Static hostname: lab3w Icon name: computer-server Chassis: server Machine ID: 995a2432b78f49fca6dc8014dcae1eb5 Boot ID: aad9d89ed69247ccb14e6a969b561526 Operating System: Debian GNU/Linux 10 (buster) Kernel: Linux 5.4.203-1-pve Architecture: x86-64 Date : 2026-09-22 23:25:08 EDT 23:25:08 up 51 days, 2:10, 1 user, load average: 1,41, 2,27, 2,16 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Wed 2026-09-09 06:31:52 EDT; 1 weeks 6 days ago Docs: man:systemd-sysv-generator(8) Tasks: 0 (limit: 4915) Memory: 0B CGroup: /system.slice/firewall.service Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable. Chain INPUT (policy DROP 219 packets, 8760 bytes) pkts bytes target prot opt in out source destination 2258K 177M DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP tcp -- * * 150.138.116.22 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 167.172.145.53 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 150.138.116.22 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 167.172.145.53 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 159.75.136.164 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.229.16.138 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 191.217.184.46 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 122.51.81.247 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 59.83.222.82 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 122.51.81.247 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 157.230.116.65 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 157.245.53.136 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 157.230.116.65 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 117.50.98.188 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 171.244.140.174 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 203.66.14.161 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 138.197.213.192 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 144.34.192.10 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.4.106.243 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 171.244.140.174 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 117.50.98.188 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.4.106.243 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 115.71.239.208 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 206.189.122.104 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.229.16.138 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 59.83.222.82 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.229.16.138 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 122.51.81.247 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 159.75.136.164 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 203.66.14.161 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 122.51.81.247 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 138.197.213.192 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 101.32.207.241 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 51.222.24.155 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 181.63.248.149 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 106.52.222.11 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 181.63.248.149 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 191.217.184.46 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 157.245.53.136 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 171.244.140.174 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 43.226.51.218 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 222.52.66.207 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 190.210.152.17 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 212.237.35.210 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 58.208.0.0 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 223.221.38.226 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 82.79.68.224 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 61.171.100.124 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.229.13.210 0.0.0.0/0 tcp dpt:22 3071K 181M Syn-FLOOD tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 2352 541K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP all -f * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 2 120 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 1828K 152M DROP all -- vmbr0 * 10.0.0.0/8 0.0.0.0/0 64608 5898K DROP all -- vmbr0 * 172.16.0.0/12 0.0.0.0/0 186K 17M DROP all -- vmbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP all -- vmbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- vmbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP all -- vmbr0 * 127.0.0.0/8 0.0.0.0/0 230K 370M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 24762 1472K DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81 8 424 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:81 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.101.150.10 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.105.0.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.105.150.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 145K 8672K tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 88587 5369K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 636K 97M ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.150.10 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.150.10 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.105.0.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.105.0.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.105.150.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.105.150.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 10 508 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 38 2044 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 5416 410K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 286 22354 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 1 65 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 413 144K ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 29M 5249M ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 60M 7968M ACCEPT esp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 esp 2 84 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 3 132 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6000 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:1234 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 state NEW recent: SET name: VSSH_1234 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_1234 side: source mask: 255.255.255.255 34 1615 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:4321 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 state NEW recent: SET name: VSSH_4321 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_4321 side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:12345 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 state NEW recent: SET name: VSSH_12345 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_12345 side: source mask: 255.255.255.255 38 1704 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27005 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27015 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27020 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27030 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27031 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27032 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27033 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27034 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27035 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27036 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27037 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27038 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27039 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:1200 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27000 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27001 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27002 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27003 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27004 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27005 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27006 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27007 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27008 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27009 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27010 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27011 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27012 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27013 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27014 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27015 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27020 0 0 ACCEPT udp -- vmbr0 * 104.113.170.241 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 151.231.39.39 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 2 135 ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 20 mode srcip 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW recent: SET name: NAMED side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: 255.255.255.255 521 34962 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 93M 49G ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 36M 11G ACCEPT tcp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 1074 63424 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8006 212K 13M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 1990K 535M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 350K 21M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 16M 1563M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 1245 68932 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7071 tcp state NEW recent: SET name: WEB_7071 side: source mask: 255.255.255.255 11234 1726K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7071 0 0 ACCEPT tcp -- * * 109.210.49.186 0.0.0.0/0 tcp dpt:7071 146 14020 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 688 29112 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:61001:65535 3293 273K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8005 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9001 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9002 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9003 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:7025 0 0 ACCEPT tcp -- 172.16.5.137 * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:636 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 325 13040 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 80 3572 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 32 1336 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 state NEW recent: SET name: POP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: POP side: source mask: 255.255.255.255 109 6437 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 state NEW recent: SET name: IMAP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: IMAP side: source mask: 255.255.255.255 328 20316 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 state NEW recent: SET name: IMAP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: IMAP side: source mask: 255.255.255.255 166 8533 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 state NEW recent: SET name: XMPP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: XMPP side: source mask: 255.255.255.255 8 332 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 state NEW recent: SET name: XMPP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: XMPP side: source mask: 255.255.255.255 1 40 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 2876K 244M ACCEPT all -- * * 0.0.0.0/0 158.69.126.137 state RELATED,ESTABLISHED 859K 35M ACCEPT icmp -- * * 0.0.0.0/0 158.69.126.137 limit: avg 5/sec burst 4 531K 757M ACCEPT all -- * * 0.0.0.0/0 10.101.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.102.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.102.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.254 limit: avg 5/sec burst 4 667K 481M ACCEPT all -- * * 0.0.0.0/0 10.104.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.254 limit: avg 5/sec burst 4 113K 283M ACCEPT all -- * * 0.0.0.0/0 10.105.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.105.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.5.137 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.5.137 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.10.137 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.10.137 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.105.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.105.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.102.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.102.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.104.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.104.0.2 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.2 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.2 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.2 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.150.80 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.150.80 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.150.251 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.150.251 limit: avg 5/sec burst 4 1804 437K LOG udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 22890 5105K DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 1757 113K LOG icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 2806 181K DROP icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 1805 88154 LOG tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 174K 8928K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 286 110K LOG all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 287 110K DROP all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 53521 packets, 3328K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 11M 5306M ACCEPT all -- vmbr1 vmbr0 0.0.0.0/0 0.0.0.0/0 11M 3928M ACCEPT all -- vmbr0 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr0 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr0 vmbr3 0.0.0.0/0 0.0.0.0/0 18M 16G ACCEPT all -- vmbr4 vmbr0 0.0.0.0/0 0.0.0.0/0 18M 4059M ACCEPT all -- vmbr0 vmbr4 0.0.0.0/0 0.0.0.0/0 199K 20M ACCEPT all -- vmbr5 vmbr0 0.0.0.0/0 0.0.0.0/0 184K 44M ACCEPT all -- vmbr0 vmbr5 0.0.0.0/0 0.0.0.0/0 14916 895K ACCEPT all -- vmbr1 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr1 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr1 0.0.0.0/0 0.0.0.0/0 53384 40M ACCEPT all -- vmbr1 vmbr4 0.0.0.0/0 0.0.0.0/0 59041 4819K ACCEPT all -- vmbr4 vmbr1 0.0.0.0/0 0.0.0.0/0 55M 75G ACCEPT all -- vmbr1 vmbr5 0.0.0.0/0 0.0.0.0/0 64M 9649M ACCEPT all -- vmbr5 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr4 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr4 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr5 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr5 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr4 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr4 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr5 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr5 vmbr3 0.0.0.0/0 0.0.0.0/0 6417K 387M ACCEPT all -- vmbr4 vmbr5 0.0.0.0/0 0.0.0.0/0 11M 41G ACCEPT all -- vmbr5 vmbr4 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 63 packets, 3240 bytes) pkts bytes target prot opt in out source destination 340K 374M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:47 state NEW 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:81 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:81 409 79041 ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:500 48M 7080M ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 2 80 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 2 80 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state RELATED,ESTABLISHED 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 162 6480 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 71 153K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED tcp spt:8006 1676K 986M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 tcp state RELATED,ESTABLISHED 13M 57G ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 tcp state RELATED,ESTABLISHED 10389 6045K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:7071 tcp state RELATED,ESTABLISHED 3113 251K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:3128 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8000 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8005 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9000 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9001 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9002 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9003 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:7025 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:636 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:25 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:25 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:465 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:465 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:587 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:587 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:10024 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:10024 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:995 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:143 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:993 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:5222 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:5223 tcp state RELATED,ESTABLISHED 47M 7066M ACCEPT all -- * * 158.69.126.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 104M 2655G ACCEPT all -- * * 10.101.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 24931 1496K ACCEPT all -- * * 10.102.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 788K 118M ACCEPT all -- * * 10.104.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 38M 40G ACCEPT all -- * * 10.105.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 172.16.5.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 172.16.10.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.105.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.102.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.104.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.104.0.2 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.2 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.150.80 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.150.251 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 LOG udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 0 0 DROP icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 1765 162K LOG tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 11017 783K DROP tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BLACKLIST side: source mask: 255.255.255.255 Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: 255.255.255.255 0 0 BLACK all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: 255.255.255.255 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: TIMER side: source mask: 255.255.255.255 Chain Syn-FLOOD (1 references) pkts bytes target prot opt in out source destination 902K 52M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 2169K 128M DROP all -- * * 0.0.0.0/0 0.0.0.0/0