Administrace komentářů

To je pravda

[root@charon ~]# iptables-save
# Generated by iptables-save v1.4.0 on Sat Oct 18 19:33:43 2008
*nat
:PREROUTING ACCEPT [25046:7728446]
:POSTROUTING ACCEPT [180:29094]
:OUTPUT ACCEPT [833:79743]
-A POSTROUTING -o ppp0 -j SNAT --to-source 217.112.173.73
COMMIT
# Completed on Sat Oct 18 19:33:43 2008
# Generated by iptables-save v1.4.0 on Sat Oct 18 19:33:43 2008
*filter
:INPUT DROP [13487:4322121]
:FORWARD ACCEPT [104645:87372133]
:OUTPUT ACCEPT [240465:50638141]
-A INPUT -i lo -j ACCEPT
-A INPUT -i ath0 -j ACCEPT
-A INPUT -i eth1 -j ACCEPT
-A INPUT -p ipv6 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p udp -m udp --dport 5004:5013 -j ACCEPT
-A INPUT -p udp -m udp --dport 5060:5061 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5190 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5222 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5223 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5269 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5432 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 7777 -j ACCEPT
-A INPUT -p udp -m udp --dport 7777 -j ACCEPT
-A INPUT -p icmp -j ACCEPT
COMMIT
# Completed on Sat Oct 18 19:33:43 2008
# Generated by iptables-save v1.4.0 on Sat Oct 18 19:33:43 2008
*mangle
:PREROUTING ACCEPT [405575:174786346]
:INPUT ACCEPT [287589:82843409]
:FORWARD ACCEPT [104645:87372133]
:OUTPUT ACCEPT [240465:50638141]
:POSTROUTING ACCEPT [345693:138110445]
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
COMMIT
# Completed on Sat Oct 18 19:33:43 2008