Attachment 1453708 Details for Bug 1594205 – after_local

after_local

after_local.txt (text/plain), 7.34 KB, created by Daniele on 2018-06-22 11:33:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniele

Created: 2018-06-22 11:33:44 UTC

Size: 7.34 KB

patch

obsolete

># Generated by iptables-save v1.4.21 on Fri Jun 22 05:44:34 2018
>*nat
>:PREROUTING ACCEPT [32162:3145825]
>:INPUT ACCEPT [8140:423836]
>:OUTPUT ACCEPT [85657:5309935]
>:POSTROUTING ACCEPT [85668:5310595]
>:DOCKER - [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_ZONES - [0:0]
>:POSTROUTING_ZONES_SOURCE - [0:0]
>:POSTROUTING_direct - [0:0]
>:POST_public - [0:0]
>:POST_public_allow - [0:0]
>:POST_public_deny - [0:0]
>:POST_public_log - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_ZONES_SOURCE - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_public - [0:0]
>:PRE_public_allow - [0:0]
>:PRE_public_deny - [0:0]
>:PRE_public_log - [0:0]
>[75146:6125151] -A PREROUTING -j PREROUTING_direct
>[75146:6125151] -A PREROUTING -j PREROUTING_ZONES_SOURCE
>[75146:6125151] -A PREROUTING -j PREROUTING_ZONES
>[0:0] -A PREROUTING -p tcp -m tcp --dport 80 -m comment --comment "Redirect DESU HTTP  to 52001" -j REDIRECT --to-ports 52001
>[22365:1162960] -A PREROUTING -p tcp -m tcp --dport 443 -m comment --comment "Redirect DESU HTTPS to 52000" -j REDIRECT --to-ports 52000
>[567:36564] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
>[114013:7288593] -A OUTPUT -j OUTPUT_direct
>[0:0] -A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 443 -m comment --comment "Enable UIS self backup" -j REDIRECT --to-ports 52000
>[4853:297675] -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
>[0:0] -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
>[114013:7288593] -A POSTROUTING -j POSTROUTING_direct
>[114013:7288593] -A POSTROUTING -j POSTROUTING_ZONES_SOURCE
>[114013:7288593] -A POSTROUTING -j POSTROUTING_ZONES
>[0:0] -A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p tcp -m tcp --dport 5000 -j MASQUERADE
>[44:2640] -A DOCKER -i docker0 -j RETURN
>[258:14892] -A DOCKER ! -i docker0 -p tcp -m tcp --dport 49652 -j DNAT --to-destination 172.17.0.2:5000
>[61:64300] -A POSTROUTING_ZONES -o eth0 -g POST_public
>[113952:7224293] -A POSTROUTING_ZONES -g POST_public
>[114013:7288593] -A POST_public -j POST_public_log
>[114013:7288593] -A POST_public -j POST_public_deny
>[114013:7288593] -A POST_public -j POST_public_allow
>[26070:1488684] -A PREROUTING_ZONES -i eth0 -g PRE_public
>[49076:4636467] -A PREROUTING_ZONES -g PRE_public
>[75146:6125151] -A PRE_public -j PRE_public_log
>[75146:6125151] -A PRE_public -j PRE_public_deny
>[75146:6125151] -A PRE_public -j PRE_public_allow
>COMMIT
># Completed on Fri Jun 22 05:44:34 2018
># Generated by iptables-save v1.4.21 on Fri Jun 22 05:44:34 2018
>*mangle
>:PREROUTING ACCEPT [7521499:7840549453]
>:INPUT ACCEPT [7473936:7836076147]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [4890392:14259736483]
>:POSTROUTING ACCEPT [4890468:14259758523]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>[7473936:7836076147] -A INPUT -j INPUT_direct
>[0:0] -A FORWARD -j FORWARD_direct
>COMMIT
># Completed on Fri Jun 22 05:44:34 2018
># Generated by iptables-save v1.4.21 on Fri Jun 22 05:44:34 2018
>*security
>:INPUT ACCEPT [7468389:7835559121]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [4890392:14259736483]
>COMMIT
># Completed on Fri Jun 22 05:44:34 2018
># Generated by iptables-save v1.4.21 on Fri Jun 22 05:44:34 2018
>*raw
>:PREROUTING ACCEPT [7521499:7840549453]
>:OUTPUT ACCEPT [4890392:14259736483]
>COMMIT
># Completed on Fri Jun 22 05:44:34 2018
># Generated by iptables-save v1.4.21 on Fri Jun 22 05:44:34 2018
>*filter
>:INPUT DROP [0:0]
>:FORWARD DROP [0:0]
>:OUTPUT ACCEPT [105:33275]
>:DOCKER - [0:0]
>:DOCKER-ISOLATION - [0:0]
>:FILE_CONFIG - [0:0]
>:L - [0:0]
