Attachment 694472 Details for Bug 904098 – /firewalld-0.2.12-2.fc18.noarch.txt -> Output from iptables-save

/firewalld-0.2.12-2.fc18.noarch.txt -> Output from iptables-save

firewalld-0.2.12-2.fc18.noarch.txt (text/plain), 7.59 KB, created by Grosswiler Roger on 2013-02-07 13:04:48 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Grosswiler Roger

Created: 2013-02-07 13:04:48 UTC

Size: 7.59 KB

patch

obsolete

># Generated by iptables-save v1.4.16.2 on Thu Feb  7 13:45:27 2013
>*nat
>:PREROUTING ACCEPT [17:5397]
>:INPUT ACCEPT [3:209]
>:OUTPUT ACCEPT [47:5504]
>:POSTROUTING ACCEPT [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_ZONES - [0:0]
>:POSTROUTING_direct - [0:0]
>:POST_ZONE_external - [0:0]
>:POST_ZONE_external_allow - [0:0]
>:POST_ZONE_external_deny - [0:0]
>:POST_ZONE_public - [0:0]
>:POST_ZONE_public_allow - [0:0]
>:POST_ZONE_public_deny - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_ZONE_public - [0:0]
>:PRE_ZONE_public_allow - [0:0]
>:PRE_ZONE_public_deny - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A POSTROUTING -j POSTROUTING_ZONES
>-A POSTROUTING_ZONES -o eth1 -j POST_ZONE_public
>-A POSTROUTING_ZONES -o eth0 -j POST_ZONE_public
>-A POSTROUTING_ZONES -j POST_ZONE_public
>-A POST_ZONE_external -j POST_ZONE_external_deny
>-A POST_ZONE_external -j POST_ZONE_external_allow
>-A POST_ZONE_external_allow -j MASQUERADE
>-A POST_ZONE_public -j POST_ZONE_public_deny
>-A POST_ZONE_public -j POST_ZONE_public_allow
>-A POST_ZONE_public_allow -j MASQUERADE
>-A PREROUTING_ZONES -i eth1 -j PRE_ZONE_public
>-A PREROUTING_ZONES -i eth0 -j PRE_ZONE_public
>-A PREROUTING_ZONES -j PRE_ZONE_public
>-A PRE_ZONE_public -j PRE_ZONE_public_deny
>-A PRE_ZONE_public -j PRE_ZONE_public_allow
>COMMIT
># Completed on Thu Feb  7 13:45:27 2013
># Generated by iptables-save v1.4.16.2 on Thu Feb  7 13:45:27 2013
>*mangle
>:PREROUTING ACCEPT [18795:26947493]
>:INPUT ACCEPT [18795:26947493]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [10443:619638]
>:POSTROUTING ACCEPT [10443:619638]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_direct - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_ZONE_public - [0:0]
>:PRE_ZONE_public_allow - [0:0]
>:PRE_ZONE_public_deny - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A INPUT -j INPUT_direct
>-A FORWARD -j FORWARD_direct
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A PREROUTING_ZONES -i eth1 -j PRE_ZONE_public
>-A PREROUTING_ZONES -i eth0 -j PRE_ZONE_public
>-A PREROUTING_ZONES -j PRE_ZONE_public
>-A PRE_ZONE_public -j PRE_ZONE_public_deny
>-A PRE_ZONE_public -j PRE_ZONE_public_allow
>COMMIT
># Completed on Thu Feb  7 13:45:27 2013
># Generated by iptables-save v1.4.16.2 on Thu Feb  7 13:45:27 2013
>*filter
>:INPUT ACCEPT [0:0]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [10443:619638]
>:FORWARD_ZONES - [0:0]
>:FORWARD_direct - [0:0]
>:FWDI_ZONE_public - [0:0]
>:FWDI_ZONE_public_allow - [0:0]
>:FWDI_ZONE_public_deny - [0:0]
>:FWDO_ZONE_external - [0:0]
>:FWDO_ZONE_external_allow - [0:0]
>:FWDO_ZONE_external_deny - [0:0]
>:FWDO_ZONE_public - [0:0]
>:FWDO_ZONE_public_allow - [0:0]
>:FWDO_ZONE_public_deny - [0:0]
>:INPUT_ZONES - [0:0]
>:INPUT_direct - [0:0]
>:IN_ZONE_dmz - [0:0]
>:IN_ZONE_dmz_allow - [0:0]
>:IN_ZONE_dmz_deny - [0:0]
>:IN_ZONE_external - [0:0]
>:IN_ZONE_external_allow - [0:0]
>:IN_ZONE_external_deny - [0:0]
>:IN_ZONE_home - [0:0]
>:IN_ZONE_home_allow - [0:0]
>:IN_ZONE_home_deny - [0:0]
>:IN_ZONE_internal - [0:0]
>:IN_ZONE_internal_allow - [0:0]
>:IN_ZONE_internal_deny - [0:0]
>:IN_ZONE_public - [0:0]
>:IN_ZONE_public_allow - [0:0]
>:IN_ZONE_public_deny - [0:0]
>:IN_ZONE_work - [0:0]
>:IN_ZONE_work_allow - [0:0]
>:IN_ZONE_work_deny - [0:0]
>:OUTPUT_direct - [0:0]
>-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A INPUT -i lo -j ACCEPT
>-A INPUT -j INPUT_direct
>-A INPUT -j INPUT_ZONES
>-A INPUT -p icmp -j ACCEPT
>-A INPUT -j REJECT --reject-with icmp-host-prohibited
>-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A FORWARD -i lo -j ACCEPT
>-A FORWARD -j FORWARD_direct
>-A FORWARD -j FORWARD_ZONES
>-A FORWARD -p icmp -j ACCEPT
>-A FORWARD -j REJECT --reject-with icmp-host-prohibited
>-A OUTPUT -j OUTPUT_direct
>-A FORWARD_ZONES -i eth1 -j FWDI_ZONE_public
>-A FORWARD_ZONES -o eth1 -j FWDO_ZONE_public
>-A FORWARD_ZONES -i eth0 -j FWDI_ZONE_public
>-A FORWARD_ZONES -o eth0 -j FWDO_ZONE_public
>-A FORWARD_ZONES -j FWDO_ZONE_public
>-A FORWARD_ZONES -j FWDI_ZONE_public
>-A FWDI_ZONE_public -j FWDI_ZONE_public_deny
>-A FWDI_ZONE_public -j FWDI_ZONE_public_allow
>-A FWDO_ZONE_external -j FWDO_ZONE_external_deny
>-A FWDO_ZONE_external -j FWDO_ZONE_external_allow
>-A FWDO_ZONE_external_allow -j ACCEPT
>-A FWDO_ZONE_public -j FWDO_ZONE_public_deny
>-A FWDO_ZONE_public -j FWDO_ZONE_public_allow
>-A FWDO_ZONE_public_allow -j ACCEPT
>-A INPUT_ZONES -i eth1 -j IN_ZONE_public
>-A INPUT_ZONES -i eth0 -j IN_ZONE_public
>-A INPUT_ZONES -j IN_ZONE_public
>-A IN_ZONE_dmz -j IN_ZONE_dmz_deny
>-A IN_ZONE_dmz -j IN_ZONE_dmz_allow
>-A IN_ZONE_dmz_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_external -j IN_ZONE_external_deny
>-A IN_ZONE_external -j IN_ZONE_external_allow
>-A IN_ZONE_external_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home -j IN_ZONE_home_deny
>-A IN_ZONE_home -j IN_ZONE_home_allow
>-A IN_ZONE_home_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal -j IN_ZONE_internal_deny
>-A IN_ZONE_internal -j IN_ZONE_internal_allow
>-A IN_ZONE_internal_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public -j IN_ZONE_public_deny
>-A IN_ZONE_public -j IN_ZONE_public_allow
>-A IN_ZONE_public_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 53 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 53 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 4190 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 995 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 25 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 465 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 993 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 5222:5223 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 587 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 143 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 5269 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work -j IN_ZONE_work_deny
>-A IN_ZONE_work -j IN_ZONE_work_allow
>-A IN_ZONE_work_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>COMMIT
># Completed on Thu Feb  7 13:45:27 2013

Actions: View

Attachments on bug 904098: 691696 | 694471 | 694472