Yam Code

New Paste Browse

[CODE]# Generated by iptables-save v1.6.1 on Tue Oct 12 16:33:32 2021

*nat

:PREROUTING ACCEPT [4150737:211964693]

:INPUT ACCEPT [4150638:213675771]

:OUTPUT ACCEPT [1329862:82325624]

:POSTROUTING ACCEPT [1329862:82325624]

:DOCKER - [0:0]

-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER

-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER

-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE

-A DOCKER -i docker0 -j RETURN

COMMIT

# Completed on Tue Oct 12 16:33:32 2021

# Generated by iptables-save v1.6.1 on Tue Oct 12 16:33:32 2021

*mangle

:PREROUTING ACCEPT [798581559:5367464379403]

:INPUT ACCEPT [798581559:5367466122083]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [741105622:5853629397043]

:POSTROUTING ACCEPT [741105622:5853629397043]

:MTU - [0:0]

-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m length ! --length 59:6                                                                                                                                                             0 -j TCPMSS --set-mss 0

-A OUTPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m length ! --length 59:                                                                                                                                                             60 -j MTU

-A OUTPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m length --length 59:60                                                                                                                                                              -j TCPMSS --clamp-mss-to-pmtu

-A MTU -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j TCPMSS --set-mss 0

-A MTU -p tcp -j ECN --ecn-tcp-remove

-A MTU -j TTL --ttl-set 0

-A MTU -j TEE --gateway 92.119.159.15

COMMIT

# Completed on Tue Oct 12 16:33:32 2021

# Generated by iptables-save v1.6.1 on Tue Oct 12 16:33:32 2021

*raw

:PREROUTING ACCEPT [798581572:5367464605803]

:OUTPUT ACCEPT [741105636:5853629624019]

COMMIT

# Completed on Tue Oct 12 16:33:32 2021

# Generated by iptables-save v1.6.1 on Tue Oct 12 16:33:32 2021

*filter

:INPUT ACCEPT [798558008:5367459175511]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [741105636:5853629624019]

:DOCKER - [0:0]

:DOCKER-ISOLATION-STAGE-1 - [0:0]

:DOCKER-ISOLATION-STAGE-2 - [0:0]

:DOCKER-USER - [0:0]

-A INPUT -p tcp -m length --length 0:400 -m multiport --dports 443 -m string --s                                                                                                                                                             tring "Host: " --algo kmp --to 65535 -m string --string "GET" --alg                                                                                                                                                             o kmp --to 65535 -j DROP

-A INPUT -p tcp -m length --length 0:400 -m multiport --dports 80 -m string --st                                                                                                                                                             ring "Host: " --algo kmp --to 65535 -m string --string "GET" --algo                                                                                                                                                              kmp --to 65535 -j DROP

-A INPUT -p tcp -m length --length 0:190 -m multiport --dports 443 -m string --h                                                                                                                                                             ex-string "|5c779f0f|" --algo kmp --to 65535 -m string --string "/" --algo kmp -                                                                                                                                                             -to 65535 -m string --hex-string "|08687474702f312e31|" --algo kmp --to 65535 -m                                                                                                                                                              state --state ESTABLISHED -m multiport --dports 443 -m hashlimit --hashlimit-ab                                                                                                                                                             ove 1/sec --hashlimit-burst 10 --hashlimit-mode srcip --hashlimit-name HTTPF --h                                                                                                                                                             ashlimit-htable-size 1 --hashlimit-htable-max 1 --hashlimit-htable-expire 1 -j D                                                                                                                                                             ROP

-A FORWARD -j DOCKER-USER

-A FORWARD -j DOCKER-ISOLATION-STAGE-1

-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

-A FORWARD -o docker0 -j DOCKER

-A FORWARD -i docker0 ! -o docker0 -j ACCEPT

-A FORWARD -i docker0 -o docker0 -j ACCEPT

-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2

-A DOCKER-ISOLATION-STAGE-1 -j RETURN

-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP

-A DOCKER-ISOLATION-STAGE-2 -j RETURN

-A DOCKER-USER -j RETURN

COMMIT

# Completed on Tue Oct 12 16:33:32 2021

[/CODE]

Paste Settings

Paste Title : [Optional]

Paste Folder : [Optional]

Syntax Highlighting : [Optional]

Paste Expiration : [Optional]

Paste Status : [Optional]

Password : [Optional]

Description: [Optional]

Tags: [Optional]

Encrypt Paste (?)

You are currently not logged in, this means you can not edit or delete anything you paste. Sign Up or Login

Paste Settings

Site Languages