 12/1 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/5 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/5 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 11 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 11 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 14 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 14 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 13 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 13 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 5/3 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 5/3 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/12 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/12 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 5/2 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 5/2 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/11 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A FWDI_external_deny -p icmp -m icmp --icmp-type 3/11 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal -j FWDI_internal_pre
>-A FWDI_internal -j FWDI_internal_log
>-A FWDI_internal -j FWDI_internal_deny
>-A FWDI_internal -j FWDI_internal_allow
>-A FWDI_internal -j FWDI_internal_post
>-A FWDI_internal -p icmp -j ACCEPT
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 0 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 0 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/4 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/4 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/14 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/14 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/10 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/10 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 5/1 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 5/1 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/7 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/7 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/1 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/1 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 12/0 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 12/0 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/9 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/9 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 5/0 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 5/0 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/6 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/6 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/0 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/0 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 12 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 12 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/15 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/15 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/2 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/2 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 12/1 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 12/1 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/5 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/5 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 11 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 11 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 14 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 14 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 13 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 13 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 5/3 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 5/3 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/12 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/12 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 5/2 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 5/2 -j REJECT --reject-with icmp-host-prohibited
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/11 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A FWDI_internal_deny -p icmp -m icmp --icmp-type 3/11 -j REJECT --reject-with icmp-host-prohibited
>-A FWDO_drop -j FWDO_drop_pre
>-A FWDO_drop -j FWDO_drop_log
>-A FWDO_drop -j FWDO_drop_deny
>-A FWDO_drop -j FWDO_drop_allow
>-A FWDO_drop -j FWDO_drop_post
>-A FWDO_drop -j LOG --log-prefix "FWDO_drop_DROP: "
>-A FWDO_drop -j DROP
>-A FWDO_external -j FWDO_external_pre
>-A FWDO_external -j FWDO_external_log
>-A FWDO_external -j FWDO_external_deny
>-A FWDO_external -j FWDO_external_allow
>-A FWDO_external -j FWDO_external_post
>-A FWDO_internal -j FWDO_internal_pre
>-A FWDO_internal -j FWDO_internal_log
>-A FWDO_internal -j FWDO_internal_deny
>-A FWDO_internal -j FWDO_internal_allow
>-A FWDO_internal -j FWDO_internal_post
>-A INPUT_ZONES -s 54.38.56.123/32 -g IN_drop
>-A INPUT_ZONES -s 95.214.61.28/32 -g IN_drop
>-A INPUT_ZONES -s 185.61.150.201/32 -g IN_drop
>-A INPUT_ZONES -s 82.100.253.197/32 -g IN_drop
>-A INPUT_ZONES -s 82.100.253.198/32 -g IN_drop
>-A INPUT_ZONES -s 128.199.36.85/32 -g IN_drop
>-A INPUT_ZONES -s 174.138.106.64/32 -g IN_drop
>-A INPUT_ZONES -s 123.57.173.120/32 -g IN_drop
>-A INPUT_ZONES -s 91.203.100.0/22 -g IN_drop
>-A INPUT_ZONES -s 192.168.178.0/24 -g IN_internal
>-A INPUT_ZONES -i enp1s0 -g IN_external
>-A INPUT_ZONES -g IN_external
>-A IN_drop -j IN_drop_pre
>-A IN_drop -j IN_drop_log
>-A IN_drop -j IN_drop_deny
>-A IN_drop -j IN_drop_allow
>-A IN_drop -j IN_drop_post
>-A IN_drop -j LOG --log-prefix "IN_drop_DROP: "
>-A IN_drop -j DROP
>-A IN_external -j IN_external_pre
>-A IN_external -j IN_external_log
>-A IN_external -j IN_external_deny
>-A IN_external -j IN_external_allow
>-A IN_external -j IN_external_post
>-A IN_external -p icmp -j ACCEPT
>-A IN_external_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW,UNTRACKED -m limit --limit 3/min -j ACCEPT
>-A IN_external_allow -p tcp -m tcp --dport 25 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_external_allow -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_external_allow -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_external_allow -p tcp -m tcp --dport 587 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_external_allow -p tcp -m tcp --dport 993 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_external_deny -p icmp -m icmp --icmp-type 3 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 0 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 0 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/4 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/4 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/14 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/14 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/10 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/10 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 5/1 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 5/1 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/7 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/7 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/1 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/1 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 12/0 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 12/0 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/9 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/9 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 5/0 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 5/0 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/6 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/6 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/0 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/0 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 12 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 12 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/15 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/15 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/2 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/2 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 12/1 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 12/1 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/5 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/5 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 11 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 11 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 14 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 14 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 13 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 13 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 5/3 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 5/3 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/12 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/12 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 5/2 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 5/2 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/11 -j LOG --log-prefix "external_ICMP_BLOCK: "
>-A IN_external_deny -p icmp -m icmp --icmp-type 3/11 -j REJECT --reject-with icmp-host-prohibited
>-A IN_external_log -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW,UNTRACKED -m limit --limit 6/min -j LOG --log-prefix "\'SFW2-INSSH \'" --log-level 6
>-A IN_external_log -p tcp -m tcp --dport 25 -m conntrack --ctstate NEW,UNTRACKED -j LOG --log-prefix "\'SFW2-INSMTP \'" --log-level 6
>-A IN_external_log -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW,UNTRACKED -j LOG --log-prefix "\'SFW2-INHTTP \'" --log-level 6
>-A IN_external_log -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW,UNTRACKED -j LOG --log-prefix "\'SFW2-INHTTPS \'" --log-level 6
>-A IN_external_log -p tcp -m tcp --dport 587 -m conntrack --ctstate NEW,UNTRACKED -j LOG --log-prefix "\'SFW2-INSMTPS \'" --log-level 6
>-A IN_external_log -p tcp -m tcp --dport 993 -m conntrack --ctstate NEW,UNTRACKED -j LOG --log-prefix "\'SFW2-INIMAPS \'" --log-level 6
>-A IN_internal -j IN_internal_pre
>-A IN_internal -j IN_internal_log
>-A IN_internal -j IN_internal_deny
>-A IN_internal -j IN_internal_allow
>-A IN_internal -j IN_internal_post
>-A IN_internal -p icmp -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 25 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 143 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 587 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 465 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 631 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 993 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 3493 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 1714:1764 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_allow -p udp -m udp --dport 1714:1764 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 0 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 0 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/4 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/4 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/14 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/14 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/10 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/10 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 5/1 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 5/1 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/7 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/7 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/1 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/1 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 12/0 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 12/0 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/9 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/9 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 5/0 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 5/0 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/6 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/6 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/0 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/0 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 12 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 12 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/15 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/15 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/2 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/2 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 12/1 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 12/1 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/5 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/5 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 11 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 11 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 14 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 14 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 13 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 13 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 5/3 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 5/3 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/12 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/12 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 5/2 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 5/2 -j REJECT --reject-with icmp-host-prohibited
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/11 -j LOG --log-prefix "internal_ICMP_BLOCK: "
>-A IN_internal_deny -p icmp -m icmp --icmp-type 3/11 -j REJECT --reject-with icmp-host-prohibited
>COMMIT
># Completed on Wed Dec 11 13:12:37 2019

Actions: View

Attachments on bug 1144670: 825976 | 825977 | 825978 | 825979 | 825980 | 825982 | 825983 | 825984 | 825985 | 825986 | 825987 | 825988