Created
August 8, 2012 21:44
-
-
Save barik/3299055 to your computer and use it in GitHub Desktop.
ciigar firewall
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Chain INPUT (policy ACCEPT) | |
target prot opt source destination | |
RH-Firewall-1-INPUT all -- anywhere anywhere | |
Chain FORWARD (policy ACCEPT) | |
target prot opt source destination | |
RH-Firewall-1-INPUT all -- anywhere anywhere | |
Chain OUTPUT (policy ACCEPT) | |
target prot opt source destination | |
Chain RH-Firewall-1-INPUT (2 references) | |
target prot opt source destination | |
ACCEPT all -- anywhere anywhere | |
ACCEPT icmp -- anywhere anywhere icmp any | |
ACCEPT esp -- anywhere anywhere | |
ACCEPT ah -- anywhere anywhere | |
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns | |
ACCEPT udp -- anywhere anywhere udp dpt:ipp | |
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp | |
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:afs3-callback | |
ACCEPT udp -- anywhere anywhere state NEW udp dpt:afs3-callback | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:afs3-errors | |
ACCEPT udp -- anywhere anywhere state NEW udp dpt:afs3-errors | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http | |
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited | |
[root@ciigar ~]# iptables --list | |
Chain INPUT (policy ACCEPT) | |
target prot opt source destination | |
RH-Firewall-1-INPUT all -- anywhere anywhere | |
Chain FORWARD (policy ACCEPT) | |
target prot opt source destination | |
RH-Firewall-1-INPUT all -- anywhere anywhere | |
Chain OUTPUT (policy ACCEPT) | |
target prot opt source destination | |
Chain RH-Firewall-1-INPUT (2 references) | |
target prot opt source destination | |
ACCEPT all -- anywhere anywhere | |
ACCEPT icmp -- anywhere anywhere icmp any | |
ACCEPT esp -- anywhere anywhere | |
ACCEPT ah -- anywhere anywhere | |
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns | |
ACCEPT udp -- anywhere anywhere udp dpt:ipp | |
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp | |
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:afs3-callback | |
ACCEPT udp -- anywhere anywhere state NEW udp dpt:afs3-callback | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:afs3-errors | |
ACCEPT udp -- anywhere anywhere state NEW udp dpt:afs3-errors | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp | |
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http | |
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited | |
[root@ciigar ~]# |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment