Static hostname: srv-fr Icon name: computer-desktop Chassis: desktop šŸ–„ļø Machine ID: 5e53c9f43f0a42c3a1dd2f8538176be5 Boot ID: d53ffa0206f746e891b518cfde0d8361 Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux 6.8.12-37-pve Architecture: x86-64 Hardware Vendor: Gigabyte Technology Co., Ltd. Hardware Model: Z390 I AORUS PRO WIFI Firmware Version: F7 Date : 2026-09-15 19:50:08 CEST 19:50:08 up 18 days, 9:05, 2 users, load average: 0,54, 0,78, 0,75 ā— firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Fri 2026-08-28 10:46:00 CEST; 2 weeks 4 days ago Docs: man:systemd-sysv-generator(8) CPU: 323ms aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + WIFI NAT : [OK] aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + WIFI LAN ACCES : [OK] aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + WIFI NET ACCES : [OK] aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + VSERVERS NAT : [OK] aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + VSERVERS FORWARDING : [OK] aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + DNS : [OK] aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + HTTP PVE : [OK] aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + HTTP ZW3B : [OK] aoĆ»t 28 10:46:00 srv-fr firewall[1195]: + On fixe les portes : DROP aoĆ»t 28 10:46:00 srv-fr systemd[1]: Started firewall.service - LSB: Start daemon at boot time. Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP 17 -- * * 222.52.66.207 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 222.52.66.207 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 222.52.66.207 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 190.210.152.17 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 190.210.152.17 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 190.210.152.17 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 212.237.35.210 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 212.237.35.210 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 212.237.35.210 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 58.208.0.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 58.208.0.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 58.208.0.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 203.115.105.245 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 203.115.105.245 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 203.115.105.245 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 62.105.136.154 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 62.105.136.154 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 62.105.136.154 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 87.236.232.36 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 87.236.232.36 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 87.236.232.36 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 179.4.122.93 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 179.4.122.93 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 179.4.122.93 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 203.128.244.214 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 203.128.244.214 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 203.128.244.214 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 222.192.176.40 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 222.192.176.40 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 222.192.176.40 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 194.247.227.8 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 194.247.227.8 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 194.247.227.8 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 59.120.160.184 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 59.120.160.184 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 59.120.160.184 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 203.193.173.41 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 203.193.173.41 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 203.193.173.41 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 123.129.65.43 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 123.129.65.43 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 123.129.65.43 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 107.151.136.210 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 107.151.136.210 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 107.151.136.210 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 45.63.15.172 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 45.63.15.172 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 45.63.15.172 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.207.132.28 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 104.207.132.28 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.207.132.28 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.16.0.0/12 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 147 7832 DROP 6 -- * * 104.16.0.0/12 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.16.0.0/12 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 54.209.6.177 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 54.209.6.177 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 54.209.6.177 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.9.89.170 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.9.89.170 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.9.89.170 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 94.154.239.69 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 94.154.239.69 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 94.154.239.69 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 162.210.196.100 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 162.210.196.100 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 162.210.196.100 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.31.0.0/16 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 104.31.0.0/16 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.31.0.0/16 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.27.0.0/16 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 104.27.0.0/16 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.27.0.0/16 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 107.151.136.218 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 107.151.136.218 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 107.151.136.218 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 107.151.142.114 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 107.151.142.114 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 107.151.142.114 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 107.151.152.218 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 107.151.152.218 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 107.151.152.218 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 195.154.182.63 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 195.154.182.63 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 195.154.182.63 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 220.220.9.128 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 220.220.9.128 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 220.220.9.128 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 108.181.49.123 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 108.181.49.123 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 108.181.49.123 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 111.231.207.136 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 111.231.207.136 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 111.231.207.136 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 91.219.236.0/22 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 91.219.236.0/22 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 91.219.236.0/22 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.254.93.69 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 104.254.93.69 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.254.93.69 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 185.104.184.123 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 185.104.184.123 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 185.104.184.123 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 203.195.202.153 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 203.195.202.153 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 203.195.202.153 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.188.84.