Static hostname: lab3w Icon name: computer-server Chassis: server Machine ID: 995a2432b78f49fca6dc8014dcae1eb5 Boot ID: aad9d89ed69247ccb14e6a969b561526 Operating System: Debian GNU/Linux 10 (buster) Kernel: Linux 5.4.203-1-pve Architecture: x86-64 Date : 2026-08-19 07:45:08 EDT 07:45:08 up 16 days, 10:30, 1 user, load average: 3,86, 2,27, 1,84 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Thu 2026-08-06 09:24:30 EDT; 1 weeks 5 days ago Docs: man:systemd-sysv-generator(8) Process: 21561 ExecStart=/etc/init.d/firewall start (code=exited, status=0/SUCCESS) Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable. Chain INPUT (policy DROP 324 packets, 12960 bytes) pkts bytes target prot opt in out source destination 1898K 151M DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 2875K 171M Syn-FLOOD tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 2088 428K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP all -f * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 14 840 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 1637K 136M DROP all -- vmbr0 * 10.0.0.0/8 0.0.0.0/0 57664 5284K DROP all -- vmbr0 * 172.16.0.0/12 0.0.0.0/0 170K 16M DROP all -- vmbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP all -- vmbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- vmbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP all -- vmbr0 * 127.0.0.0/8 0.0.0.0/0 238K 355M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 1 40 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 9603 570K DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81 6 318 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:81 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.101.150.10 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.105.0.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.105.150.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 105K 6243K tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 80109 4913K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 269K 41M ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.150.10 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.150.10 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.105.0.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.105.0.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.105.150.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.105.150.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 18 868 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 16 868 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 6541 493K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 239 19240 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 62 63982 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 17454 5515K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 412 164K ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 13M 3858M ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 26M 3477M ACCEPT esp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 esp 6 248 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 6 240 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6000 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:1234 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 state NEW recent: SET name: VSSH_1234 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_1234 side: source mask: 255.255.255.255 57 2360 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:4321 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 state NEW recent: SET name: VSSH_4321 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_4321 side: source mask: 255.255.255.255 86 8857 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:12345 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 state NEW recent: SET name: VSSH_12345 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_12345 side: source mask: 255.255.255.255 33 2021 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27005 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27015 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27020 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27030 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27031 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27032 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27033 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27034 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27035 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27036 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27037 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27038 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27039 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:1200 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27000 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27001 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27002 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27003 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27004 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27005 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27006 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27007 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27008 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27009 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27010 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27011 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27012 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27013 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27014 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27015 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27020 0 0 ACCEPT udp -- vmbr0 * 104.113.170.241 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 151.231.39.39 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 2 147 ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 20 mode srcip 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW recent: SET name: NAMED side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: 255.255.255.255 306 21853 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 103M 46G ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 28M 9046M ACCEPT tcp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 2401 140K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8006 tcp state NEW recent: SET name: PVE_8006 side: source mask: 255.255.255.255 18515 2500K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8006 184K 11M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 2378K 304M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 394K 23M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 15M 1365M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 626 35416 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7071 tcp state NEW recent: SET name: WEB_7071 side: source mask: 255.255.255.255 5108 479K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7071 0 0 ACCEPT tcp -- * * 109.210.49.186 0.0.0.0/0 tcp dpt:7071 149 11032 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 1230 51880 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:61001:65535 4539 359K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8005 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9001 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9002 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9003 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:7025 0 0 ACCEPT tcp -- 172.16.5.137 * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:636 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 1511 60504 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 100 4384 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 154 6216 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 1 40 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 state NEW recent: SET name: POP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: POP side: source mask: 255.255.255.255 300 15616 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 state NEW recent: SET name: IMAP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: IMAP side: source mask: 255.255.255.255 279 12997 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 state NEW recent: SET name: IMAP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: IMAP side: source mask: 255.255.255.255 393 20951 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 state NEW recent: SET name: XMPP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: XMPP side: source mask: 255.255.255.255 261 20531 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 state NEW recent: SET name: XMPP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: XMPP side: source mask: 255.255.255.255 3 120 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 2629K 223M ACCEPT all -- * * 0.0.0.0/0 158.69.126.137 state RELATED,ESTABLISHED 627K 27M ACCEPT icmp -- * * 0.0.0.0/0 158.69.126.137 limit: avg 5/sec burst 4 400K 756M ACCEPT all -- * * 0.0.0.0/0 10.101.