# Generated by iptables-save v1.3.4 on Wed Jul 12 01:40:27 2006
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:AllowFTP - [0:0]
:AllowFTPS - [0:0]
:AllowHTTP - [0:0]
:AllowHTTPS - [0:0]
:AllowNFS - [0:0]
:AllowSSH - [0:0]
:AllowTelnet - [0:0]
:AllowCIFS - [0:0]
:DropFTP - [0:0]
:DropFTPS - [0:0]
:DropHTTP - [0:0]
:DropHTTPS - [0:0]
:DropNFS - [0:0]
:DropSSH - [0:0]
:DropTelnet - [0:0]
:DropCIFS - [0:0]
:RejectFTP - [0:0]
:RejectFTPS - [0:0]
:RejectHTTP - [0:0]
:RejectHTTPS - [0:0]
:RejectNFS - [0:0]
:RejectSSH - [0:0]
:RejectTelnet - [0:0]
:RejectCIFS - [0:0]
-A INPUT -i lo -j ACCEPT
-A AllowFTP -p tcp -m tcp --dport 20 -j ACCEPT 
-A AllowFTP -p tcp -m tcp --dport 21 -j ACCEPT 
-A AllowFTPS -p tcp -m tcp --dport 20 -j ACCEPT 
-A AllowFTPS -p tcp -m tcp --dport 21 -j ACCEPT 
-A AllowHTTP -p tcp -m tcp --dport 80 -j ACCEPT 
-A AllowHTTPS -p tcp -m tcp --dport 443 -j ACCEPT 
-A AllowNFS -p tcp -m tcp --dport 2049 -j ACCEPT 
-A AllowNFS -p udp -m udp --dport 2049 -j ACCEPT 
-A AllowSSH -p tcp -m tcp --dport 22 -j ACCEPT 
-A AllowTelnet -p tcp -m tcp --dport 23 -j ACCEPT 
-A AllowCIFS -p tcp -m tcp --dport 135 -j ACCEPT 
-A AllowCIFS -p tcp -m tcp --dport 139 -j ACCEPT 
-A AllowCIFS -p tcp -m tcp --dport 445 -j ACCEPT 
-A AllowCIFS -p udp -m udp --dport 445 -j ACCEPT 
-A AllowCIFS -p udp -m udp --dport 135 -j ACCEPT 
-A AllowCIFS -p udp -m udp --dport 137:139 -j ACCEPT 
-A DropFTP -p tcp -m tcp --dport 21 -j DROP 
-A DropFTP -p tcp -m tcp --dport 20 -j DROP 
-A DropFTPS -p tcp -m tcp --dport 20 -j DROP 
-A DropFTPS -p tcp -m tcp --dport 21 -j DROP 
-A DropHTTP -p tcp -m tcp --dport 80 -j DROP 
-A DropHTTPS -p tcp -m tcp --dport 443 -j DROP 
-A DropNFS -p tcp -m tcp --dport 2049 -j DROP 
-A DropNFS -p udp -m udp --dport 2049 -j DROP 
-A DropSSH -p tcp -m tcp --dport 22 -j DROP
-A DropTelnet -p tcp -m tcp --dport 23 -j DROP 
-A DropCIFS -p tcp -m tcp --dport 135 -j DROP 
-A DropCIFS -p tcp -m tcp --dport 139 -j DROP 
-A DropCIFS -p tcp -m tcp --dport 445 -j DROP 
-A DropCIFS -p udp -m udp --dport 135 -j DROP 
-A DropCIFS -p udp -m udp --dport 445 -j DROP 
-A DropCIFS -p udp -m udp --dport 137:139 -j DROP 
-A RejectFTP -p tcp -m tcp --dport 21 -j REJECT --reject-with icmp-port-unreachable 
-A RejectFTP -p tcp -m tcp --dport 20 -j REJECT --reject-with icmp-port-unreachable 
-A RejectFTPS -p tcp -m tcp --dport 990 -j REJECT --reject-with icmp-port-unreachable 
-A RejectFTPS -p tcp -m tcp --dport 989 -j REJECT --reject-with icmp-port-unreachable 
-A RejectHTTP -p tcp -m tcp --dport 80 -j REJECT --reject-with icmp-port-unreachable 
-A RejectHTTPS -p tcp -m tcp --dport 443 -j REJECT --reject-with icmp-port-unreachable 
-A RejectNFS -p tcp -m tcp --dport 2049 -j REJECT --reject-with icmp-port-unreachable 
-A RejectNFS -p udp -m udp --dport 2049 -j REJECT --reject-with icmp-port-unreachable 
-A RejectSSH -p tcp -m tcp --dport 22 -j REJECT --reject-with icmp-port-unreachable 
-A RejectTelnet -p tcp -m tcp --dport 23 -j REJECT --reject-with icmp-port-unreachable 
-A RejectCIFS -p tcp -m tcp --dport 135 -j REJECT --reject-with icmp-port-unreachable 
-A RejectCIFS -p tcp -m tcp --dport 139 -j REJECT --reject-with icmp-port-unreachable 
-A RejectCIFS -p tcp -m tcp --dport 445 -j REJECT --reject-with icmp-port-unreachable 
-A RejectCIFS -p udp -m udp --dport 135 -j REJECT --reject-with icmp-port-unreachable 
-A RejectCIFS -p udp -m udp --dport 445 -j REJECT --reject-with icmp-port-unreachable 
-A RejectCIFS -p udp -m udp --dport 137:139 -j REJECT --reject-with icmp-port-unreachable 
COMMIT
# Completed on Wed Jul 12 01:40:27 2006
