Static hostname: srv-fr Icon name: computer-desktop Chassis: desktop 🖥️ Machine ID: 5e53c9f43f0a42c3a1dd2f8538176be5 Boot ID: cacfc99e7a514c5f90678d73b1c78e1c Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux 6.8.12-32-pve Architecture: x86-64 Hardware Vendor: Gigabyte Technology Co., Ltd. Hardware Model: Z390 I AORUS PRO WIFI Firmware Version: F7 Date : 2026-08-14 15:05:08 CEST 15:05:08 up 24 days, 12:18, 1 user, load average: 0,42, 0,75, 0,73 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Tue 2026-07-21 02:48:09 CEST; 3 weeks 3 days ago Docs: man:systemd-sysv-generator(8) CPU: 321ms juil. 21 02:48:09 srv-fr firewall[1446]: + WIFI NAT : [OK] juil. 21 02:48:09 srv-fr firewall[1446]: + WIFI LAN ACCES : [OK] juil. 21 02:48:09 srv-fr firewall[1446]: + WIFI NET ACCES : [OK] juil. 21 02:48:09 srv-fr firewall[1446]: + VSERVERS NAT : [OK] juil. 21 02:48:09 srv-fr firewall[1446]: + VSERVERS FORWARDING : [OK] juil. 21 02:48:09 srv-fr firewall[1446]: + DNS : [OK] juil. 21 02:48:09 srv-fr firewall[1446]: + HTTP PVE : [OK] juil. 21 02:48:09 srv-fr firewall[1446]: + HTTP ZW3B : [OK] juil. 21 02:48:09 srv-fr firewall[1446]: + On fixe les portes : DROP juil. 21 02:48:09 srv-fr systemd[1]: Started firewall.service - LSB: Start daemon at boot time. Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP 17 -- * * 222.52.66.207 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 222.52.66.207 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 222.52.66.207 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 190.210.152.17 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 190.210.152.17 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 190.210.152.17 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 212.237.35.210 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 212.237.35.210 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 212.237.35.210 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 58.208.0.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 58.208.0.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 58.208.0.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 203.115.105.245 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 203.115.105.245 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 203.115.105.245 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 62.105.136.154 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 62.105.136.154 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 62.105.136.154 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 87.236.232.36 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 87.236.232.36 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 87.236.232.36 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 179.4.122.93 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 179.4.122.93 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 179.4.122.93 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 203.128.244.214 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 203.128.244.214 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 203.128.244.214 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 222.192.176.40 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 222.192.176.40 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 222.192.176.40 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 194.247.227.8 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 194.247.227.8 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 194.247.227.8 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 59.120.160.184 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 59.120.160.184 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 59.120.160.184 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 203.193.173.41 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 203.193.173.41 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 203.193.173.41 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 123.129.65.43 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 123.129.65.43 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 123.129.65.43 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 107.151.136.210 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 107.151.136.210 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 107.151.136.210 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 45.63.15.172 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 45.63.15.172 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 45.63.15.172 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.207.132.28 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 104.207.132.28 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.207.132.28 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.16.0.0/12 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 874 155K DROP 6 -- * * 104.16.0.0/12 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.16.0.0/12 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 54.209.6.177 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 54.209.6.177 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 54.209.6.177 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.9.89.170 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.9.89.170 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.9.89.170 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 94.154.239.69 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 18 4444 DROP 6 -- * * 94.154.239.69 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 94.154.239.69 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 162.210.196.100 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 162.210.196.100 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 162.210.196.100 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.31.0.0/16 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 104.31.0.0/16 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.31.0.0/16 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.27.0.0/16 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 104.27.0.0/16 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.27.0.0/16 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 107.151.136.218 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 107.151.136.218 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 107.151.136.218 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 107.151.142.114 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 107.151.142.114 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 107.151.142.114 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 107.151.152.218 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 107.151.152.218 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 107.151.152.218 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 188.143.232.0/24 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 195.154.182.63 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 195.154.182.63 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 195.154.182.63 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 220.220.9.128 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 220.220.9.128 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 220.220.9.128 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 108.181.49.123 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 108.181.49.123 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 108.181.49.123 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 111.231.207.136 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 111.231.207.136 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 111.231.207.136 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 91.219.236.0/22 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 91.219.236.0/22 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 91.219.236.0/22 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 104.254.93.69 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 104.254.93.69 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 104.254.93.69 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 185.104.184.123 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 185.104.184.123 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 185.104.184.123 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 203.195.202.153 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 203.195.202.153 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 203.195.202.153 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.188.84.