Attachment 691696 Details for Bug 904098 – Firewall-D iptables-save output

Firewall-D iptables-save output

iptables_output_firewalld-0.2.12-1.fc18.txt (text/plain), 7.75 KB, created by Grosswiler Roger on 2013-02-01 19:20:07 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Grosswiler Roger

Created: 2013-02-01 19:20:07 UTC

Size: 7.75 KB

patch

obsolete

># Generated by iptables-save v1.4.16.2 on Fri Feb  1 20:14:23 2013
>*nat
>:PREROUTING ACCEPT [16:876]
>:INPUT ACCEPT [13:780]
>:OUTPUT ACCEPT [140:9769]
>:POSTROUTING ACCEPT [97:6395]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_ZONES - [0:0]
>:POSTROUTING_direct - [0:0]
>:POST_ZONE_external - [0:0]
>:POST_ZONE_external_allow - [0:0]
>:POST_ZONE_external_deny - [0:0]
>:POST_ZONE_public - [0:0]
>:POST_ZONE_public_allow - [0:0]
>:POST_ZONE_public_deny - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_ZONE_public - [0:0]
>:PRE_ZONE_public_allow - [0:0]
>:PRE_ZONE_public_deny - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A POSTROUTING -j POSTROUTING_ZONES
>-A POSTROUTING_ZONES -o eth0 -j POST_ZONE_public
>-A POSTROUTING_ZONES -o eth1 -j POST_ZONE_public
>-A POST_ZONE_external -j POST_ZONE_external_deny
>-A POST_ZONE_external -j POST_ZONE_external_allow
>-A POST_ZONE_external_allow -j MASQUERADE
>-A POST_ZONE_public -j POST_ZONE_public_deny
>-A POST_ZONE_public -j POST_ZONE_public_allow
>-A POST_ZONE_public_allow -j MASQUERADE
>-A PREROUTING_ZONES -i eth0 -j PRE_ZONE_public
>-A PREROUTING_ZONES -i eth1 -j PRE_ZONE_public
>-A PRE_ZONE_public -j PRE_ZONE_public_deny
>-A PRE_ZONE_public -j PRE_ZONE_public_allow
>COMMIT
># Completed on Fri Feb  1 20:14:23 2013
># Generated by iptables-save v1.4.16.2 on Fri Feb  1 20:14:23 2013
>*mangle
>:PREROUTING ACCEPT [1648:171318]
>:INPUT ACCEPT [1648:171318]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [1465:241056]
>:POSTROUTING ACCEPT [1483:246182]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_direct - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_ZONE_public - [0:0]
>:PRE_ZONE_public_allow - [0:0]
>:PRE_ZONE_public_deny - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A INPUT -j INPUT_direct
>-A FORWARD -j FORWARD_direct
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A PREROUTING_ZONES -i eth0 -j PRE_ZONE_public
>-A PREROUTING_ZONES -i eth1 -j PRE_ZONE_public
>-A PRE_ZONE_public -j PRE_ZONE_public_deny
>-A PRE_ZONE_public -j PRE_ZONE_public_allow
>COMMIT
># Completed on Fri Feb  1 20:14:23 2013
># Generated by iptables-save v1.4.16.2 on Fri Feb  1 20:14:23 2013
>*filter
>:INPUT ACCEPT [0:0]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [839:161734]
>:FORWARD_ZONES - [0:0]
>:FORWARD_direct - [0:0]
>:FWDI_ZONE_public - [0:0]
>:FWDI_ZONE_public_allow - [0:0]
>:FWDI_ZONE_public_deny - [0:0]
>:FWDO_ZONE_external - [0:0]
>:FWDO_ZONE_external_allow - [0:0]
>:FWDO_ZONE_external_deny - [0:0]
>:FWDO_ZONE_public - [0:0]
>:FWDO_ZONE_public_allow - [0:0]
>:FWDO_ZONE_public_deny - [0:0]
>:INPUT_ZONES - [0:0]
>:INPUT_direct - [0:0]
>:IN_ZONE_dmz - [0:0]
>:IN_ZONE_dmz_allow - [0:0]
>:IN_ZONE_dmz_deny - [0:0]
>:IN_ZONE_external - [0:0]
>:IN_ZONE_external_allow - [0:0]
>:IN_ZONE_external_deny - [0:0]
>:IN_ZONE_home - [0:0]
>:IN_ZONE_home_allow - [0:0]
