True True True True True 0 True True True ICMP host prohibited False False False True False False False True True False /day 0 30 1800 False False False False False False 0 False False True False False False iptables top 0 1 1 False False False True False False True False False False False False False True True True True True True True True True True True True True True True True True True ICMP host prohibited False True False True False False True False /day 0 30 1800 True False False False False info RULE %N -- %A False False True False 0 1 1 False False False True True True True True True True True True True True True True True True True ICMP net unreachable False True False True False True False True True False /second 0 30 1800 False False False False True False debug /second 0 False False True False False False iptables after_interfaces False 0 1 1 False False False False False false False False False False False False False false False false False false False false True True True True True false false false false false False False False False False False False False False False False False False False false False false false false false false False false false false True True false False false False False false False false False -m ip_conntrack_talk -m ip_nat_talk -p tcp -m state --state ESTABLISHED --tcp-flags SYN,ACK,RST,URG ACK -p tcp -m state --state ESTABLISHED --tcp-flags SYN,FIN,RST,URG,PSH RST -m string --string test_pattern -m string --string test_pattern -p tcp ! --syn -dport 5190 -m state --state NEW -m rt --rt-type 0 -m tcp --tcp-flags SYN,ACK SYN,ACK -m state --state NEW #C0BA44 True #C0BA44 True #C0BA44 True #7694C0 #7694C0 #7694C0 #7694C0 #7694C0 False #7694C0 False #7694C0 False #8BC065 #8BC065 True #8BC065 #C0C0C0 24 2 False 0 0 True 1 #C0C0C0 24 0 False 5 True destip /second 2 0 0 True 1 #C0C0C0 0 0 False 0 0 False 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 0 True True True 0 0 0 0 0 0 0 0 0 True True False ICMP net unreachable False False False -v True False True False True True False /second 5 1 /usr/local/sbin/ip /usr/local/sbin/iptables /bin/logger /usr/local/sbin/modprobe 30 1800 True False False True True False debug /second 0 CUSTOM LOGGING False False True 192.168.1.100 True False False iptables top 0 1 1 False False True True 0 0 False 2 False 0 0 0 False False True True 0 /hour 1 0 0 True 1 0 0 False 2 False 0 0 0 True True False False 0 /hour 1 0 0 True 1 True True True True True True True True True /minute 10 True False 0 /minute 10 True 1 False 0 /minute 10 False 1 True True True True True True True True False 0 /second 10 True 1 True True True ICMP net unreachable False True False True False True False True True False /second 0 30 1800 False False False False True False debug /second 0 False False True False False False iptables after_interfaces False 0 1 1 False False False False False #C08B5A #C08B5A #8BC065 #8BC065 #8BC065 #8BC065 #C0BA44 #C0BA44 0 Iface: %I RULE %N -- %A ** True 0 Iface: %I RULE %N -- %A ** True 0 0 False 0 False dstip 0 0 0 True 1 0 0 False 0 False dstip 0 0 0 True 1 True True TCP RST 0 IDENT True TCP RST 0 0 True #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 True #C0BA44 False True True 10 /minute 5 False True True False ICMP net unreachable False True True False -xt True False True False True True False ipv4_first /second 5 0 0 1 1 1 1 1 30 1800 False True False True True False debug /second 0 RULE %N - %A ** False False True False False False False iptables after_flush True 0 1 1 False True True False False False True 0 0 False 0 False dstip 0 0 0 True 1 0 0 False 0 False dstip 0 0 0 True 1 True True True True True False False True ICMP net unreachable False False False True False False False False False False 0 30 1800 False False False False False False debug /second 0 False False False False True False iptables top False 0 1 1 False False False False True True True True #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 #8BC065 0 0 False 0 False 0 0 0 dstip 0 0 0 0 True 1 True True True True True False True ICMP net unreachable False False False False True False False False True True False /day 0 30 1800 False False False True False False debug /second 0 False False True False False False False iptables top False 64 7 1 True False False False True True 0 True False True ICMP host prohibited False False False False False False True True False /day 0 30 1800 False False False False False 0 False False False False False iptables 0 1 1 False False False True True 50 /minute 10 CATCH ALL RULE True 1 True True ICMP host prohibited False False False False False False True True False /day 0 0 30 1800 True False False False False debug 0 False False False False False iptables 0 1 1 False False False False True True False True True ICMP net unreachable False True False True False False True True False /day 0 30 1800 False False False False False debug /second 0 RULE %N -- %A %I False False True False False iptables False 0 1 1 False False False False True True True True ICMP net unreachable False False False True False False True True False /day 0 30 1800 False False False False False debug /second 0 False False True False False iptables False 0 1 1 False False False False True True ICMP host prohibited False True False True False False True False /day 0 30 1800 True False False False False info RULE %N -- %A False False True False 0 1 1 False False False TCP RST 0 0 True TCP RST 0 0 True TCP RST 0 0 True TCP RST 0 0 True TCP RST 0 0 True TCP RST 0 0 True TCP RST 0 0 True TCP RST 0 0 True TCP RST False 0 0 True 1 TCP RST False 0 0 True 1 TCP RST False 0 0 True 1 TCP RST False 0 0 True 1 TCP RST False route_through 2 0 0 False False False 0 0 False none route_through True 1 TCP RST False route_through 2 0 0 False False False 0 0 False none route_through True 1 TCP RST False route_through 2 0 0 False False False 0 0 False none route_through True 1 True True ICMP net unreachable False False False True False False True True False /day 0 30 1800 False False False False False debug /second 0 RULE %N -- %A %I False False True False False iptables False /bin:/usr/bin:/sbin:/usr/sbin 0 1 1 False False False False ICMP admin prohibited 0 0 True 1 0 0 True 0 0 True 0 0 True 0 0 True 0 0 True 0 0 True 0 0 True True True ICMP host unreachable False False True False True False False False False True True False ipv4_first /day 0 30 1800 False False False False False False debug /second 0 False False True False False False False iptables top False /bin:/usr/bin:/sbin:/usr/sbin 0 1 1 False False False False False True 0 0 True 1 True True True 0 0 True 1 True True ICMP net unreachable True False False True False False False True False False /day 0 30 1800 False False False False False False debug /second 0 False False True False False False iptables top False 0 1 1 False False False False False True True True ICMP host prohibited False False False True False True False 0 30 1800 True False False False False info RULE %N -- %A False False True False 0 1 1 False False False True True True ICMP host prohibited False False False True False True True 0 30 1800 True False False False False info RULE %N -- %A False False True False 0 1 1 False False False True True ICMP host prohibited False False False True False True True 0 30 1800 True False False False False info RULE %N -- %A False False True False 0 1 1 False False False True True False ICMP host prohibited False False False True False False False 0 30 1800 True False False False False info RULE %N -- %A False False True False 0 1 1 False False False True True True ICMP host prohibited False False False True False False True True 0 30 1800 True True False False False False info RULE %N -- %A False False True False False top 0 1 1 False False False False True False 0 0 rule0acct True 1 False 0 0 rule1acct True 1 False 0 0 True 1 True True True True ICMP net unreachable False False False True False False True True False /day 0 30 1800 False False False False False debug /second 0 RULE %N -- %A on interface %I False False True False False iptables False 0 1 1 False False False False True True True True True ICMP host prohibited False True False True False True False 0 1 30 1800 True False False False False info RULE %N -- %A False False lo True 0 1 1 False False True 0 /second 2 True True 0 0 True True True TCP RST 0 0 True 1 True True True True ICMP host prohibited False False False True False True False 0 1 30 1800 True False False False False info RULE %N -- %A False False lo True 0 1 1 False False True True True True True True True 0 True False True ICMP host prohibited False False False True False False True True False /day 0 30 1800 False False False False False 0 False False True False False iptables 0 1 1 False False True True True True ICMP net unreachable False False False True False False True True False /day 0 30 1800 False False False False False debug /second 0 RULE %N -- %A on interface %I False False True False False iptables False 0 1 1 False False False False True 0 0 error True 10 False True ICMP host prohibited False False False True False False True True False /day 0 30 1800 False False False False False 0 False False True False False iptables 0 1 1 False False True True True True ICMP net unreachable True False True False True False False False False True True False ipv4_first /day 0 30 1800 False False False False False False debug /second 0 False False True False False False False iptables top False 0 1 1 False False False False False True True True ICMP net unreachable False False False True False False True True False /day 0 30 1800 False False False False False debug /second 0 False False True False False iptables False 0 1 1 False False False False True True true true echo '%FWBPROMPT%'; cat > %FWDIR%/%FWSCRIPT%; echo '%FWBPROMPT%'; chmod +x %FWDIR%/%FWSCRIPT%; sudo -S %FWDIR%/%FWSCRIPT%; sudo -S ps ax|awk '/shutdown/ {printf "kill %d\n",$1;}'|sh echo '%FWBPROMPT%'; chmod +x %FWDIR%/%FWSCRIPT%; sudo -S %FWDIR%/%FWSCRIPT%; sudo -S ps ax|awk '/shutdown/ {printf "kill %d\n",$1;}'|sh echo '%FWBPROMPT%'; chmod +x /tmp/%FWSCRIPT%; sudo -S /sbin/shutdown -r +%RBTIMEOUT%; sudo -S /tmp/%FWSCRIPT% echo '%FWBPROMPT%'; chmod +x /tmp/%FWSCRIPT%; sudo -S /tmp/%FWSCRIPT% echo '%FWBPROMPT%'; cat > %FWDIR%/%FWSCRIPT%; echo '%FWBPROMPT%'; sh %FWDIR%/%FWSCRIPT%; ps ax|awk '/shutdown/ {printf "kill %d\n",$1;}'|sh echo '%FWBPROMPT%'; sh %FWDIR%/%FWSCRIPT%; ps ax|awk '/shutdown/ {printf "kill %d\n",$1;}'|sh echo '%FWBPROMPT%'; /sbin/shutdown -r +%RBTIMEOUT%; sh /tmp/%FWSCRIPT% echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT% true true true /etc true 1 /etc/fw /tmp true 0 1 true false info RULE %N -- %A lo0 1 true 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true $ # 1 sec 1 true True True True True True route_through 2 0 0 False False False False none route_through False id342984 id38458X96057 route_reply_through 2 0 0 True False False False False none route_reply_through True 0 True True True True False ICMP host prohibited False False True False True False True False True True False Policy_2 mangle_ruleset ipv4_first /day 0 30 1800 False False False False False False 0 False False True 192.168.1.1 True False False False iptables top 0 1 1 False True False True True True True True True 0 True True False ICMP host prohibited False False True False True False True False True True False ipv4_first /day 0 30 1800 False False False False False False 0 False False True 192.168.1.1 True False False False iptables top 0 1 1 False True False True True True True True True 0 True True False ICMP host prohibited False False True False True False True False True True False ipv4_first /day 0 30 1800 False False False False False False 0 False False True 192.168.1.1 True False False False iptables top 0 1 1 False True False True True True True True ICMP host prohibited False True False True False False True True 0 30 1800 True False False False False False info RULE %N -- %A False False True False False top 0 1 1 False False False False True True True ICMP net unreachable False False False True False False True True False /day 0 30 1800 False False False False False debug /second 0 RULE %N -- %A on interface %I False False True False False iptables False 0 1 1 False False False False True True True ICMP net unreachable False True False True False False True True False /day 0 30 1800 False False False False False debug /second 0 RULE %N -- %A %I False False True False False iptables False 0 1 1 False False False False True True True True ICMP host prohibited False False False True False False False True False /day 0 30 1800 True False False False False False info RULE %N -- %A False False True False False top 0 1 1 False False False False True True True True ICMP net unreachable False False False True False False False True True False /day 0 30 1800 False False False False False False debug /second 0 RULE %N -- %A on %I False False True False False False iptables top False 0 1 1 False False False False False True True True #C0BA44 False False True True True ICMP net unreachable False False False True False False False True True False /day 0 30 1800 False False False False False False debug /second 0 RULE %N -- %A on %I False False True False False False iptables top False 0 1 1 False False False False False 0 0 False 0 False dstip 0 0 0 False 1 True True True True True True True True True 0 2 False 0 False dstip 0 0 0 False 1 0 0 False 0 False dstip 0 0 0 False 1 True True True ICMP net unreachable False False False True False False False True True True /day 0 30 1800 False False False False False False debug /second 0 RULE %N -- %A on %I False False True False False False iptables top False 0 1 1 False False False False False True True True True True True True True True ICMP net unreachable False False True False True False False False False True True False ipv4_first /day 0 30 1800 False False False False False False debug /second 0 RULE %N -- %A on %I False False True False False False False iptables top False 0 1 1 False False True False False Route through 2 0 0 False False eth1 False False Route through True Route through 2 0 0 True False eth1 False False Route through True Route through 2 0 0 True 1.2.3.4 False False False Route through True Route through 2 0 0 False eth1 False False False Route through True Route through 2 0 0 False 1.2.3.4 False True False Route through True True True True False True False True False False true /etc True 1 False true 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True #8BC065 id43EC877332486 #8BC065 id43EC877332486 #8BC065 id43EC877332486 #8BC065 id43EC877332486 #8BC065 id43EC877332486 #C0BA44 id43EC877332486 #C0BA44 id43EC877332486 #C0BA44 id43EC877332486 #C0BA44 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 True id43EC877332486 1 #C0BA44 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 True id43EC877332486 1 #C0BA44 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 True id43EC877332486 1 #8BC065 id43EC877332486 #8BC065 id43EC877332486 #8BC065 id43EC877332486 #8BC065 id43EC877332486 #C08B5A 2 0 0 True id342984 #C08B5A 2 0 0 True id342984 #C08B5A 2 0 0 True id342984 #C08B5A 2 0 0 True id342984 #C08B5A 2 0 0 True id342984 #C86E6E route_reply_through 2 0 0 False False False False none route_reply_through False id37422X26379 True 1:2 #7694C0 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 1:2 #7694C0 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 1:2 #7694C0 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 1:2 #7694C0 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 1:2 #7694C0 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 1:2 #7694C0 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 1:2 #7694C0 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 1:2 #7694C0 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 1:10 #C0BA44 route_through 2 0 0 False False False False False route_through True 1:11 #C0BA44 route_through 2 0 0 False False False False False route_through True 1:10 #C0BA44 route_through 2 0 0 False False False False False route_through True 1:10 #C0BA44 route_through 2 0 0 False False False False False route_through True 1:11 #C0BA44 route_through 2 0 0 False False False False False route_through True #C0C0C0 -j TCPMSS --set-mss 1400 0 0 True id29865X28575 route_through 2 0 0 True False False False False none route_through True True route_through 2 0 0 False False False False none route_through False id43EC877332486 route_through 2 0 0 False False False False none route_through False id449328D924380 False route_through 2 0 0 False True False False none route_through False id449328D824380 1:12 route_through 2 0 0 False False False False none route_through True 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False 1:12 route_through 2 0 0 False False False False none route_through False False True True ICMP host prohibited False False False True True False False True True mangle_rules ipv4_first 0 30 1800 True True False False False False info RULE %N -- %A False False True False False False top 0 1 1 False False False False id43EC877332486 id43EC877332486 id43EC877332486 id43EC877332486 route_through 2 0 0 False False False False False route_through id449328D924380 route_through 2 0 0 False False False False False route_through id449328D924380 route_through 2 0 0 False False False False False route_through id449328D924380 route_through 2 0 0 False False False False False route_through id449328D924380 route_through 2 0 0 False False False False False route_through id449328D924380 True True True True ICMP host prohibited False False True False True False False False True True ipv4_first 0 30 1800 True True False False False False info RULE %N -- %A False False True False False False top 0 1 1 False True False False True 1:12 2 0 0 True 2:12 2 0 0 True 1:12 2 0 0 True True True True ICMP net unreachable True False True False True False False False False True True False ipv4_first /day 0 30 1800 False False False False False False debug /second 0 False False True False False False False iptables top False 0 1 1 False False False False False rule0_branch #C0BA44 True 16 rule1_branch #C0BA44 True 16 rule2_branch #C0BA44 True 16 rule3_branch #C0BA44 True 16 rule3_branch #C0BA44 route_through 2 0 0 False False False False False False route_through True 16 rule4_branch #C0BA44 True rule5_branch 1:2 #C0BA44 -j TCPMSS --set-mss 1400 False 0 0 0 0 True 1 rule0_branch #8BC065 route_through 2 0 0 True False False False False False route_through True 16 rule1_branch #8BC065 route_through 2 0 0 True False False False False False route_through True 16 rule2_branch #8BC065 route_through 2 0 0 True False False False False False route_through True 16 rule3_branch #8BC065 route_through 2 0 0 True False False False False False route_through True 16 rule3_branch #8BC065 route_through 2 0 0 True False False False False False route_through True 16 rule4_branch #8BC065 route_through 2 0 0 True False False False False False route_through True rule5_branch 1:2 #8BC065 -j TCPMSS --set-mss 1400 False route_through 2 0 0 0 True False False False False 0 0 False route_through True 1 -j TCPMSS --set-mss 1400 0 0 True -j TARPIT Route through 2 0 0 False False False False False Route through True True True True True True True True rule_4_0_branch route_through 2 0 0 False False False False False False route_through True rule_4_1_branch route_through 2 0 0 False False False False False False route_through True True True True ICMP host prohibited False True False False True False False True True 0 30 1800 True True False False False False info RULE %N -- %A False False True False False False top 0 1 1 False False False False Route through 2 0 0 False True False False Route through id449328D824380 Route through 2 0 0 False True False False Route through id449328D924380 Route through 2 0 0 True False eth0 False False Route through True Route through 2 0 0 True False eth2 False False Route through True True route_through 2 0 0 False False False False none route_through False id365999 True True False False True False True False False true False /etc True 1 False true ipv4_first 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True True true true true true true /etc true 1 true 0 1 true false info RULE %N -- %A lo0 1 true 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true $ # 1 1 true True 0 0 True 0 False dstip 0 0 0 False 1 True True True True True True True False True False -xt True False False true /etc True 1 False true 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True True 0 0 True 0 False dstip 0 0 0 False 1 True True True True True False True False -xt True False False true /etc False 1 False true 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True False #C0BA44 route_through 2 0 0 False False False False False route_through True id43EC877332486 False #C0BA44 route_through 2 0 0 False False False False False route_through True id43EC877332486 False #C0BA44 route_through 2 0 0 False False False False False route_through True id43EC877332486 False #C0BA44 route_through 2 0 0 False False False False False route_through True id43EC877332486 False #C0BA44 route_through 2 0 0 False False False False False route_through True id43EC877332486 False #C0C0C0 route_through 2 0 0 False True False False False route_through True id342984 False #C0C0C0 route_through 2 0 0 False True False False False route_through True id342984 False #C0C0C0 route_through 2 0 0 False True False False False route_through True id342984 False #C0C0C0 route_through 2 0 0 False True False False False route_through True id365999 False #C0C0C0 route_through 2 0 0 False True False False False route_through True id366232 True 1:10 True #C0BA44 route_through 2 0 0 False False False False False route_through True False 1:11 True #C0BA44 route_through 2 0 0 False False False False False route_through True False 1:10 True #C0BA44 route_through 2 0 0 False False False False False route_through True False 1:10 True #C0BA44 route_through 2 0 0 False False False False False route_through True False 1:11 True #C0BA44 route_through 2 0 0 False False False False False route_through True False 1:10 True #7694C0 route_through 2 0 0 False False False False False route_through True 1:11 True #7694C0 route_through 2 0 0 False False False False False route_through True 1:11 True #7694C0 route_through 2 0 0 False False False False False route_through True False 1:10 True #7694C0 route_through 2 0 0 False False False False False route_through True 1:10 True #7694C0 route_through 2 0 0 False False False False False route_through True 1:11 True #7694C0 route_through 2 0 0 False False False False False route_through True rule27_branch #7694C0 route_through 2 0 0 True False False False False False route_through True #C0C0C0 -j TCPMSS --set-mss 1400 0 0 True True 1:16 #7694C0 route_through 2 0 0 False False False False False route_through True False True True ICMP host prohibited False False False True True False False True True 0 30 1800 True True False False False False info RULE %N -- %A False False True False False top 0 1 1 False False False False True True ICMP net unreachable False False False False False False False False True True False /day 0 30 1800 False False False False False False debug /second 0 False False False False False False False iptables top False 0 1 1 False False False False False #8BC065 True #8BC065 True rule2_branch #7694C0 True True True True True True ICMP net unreachable False False False False False False False False True True False /day 0 30 1800 False False False False False False debug /second 0 False False False False False False False iptables top False 0 1 1 False False False False False False False True False False True False False False False True True False False False False False False False False False False False False False False False False False False False False False True True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 True False False True True True True True True True True true False False False False True False False true False /etc True 1 False true true true true ipv4_first 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True id37854X15403 route_through 2 0 0 False False False False False none route_through True True True True true False False True False True False False true False /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False False False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True False False 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 %R/%N -- %A True 1 False False False False False False False True True ICMP host prohibited False