Newsgroup: it.comp.os.linux.iniziare
Titolo: Ecco il mio iptables

Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
eth1_in    all  --  anywhere             anywhere
eth0_in    all  --  anywhere             anywhere
common     all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere           LOG level info
prefix `Shorewall:INPUT:REJECT:'
reject     all  --  anywhere             anywhere
Chain FORWARD (policy DROP)
target     prot opt source               destination
eth1_fwd   all  --  anywhere             anywhere
eth0_fwd   all  --  anywhere             anywhere
common     all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere           LOG level info
prefix `Shorewall:FORWARD:REJECT:'
reject     all  --  anywhere             anywhere
Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere
fw2net     all  --  anywhere             anywhere
all2all    all  --  anywhere             anywhere
common     all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere           LOG level info
prefix `Shorewall:OUTPUT:REJECT:'
reject     all  --  anywhere             anywhere
Chain all2all (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere           state
RELATED,ESTABLISHED
newnotsyn  tcp  --  anywhere             anywhere           state NEW tcp
flags:!SYN,RST,ACK/SYN
common     all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere           LOG level info
prefix `Shorewall:all2all:REJECT:'
reject     all  --  anywhere             anywhere
Chain common (5 references)
target     prot opt source               destination
icmpdef    icmp --  anywhere             anywhere
DROP       tcp  --  anywhere             anywhere           state INVALID
REJECT     udp  --  anywhere             anywhere           udp
dpts:netbios-ns:netbios-ssn reject-with icmp-port-unreachable
REJECT     udp  --  anywhere             anywhere           udp
dpt:microsoft-ds reject-with icmp-port-unreachable
reject     tcp  --  anywhere             anywhere           tcp dpt:135
DROP       udp  --  anywhere             anywhere           udp dpt:1900
DROP       all  --  anywhere             255.255.255.255
DROP       all  --  anywhere             
224.0.0.0/4
reject     tcp  --  anywhere             anywhere           tcp dpt:auth
DROP       all  --  anywhere             10.255.255.255
DROP       all  --  anywhere             192.168.1.255
Chain dynamic (4 references)
target     prot opt source               destination
Chain eth0_fwd (1 references)
target     prot opt source               destination
dynamic    all  --  anywhere             anywhere
loc2net    all  --  anywhere             anywhere
Chain eth0_in (1 references)
target     prot opt source               destination
dynamic    all  --  anywhere             anywhere
loc2fw     all  --  anywhere             anywhere
Chain eth1_fwd (1 references)
target     prot opt source               destination
dynamic    all  --  anywhere             anywhere
net2all    all  --  anywhere             anywhere
Chain eth1_in (1 references)
target     prot opt source               destination
dynamic    all  --  anywhere             anywhere
net2fw     all  --  anywhere             anywhere
Chain fw2net (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere           state
RELATED,ESTABLISHED
newnotsyn  tcp  --  anywhere             anywhere           state NEW tcp
flags:!SYN,RST,ACK/SYN
ACCEPT     all  --  anywhere             anywhere
Chain icmpdef (1 references)
target     prot opt source               destination
Chain loc2fw (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere           state
RELATED,ESTABLISHED
newnotsyn  tcp  --  anywhere             anywhere           state NEW tcp
flags:!SYN,RST,ACK/SYN
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp
dpt:ssh
all2all    all  --  anywhere             anywhere
Chain loc2net (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere           state
RELATED,ESTABLISHED
newnotsyn  tcp  --  anywhere             anywhere           state NEW tcp
flags:!SYN,RST,ACK/SYN
ACCEPT     all  --  anywhere             anywhere
Chain net2all (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere           state
RELATED,ESTABLISHED
newnotsyn  tcp  --  anywhere             anywhere           state NEW tcp
flags:!SYN,RST,ACK/SYN
common     all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere           LOG level info
prefix `Shorewall:net2all:DROP:'
DROP       all  --  anywhere             anywhere
Chain net2fw (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere           state
RELATED,ESTABLISHED
newnotsyn  tcp  --  anywhere             anywhere           state NEW tcp
flags:!SYN,RST,ACK/SYN
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp
dpt:ssh
net2all    all  --  anywhere             anywhere
Chain newnotsyn (6 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere
Chain reject (6 references)
target     prot opt source               destination
REJECT     tcp  --  anywhere             anywhere           reject-with
tcp-reset
REJECT     all  --  anywhere             anywhere           reject-with
icmp-port-unreachable
Chain shorewall (0 references)
target     prot opt source               destination

Sotty...non andava postato qui...