Attachment 694471 Details for Bug 904098 – /firewalld-0.2.11-2.fc18.noarch.txt -> Output from iptables-save

/firewalld-0.2.11-2.fc18.noarch.txt -> Output from iptables-save

firewalld-0.2.11-2.fc18.noarch.txt (text/plain), 7.78 KB, created by Grosswiler Roger on 2013-02-07 13:04:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Grosswiler Roger

Created: 2013-02-07 13:04:01 UTC

Size: 7.78 KB

patch

obsolete

># Generated by iptables-save v1.4.16.2 on Thu Feb  7 13:31:02 2013
>*nat
>:PREROUTING ACCEPT [3012:172935]
>:INPUT ACCEPT [1618:96970]
>:OUTPUT ACCEPT [5302:397387]
>:POSTROUTING ACCEPT [1225:80740]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_ZONES - [0:0]
>:POSTROUTING_direct - [0:0]
>:POST_ZONE_external - [0:0]
>:POST_ZONE_external_allow - [0:0]
>:POST_ZONE_external_deny - [0:0]
>:POST_ZONE_public - [0:0]
>:POST_ZONE_public_allow - [0:0]
>:POST_ZONE_public_deny - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_ZONE_public - [0:0]
>:PRE_ZONE_public_allow - [0:0]
>:PRE_ZONE_public_deny - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A POSTROUTING -j POSTROUTING_ZONES
>-A POSTROUTING_ZONES -o eth0 -j POST_ZONE_public
>-A POSTROUTING_ZONES -o eth1 -j POST_ZONE_public
>-A POST_ZONE_external -j POST_ZONE_external_deny
>-A POST_ZONE_external -j POST_ZONE_external_allow
>-A POST_ZONE_external_allow -j MASQUERADE
>-A POST_ZONE_public -j POST_ZONE_public_deny
>-A POST_ZONE_public -j POST_ZONE_public_allow
>-A POST_ZONE_public_allow -j MASQUERADE
>-A PREROUTING_ZONES -i eth0 -j PRE_ZONE_public
>-A PREROUTING_ZONES -i eth1 -j PRE_ZONE_public
>-A PRE_ZONE_public -j PRE_ZONE_public_deny
>-A PRE_ZONE_public -j PRE_ZONE_public_allow
>COMMIT
># Completed on Thu Feb  7 13:31:02 2013
># Generated by iptables-save v1.4.16.2 on Thu Feb  7 13:31:02 2013
>*mangle
>:PREROUTING ACCEPT [150526:31872186]
>:INPUT ACCEPT [150518:31871866]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [152807:48834397]
>:POSTROUTING ACCEPT [152824:48839126]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_direct - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_ZONE_public - [0:0]
>:PRE_ZONE_public_allow - [0:0]
>:PRE_ZONE_public_deny - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A INPUT -j INPUT_direct
>-A FORWARD -j FORWARD_direct
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A PREROUTING_ZONES -i eth0 -j PRE_ZONE_public
>-A PREROUTING_ZONES -i eth1 -j PRE_ZONE_public
>-A PRE_ZONE_public -j PRE_ZONE_public_deny
>-A PRE_ZONE_public -j PRE_ZONE_public_allow
>COMMIT
># Completed on Thu Feb  7 13:31:02 2013
># Generated by iptables-save v1.4.16.2 on Thu Feb  7 13:31:02 2013
>*filter
>:INPUT ACCEPT [0:0]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [152054:48735076]
>:FORWARD_ZONES - [0:0]
>:FORWARD_direct - [0:0]
>:FWDI_ZONE_public - [0:0]
>:FWDI_ZONE_public_allow - [0:0]
>:FWDI_ZONE_public_deny - [0:0]
>:FWDO_ZONE_external - [0:0]
>:FWDO_ZONE_external_allow - [0:0]
>:FWDO_ZONE_external_deny - [0:0]
>:FWDO_ZONE_public - [0:0]
>:FWDO_ZONE_public_allow - [0:0]
>:FWDO_ZONE_public_deny - [0:0]
>:INPUT_ZONES - [0:0]
>:INPUT_direct - [0:0]
>:IN_ZONE_dmz - [0:0]
>:IN_ZONE_dmz_allow - [0:0]
>:IN_ZONE_dmz_deny - [0:0]
>:IN_ZONE_external - [0:0]
>:IN_ZONE_external_allow - [0:0]
>:IN_ZONE_external_deny - [0:0]
