Project

General

Profile

ip6tables-save.susefirewall.txt

Dump with default route over v6 - nicksinger, 2020-11-04 15:00

 
1
# Generated by ip6tables-save v1.6.2 on Wed Nov  4 15:38:43 2020
2
*mangle
3
:PREROUTING ACCEPT [36:7020]
4
:INPUT ACCEPT [34:6876]
5
:FORWARD ACCEPT [0:0]
6
:OUTPUT ACCEPT [32:2424]
7
:POSTROUTING ACCEPT [32:2424]
8
COMMIT
9
# Completed on Wed Nov  4 15:38:43 2020
10
# Generated by ip6tables-save v1.6.2 on Wed Nov  4 15:38:43 2020
11
*filter
12
:INPUT DROP [0:0]
13
:FORWARD DROP [0:0]
14
:OUTPUT ACCEPT [13:1080]
15
:forward_ext - [0:0]
16
:forward_int - [0:0]
17
:input_ext - [0:0]
18
:input_int - [0:0]
19
:reject_func - [0:0]
20
-A INPUT -i lo -j ACCEPT
21
-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT
22
-A INPUT -p ipv6-icmp -m conntrack --ctstate RELATED -j ACCEPT
23
-A INPUT -p udp -m udp --dport 546 -j ACCEPT
24
-A INPUT -i br1 -j input_int
25
-A INPUT -i ovs-system -j input_int
26
-A INPUT -j input_ext
27
-A INPUT -m limit --limit 3/min -j LOG --log-prefix "SFW2-IN-ILL-TARGET " --log-tcp-options --log-ip-options
28
-A INPUT -j DROP
29
-A FORWARD -m physdev --physdev-is-bridged -j ACCEPT
30
-A FORWARD -m limit --limit 3/min -j LOG --log-prefix "SFW2-FWD-ILL-ROUTING " --log-tcp-options --log-ip-options
31
-A OUTPUT -o lo -j ACCEPT
32
-A OUTPUT -p ipv6-icmp -j ACCEPT
33
-A input_ext -m pkttype --pkt-type broadcast -j DROP
34
-A input_ext -p ipv6-icmp -m icmp6 --icmpv6-type 128 -j ACCEPT
35
-A input_ext -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j ACCEPT
36
-A input_ext -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT
37
-A input_ext -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT
38
-A input_ext -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT
39
-A input_ext -p ipv6-icmp -m icmp6 --icmpv6-type 137 -j ACCEPT
40
-A input_ext -p ipv6-icmp -m icmp6 --icmpv6-type 130 -j ACCEPT
41
-A input_ext -p gre -j ACCEPT
42
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 20000:22000 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options
43
-A input_ext -p tcp -m tcp --dport 20000:22000 -j ACCEPT
44
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 5990:6020 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options
45
-A input_ext -p tcp -m tcp --dport 5990:6020 -j ACCEPT
46
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 1723 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options
47
-A input_ext -p tcp -m tcp --dport 1723 -j ACCEPT
48
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 6556 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options
49
-A input_ext -p tcp -m tcp --dport 6556 -j ACCEPT
50
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 5666 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options
51
-A input_ext -p tcp -m tcp --dport 5666 -j ACCEPT
52
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 22 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options
53
-A input_ext -p tcp -m tcp --dport 22 -j ACCEPT
54
-A input_ext -m comment --comment "sfw2.insert.pos" -m pkttype ! --pkt-type unicast -j DROP
55
-A input_ext -p tcp -m limit --limit 3/min -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-DROP-DEFLT " --log-tcp-options --log-ip-options
56
-A input_ext -p ipv6-icmp -m limit --limit 3/min -j LOG --log-prefix "SFW2-INext-DROP-DEFLT " --log-tcp-options --log-ip-options
57
-A input_ext -p udp -m limit --limit 3/min -m conntrack --ctstate NEW -j LOG --log-prefix "SFW2-INext-DROP-DEFLT " --log-tcp-options --log-ip-options
58
-A input_ext -j DROP
59
-A input_int -j ACCEPT
60
-A reject_func -p tcp -j REJECT --reject-with tcp-reset
61
-A reject_func -p udp -j REJECT --reject-with icmp6-port-unreachable
62
-A reject_func -j REJECT --reject-with icmp6-addr-unreachable
63
-A reject_func -j DROP
64
COMMIT
65
# Completed on Wed Nov  4 15:38:43 2020