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.102.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.102.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.254 limit: avg 5/sec burst 4 2162K 1009M ACCEPT all -- * * 0.0.0.0/0 10.104.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.254 limit: avg 5/sec burst 4 83118 167M ACCEPT all -- * * 0.0.0.0/0 10.105.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.105.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.5.137 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.5.137 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.10.137 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.10.137 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.105.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.105.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.102.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.102.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.104.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.2 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.2 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.150.80 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.150.80 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.150.251 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.150.251 limit: avg 5/sec burst 4 1865 552K LOG udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 15421 7461K DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 1065 73129 LOG icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 1230 83912 DROP icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 1867 88200 LOG tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 194K 9435K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 576 271K LOG all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 576 271K DROP all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 72398 packets, 4446K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 13M 7987M ACCEPT all -- vmbr1 vmbr0 0.0.0.0/0 0.0.0.0/0 13M 4408M ACCEPT all -- vmbr0 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr0 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr0 vmbr3 0.0.0.0/0 0.0.0.0/0 754K 344M ACCEPT all -- vmbr4 vmbr0 0.0.0.0/0 0.0.0.0/0 622K 164M ACCEPT all -- vmbr0 vmbr4 0.0.0.0/0 0.0.0.0/0 301K 31M ACCEPT all -- vmbr5 vmbr0 0.0.0.0/0 0.0.0.0/0 218K 42M ACCEPT all -- vmbr0 vmbr5 0.0.0.0/0 0.0.0.0/0 14874 892K ACCEPT all -- vmbr1 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr1 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr1 0.0.0.0/0 0.0.0.0/0 1196K 268M ACCEPT all -- vmbr1 vmbr4 0.0.0.0/0 0.0.0.0/0 1205K 127M ACCEPT all -- vmbr4 vmbr1 0.0.0.0/0 0.0.0.0/0 70M 99G ACCEPT all -- vmbr1 vmbr5 0.0.0.0/0 0.0.0.0/0 83M 12G ACCEPT all -- vmbr5 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr4 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr4 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr5 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr5 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr4 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr4 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr5 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr5 vmbr3 0.0.0.0/0 0.0.0.0/0 4515K 325M ACCEPT all -- vmbr4 vmbr5 0.0.0.0/0 0.0.0.0/0 4612K 18G ACCEPT all -- vmbr5 vmbr4 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 69 packets, 3576 bytes) pkts bytes target prot opt in out source destination 316K 358M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:47 state NEW 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:81 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:81 406 102K ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:500 21M 3269M ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 5 200 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 4 160 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state RELATED,ESTABLISHED 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 113 4520 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 17782 5793K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8006 tcp state RELATED,ESTABLISHED 2144K 1207M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 tcp state RELATED,ESTABLISHED 17M 69G ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 tcp state RELATED,ESTABLISHED 4913 1958K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:7071 tcp state RELATED,ESTABLISHED 4338 327K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:3128 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8000 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8005 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9000 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9001 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9002 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9003 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:7025 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:636 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:25 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:25 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:465 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:465 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:587 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:587 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:10024 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:10024 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:995 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:143 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:993 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:5222 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:5223 tcp state RELATED,ESTABLISHED 25M 3776M ACCEPT all -- * * 158.69.126.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 115M 2906G ACCEPT all -- * * 10.101.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 26201 1572K ACCEPT all -- * * 10.102.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 2457K 249M ACCEPT all -- * * 10.104.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 30M 26G ACCEPT all -- * * 10.105.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 172.16.5.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 172.16.10.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.105.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.102.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.104.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.2 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.150.80 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.150.251 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 LOG udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 1 576 LOG icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 1 576 DROP icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 1813 161K LOG tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 8588 19M DROP tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BLACKLIST side: source mask: 255.255.255.255 Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: 255.255.255.255 0 0 BLACK all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: 255.255.255.255 1 40 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: TIMER side: source mask: 255.255.255.255 Chain Syn-FLOOD (1 references) pkts bytes target prot opt in out source destination 892K 51M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 1984K 121M DROP all -- * * 0.0.0.0/0 0.0.0.0/0