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.188.84.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.188.84.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.188.210.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.188.210.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.188.210.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.188.62.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.188.62.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.188.62.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 5.8.45.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 5.8.45.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 5.8.45.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 105.108.0.0 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 105.108.0.0 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 105.108.0.0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 DROP 17 -- * * 20.171.207.124 0.0.0.0/0 limit: above 20/sec burst 20 mode srcip 0 0 DROP 6 -- * * 20.171.207.124 0.0.0.0/0 limit: above 10/min burst 10 mode srcip 0 0 DROP 1 -- * * 20.171.207.124 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 197K 12M syn-flood 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 4 345 DROP 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 1 40 DROP 0 -- gatebr0 * 172.16.0.0/12 0.0.0.0/0 134K 12M DROP 0 -- gatebr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP 0 -- gatebr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- gatebr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- gatebr0 * 127.0.0.0/8 0.0.0.0/0 2625 231K ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 gre 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 gre 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 11M 1001M ACCEPT 0 -- * * 0.0.0.0/0 10.106.0.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.106.0.252 limit: avg 5/sec burst 4 2229K 761M ACCEPT 0 -- * * 0.0.0.0/0 10.116.0.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.116.0.252 limit: avg 5/sec burst 4 43M 42G ACCEPT 0 -- * * 0.0.0.0/0 10.126.0.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.126.0.252 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 10.106.42.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.106.42.252 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 10.6.42.252 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.6.42.252 limit: avg 5/sec burst 4 0 0 ACCEPT 6 -- gatebr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 172.16.0.254 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- gatebr0 * 172.16.0.142 0.0.0.0/0 tcp dpt:22 0 0 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.0.254 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.0.254 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.0.142 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.0.142 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8123 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 3 180 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 2 120 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 54 4536 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT 17 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT 17 -- gatebr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP 17 -- gatebr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 100 mode srcip srcmask 28 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8006 tcp state NEW recent: SET name: PVE_8006 side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8006 12275 700K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 95198 5621K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 1 52 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * * 10.6.42.0/24 10.116.42.0/24 0 0 ACCEPT 0 -- * * 10.116.42.0/24 10.6.42.0/24 0 0 ACCEPT 0 -- * * 10.6.42.0/24 10.126.42.0/24 0 0 ACCEPT 0 -- * * 10.126.42.0/24 10.6.42.0/24 0 0 ACCEPT 1 -- * * 10.6.42.1 10.6.42.0/24 state NEW,ESTABLISHED 0 0 ACCEPT 1 -- * * 10.6.42.0/24 10.6.42.1 state RELATED,ESTABLISHED 0 0 ACCEPT 6 -- * * 10.6.42.1 10.6.42.0/24 state NEW,ESTABLISHED 0 0 ACCEPT 6 -- * * 10.6.42.0/24 10.6.42.1 state RELATED,ESTABLISHED 0 0 ACCEPT 17 -- wlan0 gatebr0 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED udp dpt:53 0 0 ACCEPT 17 -- gatebr0 wlan0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED udp spt:53 0 0 ACCEPT 6 -- wlan0 gatebr0 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED multiport dports 22,1234,80,443,143,993,995,110,25,465,5222,5223 0 0 ACCEPT 6 -- gatebr0 wlan0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED multiport sports 22,1234,80,443,143,993,995,110,25,465,5222,5223 0 0 ACCEPT 6 -- wlan0 gatebr0 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED multiport dports 21,20 0 0 ACCEPT 6 -- gatebr0 wlan0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED multiport sports 21,20 247K 87M ACCEPT 0 -- vmbr0 gatebr0 0.0.0.0/0 0.0.0.0/0 311K 307M ACCEPT 0 -- gatebr0 vmbr0 0.0.0.0/0 0.0.0.0/0 157K 556M ACCEPT 0 -- vmbr1 gatebr0 0.0.0.0/0 0.0.0.0/0 213K 298M ACCEPT 0 -- gatebr0 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr2 gatebr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- gatebr0 vmbr2 0.0.0.0/0 0.0.0.0/0 269K 341M ACCEPT 0 -- vmbr0 vmbr1 0.0.0.0/0 0.0.0.0/0 294K 40M ACCEPT 0 -- vmbr1 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr0 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr2 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr1 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- vmbr2 vmbr1 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 2625 231K ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 17M 3529M ACCEPT 0 -- * * 10.106.0.252 0.0.0.0/0 ! state INVALID 1017 387K ACCEPT 0 -- * * 10.106.0.252 0.0.0.0/0 2196K 4418M ACCEPT 0 -- * * 10.116.0.252 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.116.0.252 0.0.0.0/0 44M 14G ACCEPT 0 -- * * 10.126.0.252 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.126.0.252 0.0.0.0/0 0 0 ACCEPT 0 -- * * 10.106.42.252 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.106.42.252 0.0.0.0/0 0 0 ACCEPT 0 -- * * 10.6.42.252 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.6.42.252 0.0.0.0/0 0 0 ACCEPT 6 -- * * 0.0.0.0/0 158.69.126.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 83.159.31.116 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.253 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.0.254 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.0.142 tcp spt:22 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr2 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr2 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 ACCEPT 17 -- * vmbr2 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr2 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 LOG 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8006 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 Chain black (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: blacklist side: source mask: 255.255.255.255 Chain gre (2 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: blacklist side: source mask: 255.255.255.255 0 0 black 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 600 reap hit_count: 10 name: timer side: source mask: 255.255.255.255 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: timer side: source mask: 255.255.255.255 Chain syn-flood (1 references) pkts bytes target prot opt in out source destination 108K 6374K RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 88427 5262K DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0