Fujitsu PRIMEQUEST 1000 Series User Manual page 221

SVmco User Guide
2. Add the jump setting for the PSA-MMB_LAN chain to INPUT and
OUTPUT chains.
Make the setting such that there are no interruptions by an existing
REJECT setting in an INPUT or OUTPUT chain or by a user definition
chain.
Here, use the following command to add the setting to the fifth INPUT
chain (before the REJECT setting) and to the OUTPUT chain. (For details
on the iptables option, see the man manual.)
# /sbin/iptables –I INPUT 5 –j PSA-MMB_LAN
# /sbn/iptables –A OUTPUT –j PSA-MMB_LAN
3. Execute the iptables -L command, and confirm that the PSA-MMB_LAN
chains added to the INPUT and OUTPUT chains are not interrupted by the
previous REJECT, DROP, or other settings.
Example of settings:
# iptables –L
Chain INPUT (policy ACCEPT)
target prot opt source
ACCEPT all -- 0.0.0.0/0
RELATED,ESTABLISHED
ACCEPT icmp -- 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0
dpt:22
PSA-MMB_LAN all -- 0.0.0.0/0
REJECT all -- 0.0.0.0/0
host-prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source
REJECT all -- 0.0.0.0/0
host-prohibited
destination
0.0.0.0/0 state
0.0.0.0/0
0.0.0.0/0
0.0.0.0/0 state NEW tcp
0.0.0.0/0
0.0.0.0/0 reject-with icmp-
destination
0.0.0.0/0 reject-with icmp-
213