Created
January 12, 2022 22:22
-
-
Save REBELinBLUE/2f5a90e9562f8d9ab163b37427134140 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ❯ sudo iptables -L | |
| Chain INPUT (policy DROP) | |
| target prot opt source destination | |
| DOS_PROTECT all -- anywhere anywhere | |
| INPUT_FIREWALL all -- anywhere anywhere | |
| INPUT_PROTECT all -- anywhere anywhere | |
| Chain FORWARD (policy DROP) | |
| target prot opt source destination | |
| FORWARD_FIREWALL all -- anywhere anywhere | |
| Chain OUTPUT (policy ACCEPT) | |
| target prot opt source destination | |
| Chain DOS_PROTECT (1 references) | |
| target prot opt source destination | |
| RETURN icmp -- anywhere anywhere icmp echo-request limit: avg 1/sec burst 5 | |
| DROP icmp -- anywhere anywhere icmp echo-request | |
| RETURN tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5 | |
| DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST | |
| RETURN tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 10000/sec burst 100 | |
| DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN | |
| Chain FORWARD_FIREWALL (1 references) | |
| target prot opt source destination | |
| ACCEPT tcp -- 192.168.1.0/24 anywhere tcp | |
| ACCEPT udp -- 192.168.1.0/24 anywhere udp | |
| Chain INPUT_FIREWALL (1 references) | |
| target prot opt source destination | |
| ACCEPT udp -- localhost.lan anywhere | |
| ACCEPT tcp -- localhost.lan anywhere | |
| ACCEPT tcp -- 192.168.1.0/24 anywhere tcp | |
| ACCEPT udp -- 192.168.1.0/24 anywhere udp | |
| Chain INPUT_PROTECT (1 references) | |
| target prot opt source destination | |
| ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:9222 | |
| ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:telnet | |
| DROP tcp -- anywhere anywhere tcp dpt:9222 | |
| DROP tcp -- anywhere anywhere tcp dpt:telnet |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment