Skip to content

Instantly share code, notes, and snippets.

@yalla
Created October 3, 2012 22:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save yalla/a819b047d2e85ab89933 to your computer and use it in GitHub Desktop.
Save yalla/a819b047d2e85ab89933 to your computer and use it in GitHub Desktop.
Stock RHEL 5.8 firewall rules
[root@localhost ~]# chkconfig --list ip6tables
ip6tables 0:off 1:off 2:on 3:on 4:on 5:on 6:off
[root@localhost ~]# service ip6tables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 RH-Firewall-1-INPUT all ::/0 ::/0
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 RH-Firewall-1-INPUT all ::/0 ::/0
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
Chain RH-Firewall-1-INPUT (2 references)
num target prot opt source destination
1 ACCEPT all ::/0 ::/0
2 ACCEPT icmpv6 ::/0 ::/0
3 ACCEPT esp ::/0 ::/0
4 ACCEPT ah ::/0 ::/0
5 ACCEPT udp ::/0 ff02::fb/128 udp dpt:5353
6 ACCEPT udp ::/0 ::/0 udp dpt:631
7 ACCEPT tcp ::/0 ::/0 tcp dpt:631
8 ACCEPT udp ::/0 ::/0 udp dpts:32768:61000
9 ACCEPT tcp ::/0 ::/0 tcp dpts:32768:61000 flags:!0x16/0x02
10 ACCEPT tcp ::/0 ::/0 tcp dpt:22
11 REJECT all ::/0 ::/0 reject-with icmp6-adm-prohibited
[root@localhost ~]# chkconfig --list iptables
iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off
[root@localhost ~]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 RH-Firewall-1-INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 RH-Firewall-1-INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
Chain RH-Firewall-1-INPUT (2 references)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 255
3 ACCEPT esp -- 0.0.0.0/0 0.0.0.0/0
4 ACCEPT ah -- 0.0.0.0/0 0.0.0.0/0
5 ACCEPT udp -- 0.0.0.0/0 224.0.0.251 udp dpt:5353
6 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:631
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:631
8 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
10 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment