iptables-save

gistfile1.txt

# Generated by iptables-save v1.4.21 on Wed Aug 31 12:44:41 2016
*mangle
:PREROUTING ACCEPT [33566:22200741]
:INPUT ACCEPT [8723:1279108]
:FORWARD ACCEPT [24003:20881794]
:OUTPUT ACCEPT [7492:906643]
:POSTROUTING ACCEPT [31563:21799810]
-A FORWARD -d 192.168.1.77/32 -i eth0 -j MARK --set-xmark 0x2/0xffffffff
-A FORWARD -s 192.168.1.77/32 -i wlan0 -j MARK --set-xmark 0x2/0xffffffff
-A FORWARD -d 192.168.1.101/32 -i eth0 -j MARK --set-xmark 0x3/0xffffffff
-A FORWARD -s 192.168.1.101/32 -i wlan0 -j MARK --set-xmark 0x3/0xffffffff
-A FORWARD -d 127.0.0.1/32 -i eth0 -j MARK --set-xmark 0x5/0xffffffff
-A FORWARD -s 127.0.0.1/32 -i wlan0 -j MARK --set-xmark 0x5/0xffffffff
-A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
COMMIT
# Completed on Wed Aug 31 12:44:41 2016
# Generated by iptables-save v1.4.21 on Wed Aug 31 12:44:41 2016
*nat
:PREROUTING ACCEPT [2858:200800]
:INPUT ACCEPT [447:77770]
:OUTPUT ACCEPT [2727:295512]
:POSTROUTING ACCEPT [2704:291547]
:DOCKER - [0:0]
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
-A POSTROUTING -s 10.42.0.0/24 ! -d 10.42.0.0/24 -j MASQUERADE
-A POSTROUTING -s 192.168.122.0/24 -d 224.0.0.0/24 -j RETURN
-A POSTROUTING -s 192.168.122.0/24 -d 255.255.255.255/32 -j RETURN
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
-A DOCKER -i docker0 -j RETURN
COMMIT
# Completed on Wed Aug 31 12:44:41 2016
# Generated by iptables-save v1.4.21 on Wed Aug 31 12:44:41 2016
*filter
:INPUT ACCEPT [40276:8246169]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [36850:5405273]
:DOCKER - [0:0]
:DOCKER-ISOLATION - [0:0]
-A INPUT -i wlan0 -p udp -m udp --dport 67 -j ACCEPT
-A INPUT -i wlan0 -p tcp -m tcp --dport 67 -j ACCEPT
-A INPUT -i wlan0 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i wlan0 -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT
-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT
-A FORWARD -d 10.42.0.0/24 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.42.0.0/24 -i wlan0 -j ACCEPT
-A FORWARD -i wlan0 -o wlan0 -j ACCEPT
-A FORWARD -o wlan0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i wlan0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -d 192.168.122.0/24 -o virbr0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT
-A FORWARD -i virbr0 -o virbr0 -j ACCEPT
-A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -j DOCKER-ISOLATION
-A FORWARD -o docker0 -j DOCKER
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
-A FORWARD -i docker0 -o docker0 -j ACCEPT
-A OUTPUT -o virbr0 -p udp -m udp --dport 68 -j ACCEPT
-A DOCKER-ISOLATION -j RETURN
COMMIT
# Completed on Wed Aug 31 12:44:41 2016