Dear Capt_Caveman,
Heres the output for
# iptables -vL
Chain INPUT (policy DROP 1 packets, 40 bytes)
pkts bytes target prot opt in out source destination
67587 34M SHUN all -- any any anywhere anywhere
8412 864K ACCEPT all -- lo any anywhere anywhere
59175 34M IN_FIREWALL all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT INPUT: '
0 0 DROP all -- any any anywhere anywhere
Chain FORWARD (policy DROP 5 packets, 390 bytes)
pkts bytes target prot opt in out source destination
209K 29M SHUN all -- any any anywhere anywhere
10350 14M IN_NETWORK all -- ppp0 any anywhere anywhere
198K 15M OUT_NETWORK all -- eth1 any anywhere anywhere
29 1342 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT FORWARD: '
0 0 ACCEPT all -- any any 192.168.3.35 anywhere
77 3630 DROP all -- any any anywhere anywhere
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
74154 35M SHUN all -- any any anywhere anywhere
8412 864K ACCEPT all -- any lo anywhere anywhere
65742 34M OUT_FIREWALL all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT OUTPUT: '
0 0 DROP all -- any any anywhere anywhere
Chain BADFLAGS (11 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT BADFLAGS: '
0 0 DROP all -- any any anywhere anywhere
Chain BAD_IP (4 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT BAD_IP: '
0 0 DROP all -- any any anywhere anywhere
Chain IN_FIREWALL (1 references)
pkts bytes target prot opt in out source destination
10 605 IN_ICMP icmp -- any any anywhere anywhere
55667 33M TCP_FLAGS tcp -- any any anywhere anywhere
1246 59916 SYN_FLOOD tcp -- any any anywhere anywhere tcp flags:SYN,RST,ACK/SYN
0 0 ACCEPT udp -- any any anywhere 60.53.38.106 udp dpt:5060
421 60942 ACCEPT udp -- any any anywhere 60.53.38.106 udp dpts:10001:65535
58742 33M IN_IP_CHECK all -- any any anywhere anywhere
54151 33M ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
3 180 ACCEPT tcp -- any any 192.168.3.0/24 anywhere tcp dpt:ssh state NEW
1 60 ACCEPT tcp -- any any 211.188.18.19 anywhere tcp dpt:ssh state NEW
0 0 ACCEPT tcp -- any any tm.net.my anywhere tcp dpt:ssh state NEW
0 0 ACCEPT tcp -- any any anywhere 60.53.38.106 tcp dpt:ftp
0 0 ACCEPT tcp -- any any 60.53.38.106 anywhere tcp spt:ftp-data
1169 56056 ACCEPT tcp -- any any anywhere sttu.shin tcp dpt:squid
5 300 ACCEPT tcp -- any any anywhere 60.53.38.106 tcp dpt:10000
27 1882 ACCEPT udp -- any any anywhere anywhere udp dpt:domain
1 48 ACCEPT tcp -- any any anywhere anywhere tcp dpt:http
476 47356 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT IN_FIREWALL: '
3385 325K DROP all -- any any anywhere anywhere
Chain IN_ICMP (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- any any 192.168.3.0/24 anywhere icmp echo-request
0 0 ACCEPT icmp -- any any 192.168.3.0/24 anywhere icmp echo-reply
0 0 ACCEPT icmp -- any any 192.168.6.0/24 anywhere icmp echo-request
0 0 ACCEPT icmp -- any any 192.168.6.0/24 anywhere icmp echo-reply
1 56 ACCEPT icmp -- any any anywhere anywhere icmp destination-unreachable
0 0 ACCEPT icmp -- any any anywhere anywhere icmp source-quench
0 0 ACCEPT icmp -- any any anywhere anywhere icmp time-exceeded
0 0 ACCEPT icmp -- any any anywhere anywhere icmp parameter-problem
9 549 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT In ICMP: '
9 549 DROP all -- any any anywhere anywhere
Chain IN_IP_CHECK (1 references)
pkts bytes target prot opt in out source destination
0 0 BAD_IP all -- ppp0 any 65.55.35.116 anywhere
0 0 BAD_IP all -- ppp0 any 192.168.3.0/24 anywhere
0 0 BAD_IP all -- eth1 any 65.55.35.116 anywhere
Chain IN_NETWORK (1 references)
pkts bytes target prot opt in out source destination
0 0 IN_ICMP icmp -- any any anywhere anywhere
9834 14M TCP_FLAGS tcp -- any any anywhere anywhere
0 0 SYN_FLOOD tcp -- any any anywhere anywhere tcp flags:SYN,RST,ACK/SYN
9834 14M ACCEPT tcp -- any any anywhere anywhere state RELATED,ESTABLISHED
516 67080 ACCEPT udp -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:5060
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpts:10001:65535
0 0 ACCEPT udp -- any any anywhere sttu.shin udp dpt:domain
0 0 ACCEPT tcp -- any any anywhere sttu.shin tcp dpt:http flags:SYN,RST,ACK/SYN
Chain OUT_FIREWALL (1 references)
