-
-
Save mmaedler/58dc09beaaa42c0e4c6e to your computer and use it in GitHub Desktop.
BS ip6tables
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Chain INPUT (policy DROP) | |
target prot opt source destination | |
ufw6-before-logging-input all anywhere anywhere | |
ufw6-before-input all anywhere anywhere | |
ufw6-after-input all anywhere anywhere | |
ufw6-after-logging-input all anywhere anywhere | |
ufw6-reject-input all anywhere anywhere | |
ufw6-track-input all anywhere anywhere | |
Chain FORWARD (policy DROP) | |
target prot opt source destination | |
ufw6-before-logging-forward all anywhere anywhere | |
ufw6-before-forward all anywhere anywhere | |
ufw6-after-forward all anywhere anywhere | |
ufw6-after-logging-forward all anywhere anywhere | |
ufw6-reject-forward all anywhere anywhere | |
Chain OUTPUT (policy ACCEPT) | |
target prot opt source destination | |
ufw6-before-logging-output all anywhere anywhere | |
ufw6-before-output all anywhere anywhere | |
ufw6-after-output all anywhere anywhere | |
ufw6-after-logging-output all anywhere anywhere | |
ufw6-reject-output all anywhere anywhere | |
ufw6-track-output all anywhere anywhere | |
Chain ufw6-after-forward (1 references) | |
target prot opt source destination | |
Chain ufw6-after-input (1 references) | |
target prot opt source destination | |
ufw6-skip-to-policy-input udp anywhere anywhere udp dpt:netbios-ns | |
ufw6-skip-to-policy-input udp anywhere anywhere udp dpt:netbios-dgm | |
ufw6-skip-to-policy-input tcp anywhere anywhere tcp dpt:netbios-ssn | |
ufw6-skip-to-policy-input tcp anywhere anywhere tcp dpt:microsoft-ds | |
ufw6-skip-to-policy-input udp anywhere anywhere udp dpt:bootps | |
ufw6-skip-to-policy-input udp anywhere anywhere udp dpt:bootpc | |
Chain ufw6-after-logging-forward (1 references) | |
target prot opt source destination | |
LOG all anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] " | |
Chain ufw6-after-logging-input (1 references) | |
target prot opt source destination | |
LOG all anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] " | |
Chain ufw6-after-logging-output (1 references) | |
target prot opt source destination | |
Chain ufw6-after-output (1 references) | |
target prot opt source destination | |
Chain ufw6-before-forward (1 references) | |
target prot opt source destination | |
DROP all anywhere anywhere rt type:0 segsleft:0 | |
ufw6-user-forward all anywhere anywhere | |
Chain ufw6-before-input (1 references) | |
target prot opt source destination | |
ACCEPT all anywhere anywhere | |
DROP all anywhere anywhere rt type:0 segsleft:0 | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp neighbour-solicitation HL match HL == 255 | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp neighbour-advertisement HL match HL == 255 | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp router-solicitation HL match HL == 255 | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp router-advertisement HL match HL == 255 | |
ACCEPT all anywhere anywhere state RELATED,ESTABLISHED | |
ACCEPT ipv6-icmp fe80::/10 anywhere ipv6-icmp echo-reply | |
ufw6-logging-deny all anywhere anywhere state INVALID | |
DROP all anywhere anywhere state INVALID | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp destination-unreachable | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp packet-too-big | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp time-exceeded | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp parameter-problem | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp echo-request | |
ACCEPT udp fe80::/10 fe80::/10 udp spt:dhcpv6-server dpt:dhcpv6-client | |
ACCEPT udp anywhere ff02::fb/128 udp dpt:mdns | |
ACCEPT udp anywhere ff02::f/128 udp dpt:1900 | |
ufw6-user-input all anywhere anywhere | |
Chain ufw6-before-logging-forward (1 references) | |
target prot opt source destination | |
Chain ufw6-before-logging-input (1 references) | |
target prot opt source destination | |
Chain ufw6-before-logging-output (1 references) | |
target prot opt source destination | |
Chain ufw6-before-output (1 references) | |
target prot opt source destination | |
ACCEPT all anywhere anywhere | |
DROP all anywhere anywhere rt type:0 segsleft:0 | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp neighbour-solicitation HL match HL == 255 | |
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp neighbour-advertisement HL match HL == 255 | |
ACCEPT all anywhere anywhere state RELATED,ESTABLISHED | |
ufw6-user-output all anywhere anywhere | |
Chain ufw6-logging-allow (0 references) | |
target prot opt source destination | |
LOG all anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] " | |
Chain ufw6-logging-deny (1 references) | |
target prot opt source destination | |
RETURN all anywhere anywhere state INVALID limit: avg 3/min burst 10 | |
LOG all anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] " | |
Chain ufw6-reject-forward (1 references) | |
target prot opt source destination | |
Chain ufw6-reject-input (1 references) | |
target prot opt source destination | |
Chain ufw6-reject-output (1 references) | |
target prot opt source destination | |
Chain ufw6-skip-to-policy-forward (0 references) | |
target prot opt source destination | |
DROP all anywhere anywhere | |
Chain ufw6-skip-to-policy-input (6 references) | |
target prot opt source destination | |
DROP all anywhere anywhere | |
Chain ufw6-skip-to-policy-output (0 references) | |
target prot opt source destination | |
ACCEPT all anywhere anywhere | |
Chain ufw6-track-input (1 references) | |
target prot opt source destination | |
Chain ufw6-track-output (1 references) | |
target prot opt source destination | |
ACCEPT tcp anywhere anywhere state NEW | |
ACCEPT udp anywhere anywhere state NEW | |
Chain ufw6-user-forward (1 references) | |
target prot opt source destination | |
Chain ufw6-user-input (1 references) | |
target prot opt source destination | |
ACCEPT tcp anywhere anywhere tcp dpt:ssh | |
ACCEPT udp anywhere anywhere udp dpt:ssh | |
ACCEPT tcp anywhere anywhere tcp dpt:http | |
ACCEPT udp anywhere anywhere udp dpt:http | |
ACCEPT tcp anywhere anywhere tcp dpt:https | |
ACCEPT udp anywhere anywhere udp dpt:https | |
ACCEPT tcp anywhere anywhere tcp dpt:8780 | |
ACCEPT tcp anywhere anywhere tcp dpt:8732 | |
ACCEPT tcp anywhere anywhere tcp dpt:http-alt | |
ACCEPT tcp anywhere anywhere tcp dpt:5280 | |
ACCEPT tcp anywhere anywhere tcp dpt:xmpp-client | |
ACCEPT tcp anywhere anywhere tcp dpt:imap2 | |
ACCEPT udp anywhere anywhere udp dpt:imap2 | |
ACCEPT tcp anywhere anywhere tcp dpt:8501 | |
ACCEPT udp anywhere anywhere udp dpt:8501 | |
ACCEPT tcp anywhere anywhere tcp dpt:submission | |
ACCEPT udp anywhere anywhere udp dpt:submission | |
ACCEPT tcp anywhere anywhere tcp dpt:smtp | |
ACCEPT udp anywhere anywhere udp dpt:25 | |
DROP tcp anywhere anywhere tcp dpt:7777 | |
DROP tcp anywhere anywhere tcp dpt:ftp | |
DROP tcp anywhere anywhere tcp dpt:ftp | |
DROP udp anywhere anywhere udp dpt:fsp | |
ACCEPT tcp anywhere anywhere tcp dpt:5281 | |
Chain ufw6-user-limit (0 references) | |
target prot opt source destination | |
Chain ufw6-user-limit-accept (0 references) | |
target prot opt source destination | |
Chain ufw6-user-logging-forward (0 references) | |
target prot opt source destination | |
Chain ufw6-user-logging-input (0 references) | |
target prot opt source destination | |
Chain ufw6-user-logging-output (0 references) | |
target prot opt source destination | |
Chain ufw6-user-output (1 references) | |
target prot opt source destination |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment