Home Page › Forums › Network Management › ZeroShell › Firewall rule ghost › Reply To: Firewall rule ghost
June 18, 2020 at 5:13 pm
#66046

Participant
This is output of iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
SYS_GUI all -- anywhere anywhere
SYS_INPUT all -- anywhere anywhere
SYS_HTTPS tcp -- anywhere anywhere tcp dpt:http
SYS_HTTPS tcp -- anywhere anywhere tcp dpt:https
SYS_SSH tcp -- anywhere anywhere tcp dpt:ssh
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
SYS_OUTPUT all -- anywhere anywhere
Chain NetBalancer (0 references)
target prot opt source destination
Chain SYS_DNS (2 references)
target prot opt source destination
ACCEPT all -- 10.0.0.0/8 anywhere
ACCEPT all -- 172.16.0.0/12 anywhere
ACCEPT all -- 192.168.0.0/16 anywhere
ACCEPT all -- 192.168.0.0/24 anywhere
ACCEPT all -- 192.168.1.0/24 anywhere
ACCEPT all -- 192.168.10.0/24 anywhere
ACCEPT all -- 192.168.250.0/24 anywhere
DROP all -- anywhere anywhere
Chain SYS_GUI (1 references)
target prot opt source destination
ACCEPT tcp -- 192.168.0.60 anywhere tcp dpt:12081
Chain SYS_HTTPS (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- 10.0.0.0/8 anywhere
ACCEPT all -- 172.16.0.0/12 anywhere
ACCEPT all -- 192.168.0.0/16 anywhere
ACCEPT all -- 192.168.0.0/24 anywhere
ACCEPT all -- 192.168.1.0/24 anywhere
ACCEPT all -- 192.168.10.0/24 anywhere
ACCEPT all -- 192.168.250.0/24 anywhere
DROP all -- anywhere anywhere
Chain SYS_INPUT (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp spt:domain state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:domain state ESTABLISHED
SYS_DNS udp -- anywhere anywhere udp dpt:domain
SYS_DNS tcp -- anywhere anywhere tcp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp spt:http state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:8245 state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:ntp state ESTABLISHED
RETURN all -- anywhere anywhere
Chain SYS_OUTPUT (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp dpt:http
ACCEPT tcp -- anywhere anywhere tcp dpt:8245
ACCEPT udp -- anywhere anywhere udp dpt:ntp
RETURN all -- anywhere anywhere
Chain SYS_SSH (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- 192.168.0.0/24 anywhere
ACCEPT all -- 192.168.250.0/24 anywhere
DROP all -- anywhere anywhere