Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- 10.215.0.0/24 anywhere ACCEPT all -- 10.217.0.0/24 anywhere ACCEPT all -- 10.217.0.0/24 anywhere ACCEPT udp -- 10.214.0.0/24 10.214.0.94 udp dpt:domain ACCEPT tcp -- 10.214.0.0/24 10.214.0.94 tcp dpt:domain ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED Chain FORWARD (policy DROP) target prot opt source destination ACCEPT udp -- 192.168.1.0/24 192.168.1.5 ACCEPT udp -- 10.214.0.92 192.168.1.5 ACCEPT udp -- 10.217.0.0/24 192.168.1.5 ACCEPT udp -- 10.215.0.0/24 192.168.1.5 ACCEPT tcp -- 192.168.1.0/24 192.168.1.5 ACCEPT tcp -- 10.214.0.92 192.168.1.5 ACCEPT tcp -- 10.217.0.0/24 192.168.1.5 ACCEPT tcp -- 10.215.0.0/24 192.168.1.5 ACCEPT udp -- anywhere 192.168.1.5 udp dpt:48155 ACCEPT tcp -- anywhere 192.168.1.5 tcp dpt:48155 DROP all -- 10.219.0.0/24 192.168.1.5 ACCEPT udp -- 10.214.0.92 10.214.0.115 ACCEPT udp -- 10.217.0.0/24 10.214.0.115 ACCEPT udp -- 10.215.0.0/24 10.214.0.115 ACCEPT tcp -- 10.214.0.92 10.214.0.115 ACCEPT tcp -- 10.217.0.0/24 10.214.0.115 ACCEPT tcp -- 10.215.0.0/24 10.214.0.115 ACCEPT udp -- anywhere 10.214.0.115 udp dpt:websm ACCEPT udp -- anywhere 10.214.0.115 udp dpt:cslistener ACCEPT tcp -- anywhere 10.214.0.115 tcp dpt:websm ACCEPT tcp -- anywhere 10.214.0.115 tcp dpt:cslistener DROP all -- 10.219.0.0/24 10.214.0.115 ACCEPT udp -- 10.214.0.0/24 10.214.0.116 ACCEPT udp -- 10.217.0.0/24 10.214.0.116 ACCEPT udp -- 10.215.0.0/24 10.214.0.116 ACCEPT tcp -- 10.214.0.0/24 10.214.0.116 ACCEPT tcp -- 10.217.0.0/24 10.214.0.116 ACCEPT tcp -- 10.215.0.0/24 10.214.0.116 ACCEPT udp -- anywhere 10.214.0.116 udp dpt:dnp ACCEPT udp -- anywhere 10.214.0.116 udp dpt:ndmp ACCEPT udp -- anywhere 10.214.0.116 udp dpt:http ACCEPT udp -- anywhere 10.214.0.116 udp dpt:7071 ACCEPT udp -- anywhere 10.214.0.116 udp dpt:ssh ACCEPT udp -- anywhere 10.214.0.116 udp dpt:smtp ACCEPT udp -- anywhere 10.214.0.116 udp dpt:https ACCEPT tcp -- anywhere 10.214.0.116 tcp dpt:dnp ACCEPT tcp -- anywhere 10.214.0.116 tcp dpt:ndmp ACCEPT tcp -- anywhere 10.214.0.116 tcp dpt:http ACCEPT tcp -- anywhere 10.214.0.116 tcp dpt:7071 ACCEPT tcp -- anywhere 10.214.0.116 tcp dpt:ssh ACCEPT tcp -- anywhere 10.214.0.116 tcp dpt:smtp ACCEPT tcp -- anywhere 10.214.0.116 tcp dpt:https DROP all -- 10.219.0.0/24 10.214.0.116 ACCEPT udp -- 10.214.0.0/24 10.214.0.114 ACCEPT udp -- 10.217.0.0/24 10.214.0.114 ACCEPT udp -- 10.215.0.0/24 10.214.0.114 ACCEPT tcp -- 10.214.0.0/24 10.214.0.114 ACCEPT tcp -- 10.217.0.0/24 10.214.0.114 ACCEPT tcp -- 10.215.0.0/24 10.214.0.114 ACCEPT udp -- anywhere 10.214.0.114 udp dpt:http ACCEPT tcp -- anywhere 10.214.0.114 tcp dpt:http DROP all -- 10.219.0.0/24 10.214.0.114 ACCEPT all -- 10.217.0.0/24 anywhere ACCEPT all -- 10.214.0.0/24 anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED Chain OUTPUT (policy ACCEPT) target prot opt source destination