True False True False False True False /day 0 30 1800 True False False False False info RULE %N -- %A False False True False 0 1 1 False False False id48493B6E4626 rule0_branch #8BC065 route_through 2 0 0 False False False False False none route_through True id484B0A134626 rule0_branch #8BC065 route_reply_through 2 0 0 False False False False False none route_reply_through True id4848A4414626 rule1_branch #8BC065 route_through 2 0 0 False False False False False none route_through True id484B3D324626 rule1_branch #8BC065 route_reply_through 2 0 0 False False False False False none route_reply_through True id41960X1271 route_through 2 0 0 False False False False False none route_through True rule2_branch #7694C0 True True True True ICMP net unreachable False False False False False False False False True True False /day 0 30 1800 False False False False False False debug /second 0 False False False False False False False iptables top False 0 1 1 False False False False False False False False False False False False False False 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 False 1 False False False False False False False False True True True true False False True False True False False true False /etc True 1 False true true true true ipv4_first 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True False False False True True true False True True False True False False true False /etc True 1 False true true true true ipv4_first 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True True True True True True True 0 True False True ICMP host prohibited False False False True False False True True False /day 0 30 1800 False False False False False 0 False False True False False iptables 0 1 1 False False True #C08B5A #C08B5A #8BC065 #8BC065 #8BC065 #8BC065 #C0BA44 #C0BA44 0 Iface: %I RULE %N -- %A ** True 0 Iface: %I RULE %N -- %A ** True 0 0 False 0 False dstip 0 0 0 True 1 0 0 False 0 False dstip 0 0 0 True 1 True True TCP RST 0 IDENT True TCP RST 0 0 True #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 True #C0BA44 False True True 10 /minute 5 False True True False ICMP net unreachable False True True False True False True False True True False ipv4_first /second 5 0 0 1 1 1 1 1 30 1800 False True False True True False debug /second 0 RULE %N - %A ** False False True False False False False iptables after_flush True 0 1 1 False True True False False False #C08B5A #C08B5A #8BC065 #8BC065 #8BC065 #8BC065 #C0BA44 #C0BA44 0 Iface: %I RULE %N -- %A ** True 0 Iface: %I RULE %N -- %A ** True 0 0 False 0 False dstip 0 0 0 True 1 0 0 False 0 False dstip 0 0 0 True 1 True True TCP RST 0 IDENT True TCP RST 0 0 True #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 False #C0BA44 True #C0BA44 False True True 10 /minute 5 False True True False ICMP net unreachable False True True False True False True False True True False ipv4_first /second 5 0 0 1 1 1 1 1 30 1800 False True False True True False debug /second 0 RULE %N - %A ** False False True False False False False iptables after_flush True 0 1 1 False True True False False False #C08B5A #C08B5A #8BC065 #8BC065 #8BC065 #8BC065 #C0BA44 #C0BA44 0 Iface: %I RULE %N -- %A ** True 0 Iface: %I RULE %N -- %A ** True 0 0 False 0 False dstip 0 0 0 True 1 0 0 False 0 False dstip 0 0 0 True 1 True True TCP RST 0 IDENT True TCP RST 0 0 True True True 10 /minute 5 False True True False ICMP net unreachable False False True False True False True False True True False /second 5 0 0 1 1 1 1 1 30 1800 False True False True True False debug /second 0 RULE %N - %A ** False False True False False False False iptables after_flush True 0 1 1 False True True False False False True True True True True True True True True True True True true False False True False True False False true False /etc True 1 False true true true true fw61-Policy ipv4_first 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True id37854X15403 route_through 2 0 0 False False False False False none route_through True True True True True true False False True False True False False true False /etc True 1 False true true true true ipv4_first 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True id37854X15403 route_through 2 0 0 False False False False False none route_through True True True True true False False True False True False False true False /etc True 1 False true true true true ipv4_first 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True False False False False False False False False False False False False False False False False False False False False False False False False True False False False False False False True True True True True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 True False False True False False False False False False False False True True True True True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 True False False True True True True True ICMP host prohibited False True False True False True False 0 1 30 1800 True False False False False info RULE %N -- %A False False lo True 0 1 1 False False True False False False False False False False False True False False True True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 True True False True id39582X8300 route_through 2 0 0 False False False False False none route_through False True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top echo "This is prolog" $ # 1 0 1 1 True True False True id39582X8300 route_through 2 0 0 False False False False False none route_through False True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true after_flush echo "This is prolog" $ # 1 0 1 1 True True False True id39582X8300 route_through 2 0 0 False False False False False none route_through False True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true after_interfaces echo "This is prolog" $ # 1 0 1 1 True True False True id39582X8300 route_through 2 0 0 False False False False False none route_through False True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true after_flush echo "This is prolog" $ # 1 0 1 1 True False False True id39582X8300 route_through 2 0 0 False False False False False none route_through False True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true after_interfaces echo "This is prolog" $ # 1 0 1 1 True False False True id39582X8300 route_through 2 0 0 False False False False False none route_through False True True true False True False False -xt True False True true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top echo "This is prolog" $ # 1 0 1 1 True False False True True True False True False True False False true /etc True 1 False true 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True True True False True False True False False true /etc True 1 False true 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 False False False True id42400X60089 2 0 0 False False False False False none route_reply_through True 0 True True True False ICMP host prohibited False False False False True False True False True True False Policy_2 mangle_ruleset ipv4_first /day 0 30 1800 False False False False False False 0 False False True 192.168.1.1 True False False False iptables top 0 1 1 False True False True 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 True 1 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 True 1 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 True 1 True True true False False False False -xt True False False true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 True False False True 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 True 1 0 0 False 0 False 0 0 0 False False False False 0 0 0 0 True 1 True True true False True False False -xt True False False true True /etc True 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 True False False True True true true true true true true /etc true 1 true true true true 0 1 true false info RULE %N -- %A lo0 1 true 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true $ # 1 1 true True True True True #8BC065 True #C08B5A True True True True True True True True False True true true true True true true True /etc true 1 False true True False False true true True False 0 False 0 False 0 False ipv4_first 0 1 true false info RULE %N -- %A lo0 1 true False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true $ # 1 1 true False False False False False False False False True False False True True True true False True False False -xt True False True true True /etc False 1 False true true true true ipv4_first 0 1 1 0 0 True False False True False info RULE %N -- %A False False lo0 1 True False False 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true top $ # 1 0 1 1 True True False True True True True True True True True True True True True True True True True True True True ICMP host prohibited False True False False -xt True False False False True False ipv4_first /day 0 30 1800 True False False False False False info RULE %N -- %A False False True False False top 0 1 1 False False False False True True True True True True True True True True True True True True True True True True ICMP host prohibited False True False False -xt True False False False True False ipv4_first /day 0 30 1800 True False False False False False info RULE %N -- %A False False True False False top 0 1 1 False False False False True True True True True True True True True True True True True True True True True True True True True True True ICMP host prohibited False False False False True False False False True False ipv4_first /day 0 30 1800 True False False False False False info RULE %N -- %A False False True False False top 0 1 1 False False False False False True True true true /etc/rc.d/rc.firewall restart root true defaults for ipcop true /etc/rc.d/ true False 0 1 0 0 true false info RULE %N -- %A lo true /lib/modules/`uname -r`/kernel/net/ rc.firewall.local $ # 1 true