################# LIS ################### root@lis:/home/luxadmin# cat /etc/iptables/rules.v4 # Generated by iptables-save v1.6.0 on Tue Feb 19 10:42:16 2019 *nat :PREROUTING ACCEPT [5:300] :INPUT ACCEPT [4:240] :OUTPUT ACCEPT [2090:148328] :POSTROUTING ACCEPT [2:144] -A PREROUTING -d 3.0.0.4/32 -i ens33 -p tcp -m tcp --dport 80 -j DNAT --to-destination 3.0.0.2 -A PREROUTING -d 3.0.0.5/32 -i ens33 -p tcp -m tcp --dport 443 -j DNAT --to-destination 3.0.0.2 -A PREROUTING -d 3.0.0.6/32 -i ens33 -p tcp -m multiport --dports 20,21 -j DNAT --to-destination 3.0.0.2 -A POSTROUTING -o ens33 -j SNAT --to-source 3.0.0.2 COMMIT # Completed on Tue Feb 19 10:42:16 2019 # Generated by iptables-save v1.6.0 on Tue Feb 19 10:42:16 2019 *filter :INPUT ACCEPT [0:0] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] -A INPUT -i ens34 -p tcp -m tcp --dport 22 -j REJECT --reject-with icmp-port-unreachable -A INPUT -i ens34 -j ACCEPT -A INPUT -i ens33 -p tcp -m multiport --dports 20,21,80,443 -j ACCEPT -A INPUT -i ens33 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i ens34 -o ens33 -p tcp -m multiport --dports 22,443 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i ens34 -o ens33 -j ACCEPT -A OUTPUT -o ens34 -p tcp -m tcp --dport 22 -j REJECT --reject-with icmp-port-unreachable -A OUTPUT -o ens34 -j ACCEPT -A OUTPUT -o ens33 -p tcp -m multiport --sports 21,80,443 -m state --state RELATED,ESTABLISHED -j ACCEPT -A OUTPUT -o ens33 -p tcp -m multiport --sports 20 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT -A OUTPUT -o ens33 -p tcp -m multiport --dports 22,443 -j REJECT --reject-with icmp-port-unreachable -A OUTPUT -o ens33 -j ACCEPT COMMIT # Completed on Tue Feb 19 10:42:16 2019 ################# PDL ################### luxadmin@pdl:~$ cat /etc/iptables/rules.v4 # Generated by iptables-save v1.6.0 on Tue Feb 19 11:15:02 2019 *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [3:206] :POSTROUTING ACCEPT [0:0] -A PREROUTING -p tcp -m tcp --dport 22 -d 1.0.0.3 -j DNAT --to-destination 172.16.0.2:22 -A POSTROUTING -o ens33 -j MASQUERADE COMMIT # Completed on Tue Feb 19 11:15:02 2019 # Generated by iptables-save v1.6.0 on Tue Feb 19 11:15:02 2019 *filter :INPUT DROP [3:253] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -i ens34 -j ACCEPT -A INPUT -i ens35 -j ACCEPT -A INPUT -i ens33 -p tcp -m multiport --dports 22,443 -j ACCEPT -A INPUT -i ens33 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i ens34 -o ens35 -j ACCEPT -A FORWARD -i ens35 -o ens34 -j ACCEPT -A FORWARD -o ens33 -j ACCEPT -A FORWARD -i ens33 -m state --state RELATED,ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o ens35 -j ACCEPT -A OUTPUT -o ens34 -j ACCEPT -A OUTPUT -o ens33 -j ACCEPT COMMIT # Completed on Tue Feb 19 11:15:02 2019
Comments