Static hostname: lab3w Icon name: computer-server Chassis: server Machine ID: 995a2432b78f49fca6dc8014dcae1eb5 Boot ID: aad9d89ed69247ccb14e6a969b561526 Operating System: Debian GNU/Linux 10 (buster) Kernel: Linux 5.4.203-1-pve Architecture: x86-64 Date : 2026-08-26 07:10:08 EDT 07:10:08 up 23 days, 9:55, 1 user, load average: 6,64, 6,24, 6,46 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Thu 2026-08-06 09:24:30 EDT; 2 weeks 5 days ago Docs: man:systemd-sysv-generator(8) Process: 21561 ExecStart=/etc/init.d/firewall start (code=exited, status=0/SUCCESS) Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable. Chain INPUT (policy DROP 7 packets, 280 bytes) pkts bytes target prot opt in out source destination 141K 11M DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP tcp -- * * 150.138.116.22 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 167.172.145.53 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 150.138.116.22 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 167.172.145.53 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 159.75.136.164 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.229.16.138 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 191.217.184.46 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 122.51.81.247 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 59.83.222.82 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 122.51.81.247 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 157.230.116.65 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 157.245.53.136 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 157.230.116.65 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 117.50.98.188 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 171.244.140.174 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 203.66.14.161 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 138.197.213.192 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 144.34.192.10 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.4.106.243 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 171.244.140.174 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 117.50.98.188 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.4.106.243 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 115.71.239.208 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 206.189.122.104 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.229.16.138 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 59.83.222.82 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.229.16.138 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 122.51.81.247 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 159.75.136.164 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 203.66.14.161 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 122.51.81.247 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 138.197.213.192 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 101.32.207.241 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 51.222.24.155 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 181.63.248.149 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 106.52.222.11 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 181.63.248.149 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 191.217.184.46 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 157.245.53.136 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 171.244.140.174 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 43.226.51.218 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 222.52.66.207 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 190.210.152.17 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 212.237.35.210 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 58.208.0.0 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 223.221.38.226 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 82.79.68.224 0.0.0.0/0 tcp dpt:22 44 2640 DROP tcp -- * * 61.171.100.124 0.0.0.0/0 tcp dpt:22 0 0 DROP tcp -- * * 121.229.13.210 0.0.0.0/0 tcp dpt:22 207K 12M Syn-FLOOD tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 186 42730 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP all -f * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 113K 9382K DROP all -- vmbr0 * 10.0.0.0/8 0.0.0.0/0 3991 364K DROP all -- vmbr0 * 172.16.0.0/12 0.0.0.0/0 11601 1061K DROP all -- vmbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP all -- vmbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- vmbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP all -- vmbr0 * 127.0.0.0/8 0.0.0.0/0 14812 21M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 1 60 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 1339 79688 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:81 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.101.150.10 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.105.0.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.105.150.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 5253 312K tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 1778 107K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 40991 6697K ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.150.10 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.150.10 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.105.0.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.105.0.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.105.150.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.105.150.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 3 140 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 2542 166K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 1789 115K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 1106 349K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 22 8712 ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 1925K 400M ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 3149K 425M ACCEPT esp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 esp 0 0 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 0 0 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6000 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:1234 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 state NEW recent: SET name: VSSH_1234 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_1234 side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:4321 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 state NEW recent: SET name: VSSH_4321 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_4321 side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:12345 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 state NEW recent: SET name: VSSH_12345 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_12345 side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27005 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27015 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27020 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27030 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27031 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27032 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27033 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27034 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27035 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27036 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27037 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27038 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27039 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:1200 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27000 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27001 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27002 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27003 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27004 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27005 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27006 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27007 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27008 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27009 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27010 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27011 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27012 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27013 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27014 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27015 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27020 0 0 ACCEPT udp -- vmbr0 * 104.113.170.241 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 151.231.39.39 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 20 mode srcip 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW recent: SET name: NAMED side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: 255.255.255.255 10 400 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 6366K 3548M ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 2316K 655M ACCEPT tcp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 136 8104 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8006 tcp state NEW recent: SET name: PVE_8006 side: source mask: 255.255.255.255 1065 327K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8006 17486 1038K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 211K 25M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 29820 1778K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 563K 75M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 58 3024 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7071 tcp state NEW recent: SET name: WEB_7071 side: source mask: 255.255.255.255 385 41761 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7071 0 0 ACCEPT tcp -- * * 109.210.49.186 0.0.0.0/0 tcp dpt:7071 50 7682 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 114 4696 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:61001:65535 146 11416 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8005 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9001 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9002 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9003 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:7025 0 0 ACCEPT tcp -- 172.16.5.137 * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:636 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 92 3680 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 2 80 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 3 120 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 state NEW recent: SET name: POP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: POP side: source mask: 255.255.255.255 41 2959 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 state NEW recent: SET name: IMAP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: IMAP side: source mask: 255.255.255.255 17 680 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 state NEW recent: SET name: IMAP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: IMAP side: source mask: 255.255.255.255 18 720 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 state NEW recent: SET name: XMPP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: XMPP side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 state NEW recent: SET name: XMPP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: XMPP side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 181K 15M ACCEPT all -- * * 0.0.0.0/0 158.69.126.137 state RELATED,ESTABLISHED 41246 1919K ACCEPT icmp -- * * 0.0.0.0/0 158.69.126.137 limit: avg 5/sec burst 4 36163 48M ACCEPT all -- * * 0.0.0.0/0 10.101.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.102.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.102.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.254 limit: avg 5/sec burst 4 168K 76M ACCEPT all -- * * 0.0.0.0/0 10.104.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.254 limit: avg 5/sec burst 4 7574 19M ACCEPT all -- * * 0.0.0.0/0 10.105.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.105.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.5.137 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.5.137 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.10.137 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.10.137 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.105.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.105.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.102.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.102.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.104.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.2 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.2 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.150.80 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.150.80 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.150.251 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.150.251 limit: avg 5/sec burst 4 122 11817 LOG udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 735K 50M DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 63 4592 LOG icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 65 4708 DROP icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 122 5912 LOG tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 10628 533K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 30 15050 LOG all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 30 15050 DROP all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 12147 packets, 736K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 9111K 16G ACCEPT all -- vmbr1 vmbr0 0.0.0.0/0 0.0.0.0/0 9173K 842M ACCEPT all -- vmbr0 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr0 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr0 vmbr3 0.0.0.0/0 0.0.0.0/0 38874 8722K ACCEPT all -- vmbr4 vmbr0 0.0.0.0/0 0.0.0.0/0 46877 52M ACCEPT all -- vmbr0 vmbr4 0.0.0.0/0 0.0.0.0/0 27569 2594K ACCEPT all -- vmbr5 vmbr0 0.0.0.0/0 0.0.0.0/0 23338 4152K ACCEPT all -- vmbr0 vmbr5 0.0.0.0/0 0.0.0.0/0 1036 62160 ACCEPT all -- vmbr1 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr1 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr1 0.0.0.0/0 0.0.0.0/0 11450 9823K ACCEPT all -- vmbr1 vmbr4 0.0.0.0/0 0.0.0.0/0 11405 1000K ACCEPT all -- vmbr4 vmbr1 0.0.0.0/0 0.0.0.0/0 12M 15G ACCEPT all -- vmbr1 vmbr5 0.0.0.0/0 0.0.0.0/0 13M 1771M ACCEPT all -- vmbr5 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr4 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr4 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr5 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr5 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr4 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr4 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr5 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr5 vmbr3 0.0.0.0/0 0.0.0.0/0 8710 946K ACCEPT all -- vmbr4 vmbr5 0.0.0.0/0 0.0.0.0/0 8484 6257K ACCEPT all -- vmbr5 vmbr4 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 2 packets, 104 bytes) pkts bytes target prot opt in out source destination 22222 22M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:47 state NEW 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:81 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:81 50 13553 ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:500 3012K 464M ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 0 0 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 0 0 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state RELATED,ESTABLISHED 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 1176 365K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8006 tcp state RELATED,ESTABLISHED 200K 104M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 tcp state RELATED,ESTABLISHED 597K 963M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 tcp state RELATED,ESTABLISHED 360 134K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:7071 tcp state RELATED,ESTABLISHED 138 11222 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:3128 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8000 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8005 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9000 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9001 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9002 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9003 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:7025 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:636 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:25 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:25 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:465 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:465 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:587 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:587 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:10024 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:10024 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:995 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:143 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:993 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:5222 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:5223 tcp state RELATED,ESTABLISHED 2753K 459M ACCEPT all -- * * 158.69.126.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 7775K 231G ACCEPT all -- * * 10.101.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 1953 117K ACCEPT all -- * * 10.102.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 193K 19M ACCEPT all -- * * 10.104.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 2333K 1875M ACCEPT all -- * * 10.105.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 172.16.5.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 172.16.10.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.105.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.102.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.104.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.2 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.150.80 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.150.251 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 LOG udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 15 1200 LOG icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 76 6080 DROP icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 115 78607 LOG tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 511 284K DROP tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BLACKLIST side: source mask: 255.255.255.255 Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: 255.255.255.255 0 0 BLACK all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: 255.255.255.255 1 60 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: TIMER side: source mask: 255.255.255.255 Chain Syn-FLOOD (1 references) pkts bytes target prot opt in out source destination 65135 3782K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 142K 8394K DROP all -- * * 0.0.0.0/0 0.0.0.0/0