Iptables stopping smtp_bind_address from working properly

Fri, 08 Jul 2011 12:06:51 -0700

When I turn off the firewall (which I am loath to do) to my VPS I am able to use the command smtp_bind_address just fine.
Otherwise, with firewall turned on, I am getting these time out errors in my maillog files: 


Jul  7 13:00:04 who postfix/pickup[36846]: 1F3274160009: uid=10003 
from=<blabla...@mydomain.com>
Jul  7 13:00:04 who postfix/cleanup[38864]: 1F3274160009: 
message-id=<20110707170002.38758.1650417736.sw...@www.mydomain.com>
Jul  7 13:00:04 who postfix/qmgr[36847]: 1F3274160009: 
from=<blablabla@mydomain>, size=996, nrcpt=1 (queue active)
Jul  7 13:00:34 who postfix/smtp[40187]: connect to 
127.0.0.1[127.0.0.1]: Connection timed out (port 10027)
Jul  7 13:00:34 who postfix/smtp[40187]: 1F3274160009: 
to=<blublu...@gmail.com>, relay=none, delay=32, delays=1.9/0.01/30/0, 
dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]: Connection 
timed out)



I cannot find in the following list of rules (which is the default 
iptables policy for the hosting company I use) what is causing the 
connection timed out issue.  If someone sees something please advise 
what needs to be done.  I am at my wits end with this problem.  Thank you.


Chain INPUT (policy ACCEPT)
target     prot opt source               destination

ACCEPT     icmp --  anywhere             anywhere            icmp 
echo-request
ACCEPT     icmp --  anywhere             anywhere            icmp 
echo-reply
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpts:1024:65535 recent: CHECK seconds: 10800 name: FTP 
side: dest
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpts:1024:65535 recent: CHECK seconds: 10800 name: FTP 
side: source
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp 
recent: SET name: FTP side: dest
ACCEPT     udp  --  cache02.theplanet.com  anywhere            udp 
spt:domain dpts:1024:65535
ACCEPT     udp  --  cache01.theplanet.com  anywhere            udp 
spt:domain dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:11444 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:11443 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:svn 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:5224 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:eli 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:gnunet dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:sep 
dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:domain dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:domain dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:smtp dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:mysql dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:https dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:imap dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:pop3 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:http dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:nicname dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ftp 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:ftp-data dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4648
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ehs
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4534
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4533
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4435
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4434
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4433
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4646
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:snmp
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:4643
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:11444
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:11443
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:mysql
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:8447
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:pcsync-https
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:cddbp-alt
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:nbx-dir
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:nbx-ser
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:eli
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:gnunet
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:radsec
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:infowave
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:trellissvr
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:trellisagt
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:pop3s
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:imaps
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:smtps
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:https
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:imap
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:http
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:nicname
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:26
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ftp
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ftp-data

ACCEPT     all  --  localhost.localdomain  anywhere

flood      tcp  --  anywhere             anywhere            tcp 
flags:FIN,SYN,RST,ACK/SYN

DROP       all  -f  anywhere             anywhere

DROP       tcp  --  anywhere             anywhere            tcp 
flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
DROP       tcp  --  anywhere             anywhere            tcp 
flags:FIN,SYN,RST,PSH,ACK,URG/NONE

DROP       all  --  0.0.0.0/8            anywhere
DROP       all  --  127.0.0.0/8          anywhere
DROP       all  --  172.16.0.0/12        anywhere
DROP       all  --  192.168.0.0/16       anywhere
DROP       all  --  base-address.mcast.net/3  anywhere
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain

LOG        all  --  anywhere             anywhere            LOG level 
warning prefix `LOG_INPUT '

DROP       all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

ACCEPT     icmp --  anywhere             anywhere            icmp 
echo-reply
ACCEPT     icmp --  anywhere             anywhere            icmp 
echo-request
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpts:1024:65535 recent: CHECK seconds: 10800 name: FTP 
side: dest
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpts:1024:65535 recent: CHECK seconds: 10800 name: FTP 
side: source
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp 
recent: SET name: FTP side: dest
ACCEPT     udp  --  anywhere             cache02.theplanet.com udp 
spts:1024:65535 dpt:domain
ACCEPT     udp  --  anywhere             cache01.theplanet.com udp 
spts:1024:65535 dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:11444
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:11443
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:svn
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:5224
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:eli
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:gnunet
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:sep
ACCEPT     udp  --  anywhere             anywhere            udp 
spts:1024:65535 dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:mysql
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:https
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:imap
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:http
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:nicname
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ftp
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spts:1024:65535 dpt:ftp-data
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ssh 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4648 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ehs 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4534 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4533 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4435 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4434 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4433 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:webcache dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4646 dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:snmp dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:4643 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:11444 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:11443 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:mysql dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:8447 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:pcsync-https dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:cddbp-alt dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:nbx-dir dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:nbx-ser dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:eli 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:gnunet dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:radsec dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:infowave dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:trellissvr dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:trellisagt dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:pop3s dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:imaps dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:smtps dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:https dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:imap dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:pop3 dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:http dpts:1024:65535
ACCEPT     udp  --  anywhere             anywhere            udp 
spt:domain dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:domain dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:nicname dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:26 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:smtp dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:ftp 
dpts:1024:65535
ACCEPT     tcp  --  anywhere             anywhere            tcp 
spt:ftp-data dpts:1024:65535

ACCEPT     all  --  anywhere             localhost.localdomain
ACCEPT     udp  --  anywhere             anywhere            udp spt:domain

LOG        all  --  anywhere             anywhere            LOG level 
warning prefix `LOG_OUTPUT '

DROP       all  --  anywhere             anywhere

Chain flood (1 references)
target     prot opt source               destination

RETURN     all  --  anywhere             anywhere            limit: avg 
1/sec burst 20

DROP       all  --  anywhere             anywhere























					Reply via email to