Attachment 893505 Details for Bug 997688 – output of iptables-save command

output of iptables-save command

iptables-save.txt (text/plain), 9.57 KB, created by Ken Sugawara on 2014-05-08 02:25:40 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ken Sugawara

Created: 2014-05-08 02:25:40 UTC

Size: 9.57 KB

patch

obsolete

># Generated by iptables-save v1.4.19.1 on Thu May  8 11:14:17 2014
>*nat
>:PREROUTING ACCEPT [2946:275661]
>:INPUT ACCEPT [0:0]
>:OUTPUT ACCEPT [293:19187]
>:POSTROUTING ACCEPT [3041:279417]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_ZONES - [0:0]
>:POSTROUTING_ZONES_SOURCE - [0:0]
>:POSTROUTING_direct - [0:0]
>:POST_internal - [0:0]
>:POST_internal_allow - [0:0]
>:POST_internal_deny - [0:0]
>:POST_internal_log - [0:0]
>:POST_public - [0:0]
>:POST_public_allow - [0:0]
>:POST_public_deny - [0:0]
>:POST_public_log - [0:0]
>:POST_trusted - [0:0]
>:POST_trusted_allow - [0:0]
>:POST_trusted_deny - [0:0]
>:POST_trusted_log - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_ZONES_SOURCE - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_internal - [0:0]
>:PRE_internal_allow - [0:0]
>:PRE_internal_deny - [0:0]
>:PRE_internal_log - [0:0]
>:PRE_public - [0:0]
>:PRE_public_allow - [0:0]
>:PRE_public_deny - [0:0]
>:PRE_public_log - [0:0]
>:PRE_trusted - [0:0]
>:PRE_trusted_allow - [0:0]
>:PRE_trusted_deny - [0:0]
>:PRE_trusted_log - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES_SOURCE
>-A PREROUTING -j PREROUTING_ZONES
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -s 192.168.122.0/24 -d 224.0.0.0/24 -j RETURN
>-A POSTROUTING -s 192.168.122.0/24 -d 255.255.255.255/32 -j RETURN
>-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535
>-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535
>-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE
>-A POSTROUTING -j POSTROUTING_direct
>-A POSTROUTING -j POSTROUTING_ZONES_SOURCE
>-A POSTROUTING -j POSTROUTING_ZONES
>-A POSTROUTING_ZONES -o br0 -g POST_public
>-A POSTROUTING_ZONES -o p4p1 -g POST_public
>-A POSTROUTING_ZONES -o virbr0 -g POST_trusted
>-A POSTROUTING_ZONES -o br1 -g POST_trusted
>-A POSTROUTING_ZONES -g POST_public
>-A POST_internal -j POST_internal_log
>-A POST_internal -j POST_internal_deny
>-A POST_internal -j POST_internal_allow
>-A POST_public -j POST_public_log
>-A POST_public -j POST_public_deny
>-A POST_public -j POST_public_allow
>-A POST_trusted -j POST_trusted_log
>-A POST_trusted -j POST_trusted_deny
>-A POST_trusted -j POST_trusted_allow
>-A PREROUTING_ZONES -i br0 -g PRE_public
>-A PREROUTING_ZONES -i p4p1 -g PRE_public
>-A PREROUTING_ZONES -i virbr0 -g PRE_trusted
>-A PREROUTING_ZONES -i br1 -g PRE_trusted
>-A PREROUTING_ZONES -g PRE_public
>-A PRE_internal -j PRE_internal_log
>-A PRE_internal -j PRE_internal_deny
>-A PRE_internal -j PRE_internal_allow
>-A PRE_public -j PRE_public_log
>-A PRE_public -j PRE_public_deny
>-A PRE_public -j PRE_public_allow
>-A PRE_trusted -j PRE_trusted_log
>-A PRE_trusted -j PRE_trusted_deny
>-A PRE_trusted -j PRE_trusted_allow
>COMMIT
># Completed on Thu May  8 11:14:17 2014
># Generated by iptables-save v1.4.19.1 on Thu May  8 11:14:17 2014
>*mangle
>:PREROUTING ACCEPT [16645:3757715]
>:INPUT ACCEPT [6854:3139811]
>:FORWARD ACCEPT [13383:1000753]
>:OUTPUT ACCEPT [3070:462358]
>:POSTROUTING ACCEPT [16274:1450331]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>:OUTPUT_direct - [0:0]
>:POSTROUTING_direct - [0:0]
>:PREROUTING_ZONES - [0:0]
>:PREROUTING_ZONES_SOURCE - [0:0]
>:PREROUTING_direct - [0:0]
>:PRE_internal - [0:0]
>:PRE_internal_allow - [0:0]
>:PRE_internal_deny - [0:0]
>:PRE_internal_log - [0:0]
>:PRE_public - [0:0]
>:PRE_public_allow - [0:0]
>:PRE_public_deny - [0:0]
>:PRE_public_log - [0:0]
>:PRE_trusted - [0:0]
>:PRE_trusted_allow - [0:0]
>:PRE_trusted_deny - [0:0]
>:PRE_trusted_log - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A PREROUTING -j PREROUTING_ZONES_SOURCE
>-A PREROUTING -j PREROUTING_ZONES
>-A INPUT -j INPUT_direct
>-A FORWARD -j FORWARD_direct
>-A OUTPUT -j OUTPUT_direct
>-A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
>-A POSTROUTING -j POSTROUTING_direct
>-A PREROUTING_ZONES -i br0 -g PRE_public
>-A PREROUTING_ZONES -i p4p1 -g PRE_public
>-A PREROUTING_ZONES -i virbr0 -g PRE_trusted
>-A PREROUTING_ZONES -i br1 -g PRE_trusted
>-A PREROUTING_ZONES -g PRE_public
>-A PRE_internal -j PRE_internal_log
>-A PRE_internal -j PRE_internal_deny
>-A PRE_internal -j PRE_internal_allow
>-A PRE_public -j PRE_public_log
>-A PRE_public -j PRE_public_deny
>-A PRE_public -j PRE_public_allow
>-A PRE_trusted -j PRE_trusted_log
>-A PRE_trusted -j PRE_trusted_deny
>-A PRE_trusted -j PRE_trusted_allow
>COMMIT
># Completed on Thu May  8 11:14:17 2014
># Generated by iptables-save v1.4.19.1 on Thu May  8 11:14:17 2014
>*security
>:INPUT ACCEPT [3235:2755557]
>:FORWARD ACCEPT [13183:985390]
>:OUTPUT ACCEPT [3099:468019]
>:FORWARD_direct - [0:0]
>:INPUT_direct - [0:0]
>:OUTPUT_direct - [0:0]
>-A INPUT -j INPUT_direct
>-A FORWARD -j FORWARD_direct
>-A OUTPUT -j OUTPUT_direct
>COMMIT
># Completed on Thu May  8 11:14:17 2014
># Generated by iptables-save v1.4.19.1 on Thu May  8 11:14:17 2014
>*raw
>:PREROUTING ACCEPT [16788:3773462]
>:OUTPUT ACCEPT [3099:468019]
>:OUTPUT_direct - [0:0]
>:PREROUTING_direct - [0:0]
>-A PREROUTING -j PREROUTING_direct
>-A OUTPUT -j OUTPUT_direct
>COMMIT
># Completed on Thu May  8 11:14:17 2014
># Generated by iptables-save v1.4.19.1 on Thu May  8 11:14:17 2014
>*filter
>:INPUT ACCEPT [0:0]
>:FORWARD ACCEPT [0:0]
>:OUTPUT ACCEPT [3039:459023]
>:FORWARD_IN_ZONES - [0:0]
>:FORWARD_IN_ZONES_SOURCE - [0:0]
>:FORWARD_OUT_ZONES - [0:0]
>:FORWARD_OUT_ZONES_SOURCE - [0:0]
>:FORWARD_direct - [0:0]
>:FWDI_internal - [0:0]
>:FWDI_internal_allow - [0:0]
>:FWDI_internal_deny - [0:0]
>:FWDI_internal_log - [0:0]
>:FWDI_public - [0:0]
>:FWDI_public_allow - [0:0]
>:FWDI_public_deny - [0:0]
>:FWDI_public_log - [0:0]
>:FWDI_trusted - [0:0]
>:FWDI_trusted_allow - [0:0]
>:FWDI_trusted_deny - [0:0]
>:FWDI_trusted_log - [0:0]
>:FWDO_internal - [0:0]
>:FWDO_internal_allow - [0:0]
>:FWDO_internal_deny - [0:0]
>:FWDO_internal_log - [0:0]
>:FWDO_public - [0:0]
>:FWDO_public_allow - [0:0]
>:FWDO_public_deny - [0:0]
>:FWDO_public_log - [0:0]
>:FWDO_trusted - [0:0]
>:FWDO_trusted_allow - [0:0]
>:FWDO_trusted_deny - [0:0]
>:FWDO_trusted_log - [0:0]
>:INPUT_ZONES - [0:0]
>:INPUT_ZONES_SOURCE - [0:0]
>:INPUT_direct - [0:0]
>:IN_internal - [0:0]
>:IN_internal_allow - [0:0]
>:IN_internal_deny - [0:0]
>:IN_internal_log - [0:0]
>:IN_public - [0:0]
>:IN_public_allow - [0:0]
>:IN_public_deny - [0:0]
>:IN_public_log - [0:0]
>:IN_trusted - [0:0]
>:IN_trusted_allow - [0:0]
>:IN_trusted_deny - [0:0]
>:IN_trusted_log - [0:0]
>:OUTPUT_direct - [0:0]
>-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT
>-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT
>-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT
>-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT
>-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A INPUT -i lo -j ACCEPT
>-A INPUT -j INPUT_direct
>-A INPUT -j INPUT_ZONES_SOURCE
>-A INPUT -j INPUT_ZONES
>-A INPUT -p icmp -j ACCEPT
>-A INPUT -j REJECT --reject-with icmp-host-prohibited
>-A FORWARD -d 192.168.122.0/24 -o virbr0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT
>-A FORWARD -i virbr0 -o virbr0 -j ACCEPT
>-A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable
>-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable
>-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>-A FORWARD -i lo -j ACCEPT
>-A FORWARD -j FORWARD_direct
>-A FORWARD -j FORWARD_IN_ZONES_SOURCE
>-A FORWARD -j FORWARD_IN_ZONES
>-A FORWARD -j FORWARD_OUT_ZONES_SOURCE
>-A FORWARD -j FORWARD_OUT_ZONES
>-A FORWARD -p icmp -j ACCEPT
>-A FORWARD -j REJECT --reject-with icmp-host-prohibited
>-A OUTPUT -j OUTPUT_direct
>-A FORWARD_IN_ZONES -i br0 -g FWDI_public
>-A FORWARD_IN_ZONES -i p4p1 -g FWDI_public
>-A FORWARD_IN_ZONES -i virbr0 -g FWDI_trusted
>-A FORWARD_IN_ZONES -i br1 -g FWDI_trusted
>-A FORWARD_IN_ZONES -g FWDI_public
>-A FORWARD_OUT_ZONES -o br0 -g FWDO_public
>-A FORWARD_OUT_ZONES -o p4p1 -g FWDO_public
>-A FORWARD_OUT_ZONES -o virbr0 -g FWDO_trusted
>-A FORWARD_OUT_ZONES -o br1 -g FWDO_trusted
>-A FORWARD_OUT_ZONES -g FWDO_public
>-A FORWARD_direct -m physdev --physdev-is-bridged -j ACCEPT
>-A FWDI_internal -j FWDI_internal_log
>-A FWDI_internal -j FWDI_internal_deny
>-A FWDI_internal -j FWDI_internal_allow
>-A FWDI_public -j FWDI_public_log
>-A FWDI_public -j FWDI_public_deny
>-A FWDI_public -j FWDI_public_allow
>-A FWDI_trusted -j FWDI_trusted_log
>-A FWDI_trusted -j FWDI_trusted_deny
>-A FWDI_trusted -j FWDI_trusted_allow
>-A FWDO_internal -j FWDO_internal_log
>-A FWDO_internal -j FWDO_internal_deny
>-A FWDO_internal -j FWDO_internal_allow
>-A FWDO_public -j FWDO_public_log
>-A FWDO_public -j FWDO_public_deny
>-A FWDO_public -j FWDO_public_allow
>-A FWDO_trusted -j FWDO_trusted_log
>-A FWDO_trusted -j FWDO_trusted_deny
>-A FWDO_trusted -j FWDO_trusted_allow
>-A INPUT_ZONES -i br0 -g IN_public
>-A INPUT_ZONES -i p4p1 -g IN_public
>-A INPUT_ZONES -i virbr0 -g IN_trusted
>-A INPUT_ZONES -i br1 -g IN_trusted
>-A INPUT_ZONES -g IN_public
>-A IN_internal -j IN_internal_log
>-A IN_internal -j IN_internal_deny
>-A IN_internal -j IN_internal_allow
>-A IN_internal_allow -p tcp -m tcp --dport 21 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_internal_allow -d 224.0.0.251/32 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_internal_allow -p udp -m udp --dport 631 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_internal_allow -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_internal_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_internal_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
>-A IN_public -j IN_public_log
>-A IN_public -j IN_public_deny
>-A IN_public -j IN_public_allow
>-A IN_trusted -j IN_trusted_log
>-A IN_trusted -j IN_trusted_deny
>-A IN_trusted -j IN_trusted_allow
>COMMIT
># Completed on Thu May  8 11:14:17 2014

Actions: View

Attachments on bug 997688: 893502 | 893503 | 893504 | 893505