Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 43M 54G LIBVIRT_INP all -- * * 0.0.0.0/0 0.0.0.0/0 154M 189G ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 317K 19M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 1369K 253M INPUT_direct all -- * * 0.0.0.0/0 0.0.0.0/0 1369K 253M INPUT_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0 1369K 253M INPUT_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0 1590 69271 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 59650 9257K REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 251K 937M LIBVIRT_FWX all -- * * 0.0.0.0/0 0.0.0.0/0 251K 937M LIBVIRT_FWI all -- * * 0.0.0.0/0 0.0.0.0/0 102K 5461K LIBVIRT_FWO all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 1465 212K FORWARD_direct all -- * * 0.0.0.0/0 0.0.0.0/0 1465 212K FORWARD_IN_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0 1465 212K FORWARD_IN_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0 965 170K FORWARD_OUT_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0 965 170K FORWARD_OUT_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 965 170K REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT 107K packets, 9408K bytes) pkts bytes target prot opt in out source destination 26M 8915M LIBVIRT_OUT all -- * * 0.0.0.0/0 0.0.0.0/0 97M 35G OUTPUT_direct all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD_IN_ZONES (1 references) pkts bytes target prot opt in out source destination 0 0 FWDI_FedoraWorkstation all -- wlp58s0 * 0.0.0.0/0 0.0.0.0/0 [goto] 0 0 FWDI_FedoraWorkstation all -- + * 0.0.0.0/0 0.0.0.0/0 [goto] Chain FORWARD_IN_ZONES_SOURCE (1 references) pkts bytes target prot opt in out source destination Chain FORWARD_OUT_ZONES (1 references) pkts bytes target prot opt in out source destination 0 0 FWDO_FedoraWorkstation all -- * wlp58s0 0.0.0.0/0 0.0.0.0/0 [goto] 140 47079 FWDO_FedoraWorkstation all -- * + 0.0.0.0/0 0.0.0.0/0 [goto] Chain FORWARD_OUT_ZONES_SOURCE (1 references) pkts bytes target prot opt in out source destination Chain FORWARD_direct (1 references) pkts bytes target prot opt in out source destination Chain FWDI_FedoraWorkstation (2 references) pkts bytes target prot opt in out source destination 1465 212K FWDI_FedoraWorkstation_log all -- * * 0.0.0.0/0 0.0.0.0/0 1465 212K FWDI_FedoraWorkstation_deny all -- * * 0.0.0.0/0 0.0.0.0/0 1465 212K FWDI_FedoraWorkstation_allow all -- * * 0.0.0.0/0 0.0.0.0/0 500 42000 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 Chain FWDI_FedoraWorkstation_allow (1 references) pkts bytes target prot opt in out source destination Chain FWDI_FedoraWorkstation_deny (1 references) pkts bytes target prot opt in out source destination Chain FWDI_FedoraWorkstation_log (1 references) pkts bytes target prot opt in out source destination Chain FWDO_FedoraWorkstation (2 references) pkts bytes target prot opt in out source destination 965 170K FWDO_FedoraWorkstation_log all -- * * 0.0.0.0/0 0.0.0.0/0 965 170K FWDO_FedoraWorkstation_deny all -- * * 0.0.0.0/0 0.0.0.0/0 965 170K FWDO_FedoraWorkstation_allow all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FWDO_FedoraWorkstation_allow (1 references) pkts bytes target prot opt in out source destination Chain FWDO_FedoraWorkstation_deny (1 references) pkts bytes target prot opt in out source destination Chain FWDO_FedoraWorkstation_log (1 references) pkts bytes target prot opt in out source destination Chain INPUT_ZONES (1 references) pkts bytes target prot opt in out source destination 955 109K IN_FedoraWorkstation all -- wlp58s0 * 0.0.0.0/0 0.0.0.0/0 [goto] 3578 320K IN_FedoraWorkstation all -- + * 0.0.0.0/0 0.0.0.0/0 [goto] Chain INPUT_ZONES_SOURCE (1 references) pkts bytes target prot opt in out source destination Chain INPUT_direct (1 references) pkts bytes target prot opt in out source destination Chain IN_FedoraWorkstation (2 references) pkts bytes target prot opt in out source destination 1369K 253M IN_FedoraWorkstation_log all -- * * 0.0.0.0/0 0.0.0.0/0 1369K 253M IN_FedoraWorkstation_deny all -- * * 0.0.0.0/0 0.0.0.0/0 1369K 253M IN_FedoraWorkstation_allow all -- * * 0.0.0.0/0 0.0.0.0/0 197 11038 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 Chain IN_FedoraWorkstation_allow (1 references) pkts bytes target prot opt in out source destination 56 3200 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW,UNTRACKED 255K 20M ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 ctstate NEW,UNTRACKED 50312 10M ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138 ctstate NEW,UNTRACKED 764K 177M ACCEPT udp -- * * 0.0.0.0/0 224.0.0.251 udp dpt:5353 ctstate NEW,UNTRACKED 237K 36M ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:1025:65535 ctstate NEW,UNTRACKED 600 38632 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:1025:65535 ctstate NEW,UNTRACKED Chain IN_FedoraWorkstation_deny (1 references) pkts bytes target prot opt in out source destination Chain IN_FedoraWorkstation_log (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_FWI (1 references) pkts bytes target prot opt in out source destination 149K 932M ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 ctstate RELATED,ESTABLISHED 0 0 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 106 37761 ACCEPT all -- * virbr1 0.0.0.0/0 192.169.122.0/24 ctstate RELATED,ESTABLISHED 0 0 REJECT all -- * virbr1 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain LIBVIRT_FWO (1 references) pkts bytes target prot opt in out source destination 102K 5413K ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0 0 0 REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 129 10439 ACCEPT all -- virbr1 * 192.169.122.0/24 0.0.0.0/0 0 0 REJECT all -- virbr1 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain LIBVIRT_FWX (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- virbr1 virbr1 0.0.0.0/0 0.0.0.0/0 Chain LIBVIRT_INP (1 references) pkts bytes target prot opt in out source destination 209 15241 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 67 21535 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 19 1256 ACCEPT udp -- virbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- virbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 4 1294 ACCEPT udp -- virbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- virbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 Chain LIBVIRT_OUT (1 references) pkts bytes target prot opt in out source destination 67 22587 ACCEPT udp -- * virbr0 0.0.0.0/0 0.0.0.0/0 udp dpt:68 4 1315 ACCEPT udp -- * virbr1 0.0.0.0/0 0.0.0.0/0 udp dpt:68 Chain OUTPUT_direct (1 references) pkts bytes target prot opt in out source destination