>:IN_ZONE_home_deny - [0:0]
>:IN_ZONE_internal - [0:0]
>:IN_ZONE_internal_allow - [0:0]
>:IN_ZONE_internal_deny - [0:0]
>:IN_ZONE_public - [0:0]
>:IN_ZONE_public_allow - [0:0]
>:IN_ZONE_public_deny - [0:0]
>:IN_ZONE_work - [0:0]
>:IN_ZONE_work_allow - [0:0]
>:IN_ZONE_work_deny - [0:0]
>:OUTPUT_direct - [0:0]
>:fail2ban-SSH - [0:0]
>:fail2ban-sasl - [0:0]
>-A INPUT -p tcp -m tcp --dport 25 -j fail2ban-sasl
>-A INPUT -p tcp -m tcp --dport 22 -j fail2ban-SSH
>-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A INPUT -i lo -j ACCEPT
>-A INPUT -j INPUT_direct
>-A INPUT -j INPUT_ZONES
>-A INPUT -p icmp -j ACCEPT
>-A INPUT -j REJECT --reject-with icmp-host-prohibited
>-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A FORWARD -i lo -j ACCEPT
>-A FORWARD -j FORWARD_direct
>-A FORWARD -j FORWARD_ZONES
>-A FORWARD -p icmp -j ACCEPT
>-A FORWARD -j REJECT --reject-with icmp-host-prohibited
>-A OUTPUT -j OUTPUT_direct
>-A FORWARD_ZONES -o eth0 -j FWDO_ZONE_public
>-A FORWARD_ZONES -i eth0 -j FWDI_ZONE_public
>-A FORWARD_ZONES -o eth1 -j FWDO_ZONE_public
>-A FORWARD_ZONES -i eth1 -j FWDI_ZONE_public
>-A FWDI_ZONE_public -j FWDI_ZONE_public_deny
>-A FWDI_ZONE_public -j FWDI_ZONE_public_allow
>-A FWDO_ZONE_external -j FWDO_ZONE_external_deny
>-A FWDO_ZONE_external -j FWDO_ZONE_external_allow
>-A FWDO_ZONE_external_allow -j ACCEPT
>-A FWDO_ZONE_public -j FWDO_ZONE_public_deny
>-A FWDO_ZONE_public -j FWDO_ZONE_public_allow
>-A FWDO_ZONE_public_allow -j ACCEPT
>-A INPUT_ZONES -i eth0 -j IN_ZONE_public
>-A INPUT_ZONES -i eth1 -j IN_ZONE_public
>-A IN_ZONE_dmz -j IN_ZONE_dmz_deny
>-A IN_ZONE_dmz -j IN_ZONE_dmz_allow
>-A IN_ZONE_dmz_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_external -j IN_ZONE_external_deny
>-A IN_ZONE_external -j IN_ZONE_external_allow
>-A IN_ZONE_external_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home -j IN_ZONE_home_deny
>-A IN_ZONE_home -j IN_ZONE_home_allow
>-A IN_ZONE_home_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal -j IN_ZONE_internal_deny
>-A IN_ZONE_internal -j IN_ZONE_internal_allow
>-A IN_ZONE_internal_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public -j IN_ZONE_public_deny
>-A IN_ZONE_public -j IN_ZONE_public_allow
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 53 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 53 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 4190 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 995 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 25 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 465 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 993 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 5222:5223 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 587 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 143 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 5269 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work -j IN_ZONE_work_deny
>-A IN_ZONE_work -j IN_ZONE_work_allow
>-A IN_ZONE_work_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A fail2ban-SSH -j RETURN
>-A fail2ban-sasl -j RETURN
>COMMIT
># Completed on Fri Feb  1 20:14:23 2013

Actions: View

Attachments on bug 904098: 691696 | 694471 | 694472