Static hostname: lab3w Icon name: computer-server Chassis: server Machine ID: 995a2432b78f49fca6dc8014dcae1eb5 Boot ID: aad9d89ed69247ccb14e6a969b561526 Operating System: Debian GNU/Linux 10 (buster) Kernel: Linux 5.4.203-1-pve Architecture: x86-64 Date : 2026-08-24 01:45:09 EDT 01:45:09 up 21 days, 4:30, 1 user, load average: 0,95, 1,37, 1,64 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Thu 2026-08-06 09:24:30 EDT; 2 weeks 3 days ago Docs: man:systemd-sysv-generator(8) Process: 21561 ExecStart=/etc/init.d/firewall start (code=exited, status=0/SUCCESS) Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable. Chain INPUT (policy DROP 399 packets, 15960 bytes) pkts bytes target prot opt in out source destination 2749K 218M DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 4021K 238M Syn-FLOOD tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 2806 605K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP all -f * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 14 840 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 2329K 193M DROP all -- vmbr0 * 10.0.0.0/8 0.0.0.0/0 81886 7497K DROP all -- vmbr0 * 172.16.0.0/12 0.0.0.0/0 241K 22M DROP all -- vmbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP all -- vmbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- vmbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP all -- vmbr0 * 127.0.0.0/8 0.0.0.0/0 320K 465M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 1 40 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 18184 1081K DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81 9 477 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:81 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.101.150.10 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.105.0.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 10.105.150.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 137K 8175K tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 101K 6163K DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 412K 64M ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.150.10 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.150.10 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.105.0.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.105.0.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.105.150.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.105.150.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 28 1324 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 25 1336 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 9721 721K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 1193 82006 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 62 63982 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 23866 7541K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 572 219K ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 19M 5074M ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 34M 4650M ACCEPT esp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 esp 11 452 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 8 320 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6000 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:1234 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 state NEW recent: SET name: VSSH_1234 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_1234 side: source mask: 255.255.255.255 109 4639 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1234 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:4321 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 state NEW recent: SET name: VSSH_4321 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_4321 side: source mask: 255.255.255.255 105 10003 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4321 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.101.150.10 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.105.0.0/24 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 10.105.150.0/24 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:12345 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 state NEW recent: SET name: VSSH_12345 side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: VSSH_12345 side: source mask: 255.255.255.255 47 2613 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:12345 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27005 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27015 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27020 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27030 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27031 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27032 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27033 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27034 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27035 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27036 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27037 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27038 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:27039 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:1200 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27000 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27001 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27002 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27003 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27004 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27005 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27006 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27007 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27008 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27009 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27010 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27011 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27012 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27013 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27014 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27015 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:27020 0 0 ACCEPT udp -- vmbr0 * 104.113.170.241 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 151.231.39.39 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- vmbr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 2 147 ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 20 mode srcip 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW recent: SET name: NAMED side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: 255.255.255.255 441 32209 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 141M 66G ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 40M 13G ACCEPT tcp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT tcp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT udp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- vmbr5 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT udp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT tcp -- ipsec0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 2929 170K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8006 tcp state NEW recent: SET name: PVE_8006 side: source mask: 255.255.255.255 22713 3514K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8006 260K 15M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 3306K 429M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 556K 33M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 21M 1907M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 814 46472 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7071 tcp state NEW recent: SET name: WEB_7071 side: source mask: 255.255.255.255 6852 671K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7071 0 0 ACCEPT tcp -- * * 109.210.49.186 0.0.0.0/0 tcp dpt:7071 237 17959 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 3389 139K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:61001:65535 5909 479K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8005 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9001 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9002 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:9003 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:7025 0 0 ACCEPT tcp -- 172.16.5.137 * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:636 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 3965 159K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:25 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 119 5168 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:465 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 236 9544 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:587 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 state NEW recent: SET name: SMTP_T side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_T side: source mask: 255.255.255.255 3 120 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10024 0 0 udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 state NEW recent: SET name: SMTP_U side: source mask: 255.255.255.255 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: SMTP_U side: source mask: 255.255.255.255 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10024 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 state NEW recent: SET name: POP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: POP side: source mask: 255.255.255.255 397 24747 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 state NEW recent: SET name: IMAP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: IMAP side: source mask: 255.255.255.255 356 16213 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 state NEW recent: SET name: IMAP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: IMAP side: source mask: 255.255.255.255 498 27871 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 state NEW recent: SET name: XMPP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: XMPP side: source mask: 255.255.255.255 350 27264 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 state NEW recent: SET name: XMPP side: source mask: 255.255.255.255 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: XMPP side: source mask: 255.255.255.255 3 120 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 3732K 317M ACCEPT all -- * * 0.0.0.0/0 158.69.126.137 state RELATED,ESTABLISHED 859K 38M ACCEPT icmp -- * * 0.0.0.0/0 158.69.126.137 limit: avg 5/sec burst 4 578K 1051M ACCEPT all -- * * 0.0.0.0/0 10.101.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.102.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.102.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.254 limit: avg 5/sec burst 4 3011K 1410M ACCEPT all -- * * 0.0.0.0/0 10.104.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.254 limit: avg 5/sec burst 4 126K 278M ACCEPT all -- * * 0.0.0.0/0 10.105.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.105.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.5.137 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.5.137 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.10.137 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.10.137 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.105.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.105.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.102.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.102.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.104.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.104.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.1 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.103.0.2 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.103.0.2 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.150.80 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.150.80 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.101.150.251 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.101.150.251 limit: avg 5/sec burst 4 2550 715K LOG udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 27223 9655K DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 1400 95244 LOG icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 1638 111K DROP icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 2551 120K LOG tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 273K 13M DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 743 350K LOG all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 743 350K DROP all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 114K packets, 6981K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 32M 37G ACCEPT all -- vmbr1 vmbr0 0.0.0.0/0 0.0.0.0/0 32M 7026M ACCEPT all -- vmbr0 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr0 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr0 vmbr3 0.0.0.0/0 0.0.0.0/0 3955K 3386M ACCEPT all -- vmbr4 vmbr0 0.0.0.0/0 0.0.0.0/0 3663K 6985M ACCEPT all -- vmbr0 vmbr4 0.0.0.0/0 0.0.0.0/0 387K 39M ACCEPT all -- vmbr5 vmbr0 0.0.0.0/0 0.0.0.0/0 293K 59M ACCEPT all -- vmbr0 vmbr5 0.0.0.0/0 0.0.0.0/0 20826 1250K ACCEPT all -- vmbr1 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr1 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr1 0.0.0.0/0 0.0.0.0/0 1340K 313M ACCEPT all -- vmbr1 vmbr4 0.0.0.0/0 0.0.0.0/0 1352K 141M ACCEPT all -- vmbr4 vmbr1 0.0.0.0/0 0.0.0.0/0 114M 159G ACCEPT all -- vmbr1 vmbr5 0.0.0.0/0 0.0.0.0/0 135M 20G ACCEPT all -- vmbr5 vmbr1 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr4 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr4 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr2 vmbr5 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr5 vmbr2 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr4 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr4 vmbr3 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr3 vmbr5 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vmbr5 vmbr3 0.0.0.0/0 0.0.0.0/0 4644K 338M ACCEPT all -- vmbr4 vmbr5 0.0.0.0/0 0.0.0.0/0 4741K 18G ACCEPT all -- vmbr5 vmbr4 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 94 packets, 4852 bytes) pkts bytes target prot opt in out source destination 440K 469M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:47 state NEW 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:81 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:81 533 123K ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:500 30M 4701M ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 10 400 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 6 240 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 state RELATED,ESTABLISHED 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 166 6640 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 22783 10M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8006 tcp state RELATED,ESTABLISHED 3000K 1725M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 tcp state RELATED,ESTABLISHED 23M 92G ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 tcp state RELATED,ESTABLISHED 6666 2680K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:7071 tcp state RELATED,ESTABLISHED 5599 428K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:3128 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8000 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8005 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9000 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9001 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9002 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:9003 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:7025 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:636 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:25 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:25 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:465 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:465 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:587 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:587 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:10024 tcp state RELATED,ESTABLISHED 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:10024 udp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:995 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:143 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:993 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:5222 tcp state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:5223 tcp state RELATED,ESTABLISHED 34M 5220M ACCEPT all -- * * 158.69.126.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 160M 4137G ACCEPT all -- * * 10.101.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 35021 2101K ACCEPT all -- * * 10.102.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 3423K 347M ACCEPT all -- * * 10.104.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 43M 39G ACCEPT all -- * * 10.105.0.254 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 172.16.5.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 172.16.10.137 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.105.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.102.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.104.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.1 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.103.0.2 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.150.80 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 10.101.150.251 0.0.0.0/0 ! state INVALID state NEW,RELATED,ESTABLISHED 0 0 LOG udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 140 11696 LOG icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 1127 90656 DROP icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 2486 256K LOG tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 11635 20M DROP tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BLACKLIST side: source mask: 255.255.255.255 Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: 255.255.255.255 0 0 BLACK all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: 255.255.255.255 1 40 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: TIMER side: source mask: 255.255.255.255 Chain Syn-FLOOD (1 references) pkts bytes target prot opt in out source destination 1252K 71M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 2769K 167M DROP all -- * * 0.0.0.0/0 0.0.0.0/0