Cluster I/O Protocols (CIP) Configuration and Management Manual (H06.16+, J06.05+)
-A CIP_INPUT -p tcp -m tcp --dport 23 -j telnet
-A ftp -i eth2 -j REJECT --reject-with icmp-port-unreachable
-A telnet ! -i eth2 -j REJECT --reject-with icmp-port-unreachable
Termination Info: 0
> climcmd n1002583 climconfig iptables -vL
Chain INPUT (policy ACCEPT 11 packets, 889 bytes)
pkts bytes target prot opt in out source
destination
7636 1970K ACCEPT all -- any any N1002583
anywhere
657K 229M ACCEPT all -- eth0 any anywhere
anywhere
204 13045 CIP_INPUT all -- any any anywhere
anywhere
146 9781 CIP_INPUT_p all -- any any anywhere
anywhere
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source
destination
Chain OUTPUT (policy ACCEPT 1313 packets, 246K bytes)
pkts bytes target prot opt in out source
destination
Chain CIP_INPUT (1 references)
pkts bytes target prot opt in out source
destination
18 972 ftp tcp -- any any anywhere
anywhere tcp dpts:ftp-data:ftp
4 224 telnet tcp -- any any anywhere
anywhere tcp dpt:telnet
Chain CIP_INPUT_p (1 references)
pkts bytes target prot opt in out source
destination
Chain ftp (1 references)
pkts bytes target prot opt in out source
destination
2 120 REJECT all -- eth2 any anywhere
anywhere reject-with icmp-port-unreachable
Chain telnet (1 references)
pkts bytes target prot opt in out source
destination
1 60 REJECT all -- !eth2 any anywhere
anywhere reject-with icmp-port-unreachable
Termination Info: 0
SEE ALSO
climconfig ip6tables, climiptables
346