>[139:16828] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>[0:0] -A INPUT -p icmp -m icmp --icmp-type 13 -j DROP
>[0:0] -A INPUT -p icmp -m icmp --icmp-type 14 -j DROP
>[0:0] -A INPUT -p icmp -j ACCEPT
>[0:0] -A INPUT -i lo -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 389 -m comment --comment AAA_JaD_LDAP -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 389 -m comment --comment AAA_JaD_LDAP -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 464 -m comment --comment AAA_JaD_Kerberos -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 88 -m comment --comment AAA_JaD_Kerberos -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 88 -m comment --comment AAA_JaD_Kerberos -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 1002 -m comment --comment ServiceAutomation -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 3001 -m comment --comment ServiceAutomation -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 49518 -m comment --comment ServiceAutomation -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49600 -m comment --comment DESU_OPA -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49599 -m comment --comment "DESU mutual certs port" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49600 -m comment --comment "DESU OPA port" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49652 -m comment --comment "SSP: Required by YUM repository and Docker registry" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49653 -m comment --comment "SSP: Required by YUM repository and Docker registry" -j ACCEPT
>[2:104] -A INPUT -p tcp -m state --state NEW -m tcp --dport 52000 -m comment --comment "DESU HTTPS port" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 52001 -m comment --comment "DESU HTTP  port" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 52002 -m comment --comment "HTTP access port for storage" -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 161 -m comment --comment CommonAgent -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 162 -m comment --comment CommonAgent -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 165 -m comment --comment CommonAgent -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 111 -m comment --comment "NFS rule udp" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 111 -m comment --comment "NFS rule tcp" -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 2049 -m comment --comment "NFS server rule tcp" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 2049 -m comment --comment "NFS server rule udp" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 20048 -m comment --comment "Mountd server rule udp" -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 20048 -m comment --comment "Mountd server rule udp" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 139 -m comment --comment "SAMBA storage" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 445 -m comment --comment "SAMBA storage" -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 67 -m comment --comment "permanent_port_v3_inst_srv_1 " -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 69 -m comment --comment "permanent_port_v3_inst_srv_1 " -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 49676 -m comment --comment "permanent_port_v3_inst_srv_1 " -j ACCEPT
>[0:0] -A FORWARD -j DOCKER-ISOLATION
>[0:0] -A FORWARD -o docker0 -j DOCKER
>[0:0] -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>[0:0] -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
>[0:0] -A FORWARD -i docker0 -o docker0 -j ACCEPT
>[0:0] -A OUTPUT -p icmp -m icmp --icmp-type 13 -j DROP
>[0:0] -A OUTPUT -p icmp -m icmp --icmp-type 14 -j DROP
>[0:0] -A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 5000 -j ACCEPT
>[0:0] -A DOCKER-ISOLATION -j RETURN
>COMMIT
># Completed on Fri Jun 22 05:44:34 2018

Actions: View

Attachments on bug 1594205: 1453708 | 1453710 | 1453711 | 1453712 | 1453713