[root@localhost ddd]# vi \/etc\/sysconfig\/iptables
\n# Generated by iptables-save v1.3.5 on Sun Jul 29 05:39:42 2012
\n*nat
\n: PREROUTING ACCEPT [3465:769364]
\n: POSTROUTING ACCEPT [194:11943]
\n: OUTPUT ACCEPT [193:11903]
\n-A POSTROUTING -s 192.168.122.0\/255.255.255.0 -d ! 192.168.122.0\/255.255.255.0 -p tcp -j MASQUERADE –to-ports 1024-65535
\n-A POSTROUTING -s 192.168.122.0\/255.255.255.0 -d ! 192.168.122.0\/255.255.255.0 -p udp -j MASQUERADE –to-ports 1024-65535
\n-A POSTROUTING -s 192.168.122.0\/255.255.255.0 -d ! 192.168.122.0\/255.255.255.0 -j MASQUERADE
\nCOMMIT
\n# Completed on Sun Jul 29 05:39:42 2012
\n# Generated by iptables-save v1.3.5 on Sun Jul 29 05:39:42 2012
\n*filter
\n:INPUT ACCEPT [0:0]
\n:FORWARD ACCEPT [0:0]
\n:OUTPUT ACCEPT [2871:1707973]
\n:RH-Firewall-1-INPUT – [0:0]
\n-A INPUT -i virbr0 -p udp -m udp –dport 53 -j ACCEPT
\n-A INPUT -i virbr0 -p tcp -m tcp –dport 53 -j ACCEPT
\n-A INPUT -i virbr0 -p udp -m udp –dport 67 -j ACCEPT
\n-A INPUT -i virbr0 -p tcp -m tcp –dport 67 -j ACCEPT
\n-A INPUT -j RH-Firewall-1-INPUT
\n-A FORWARD -d 192.168.122.0\/255.255.255.0 -o virbr0 -m state –state RELATED,ESTABLISHED -j ACCEPT
\n-A FORWARD -s 192.168.122.0\/255.255.255.0 -i virbr0 -j ACCEPT
\n-A FORWARD -i virbr0 -o virbr0 -j ACCEPT
\n-A FORWARD -o virbr0 -j REJECT –reject-with icmp-port-unreachable
\n-A FORWARD -i virbr0 -j REJECT –reject-with icmp-port-unreachable
\n-A FORWARD -j RH-Firewall-1-INPUT
\n-A RH-Firewall-1-INPUT -i lo -j ACCEPT
\n-A RH-Firewall-1-INPUT -p icmp -m icmp –icmp-type any -j ACCEPT
\n-A RH-Firewall-1-INPUT -p esp -j ACCEPT
\n-A RH-Firewall-1-INPUT -p ah -j ACCEPT
\n-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp –dport 5353 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p udp -m udp –dport 631 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p tcp -m tcp –dport 631 -j ACCEPT
\n-A RH-Firewall-1-INPUT -m state –state RELATED,ESTABLISHED -j ACCEPT
\n-A RH-Firewall-1-INPUT -s 111.111.111.0\/24 -p tcp –dport 21 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p tcp -m state –state NEW -m tcp –dport 2049 -j ACCEPT
\n-A RH-Firewall-1-INPUT -s 111.111.111.0\/24 -p tcp –dport 22 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p tcp -m state –state NEW -m tcp –dport 23 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p tcp -m state –state NEW -m tcp –dport 25 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p tcp -m state –state NEW -m tcp –dport 443 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p udp -m state –state NEW -m udp –dport 137 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p udp -m state –state NEW -m udp –dport 138 -j ACCEPT
\n-A RH-Firewall-1-INPUT -p tcp -m state –state NEW -m tcp –dport 139 -j ACCEPT
\n-A RH-Firewall-1-INPUT -s 111.111.111.0\/24\u00a0-p tcp –dport 3306 -j ACCEPT
\n-A RH-Firewall-1-INPUT -j REJECT –reject-with icmp-host-prohibited<\/p>\n","protected":false},"excerpt":{"rendered":"