>:IN_ZONE_home - [0:0]
>:IN_ZONE_home_allow - [0:0]
>:IN_ZONE_home_deny - [0:0]
>:IN_ZONE_internal - [0:0]
>:IN_ZONE_internal_allow - [0:0]
>:IN_ZONE_internal_deny - [0:0]
>:IN_ZONE_public - [0:0]
>:IN_ZONE_public_allow - [0:0]
>:IN_ZONE_public_deny - [0:0]
>:IN_ZONE_work - [0:0]
>:IN_ZONE_work_allow - [0:0]
>:IN_ZONE_work_deny - [0:0]
>:OUTPUT_direct - [0:0]
>:fail2ban-SSH - [0:0]
>:fail2ban-sasl - [0:0]
>-A INPUT -p tcp -m tcp --dport 25 -j fail2ban-sasl
>-A INPUT -p tcp -m tcp --dport 22 -j fail2ban-SSH
>-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A INPUT -i lo -j ACCEPT
>-A INPUT -j INPUT_direct
>-A INPUT -j INPUT_ZONES
>-A INPUT -p icmp -j ACCEPT
>-A INPUT -j REJECT --reject-with icmp-host-prohibited
>-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A FORWARD -i lo -j ACCEPT
>-A FORWARD -j FORWARD_direct
>-A FORWARD -j FORWARD_ZONES
>-A FORWARD -p icmp -j ACCEPT
>-A FORWARD -j REJECT --reject-with icmp-host-prohibited
>-A OUTPUT -j OUTPUT_direct
>-A FORWARD_ZONES -o eth0 -j FWDO_ZONE_public
>-A FORWARD_ZONES -i eth0 -j FWDI_ZONE_public
>-A FORWARD_ZONES -o eth1 -j FWDO_ZONE_public
>-A FORWARD_ZONES -i eth1 -j FWDI_ZONE_public
>-A FWDI_ZONE_public -j FWDI_ZONE_public_deny
>-A FWDI_ZONE_public -j FWDI_ZONE_public_allow
>-A FWDO_ZONE_external -j FWDO_ZONE_external_deny
>-A FWDO_ZONE_external -j FWDO_ZONE_external_allow
>-A FWDO_ZONE_external_allow -j ACCEPT
>-A FWDO_ZONE_public -j FWDO_ZONE_public_deny
>-A FWDO_ZONE_public -j FWDO_ZONE_public_allow
>-A FWDO_ZONE_public_allow -j ACCEPT
>-A INPUT_ZONES -i eth0 -j IN_ZONE_public
>-A INPUT_ZONES -i eth1 -j IN_ZONE_public
>-A IN_ZONE_dmz -j IN_ZONE_dmz_deny
>-A IN_ZONE_dmz -j IN_ZONE_dmz_allow
>-A IN_ZONE_dmz_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_external -j IN_ZONE_external_deny
>-A IN_ZONE_external -j IN_ZONE_external_allow
>-A IN_ZONE_external_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home -j IN_ZONE_home_deny
>-A IN_ZONE_home -j IN_ZONE_home_allow
>-A IN_ZONE_home_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal -j IN_ZONE_internal_deny
>-A IN_ZONE_internal -j IN_ZONE_internal_allow
>-A IN_ZONE_internal_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public -j IN_ZONE_public_deny
>-A IN_ZONE_public -j IN_ZONE_public_allow
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 53 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 53 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 4190 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 995 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 25 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 465 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 993 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 5222:5223 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 587 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 143 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 5269 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work -j IN_ZONE_work_deny
>-A IN_ZONE_work -j IN_ZONE_work_allow
>-A IN_ZONE_work_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A fail2ban-SSH -j RETURN
>-A fail2ban-sasl -j RETURN
>COMMIT
># Completed on Thu Feb  7 13:31:02 2013

Actions: View

Attachments on bug 904098: 691696 | 694471 | 694472