1# Generated by ip6tables-save v1.6.1 on Sat Feb 17 10:51:39 2018
2*mangle
3:PREROUTING ACCEPT [0:0]
4:INPUT ACCEPT [0:0]
5:FORWARD ACCEPT [0:0]
6:OUTPUT ACCEPT [0:0]
7:POSTROUTING ACCEPT [0:0]
8:FORWARD_direct - [0:0]
9:INPUT_direct - [0:0]
10:OUTPUT_direct - [0:0]
11:POSTROUTING_direct - [0:0]
12:PREROUTING_ZONES - [0:0]
13:PREROUTING_ZONES_SOURCE - [0:0]
14:PREROUTING_direct - [0:0]
15:PRE_FedoraWorkstation - [0:0]
16:PRE_FedoraWorkstation_allow - [0:0]
17:PRE_FedoraWorkstation_deny - [0:0]
18:PRE_FedoraWorkstation_log - [0:0]
19-A PREROUTING -j PREROUTING_direct
20-A PREROUTING -j PREROUTING_ZONES_SOURCE
21-A PREROUTING -j PREROUTING_ZONES
22-A INPUT -j INPUT_direct
23-A FORWARD -j FORWARD_direct
24-A OUTPUT -j OUTPUT_direct
25-A POSTROUTING -j POSTROUTING_direct
26-A PREROUTING_ZONES -i wlp58s0 -g PRE_FedoraWorkstation
27-A PREROUTING_ZONES -g PRE_FedoraWorkstation
28-A PRE_FedoraWorkstation -j PRE_FedoraWorkstation_log
29-A PRE_FedoraWorkstation -j PRE_FedoraWorkstation_deny
30-A PRE_FedoraWorkstation -j PRE_FedoraWorkstation_allow
31COMMIT
32# Completed on Sat Feb 17 10:51:39 2018
33# Generated by ip6tables-save v1.6.1 on Sat Feb 17 10:51:39 2018
34*raw
35:PREROUTING ACCEPT [0:0]
36:OUTPUT ACCEPT [0:0]
37:OUTPUT_direct - [0:0]
38:PREROUTING_ZONES - [0:0]
39:PREROUTING_ZONES_SOURCE - [0:0]
40:PREROUTING_direct - [0:0]
41:PRE_FedoraWorkstation - [0:0]
42:PRE_FedoraWorkstation_allow - [0:0]
43:PRE_FedoraWorkstation_deny - [0:0]
44:PRE_FedoraWorkstation_log - [0:0]
45-A PREROUTING -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT
46-A PREROUTING -j PREROUTING_direct
47-A PREROUTING -j PREROUTING_ZONES_SOURCE
48-A PREROUTING -j PREROUTING_ZONES
49-A OUTPUT -j OUTPUT_direct
50-A PREROUTING_ZONES -i wlp58s0 -g PRE_FedoraWorkstation
51-A PREROUTING_ZONES -g PRE_FedoraWorkstation
52-A PRE_FedoraWorkstation -j PRE_FedoraWorkstation_log
53-A PRE_FedoraWorkstation -j PRE_FedoraWorkstation_deny
54-A PRE_FedoraWorkstation -j PRE_FedoraWorkstation_allow
55COMMIT
56# Completed on Sat Feb 17 10:51:39 2018
57# Generated by ip6tables-save v1.6.1 on Sat Feb 17 10:51:39 2018
58*filter
59:INPUT ACCEPT [0:0]
60:FORWARD ACCEPT [0:0]
61:OUTPUT ACCEPT [0:0]
62:FORWARD_IN_ZONES - [0:0]
63:FORWARD_IN_ZONES_SOURCE - [0:0]
64:FORWARD_OUT_ZONES - [0:0]
65:FORWARD_OUT_ZONES_SOURCE - [0:0]
66:FORWARD_direct - [0:0]
67:FWDI_FedoraWorkstation - [0:0]
68:FWDI_FedoraWorkstation_allow - [0:0]
69:FWDI_FedoraWorkstation_deny - [0:0]
70:FWDI_FedoraWorkstation_log - [0:0]
71:FWDO_FedoraWorkstation - [0:0]
72:FWDO_FedoraWorkstation_allow - [0:0]
73:FWDO_FedoraWorkstation_deny - [0:0]
74:FWDO_FedoraWorkstation_log - [0:0]
75:INPUT_ZONES - [0:0]
76:INPUT_ZONES_SOURCE - [0:0]
77:INPUT_direct - [0:0]
78:IN_FedoraWorkstation - [0:0]
79:IN_FedoraWorkstation_allow - [0:0]
80:IN_FedoraWorkstation_deny - [0:0]
81:IN_FedoraWorkstation_log - [0:0]
82:OUTPUT_direct - [0:0]
83-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
84-A INPUT -i lo -j ACCEPT
85-A INPUT -j INPUT_direct
86-A INPUT -j INPUT_ZONES_SOURCE
87-A INPUT -j INPUT_ZONES
88-A INPUT -m conntrack --ctstate INVALID -j DROP
89-A INPUT -j REJECT --reject-with icmp6-adm-prohibited
90-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
91-A FORWARD -i lo -j ACCEPT
92-A FORWARD -j FORWARD_direct
93-A FORWARD -j FORWARD_IN_ZONES_SOURCE
94-A FORWARD -j FORWARD_IN_ZONES
95-A FORWARD -j FORWARD_OUT_ZONES_SOURCE
96-A FORWARD -j FORWARD_OUT_ZONES
97-A FORWARD -m conntrack --ctstate INVALID -j DROP
98-A FORWARD -j REJECT --reject-with icmp6-adm-prohibited
99-A OUTPUT -j OUTPUT_direct
100-A FORWARD_IN_ZONES -i wlp58s0 -g FWDI_FedoraWorkstation
101-A FORWARD_IN_ZONES -g FWDI_FedoraWorkstation
102-A FORWARD_OUT_ZONES -o wlp58s0 -g FWDO_FedoraWorkstation
103-A FORWARD_OUT_ZONES -g FWDO_FedoraWorkstation
104-A FWDI_FedoraWorkstation -j FWDI_FedoraWorkstation_log
105-A FWDI_FedoraWorkstation -j FWDI_FedoraWorkstation_deny
106-A FWDI_FedoraWorkstation -j FWDI_FedoraWorkstation_allow
107-A FWDI_FedoraWorkstation -p ipv6-icmp -j ACCEPT
108-A FWDO_FedoraWorkstation -j FWDO_FedoraWorkstation_log
109-A FWDO_FedoraWorkstation -j FWDO_FedoraWorkstation_deny
110-A FWDO_FedoraWorkstation -j FWDO_FedoraWorkstation_allow
111-A INPUT_ZONES -i wlp58s0 -g IN_FedoraWorkstation
112-A INPUT_ZONES -g IN_FedoraWorkstation
113-A IN_FedoraWorkstation -j IN_FedoraWorkstation_log
114-A IN_FedoraWorkstation -j IN_FedoraWorkstation_deny
115-A IN_FedoraWorkstation -j IN_FedoraWorkstation_allow
116-A IN_FedoraWorkstation -p ipv6-icmp -j ACCEPT
117-A IN_FedoraWorkstation_allow -p udp -m udp --dport 137 -m conntrack --ctstate NEW -j ACCEPT
118-A IN_FedoraWorkstation_allow -p udp -m udp --dport 138 -m conntrack --ctstate NEW -j ACCEPT
119-A IN_FedoraWorkstation_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
120-A IN_FedoraWorkstation_allow -d ff02::fb/128 -p udp -m udp --dport 5353 -m conntrack --ctstate NEW -j ACCEPT
121-A IN_FedoraWorkstation_allow -d fe80::/64 -p udp -m udp --dport 546 -m conntrack --ctstate NEW -j ACCEPT
122-A IN_FedoraWorkstation_allow -p udp -m udp --dport 1025:65535 -m conntrack --ctstate NEW -j ACCEPT
123-A IN_FedoraWorkstation_allow -p tcp -m tcp --dport 1025:65535 -m conntrack --ctstate NEW -j ACCEPT
124COMMIT
125# Completed on Sat Feb 17 10:51:39 2018
126