Attachment 1453711 Details for Bug 1594205 – after

after

after.txt (text/plain), 7.35 KB, created by Daniele on 2018-06-22 11:34:22 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniele

Created: 2018-06-22 11:34:22 UTC

Size: 7.35 KB

patch

obsolete

># Generated by iptables-save v1.4.21 on Fri Jun 22 05:41:18 2018
>*nat
>:PREROUTING ACCEPT [32155:3145279]
>:INPUT ACCEPT [8120:422796]
>:OUTPUT ACCEPT [85651:5309128]
>:POSTROUTING ACCEPT [85660:5309668]
>:DOCKER - [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_ZONES - [0:0]
>:POSTROUTING_ZONES_SOURCE - [0:0]
>:POSTROUTING_direct - [0:0]
>:POST_public - [0:0]
>:POST_public_allow - [0:0]
>:POST_public_deny - [0:0]
>:POST_public_log - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_ZONES_SOURCE - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_public - [0:0]
>:PRE_public_allow - [0:0]
>:PRE_public_deny - [0:0]
>:PRE_public_log - [0:0]
>[75119:6123565] -A PREROUTING -j PREROUTING_direct
>[75119:6123565] -A PREROUTING -j PREROUTING_ZONES_SOURCE
>[75119:6123565] -A PREROUTING -j PREROUTING_ZONES
>[0:0] -A PREROUTING -p tcp -m tcp --dport 80 -m comment --comment "Redirect DESU HTTP  to 52001" -j REDIRECT --to-ports 52001
>[22345:1161920] -A PREROUTING -p tcp -m tcp --dport 443 -m comment --comment "Redirect DESU HTTPS to 52000" -j REDIRECT --to-ports 52000
>[567:36564] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
>[114005:7287666] -A OUTPUT -j OUTPUT_direct
>[0:0] -A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 443 -m comment --comment "Enable UIS self backup" -j REDIRECT --to-ports 52000
>[4848:297375] -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
>[0:0] -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
>[114005:7287666] -A POSTROUTING -j POSTROUTING_direct
>[114005:7287666] -A POSTROUTING -j POSTROUTING_ZONES_SOURCE
>[114005:7287666] -A POSTROUTING -j POSTROUTING_ZONES
>[0:0] -A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p tcp -m tcp --dport 5000 -j MASQUERADE
>[44:2640] -A DOCKER -i docker0 -j RETURN
>[256:14772] -A DOCKER ! -i docker0 -p tcp -m tcp --dport 49652 -j DNAT --to-destination 172.17.0.2:5000
>[61:64300] -A POSTROUTING_ZONES -o eth0 -g POST_public
>[113944:7223366] -A POSTROUTING_ZONES -g POST_public
>[114005:7287666] -A POST_public -j POST_public_log
>[114005:7287666] -A POST_public -j POST_public_deny
>[114005:7287666] -A POST_public -j POST_public_allow
>[26047:1487410] -A PREROUTING_ZONES -i eth0 -g PRE_public
>[49072:4636155] -A PREROUTING_ZONES -g PRE_public
>[75119:6123565] -A PRE_public -j PRE_public_log
>[75119:6123565] -A PRE_public -j PRE_public_deny
>[75119:6123565] -A PRE_public -j PRE_public_allow
>COMMIT
># Completed on Fri Jun 22 05:41:18 2018
># Generated by iptables-save v1.4.21 on Fri Jun 22 05:41:18 2018
>*mangle
>:PREROUTING ACCEPT [7520698:7840384985]
>:INPUT ACCEPT [7473139:7835911991]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [4889715:14259408947]
>:POSTROUTING ACCEPT [4889791:14259430987]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>[7473139:7835911991] -A INPUT -j INPUT_direct
>[0:0] -A FORWARD -j FORWARD_direct
>COMMIT
># Completed on Fri Jun 22 05:41:18 2018
># Generated by iptables-save v1.4.21 on Fri Jun 22 05:41:18 2018
>*security
>:INPUT ACCEPT [7467595:7835395199]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [4889715:14259408947]
>COMMIT
># Completed on Fri Jun 22 05:41:18 2018
># Generated by iptables-save v1.4.21 on Fri Jun 22 05:41:18 2018
>*raw
>:PREROUTING ACCEPT [7520698:7840384985]
>:OUTPUT ACCEPT [4889715:14259408947]
>COMMIT
># Completed on Fri Jun 22 05:41:18 2018
># Generated by iptables-save v1.4.21 on Fri Jun 22 05:41:18 2018
>*filter
>:INPUT DROP [1:229]
>:FORWARD DROP [0:0]
>:OUTPUT ACCEPT [227:130984]
>:DOCKER - [0:0]
>:DOCKER-ISOLATION - [0:0]
>:FILE_CONFIG - [0:0]
>:L - [0:0]
>[215:53323] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>[0:0] -A INPUT -p icmp -m icmp --icmp-type 13 -j DROP
>[0:0] -A INPUT -p icmp -m icmp --icmp-type 14 -j DROP
>[0:0] -A INPUT -p icmp -j ACCEPT
>[15:2818] -A INPUT -i lo -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 389 -m comment --comment AAA_JaD_LDAP -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 389 -m comment --comment AAA_JaD_LDAP -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 464 -m comment --comment AAA_JaD_Kerberos -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 88 -m comment --comment AAA_JaD_Kerberos -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 88 -m comment --comment AAA_JaD_Kerberos -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 1002 -m comment --comment ServiceAutomation -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 3001 -m comment --comment ServiceAutomation -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 49518 -m comment --comment ServiceAutomation -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49600 -m comment --comment DESU_OPA -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49599 -m comment --comment "DESU mutual certs port" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49600 -m comment --comment "DESU OPA port" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49652 -m comment --comment "SSP: Required by YUM repository and Docker registry" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 49653 -m comment --comment "SSP: Required by YUM repository and Docker registry" -j ACCEPT
>[8:416] -A INPUT -p tcp -m state --state NEW -m tcp --dport 52000 -m comment --comment "DESU HTTPS port" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 52001 -m comment --comment "DESU HTTP  port" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 52002 -m comment --comment "HTTP access port for storage" -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 161 -m comment --comment CommonAgent -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 162 -m comment --comment CommonAgent -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 165 -m comment --comment CommonAgent -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 111 -m comment --comment "NFS rule udp" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 111 -m comment --comment "NFS rule tcp" -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 2049 -m comment --comment "NFS server rule tcp" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 2049 -m comment --comment "NFS server rule udp" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 20048 -m comment --comment "Mountd server rule udp" -j ACCEPT
>[0:0] -A INPUT -p udp -m state --state NEW -m udp --dport 20048 -m comment --comment "Mountd server rule udp" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 139 -m comment --comment "SAMBA storage" -j ACCEPT
>[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 445 -m comment --comment "SAMBA storage" -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 67 -m comment --comment "permanent_port_v3_inst_srv_1 " -j ACCEPT
>[0:0] -A INPUT -p udp -m udp --dport 69 -m comment --comment "permanent_port_v3_inst_srv_1 " -j ACCEPT
>[0:0] -A INPUT -p tcp -m tcp --dport 49676 -m comment --comment "permanent_port_v3_inst_srv_1 " -j ACCEPT
>[0:0] -A FORWARD -j DOCKER-ISOLATION
>[0:0] -A FORWARD -o docker0 -j DOCKER
>[0:0] -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>[0:0] -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
>[0:0] -A FORWARD -i docker0 -o docker0 -j ACCEPT
>[0:0] -A OUTPUT -p icmp -m icmp --icmp-type 13 -j DROP
>[0:0] -A OUTPUT -p icmp -m icmp --icmp-type 14 -j DROP
>[0:0] -A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 5000 -j ACCEPT
>[0:0] -A DOCKER-ISOLATION -j RETURN
>COMMIT
># Completed on Fri Jun 22 05:41:18 2018

Actions: View

Attachments on bug 1594205: 1453708 | 1453710 | 1453711 | 1453712 | 1453713