diff options
Diffstat (limited to 'test/output/filter/rules6-save')
-rw-r--r-- | test/output/filter/rules6-save | 50 |
1 files changed, 44 insertions, 6 deletions
diff --git a/test/output/filter/rules6-save b/test/output/filter/rules6-save index e242aa3..fca9ec3 100644 --- a/test/output/filter/rules6-save +++ b/test/output/filter/rules6-save @@ -6,11 +6,17 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] :logdrop-3 - [0:0] +:logdrop-4 - [0:0] +:logdrop-5 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -30,11 +36,17 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-3 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-5 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -61,6 +73,7 @@ -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -79,11 +92,17 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-2 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-3 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-5 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -104,11 +123,17 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-3 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-5 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -118,15 +143,28 @@ -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j LOG +-A logdrop-3 -j TEE --gateway fc00::1 -A logdrop-3 -j DROP +-A logdrop-4 -j TEE --gateway fc00::2 +-A logdrop-4 -j DROP +-A logdrop-5 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG |