Skip to content

Instantly share code, notes, and snippets.

@christianhager
Created March 26, 2011 22:07
Show Gist options
  • Save christianhager/888681 to your computer and use it in GitHub Desktop.
Save christianhager/888681 to your computer and use it in GitHub Desktop.
sudo iptables -L output
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
REJECT all -- anywhere 127.0.0.0/8 reject-with icmp-port-unreachable
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:www
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:8003
ACCEPT tcp -- anywhere anywhere tcp dpt:6789
ACCEPT tcp -- anywhere anywhere tcp dpt:8400
ACCEPT tcp -- anywhere anywhere tcp dpt:8999
ACCEPT tcp -- anywhere anywhere tcp dpt:843
ACCEPT tcp -- anywhere anywhere tcp dpt:6379
ACCEPT tcp -- anywhere anywhere tcp dpt:8124
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:30000
ACCEPT icmp -- anywhere anywhere icmp echo-request
LOG all -- anywhere anywhere limit: avg 5/min burst 5 LOG level debug prefix `iptables denied: '
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment