Re: Newbie & Netzwerk - iptables Teil 2

29 Jul 2002


      Und hier der 2te Teil der "iptables" ausgabe:

------------------------Beginn Teil 2-------------------
Chain input_ext (1 references)
target     prot opt source               destination
LOG        icmp --  p50823E44.dip.t-dialin.net  anywhere           icmp
source-q
uench LOG level warning tcp-options ip-options prefix
`SuSE-FW-ACCEPT-SOURCEQUEN
CH '
ACCEPT     icmp --  p50823E44.dip.t-dialin.net  anywhere           icmp
source-q
uench
ACCEPT     icmp --  anywhere             anywhere           icmp
echo-request
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp echo-reply
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp parameter-problem
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp timestamp-reply
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp address-mask-reply
LOG        icmp --  anywhere             anywhere           icmp
redirect LOG le
vel warning tcp-options ip-options prefix `SuSE-FW-DROP-ICMP-CRIT '
LOG        icmp --  anywhere             anywhere           icmp
source-quench L
OG level warning tcp-options ip-options prefix `SuSE-FW-DROP-ICMP-CRIT '
LOG        icmp --  anywhere             anywhere           icmp
timestamp-reque
st LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP-ICMP-CRIT '
LOG        icmp --  anywhere             anywhere           icmp
address-mask-re
quest LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP-ICMP-CRIT '
LOG        icmp --  anywhere             anywhere           icmp type 2
LOG leve
l warning tcp-options ip-options prefix `SuSE-FW-DROP-ICMP-CRIT '
DROP       icmp --  anywhere             anywhere
REJECT     tcp  --  anywhere             anywhere           tcp
dpt:ident flags:
SYN,RST,ACK/SYN reject-with tcp-reset
LOG        tcp  --  anywhere             anywhere           tcp dpt:ssh
flags:SY
N,RST,ACK/SYN LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP '
DROP       tcp  --  anywhere             anywhere           tcp dpt:ssh
flags:SY
N,RST,ACK/SYN
LOG        tcp  --  anywhere             anywhere           tcp
dpt:sunrpc flags
:SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP '

DROP       tcp  --  anywhere             anywhere           tcp
dpt:sunrpc flags
:SYN,RST,ACK/SYN
LOG        tcp  --  anywhere             anywhere           tcp
dpt:printer flag
s:SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP
'
DROP       tcp  --  anywhere             anywhere           tcp
dpt:printer flag
s:SYN,RST,ACK/SYN
LOG        tcp  --  anywhere             anywhere           tcp dpt:x11
flags:SY
N,RST,ACK/SYN LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP '
DROP       tcp  --  anywhere             anywhere           tcp dpt:x11
flags:SY
N,RST,ACK/SYN
ACCEPT     tcp  --  anywhere             anywhere           state
ESTABLISHED tc
p dpts:ipcserver:65535 flags:!SYN,RST,ACK/SYN
ACCEPT     tcp  --  anywhere             anywhere           state
ESTABLISHED tc
p dpt:ftp-data flags:!SYN,RST,ACK/SYN
ACCEPT     udp  --  www-proxy.HRO1.srv.t-online.de  anywhere          
state NEW
,RELATED,ESTABLISHED udp spt:domain dpts:1024:65535
ACCEPT     udp  --  dns03.btx.dtag.de    anywhere           state
NEW,RELATED,ES
TABLISHED udp spt:domain dpts:1024:65535
DROP       udp  --  anywhere             anywhere           udp dpt:ssh
DROP       udp  --  anywhere             anywhere           udp
dpt:sunrpc
DROP       udp  --  anywhere             anywhere           udp
dpt:sunrpc
DROP       udp  --  anywhere             anywhere           udp
dpt:printer
DROP       udp  --  anywhere             anywhere           udp dpt:x11
ACCEPT     udp  --  anywhere             anywhere           state
RELATED,ESTABL
ISHED udp dpts:1024:65535
LOG        tcp  --  anywhere             anywhere           tcp
flags:SYN,RST,AC
K/SYN LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
source-quench L
OG level warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
redirect LOG le
vel warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
echo-request LO
G level warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
timestamp-reque
st LOG level warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT
'
LOG        icmp --  anywhere             anywhere           icmp
address-mask-re
quest LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP-DEFAULT '
LOG        udp  --  anywhere             anywhere           LOG level
warning tc
p-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        all  --  anywhere             anywhere           state
INVALID LOG le
vel warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT-INVALID
'
DROP       all  --  anywhere             anywhere

Chain input_int (0 references)
target     prot opt source               destination
LOG        all  --  p50823E44.dip.t-dialin.net  anywhere           LOG
level war
ning tcp-options ip-options prefix `SuSE-FW-DROP-ANTI-SPOOF '
DROP       all  --  p50823E44.dip.t-dialin.net  anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere           icmp
echo-request
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp echo-reply
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp parameter-problem
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp timestamp-reply
ACCEPT     icmp --  anywhere             anywhere           state
RELATED,ESTABL
ISHED icmp address-mask-reply
LOG        icmp --  anywhere             anywhere           icmp
redirect LOG le
vel warning tcp-options ip-options prefix `SuSE-FW-DROP-ICMP-CRIT '
LOG        icmp --  anywhere             anywhere           icmp
source-quench L
OG level warning tcp-options ip-options prefix `SuSE-FW-DROP-ICMP-CRIT '
LOG        icmp --  anywhere             anywhere           icmp
timestamp-reque
st LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP-ICMP-CRIT '
LOG        icmp --  anywhere             anywhere           icmp
address-mask-re
quest LOG level warning tcp-options ip-options prefix
`SuSE-FW-DROP-ICMP-CRIT '
LOG        icmp --  anywhere             anywhere           icmp type 2
LOG leve
l warning tcp-options ip-options prefix `SuSE-FW-DROP-ICMP-CRIT '
DROP       icmp --  anywhere             anywhere
REJECT     tcp  --  anywhere             anywhere           tcp
dpt:ident flags:
SYN,RST,ACK/SYN reject-with tcp-reset
LOG        tcp  --  anywhere             anywhere           tcp
dpts:1024:65535
flags:SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix
`SuSE-FW-A
CCEPT '
ACCEPT     tcp  --  anywhere             anywhere           state
RELATED,ESTABL
ISHED tcp dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere           state
ESTABLISHED tc
p dpts:ipcserver:65535 flags:!SYN,RST,ACK/SYN
ACCEPT     tcp  --  anywhere             anywhere           state
ESTABLISHED
tc                                                              p
dpt:ftp-data flags:!SYN,RST,ACK/SYN
ACCEPT     udp  --  www-proxy.HRO1.srv.t-online.de  anywhere          
state NEW                                                             
,RELATED,ESTABLISHED udp spt:domain dpts:1024:65535
ACCEPT     udp  --  dns03.btx.dtag.de    anywhere           state
NEW,RELATED,ES                                                              TABLISHED udp spt:domain dpts:1024:65535
LOG        tcp  --  anywhere             anywhere           tcp
flags:SYN,RST,AC                                                              K/SYN LOG level warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
source-quench
L                                                              OG level
warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
redirect LOG
le                                                              vel
warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
echo-request
LO                                                              G level
warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
timestamp-reque                                                              st LOG level warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        icmp --  anywhere             anywhere           icmp
address-mask-re                                                              quest LOG level warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        udp  --  anywhere             anywhere           LOG level
warning tc                                                             
p-options ip-options prefix `SuSE-FW-DROP-DEFAULT '
LOG        all  --  anywhere             anywhere           state
INVALID LOG
le                                                              vel
warning tcp-options ip-options prefix `SuSE-FW-DROP-DEFAULT-INVALID '
DROP       all  --  anywhere             anywhere
-----------------------------ende teil 2--------------------------------


MfG
  Olli

Re: Newbie & Netzwerk - iptables Teil 2

Oliver Appel