Codice:Chain INPUT (policy DROP) target prot opt source destination ACCEPT tcp -- dns.inet.it anywhere tcp dpt:domain ACCEPT udp -- dns.inet.it anywhere udp dpt:domain ACCEPT tcp -- dns.inet.it anywhere tcp spt:domain ACCEPT udp -- dns.inet.it anywhere udp spt:domain ACCEPT tcp -- google-public-dns-a.google.com anywhere tcp dpt:domain ACCEPT udp -- google-public-dns-a.google.com anywhere udp dpt:domain ACCEPT tcp -- google-public-dns-a.google.com anywhere tcp spt:domain ACCEPT udp -- google-public-dns-a.google.com anywhere udp spt:domain LOCALINPUT all -- anywhere anywhere ACCEPT all -- anywhere anywhere SYNFLOOD tcp -- anywhere anywhere tcpflags: FIN,SYN,RST,ACK/SYN INVALID tcp -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:domain ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:imap2 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssmtp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:submission ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:imaps ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:pop3s ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:222 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:7777 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:webmin ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:10011 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:22003 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:22005 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:30033 ACCEPT tcp -- anywhere anywhere state NEW tcp dpts:35000:35999 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:41144 ACCEPT udp -- anywhere anywhere state NEW udp dpt:20 ACCEPT udp -- anywhere anywhere state NEW udp dpt:fsp ACCEPT udp -- anywhere anywhere state NEW udp dpt:domain ACCEPT udp -- anywhere anywhere state NEW udp dpt:7777 ACCEPT udp -- anywhere anywhere state NEW udp dpt:9987 ACCEPT udp -- anywhere anywhere state NEW udp dpt:22003 ACCEPT udp -- anywhere anywhere state NEW udp dpt:22126 ACCEPT icmp -- anywhere anywhere icmp echo-request limit: avg 1/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp echo-reply limit: avg 1/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp destination-unreachable LOGDROPIN all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT tcp -- anywhere dns.inet.it tcp dpt:domain ACCEPT udp -- anywhere dns.inet.it udp dpt:domain ACCEPT tcp -- anywhere dns.inet.it tcp spt:domain ACCEPT udp -- anywhere dns.inet.it udp spt:domain ACCEPT tcp -- anywhere google-public-dns-a.google.com tcp dpt:domain ACCEPT udp -- anywhere google-public-dns-a.google.com udp dpt:domain ACCEPT tcp -- anywhere google-public-dns-a.google.com tcp spt:domain ACCEPT udp -- anywhere google-public-dns-a.google.com udp spt:domain LOCALOUTPUT all -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp spt:domain ACCEPT udp -- anywhere anywhere udp spt:domain ACCEPT all -- anywhere anywhere INVALID tcp -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:domain ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:auth ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:22003 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:22005 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:7777 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:webmin ACCEPT udp -- anywhere anywhere state NEW udp dpt:20 ACCEPT udp -- anywhere anywhere state NEW udp dpt:fsp ACCEPT udp -- anywhere anywhere state NEW udp dpt:domain ACCEPT udp -- anywhere anywhere state NEW udp dpt:113 ACCEPT udp -- anywhere anywhere state NEW udp dpt:ntp ACCEPT udp -- anywhere anywhere state NEW udp dpts:2011:2110 ACCEPT udp -- anywhere anywhere state NEW udp dpt:7777 ACCEPT udp -- anywhere anywhere state NEW udp dpt:22003 ACCEPT udp -- anywhere anywhere state NEW udp dpt:22126 ACCEPT udp -- anywhere anywhere state NEW udp dpts:33434:33523 ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp destination-unreachable LOGDROPOUT all -- anywhere anywhere Chain ALLOWIN (1 references) target prot opt source destination ACCEPT all -- 128.64.210.118 anywhere ACCEPT all -- host139-17-static.61-79-b.business.telecomitalia.it anywhere ACCEPT all -- host41-43-dynamic.11-87-r.retail.telecomitalia.it anywhere ACCEPT all -- host54-39-dynamic.11-87-r.retail.telecomitalia.it anywhere Chain ALLOWOUT (1 references) target prot opt source destination ACCEPT all -- anywhere 128.64.210.118 ACCEPT all -- anywhere host139-17-static.61-79-b.business.telecomitalia.it ACCEPT all -- anywhere host41-43-dynamic.11-87-r.retail.telecomitalia.it ACCEPT all -- anywhere host54-39-dynamic.11-87-r.retail.telecomitalia.it Chain CCDROP (13210 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix "Firewall: *CC_DENY* " DROP all -- anywhere anywhere Chain CC_DENY (1 references) target prot opt source destination CCDROP all -- 223.255.244.0/22 anywhere CCDROP all -- 223.224.0.0/12 anywhere CCDROP all -- host_bb.wishnetkolkata.com/19 anywhere CCDROP all -- 223.196.0.0/16 anywhere CCDROP all -- 223.176.0.0/12 anywhere CCDROP all -- 223.165.24.0/21 anywhere CCDROP all -- 223.130.4.0/22 anywhere CCDROP all -- segment-223-30.sify.net/15 anywhere CCDROP all -- Kol-223.29.192.0.PMPL-Broadband.net/20 anywhere CCDROP all -- 223.27.120.0/22 anywhere CCDROP all -- 223.26.32.0/20 anywhere CCDROP all -- lan-221-134-0-0.maa.sify.net/15 anywhere