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.188.84.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.188.84.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.188.210.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.188.210.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.188.210.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.188.62.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.188.62.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.188.62.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.8.45.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.8.45.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.8.45.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 105.108.0.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 105.108.0.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 105.108.0.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 20.171.207.124 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 20.171.207.124 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 20.171.207.124 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 51680 3040K syn-flood 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 0 0 DROP 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP 0 -- gatebr0 * 172.16.0.0/12 0.0.0.0/0 57478 5208K DROP 0 -- gatebr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP 0 -- gatebr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- gatebr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- gatebr0 * 127.0.0.0/8 0.0.0.0/0 1627 163K ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 gre 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 gre 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 0 0 ACCEPT 6 -- gatebr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 172.16.0.254 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 172.16.0.142 0.0.0.0/0 tcp dpt:22 1 60 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 2043 163K ACCEPT 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.0.254 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.0.254 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.0.142 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.0.142 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8123 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 75914 12M ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 9573K 36G ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 235 19740 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT 17 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT 17 -- gatebr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP 17 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 100 mode srcip srcmask 28 0 0 DROP 6 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8006 3015 167K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 15925 2756K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 25243 1471K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 556K 67M ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 2844K 239M ACCEPT 0 -- * * 0.0.0.0/0 10.106.0.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.106.0.252 limit: avg 5/sec burst 4 72578 65M ACCEPT 0 -- * * 0.0.0.0/0 10.116.0.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.116.0.252 limit: avg 5/sec burst 4 164K 301M ACCEPT 0 -- * * 0.0.0.0/0 10.126.0.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.126.0.252 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 10.106.42.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.106.42.252 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 10.6.42.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.6.42.252 limit: avg 5/sec burst 4 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * * 10.6.42.0/24 10.116.42.0/24 0 0 ACCEPT 0 -- * * 10.116.42.0/24 10.6.42.0/24 0 0 ACCEPT 0 -- * * 10.6.42.0/24 10.126.42.0/24 0 0 ACCEPT 0 -- * * 10.126.42.0/24 10.6.42.0/24 0 0 ACCEPT 1 -- * * 10.6.42.1 10.6.42.0/24 state NEW,ESTABLISHED 0 0 ACCEPT 1 -- * * 10.6.42.0/24 10.6.42.1 state RELATED,ESTABLISHED 0 0 ACCEPT 6 -- * * 10.6.42.1 10.6.42.0/24 state NEW,ESTABLISHED 0 0 ACCEPT 6 -- * * 10.6.42.0/24 10.6.42.1 state RELATED,ESTABLISHED 0 0 ACCEPT 17 -- wlan0 gatebr0 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED udp dpt:53 0 0 ACCEPT 17 -- gatebr0 wlan0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED udp spt:53 0 0 ACCEPT 6 -- wlan0 gatebr0 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED multiport dports 22,1234,80,443,143,993,995,110,25,465,5222,5223 0 0 ACCEPT 6 -- gatebr0 wlan0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED multiport sports 22,1234,80,443,143,993,995,110,25,465,5222,5223 0 0 ACCEPT 6 -- wlan0 gatebr0 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED multiport dports 21,20 0 0 ACCEPT 6 -- gatebr0 wlan0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED multiport sports 21,20 3790 694K ACCEPT 0 -- vmbr0 gatebr0 0.0.0.0/0 0.0.0.0/0 4728 625K ACCEPT 0 -- gatebr0 vmbr0 0.0.0.0/0 0.0.0.0/0 778 48378 ACCEPT 0 -- vmbr1 gatebr0 0.0.0.0/0 0.0.0.0/0 798 969K ACCEPT 0 -- gatebr0 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr2 gatebr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- gatebr0 vmbr2 0.0.0.0/0 0.0.0.0/0 4 369 ACCEPT 0 -- vmbr0 vmbr1 0.0.0.0/0 0.0.0.0/0 4 281 ACCEPT 0 -- vmbr1 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr0 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr2 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr1 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr2 vmbr1 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 6 packets, 504 bytes) pkts bytes target prot opt in out source destination 1627 163K ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 6 -- * * 0.0.0.0/0 158.69.126.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 83.159.31.116 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.253 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.0.254 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.0.142 tcp spt:22 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:2049 64884 24M ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:2049 9661K 2972M ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr2 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr2 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:111 235 13160 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 ACCEPT 17 -- * vmbr2 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr2 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 LOG 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED tcp spt:8006 15071 3554K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 465K 643M ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 5966K 373M ACCEPT 0 -- * * 10.106.0.252 0.0.0.0/0 ! state INVALID 10 520 ACCEPT 0 -- * * 10.106.0.252 0.0.0.0/0 72855 6901K ACCEPT 0 -- * * 10.116.0.252 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.116.0.252 0.0.0.0/0 190K 15M ACCEPT 0 -- * * 10.126.0.252 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.126.0.252 0.0.0.0/0 0 0 ACCEPT 0 -- * * 10.106.42.252 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.106.42.252 0.0.0.0/0 0 0 ACCEPT 0 -- * * 10.6.42.252 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.6.42.252 0.0.0.0/0 Chain black (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: blacklist side: source mask: 255.255.255.255 Chain gre (2 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: blacklist side: source mask: 255.255.255.255 0 0 black 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 600 reap hit_count: 10 name: timer side: source mask: 255.255.255.255 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: timer side: source mask: 255.255.255.255 Chain syn-flood (1 references) pkts bytes target prot opt in out source destination 28600 1657K RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 23080 1383K DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0