pkts bytes target prot opt in out source destination
0 0 OUT_ICMP icmp -- any any anywhere anywhere
65229 34M TCP_FLAGS tcp -- any any anywhere anywhere
64052 34M ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:5060
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpts:10001:65535
1690 103K OUT_IP_CHECK all -- any any anywhere anywhere
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ftp
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ssh
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:telnet
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:smtp
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt
op3
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpts:netbios-ns:netbios-ssn
1552 93120 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:http
81 4860 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:https
52 3771 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:domain
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp spt:squid
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp spt:ftp-data
3 576 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT OUT_FIREWALL: '
5 760 DROP all -- any any anywhere anywhere
Chain OUT_ICMP (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- any any anywhere 192.168.3.0/ 24 icmp echo-request
0 0 ACCEPT icmp -- any any anywhere 192.168.3.0/ 24 icmp echo-reply
0 0 ACCEPT icmp -- any any anywhere 192.168.6.0/ 24 icmp echo-request
0 0 ACCEPT icmp -- any any anywhere 192.168.6.0/ 24 icmp echo-reply
0 0 ACCEPT icmp -- any any anywhere anywhere icmp destination-unreachable
0 0 ACCEPT icmp -- any any anywhere anywhere icmp source-quench
0 0 ACCEPT icmp -- any any anywhere anywhere icmp parameter-problem
0 0 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT Out ICMP: '
0 0 DROP all -- any any anywhere anywhere
Chain OUT_IP_CHECK (1 references)
pkts bytes target prot opt in out source destination
1685 102K RETURN all -- any ppp0 65.55.35.116 anywhere
5 760 RETURN all -- any eth1 sttu.shin anywhere
0 0 BAD_IP all -- any any anywhere anywhere
Chain OUT_NETWORK (1 references)
pkts bytes target prot opt in out source destination
0 0 OUT_ICMP icmp -- any any anywhere anywhere
5527 299K TCP_FLAGS tcp -- any any anywhere anywhere
5489 297K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ftp
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ssh
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:smtp
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt
op3
14 672 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:http
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:https
547 30853 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:domain
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:socks
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:1503
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:h323hostcall
6 288 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:4000
0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:4000
192K 15M DROP udp -- any any anywhere anywhere state NEW udp dpts:netbios-ns:netbios-ssn
Chain SHUN (3 references)
pkts bytes target prot opt in out source destination
Chain SYN_FLOOD (2 references)
pkts bytes target prot opt in out source destination
1244 59820 RETURN tcp -- any any anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 5/sec burst 10
0 0 RETURN !tcp -- any any anywhere anywhere
0 0 RETURN tcp -- any any anywhere anywhere tcp flags:!SYN,RST,ACK/SYN
2 96 LOG all -- any any anywhere anywhere limit: avg 3/min burst 3 LOG level error prefix `IPT SYN_FLOOD: '
2 96 DROP all -- any any anywhere anywhere
Chain TCP_FLAGS (4 references)
pkts bytes target prot opt in out source destination
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:FIN,ACK/FIN
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:PSH,ACK/PSH
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:ACK,URG/URG
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:FIN,RST/FIN,RST
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN,RST
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,PSH,URG
0 0 BADFLAGS tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG