1 # Iptables rules for Internet2 (exempt) nodes. Nodes sending traffic to any of the IPs
2 # in the Internet2 ipset (hash) will end up the the slice's exempt queue. This supersedes the default config that lives in svn/iptables/planetlab-config
6 # Generated by iptables-save v1.3.8 on Fri Jul 25 15:09:03 2008
8 :PREROUTING ACCEPT [0:0]
9 :POSTROUTING ACCEPT [0:0]
12 # Completed on Fri Jul 25 15:09:03 2008
13 # Generated by iptables-save v1.3.8 on Fri Jul 25 15:09:03 2008
20 -A OUTPUT -j BLACKLIST
24 # Completed on Fri Jul 25 15:09:03 2008
25 # Generated by iptables-save v1.3.8 on Fri Jul 25 15:09:03 2008
27 :PREROUTING ACCEPT [0:0]
31 :POSTROUTING ACCEPT [0:0]
32 -A INPUT -i ! lo -j MARK --copy-xid 0x0
33 -A POSTROUTING -j MARK --copy-xid 0x0
34 -A POSTROUTING -j CLASSIFY --set-class 0001:1000
35 -A POSTROUTING -m set --set Internet2 dst -j CLASSIFY --set-class 0001:2000
36 -A POSTROUTING -o eth0 -j ULOG --ulog-cprange 54 --ulog-qthreshold 16
38 # Completed on Fri Jul 25 15:09:03 2008