# Generated by iptables-save v1.3.5 on Tue Feb 9 19:14:32 2010 *filter :INPUT DROP [1:328] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :okay - [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type any -j ACCEPT -A INPUT -s 129.74.85.0/255.255.255.0 -j ACCEPT -A INPUT -s 129.74.128.0/255.255.255.0 -j ACCEPT -A INPUT -s 129.74.246.0/255.255.254.0 -j ACCEPT -A INPUT -s 10.32.8.0/255.255.248.0 -j ACCEPT -A INPUT -s 10.32.16.0/255.255.255.0 -j ACCEPT -A INPUT -s 10.32.64.0/255.255.192.0 -j ACCEPT -A INPUT -p udp -m udp --dport 7000:7010 -j ACCEPT -A INPUT -s 129.74.98.66 -p tcp -m state --state NEW -m tcp --dport 1967 -j ACCEPT -A INPUT -s 129.74.0.0/255.255.0.0 -p tcp -m tcp --dport 22 -j okay -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set --name DEFAULT --rsource -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 5 --name DEFAULT --rsource -j LOG --log-prefix "Excessive attempts from : " -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 5 --name DEFAULT --rsource -j DROP -A INPUT -p tcp -m tcp --dport 22 -j okay -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A okay -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A okay -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT -A okay -p tcp -j DROP COMMIT # Completed on Tue Feb 9 19:14:32 2010