Attachment 716071 Details for Bug 922518 – 'iptables save' output from 0.2.12-4 after second restart

'iptables save' output from 0.2.12-4 after second restart

save-output-0.2.12-4-broken (text/plain), 8.00 KB, created by Cole Robinson on 2013-03-25 15:40:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Cole Robinson

Created: 2013-03-25 15:40:30 UTC

Size: 8.00 KB

patch

obsolete

># Generated by iptables-save v1.4.16.2 on Mon Mar 25 11:36:00 2013
>*mangle
>:PREROUTING ACCEPT [376:75586]
>:INPUT ACCEPT [376:75586]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [315:35830]
>:POSTROUTING ACCEPT [315:35830]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_direct - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_ZONE_public - [0:0]
>:PRE_ZONE_public_allow - [0:0]
>:PRE_ZONE_public_deny - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A INPUT -j INPUT_direct
>-A FORWARD -j FORWARD_direct
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A PREROUTING_ZONES -i eth0 -g PRE_ZONE_public
>-A PREROUTING_ZONES -g PRE_ZONE_public
>-A PRE_ZONE_public -j PRE_ZONE_public_deny
>-A PRE_ZONE_public -j PRE_ZONE_public_allow
>COMMIT
># Completed on Mon Mar 25 11:36:00 2013
># Generated by iptables-save v1.4.16.2 on Mon Mar 25 11:36:00 2013
>*nat
>:PREROUTING ACCEPT [42:6681]
>:INPUT ACCEPT [0:0]
>:OUTPUT ACCEPT [10:918]
>:POSTROUTING ACCEPT [10:918]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_ZONES - [0:0]
>:POSTROUTING_direct - [0:0]
>:POST_ZONE_external - [0:0]
>:POST_ZONE_external_allow - [0:0]
>:POST_ZONE_external_deny - [0:0]
>:POST_ZONE_public - [0:0]
>:POST_ZONE_public_allow - [0:0]
>:POST_ZONE_public_deny - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_ZONE_public - [0:0]
>:PRE_ZONE_public_allow - [0:0]
>:PRE_ZONE_public_deny - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -j POSTROUTING_direct
>-A POSTROUTING -j POSTROUTING_ZONES
>-A POSTROUTING_ZONES -o eth0 -g POST_ZONE_public
>-A POSTROUTING_ZONES -g POST_ZONE_public
>-A POST_ZONE_external -j POST_ZONE_external_deny
>-A POST_ZONE_external -j POST_ZONE_external_allow
>-A POST_ZONE_external_allow -j MASQUERADE
>-A POST_ZONE_public -j POST_ZONE_public_deny
>-A POST_ZONE_public -j POST_ZONE_public_allow
>-A PREROUTING_ZONES -i eth0 -g PRE_ZONE_public
>-A PREROUTING_ZONES -g PRE_ZONE_public
>-A PRE_ZONE_public -j PRE_ZONE_public_deny
>-A PRE_ZONE_public -j PRE_ZONE_public_allow
>COMMIT
># Completed on Mon Mar 25 11:36:00 2013
># Generated by iptables-save v1.4.16.2 on Mon Mar 25 11:36:00 2013
>*filter
>:INPUT ACCEPT [0:0]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [315:35830]
>:FORWARD_IN_ZONES - [0:0]
>:FORWARD_OUT_ZONES - [0:0]
>:FORWARD_direct - [0:0]
>:FWDI_ZONE_public - [0:0]
>:FWDI_ZONE_public_allow - [0:0]
>:FWDI_ZONE_public_deny - [0:0]
>:FWDO_ZONE_external - [0:0]
>:FWDO_ZONE_external_allow - [0:0]
>:FWDO_ZONE_external_deny - [0:0]
>:FWDO_ZONE_public - [0:0]
>:FWDO_ZONE_public_allow - [0:0]
>:FWDO_ZONE_public_deny - [0:0]
>:INPUT_ZONES - [0:0]
>:INPUT_direct - [0:0]
>:IN_ZONE_dmz - [0:0]
>:IN_ZONE_dmz_allow - [0:0]
>:IN_ZONE_dmz_deny - [0:0]
>:IN_ZONE_external - [0:0]
>:IN_ZONE_external_allow - [0:0]
>:IN_ZONE_external_deny - [0:0]
>:IN_ZONE_home - [0:0]
>:IN_ZONE_home_allow - [0:0]
>:IN_ZONE_home_deny - [0:0]
>:IN_ZONE_internal - [0:0]
>:IN_ZONE_internal_allow - [0:0]
>:IN_ZONE_internal_deny - [0:0]
>:IN_ZONE_public - [0:0]
>:IN_ZONE_public_allow - [0:0]
>:IN_ZONE_public_deny - [0:0]
>:IN_ZONE_work - [0:0]
>:IN_ZONE_work_allow - [0:0]
>:IN_ZONE_work_deny - [0:0]
>:OUTPUT_direct - [0:0]
>-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A INPUT -i lo -j ACCEPT
>-A INPUT -j INPUT_direct
>-A INPUT -p icmp -j ACCEPT
>-A INPUT -j REJECT --reject-with icmp-host-prohibited
>-A INPUT -j INPUT_ZONES
>-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A FORWARD -i lo -j ACCEPT
>-A FORWARD -j FORWARD_direct
>-A FORWARD -j FORWARD_IN_ZONES
>-A FORWARD -j FORWARD_OUT_ZONES
>-A FORWARD -p icmp -j ACCEPT
>-A FORWARD -j REJECT --reject-with icmp-host-prohibited
>-A OUTPUT -j OUTPUT_direct
>-A FORWARD_IN_ZONES -i eth0 -g FWDI_ZONE_public
>-A FORWARD_IN_ZONES -g FWDI_ZONE_public
>-A FORWARD_OUT_ZONES -o eth0 -g FWDO_ZONE_public
>-A FORWARD_OUT_ZONES -g FWDO_ZONE_public
>-A FWDI_ZONE_public -j FWDI_ZONE_public_deny
>-A FWDI_ZONE_public -j FWDI_ZONE_public_allow
>-A FWDO_ZONE_external -j FWDO_ZONE_external_deny
>-A FWDO_ZONE_external -j FWDO_ZONE_external_allow
>-A FWDO_ZONE_external_allow -j ACCEPT
>-A FWDO_ZONE_public -j FWDO_ZONE_public_deny
>-A FWDO_ZONE_public -j FWDO_ZONE_public_allow
>-A INPUT_ZONES -i eth0 -g IN_ZONE_public
>-A INPUT_ZONES -g IN_ZONE_public
>-A IN_ZONE_dmz -j IN_ZONE_dmz_deny
>-A IN_ZONE_dmz -j IN_ZONE_dmz_allow
>-A IN_ZONE_dmz_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_external -j IN_ZONE_external_deny
>-A IN_ZONE_external -j IN_ZONE_external_allow
>-A IN_ZONE_external_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home -j IN_ZONE_home_deny
>-A IN_ZONE_home -j IN_ZONE_home_allow
>-A IN_ZONE_home_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_home_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal -j IN_ZONE_internal_deny
>-A IN_ZONE_internal -j IN_ZONE_internal_allow
>-A IN_ZONE_internal_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_internal_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public -j IN_ZONE_public_deny
>-A IN_ZONE_public -j IN_ZONE_public_allow
>-A IN_ZONE_public_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 139 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 445 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 2049 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 69 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 111 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 20048 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 111 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 20048 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 6200 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 3128 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p udp -m udp --dport 1234 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 1234:1237 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_public_allow -p tcp -m tcp --dport 6200 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work -j IN_ZONE_work_deny
>-A IN_ZONE_work -j IN_ZONE_work_allow
>-A IN_ZONE_work_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_ZONE_work_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>COMMIT
># Completed on Mon Mar 25 11:36:00 2013

Actions: View

Attachments on bug 922518: 716069 | 716070 | 716071