===== COMMAND =====: iptables -t filter -S
===== RETURN CODE =====: 0
===== STDOUT =====:
[node-1.test.domain.local] out: -P INPUT ACCEPT
[node-1.test.domain.local] out: -P FORWARD ACCEPT
[node-1.test.domain.local] out: -P OUTPUT ACCEPT
[node-1.test.domain.local] out: -N nova-api-FORWARD
[node-1.test.domain.local] out: -N nova-api-INPUT
[node-1.test.domain.local] out: -N nova-api-OUTPUT
[node-1.test.domain.local] out: -N nova-api-local
[node-1.test.domain.local] out: -N nova-compute-FORWARD
[node-1.test.domain.local] out: -N nova-compute-INPUT
[node-1.test.domain.local] out: -N nova-compute-OUTPUT
[node-1.test.domain.local] out: -N nova-compute-local
[node-1.test.domain.local] out: -N nova-compute-provider
[node-1.test.domain.local] out: -N nova-compute-sg-fallback
[node-1.test.domain.local] out: -N nova-filter-top
[node-1.test.domain.local] out: -N nova-network-FORWARD
[node-1.test.domain.local] out: -N nova-network-INPUT
[node-1.test.domain.local] out: -N nova-network-OUTPUT
[node-1.test.domain.local] out: -N nova-network-local
[node-1.test.domain.local] out: -A INPUT -j nova-compute-INPUT 
[node-1.test.domain.local] out: -A INPUT -j nova-network-INPUT 
[node-1.test.domain.local] out: -A INPUT -j nova-api-INPUT 
[node-1.test.domain.local] out: -A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p icmp -m comment --comment "000 accept all icmp requests" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -i lo -m comment --comment "001 accept all to lo interface" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -m comment --comment "002 accept related established rules" -m state --state RELATED,ESTABLISHED -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -s 10.109.0.2/32 -p tcp -m multiport --sports 4369,5672,15672,41055,55672,61613 -m comment --comment "003 remote rabbitmq " -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -s 10.109.0.2/32 -p tcp -m multiport --sports 8140 -m comment --comment "004 remote puppet " -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 22 -m comment --comment "020 ssh" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 80,443 -m comment --comment "100 http" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 3306,3307,4567,4568,49000 -m comment --comment "101 mysql" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 5000,35357 -m comment --comment "102 keystone" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 8080,6000,6001,6002,49001 -m comment --comment "103 swift" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 9292,9191,8773 -m comment --comment "104 glance" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 8774,8775,8776,6080 -m comment --comment "105 nova " -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 4369,5672,5673,41055 -m comment --comment "106 rabbitmq " -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 11211 -m comment --comment "107 memcached tcp" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p udp -m multiport --ports 11211 -m comment --comment "107 memcached udp" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 873 -m comment --comment "108 rsync" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 3260 -m comment --comment "109 iscsi " -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 9696 -m comment --comment "110 neutron " -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p udp -m multiport --ports 67 -m comment --comment "111 dhcp-server" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p udp -m multiport --ports 53 -m comment --comment "111 dns-server" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p udp -m multiport --ports 123 -m comment --comment "112 ntp-server" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p udp -m multiport --ports 5404 -m comment --comment "113 corosync-input" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p udp -m multiport --ports 5405 -m comment --comment "114 corosync-output" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 2224 -m comment --comment "115 pcsd-server" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p udp -m multiport --ports 58882 -m comment --comment "116 openvswitch db" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 5666 -m comment --comment "117 nrpe-server" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -s 10.109.2.0/24 -p tcp -m multiport --ports 16509 -m comment --comment "118 libvirt" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 49152:49215 -m comment --comment "119 libvirt migration" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -s 10.109.2.0/24 -p tcp -m multiport --ports 5900:6100 -m comment --comment "120 vnc ports" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p tcp -m multiport --ports 8777 -m comment --comment "121 ceilometer" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -p gre -m comment --comment "334 accept gre" -j ACCEPT 
[node-1.test.domain.local] out: -A INPUT -m comment --comment "999 drop all other requests" -j DROP 
[node-1.test.domain.local] out: -A FORWARD -j nova-filter-top 
[node-1.test.domain.local] out: -A FORWARD -j nova-compute-FORWARD 
[node-1.test.domain.local] out: -A FORWARD -j nova-network-FORWARD 
[node-1.test.domain.local] out: -A FORWARD -j nova-api-FORWARD 
[node-1.test.domain.local] out: -A FORWARD -d 192.168.122.0/24 -o virbr0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT 
[node-1.test.domain.local] out: -A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT 
[node-1.test.domain.local] out: -A FORWARD -i virbr0 -o virbr0 -j ACCEPT 
[node-1.test.domain.local] out: -A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable 
[node-1.test.domain.local] out: -A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable 
[node-1.test.domain.local] out: -A OUTPUT -j nova-filter-top 
[node-1.test.domain.local] out: -A OUTPUT -j nova-compute-OUTPUT 
[node-1.test.domain.local] out: -A OUTPUT -j nova-network-OUTPUT 
[node-1.test.domain.local] out: -A OUTPUT -j nova-api-OUTPUT 
[node-1.test.domain.local] out: -A OUTPUT -o virbr0 -p udp -m udp --dport 68 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-api-INPUT -d 10.109.2.4/32 -p tcp -m tcp --dport 8775 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-compute-FORWARD -s 0.0.0.0/32 -d 255.255.255.255/32 -p udp -m udp --sport 68 --dport 67 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-compute-INPUT -s 0.0.0.0/32 -d 255.255.255.255/32 -p udp -m udp --sport 68 --dport 67 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-compute-sg-fallback -j DROP 
[node-1.test.domain.local] out: -A nova-filter-top -j nova-compute-local 
[node-1.test.domain.local] out: -A nova-filter-top -j nova-network-local 
[node-1.test.domain.local] out: -A nova-filter-top -j nova-api-local 
[node-1.test.domain.local] out: -A nova-network-FORWARD -i br100 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-network-FORWARD -o br100 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-network-INPUT -i br100 -p udp -m udp --dport 67 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-network-INPUT -i br100 -p tcp -m tcp --dport 67 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-network-INPUT -i br100 -p udp -m udp --dport 53 -j ACCEPT 
[node-1.test.domain.local] out: -A nova-network-INPUT -i br100 -p tcp -m tcp --dport 53 -j ACCEPT 
[node-1.test.domain.local] out: 

===== STDERR =====:
