debug[224]: Command:/sbin/iptables -v -L -n --line-numbers
Chain INPUT (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8889 limit: avg 30/min burst 5
2 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8888 limit: avg 30/min burst 5
3 6967K 8404M acctboth all -- * * 0.0.0.0/0 0.0.0.0/0
4 6868K 8388M LOCALINPUT all -- !lo * 0.0.0.0/0 0.0.0.0/0
5 98439 16M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
6 0 0 ACCEPT udp -- !lo * 192.168.254.254 0.0.0.0/0 udp spts:1024:65535 dpt:53
7 0 0 ACCEPT tcp -- !lo * 192.168.254.254 0.0.0.0/0 tcp spts:1024:65535 dpt:53
8 0 0 ACCEPT udp -- !lo * 192.168.254.254 0.0.0.0/0 udp spt:53 dpts:1024:65535
9 0 0 ACCEPT tcp -- !lo * 192.168.254.254 0.0.0.0/0 tcp spt:53 dpts:1024:65535
10 0 0 ACCEPT udp -- !lo * 192.168.254.254 0.0.0.0/0 udp spt:53 dpt:53
11 358K 176M ACCEPT all -- !lo * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
12 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:20
13 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:21
14 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
15 11 660 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:25
16 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:53
17 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80
18 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:110
19 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:143
20 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443
21 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:465
22 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:587
23 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:993
24 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:995
25 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2077
26 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2078
27 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2082
28 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2083
29 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2086
30 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2087
31 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2095
32 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2096
33 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:6666
34 0 0 ACCEPT udp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:20
35 0 0 ACCEPT udp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:21
36 0 0 ACCEPT udp -- !lo * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:53
37 0 0 ACCEPT icmp -- !lo * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 1/sec burst 5
38 0 0 ACCEPT icmp -- !lo * 0.0.0.0/0 0.0.0.0/0 icmp type 0 limit: avg 1/sec burst 5
39 0 0 ACCEPT icmp -- !lo * 0.0.0.0/0 0.0.0.0/0 icmp type 11
40 0 0 ACCEPT icmp -- !lo * 0.0.0.0/0 0.0.0.0/0 icmp type 3
41 69 37409 LOGDROPIN all -- !lo * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT tcp -- !lo * 0.0.0.0/0 85.13.195.235 tcp dpt:25 state NEW
2 0 0 ACCEPT all -- !lo * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
3 0 0 LOGDROPIN all -- !lo * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 tcp spt:8889 limit: avg 30/min burst 5
2 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 tcp spt:8888 limit: avg 30/min burst 5
3 2994K 5124M acctboth all -- * * 0.0.0.0/0 0.0.0.0/0
4 2895K 5108M LOCALOUTPUT all -- * !lo 0.0.0.0/0 0.0.0.0/0
5 10104 760K ACCEPT tcp -- * lo 0.0.0.0/0 0.0.0.0/0 tcp dpt:25
6 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 OWNER GID match 32006
7 1934 1189K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 OWNER GID match 12
8 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 OWNER UID match 32001
9 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 OWNER UID match 0
10 271 10840 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25
11 88335 15M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
12 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
13 10356 792K ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 udp dpt:53
14 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 tcp spt:53
15 0 0 ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 udp spt:53
16 116K 627M ACCEPT all -- * !lo 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
17 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:20
18 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:21
19 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
20 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:25
21 11 660 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:37
22 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:43
23 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:53
24 1422 85320 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80
25 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:110
26 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:113
27 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443
28 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:587
29 114 6840 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:873
30 0 0 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2087
31 8 480 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2089
32 149 8940 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2703
33 27 1620 ACCEPT tcp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8822
34 0 0 ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:20
35 0 0 ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:21
36 0 0 ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:53
37 0 0 ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:113
38 0 0 ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:123
39 0 0 ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:873
40 763 57900 ACCEPT udp -- * !lo 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:6277
41 0 0 ACCEPT icmp -- * !lo 0.0.0.0/0 0.0.0.0/0 icmp type 0
42 0 0 ACCEPT icmp -- * !lo 0.0.0.0/0 0.0.0.0/0 icmp type 8
43 0 0 ACCEPT icmp -- * !lo 0.0.0.0/0 0.0.0.0/0 icmp type 11
44 0 0 ACCEPT icmp -- * !lo 0.0.0.0/0 0.0.0.0/0 icmp type 3
45 0 0 LOGDROPOUT all -- * !lo 0.0.0.0/0 0.0.0.0/0
Chain ALLOWDYNIN (2 references)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT tcp -- !lo * 87.194.204.131 0.0.0.0/0 tcp dpt:22
2 0 0 ACCEPT tcp -- !lo * 87.194.204.131 0.0.0.0/0 tcp dpt:22
Chain ALLOWDYNOUT (2 references)
num pkts bytes target prot opt in out source destination
Chain DSHIELD (2 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP all -- * * 150.164.91.0/24 0.0.0.0/0
2 0 0 DROP all -- * * 113.219.38.0/24 0.0.0.0/0
3 0 0 DROP all -- * * 124.164.243.0/24 0.0.0.0/0
4 0 0 DROP all -- * * 59.148.53.0/24 0.0.0.0/0
5 0 0 DROP all -- * * 219.132.155.0/24 0.0.0.0/0
6 0 0 DROP all -- * * 189.1.164.0/24 0.0.0.0/0
7 0 0 DROP all -- * * 93.114.42.0/24 0.0.0.0/0
8 0 0 DROP all -- * * 111.148.218.0/24 0.0.0.0/0
9 0 0 DROP all -- * * 125.224.195.0/24 0.0.0.0/0
10 0 0 DROP all -- * * 213.229.125.0/24 0.0.0.0/0
11 0 0 DROP all -- * * 122.139.1.0/24 0.0.0.0/0
12 0 0 DROP all -- * * 204.188.197.0/24 0.0.0.0/0
13 0 0 DROP all -- * * 125.65.165.0/24 0.0.0.0/0
14 0 0 DROP all -- * * 77.222.131.0/24 0.0.0.0/0
15 0 0 DROP all -- * * 218.108.85.0/24 0.0.0.0/0
16 0 0 DROP all -- * * 121.37.42.0/24 0.0.0.0/0
17 0 0 DROP all -- * * 114.199.126.0/24 0.0.0.0/0
18 0 0 DROP all -- * * 50.61.247.0/24 0.0.0.0/0
19 0 0 DROP all -- * * 200.129.188.0/24 0.0.0.0/0
20 0 0 DROP all -- * * 14.44.72.0/24 0.0.0.0/0
21 0 0 DROP all -- * * 122.178.172.0/24 0.0.0.0/0
22 0 0 DROP all -- * * 121.169.147.0/24 0.0.0.0/0
23 0 0 DROP all -- * * 61.19.85.0/24 0.0.0.0/0
24 0 0 DROP all -- * * 124.237.77.0/24 0.0.0.0/0
25 0 0 DROP all -- * * 125.65.165.0/24 0.0.0.0/0
26 0 0 DROP all -- * * 216.70.71.0/24 0.0.0.0/0
27 0 0 DROP all -- * * 94.23.203.0/24 0.0.0.0/0
28 0 0 DROP all -- * * 200.98.205.0/24 0.0.0.0/0
29 0 0 DROP all -- * * 222.161.2.0/24 0.0.0.0/0
30 0 0 DROP all -- * * 118.186.32.0/24 0.0.0.0/0
31 0 0 DROP all -- * * 61.131.47.0/24 0.0.0.0/0
32 0 0 DROP all -- * * 110.200.177.0/24 0.0.0.0/0
33 0 0 DROP all -- * * 219.146.225.0/24 0.0.0.0/0
34 0 0 DROP all -- * * 64.31.48.0/24 0.0.0.0/0
35 0 0 DROP all -- * * 114.199.126.0/24 0.0.0.0/0
36 0 0 DROP all -- * * 186.34.119.0/24 0.0.0.0/0
37 0 0 DROP all -- * * 122.138.238.0/24 0.0.0.0/0
38 0 0 DROP all -- * * 92.62.50.0/24 0.0.0.0/0
39 0 0 DROP all -- * * 89.176.230.0/24 0.0.0.0/0
40 0 0 DROP all -- * * 84.17.12.0/24 0.0.0.0/0
41 0 0 DROP all -- * * 69.9.100.0/24 0.0.0.0/0
42 0 0 DROP all -- * * 49.241.10.0/24 0.0.0.0/0
43 0 0 DROP all -- * * 14.111.16.0/24 0.0.0.0/0
44 0 0 DROP all -- * * 82.63.240.0/24 0.0.0.0/0
45 0 0 DROP all -- * * 124.120.143.0/24 0.0.0.0/0
46 0 0 DROP all -- * * 189.38.2.0/24 0.0.0.0/0
47 0 0 DROP all -- * * 218.6.43.0/24 0.0.0.0/0
48 0 0 DROP all -- * * 31.44.184.0/24 0.0.0.0/0
49 0 0 DROP all -- * * 217.113.76.0/24 0.0.0.0/0
50 0 0 DROP all -- * * 72.22.25.0/24 0.0.0.0/0
51 0 0 DROP all -- * * 64.183.145.0/24 0.0.0.0/0
52 0 0 DROP all -- * * 174.133.81.0/24 0.0.0.0/0
53 0 0 DROP all -- * * 66.66.22.0/24 0.0.0.0/0
54 0 0 DROP all -- * * 79.142.173.0/24 0.0.0.0/0
Chain GALLOWIN (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT all -- !lo * 199.168.254.0/24 0.0.0.0/0
2 0 0 ACCEPT all -- !lo * 77.77.77.71 0.0.0.0/0
3 0 0 ACCEPT all -- !lo * 77.77.77.72 0.0.0.0/0
4 0 0 ACCEPT all -- !lo * 77.77.77.73 0.0.0.0/0
5 0 0 ACCEPT all -- !lo * 77.77.77.74 0.0.0.0/0
6 0 0 ACCEPT all -- !lo * 77.77.77.75 0.0.0.0/0
7 0 0 ACCEPT all -- !lo * 77.77.77.76 0.0.0.0/0
8 0 0 ACCEPT all -- !lo * 77.77.77.77 0.0.0.0/0
9 0 0 ACCEPT tcp -- !lo * 11.22.33.44 0.0.0.0/0 tcp dpt:3306
10 0 0 ACCEPT all -- !lo * 22.22.22.222 0.0.0.0/0
11 0 0 ACCEPT all -- !lo * 71.36.239.190 0.0.0.0/0
Chain GALLOWOUT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT all -- * !lo 0.0.0.0/0 199.168.254.0/24
2 0 0 ACCEPT all -- * !lo 0.0.0.0/0 77.77.77.71
3 0 0 ACCEPT all -- * !lo 0.0.0.0/0 77.77.77.72
4 0 0 ACCEPT all -- * !lo 0.0.0.0/0 77.77.77.73
5 0 0 ACCEPT all -- * !lo 0.0.0.0/0 77.77.77.74
6 0 0 ACCEPT all -- * !lo 0.0.0.0/0 77.77.77.75
7 0 0 ACCEPT all -- * !lo 0.0.0.0/0 77.77.77.76
8 0 0 ACCEPT all -- * !lo 0.0.0.0/0 77.77.77.77
9 0 0 ACCEPT all -- * !lo 0.0.0.0/0 22.22.22.222
10 0 0 ACCEPT all -- * !lo 0.0.0.0/0 71.36.239.190
Chain GDENYIN (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP all -- !lo * 88.88.88.81 0.0.0.0/0
2 0 0 DROP all -- !lo * 88.88.88.82 0.0.0.0/0
3 0 0 DROP all -- !lo * 88.88.88.83 0.0.0.0/0
4 0 0 DROP all -- !lo * 88.88.88.84 0.0.0.0/0
5 0 0 DROP all -- !lo * 88.88.88.85 0.0.0.0/0
6 0 0 DROP all -- !lo * 88.88.88.86 0.0.0.0/0
7 0 0 DROP all -- !lo * 88.88.88.87 0.0.0.0/0
8 0 0 DROP all -- !lo * 88.88.88.88 0.0.0.0/0
9 0 0 DROP tcp -- !lo * 11.22.33.77 0.0.0.0/0 tcp dpt:21
10 0 0 DROP all -- !lo * 1.3.4.0/28 0.0.0.0/0
Chain GDENYOUT (1 references)
num pkts bytes target prot opt in out source destination
Chain LOCALINPUT (1 references)
num pkts bytes target prot opt in out source destination
1 1979 198K ALLOWDYNIN all -- !lo * 0.0.0.0/0 0.0.0.0/0
2 2357 222K ALLOWDYNIN all -- !lo * 0.0.0.0/0 0.0.0.0/0
3 3820 372K GALLOWIN all -- !lo * 0.0.0.0/0 0.0.0.0/0
4 333K 94M ACCEPT all -- !lo * 192.168.254.4 0.0.0.0/0
5 6177K 8117M ACCEPT all -- !lo * 192.168.254.0/24 0.0.0.0/0
6 0 0 DROP all -- !lo * 200.161.109.106 0.0.0.0/0
7 0 0 DROP all -- !lo * 74.62.2.37 0.0.0.0/0
8 358K 176M DSHIELD all -- !lo * 0.0.0.0/0 0.0.0.0/0
9 181K 108M DSHIELD all -- !lo * 0.0.0.0/0 0.0.0.0/0
10 159 26286 GDENYIN all -- !lo * 0.0.0.0/0 0.0.0.0/0
Chain LOCALOUTPUT (1 references)
num pkts bytes target prot opt in out source destination
1 2190 724K ALLOWDYNOUT all -- * !lo 0.0.0.0/0 0.0.0.0/0
2 2490 748K ALLOWDYNOUT all -- * !lo 0.0.0.0/0 0.0.0.0/0
3 3702 921K GALLOWOUT all -- * !lo 0.0.0.0/0 0.0.0.0/0
4 269K 45M ACCEPT all -- * !lo 0.0.0.0/0 192.168.254.4
5 2495K 4433M ACCEPT all -- * !lo 0.0.0.0/0 192.168.254.0/24
6 0 0 DROP all -- * !lo 0.0.0.0/0 200.161.109.106
7 0 0 DROP all -- * !lo 0.0.0.0/0 74.62.2.37
8 373 48218 GDENYOUT all -- * !lo 0.0.0.0/0 0.0.0.0/0
9 179 25769 NEWGDENYOUT all -- * !lo 0.0.0.0/0 0.0.0.0/0
Chain LOGDROPIN (2 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67
2 67 37129 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67
3 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:68
4 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:68
5 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111
6 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:111
7 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113
8 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:113
9 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:135:139
10 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:135:139
11 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445
12 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:445
13 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:500
14 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:500
15 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:513
16 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:513
17 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:520
18 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:520
19 2 280 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_IN Blocked* '
20 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_IN Blocked* '
21 0 0 LOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_IN Blocked* '
22 2 280 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain LOGDROPOUT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_OUT Blocked* '
2 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_OUT Blocked* '
3 0 0 LOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_OUT Blocked* '
4 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain NEWGDENYOUT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP all -- * !lo 0.0.0.0/0 88.88.88.81
2 0 0 DROP all -- * !lo 0.0.0.0/0 88.88.88.82
3 0 0 DROP all -- * !lo 0.0.0.0/0 88.88.88.83
4 0 0 DROP all -- * !lo 0.0.0.0/0 88.88.88.84
5 0 0 DROP all -- * !lo 0.0.0.0/0 88.88.88.85
6 0 0 DROP all -- * !lo 0.0.0.0/0 88.88.88.86
7 0 0 DROP all -- * !lo 0.0.0.0/0 88.88.88.87
8 0 0 DROP all -- * !lo 0.0.0.0/0 88.88.88.88
9 0 0 DROP all -- * !lo 0.0.0.0/0 1.3.4.0/28
Chain acctboth (2 references)
num pkts bytes target prot opt in out source destination
1 33 2884 tcp -- !lo * 192.168.254.60 0.0.0.0/0 tcp dpt:80
2 27 2477 tcp -- !lo * 0.0.0.0/0 192.168.254.60 tcp spt:80
3 59 8729 tcp -- !lo * 192.168.254.60 0.0.0.0/0 tcp dpt:25
4 51 8748 tcp -- !lo * 0.0.0.0/0 192.168.254.60 tcp spt:25
5 0 0 tcp -- !lo * 192.168.254.60 0.0.0.0/0 tcp dpt:110
6 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.60 tcp spt:110
7 0 0 icmp -- !lo * 192.168.254.60 0.0.0.0/0
8 0 0 icmp -- !lo * 0.0.0.0/0 192.168.254.60
9 2815 378K tcp -- !lo * 192.168.254.60 0.0.0.0/0
10 2988 279K tcp -- !lo * 0.0.0.0/0 192.168.254.60
11 146 15761 udp -- !lo * 192.168.254.60 0.0.0.0/0
12 146 23142 udp -- !lo * 0.0.0.0/0 192.168.254.60
13 2961 394K all -- !lo * 192.168.254.60 0.0.0.0/0
14 3134 302K all -- !lo * 0.0.0.0/0 192.168.254.60
15 0 0 tcp -- !lo * 192.168.254.61 0.0.0.0/0 tcp dpt:80
16 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.61 tcp spt:80
17 0 0 tcp -- !lo * 192.168.254.61 0.0.0.0/0 tcp dpt:25
18 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.61 tcp spt:25
19 0 0 tcp -- !lo * 192.168.254.61 0.0.0.0/0 tcp dpt:110
20 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.61 tcp spt:110
21 0 0 icmp -- !lo * 192.168.254.61 0.0.0.0/0
22 0 0 icmp -- !lo * 0.0.0.0/0 192.168.254.61
23 774 534K tcp -- !lo * 192.168.254.61 0.0.0.0/0
24 521 55019 tcp -- !lo * 0.0.0.0/0 192.168.254.61
25 0 0 udp -- !lo * 192.168.254.61 0.0.0.0/0
26 0 0 udp -- !lo * 0.0.0.0/0 192.168.254.61
27 774 534K all -- !lo * 192.168.254.61 0.0.0.0/0
28 521 55019 all -- !lo * 0.0.0.0/0 192.168.254.61
29 0 0 tcp -- !lo * 192.168.254.62 0.0.0.0/0 tcp dpt:80
30 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.62 tcp spt:80
31 0 0 tcp -- !lo * 192.168.254.62 0.0.0.0/0 tcp dpt:25
32 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.62 tcp spt:25
33 0 0 tcp -- !lo * 192.168.254.62 0.0.0.0/0 tcp dpt:110
34 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.62 tcp spt:110
35 0 0 icmp -- !lo * 192.168.254.62 0.0.0.0/0
36 0 0 icmp -- !lo * 0.0.0.0/0 192.168.254.62
37 0 0 tcp -- !lo * 192.168.254.62 0.0.0.0/0
38 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.62
39 0 0 udp -- !lo * 192.168.254.62 0.0.0.0/0
40 0 0 udp -- !lo * 0.0.0.0/0 192.168.254.62
41 0 0 all -- !lo * 192.168.254.62 0.0.0.0/0
42 0 0 all -- !lo * 0.0.0.0/0 192.168.254.62
43 0 0 tcp -- !lo * 192.168.254.63 0.0.0.0/0 tcp dpt:80
44 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.63 tcp spt:80
45 0 0 tcp -- !lo * 192.168.254.63 0.0.0.0/0 tcp dpt:25
46 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.63 tcp spt:25
47 0 0 tcp -- !lo * 192.168.254.63 0.0.0.0/0 tcp dpt:110
48 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.63 tcp spt:110
49 0 0 icmp -- !lo * 192.168.254.63 0.0.0.0/0
50 0 0 icmp -- !lo * 0.0.0.0/0 192.168.254.63
51 0 0 tcp -- !lo * 192.168.254.63 0.0.0.0/0
52 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.63
53 0 0 udp -- !lo * 192.168.254.63 0.0.0.0/0
54 0 0 udp -- !lo * 0.0.0.0/0 192.168.254.63
55 0 0 all -- !lo * 192.168.254.63 0.0.0.0/0
56 0 0 all -- !lo * 0.0.0.0/0 192.168.254.63
57 0 0 tcp -- !lo * 192.168.254.64 0.0.0.0/0 tcp dpt:80
58 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.64 tcp spt:80
59 0 0 tcp -- !lo * 192.168.254.64 0.0.0.0/0 tcp dpt:25
60 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.64 tcp spt:25
61 0 0 tcp -- !lo * 192.168.254.64 0.0.0.0/0 tcp dpt:110
62 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.64 tcp spt:110
63 0 0 icmp -- !lo * 192.168.254.64 0.0.0.0/0
64 0 0 icmp -- !lo * 0.0.0.0/0 192.168.254.64
65 0 0 tcp -- !lo * 192.168.254.64 0.0.0.0/0
66 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.64
67 0 0 udp -- !lo * 192.168.254.64 0.0.0.0/0
68 0 0 udp -- !lo * 0.0.0.0/0 192.168.254.64
69 0 0 all -- !lo * 192.168.254.64 0.0.0.0/0
70 0 0 all -- !lo * 0.0.0.0/0 192.168.254.64
71 0 0 tcp -- !lo * 192.168.254.65 0.0.0.0/0 tcp dpt:80
72 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.65 tcp spt:80
73 0 0 tcp -- !lo * 192.168.254.65 0.0.0.0/0 tcp dpt:25
74 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.65 tcp spt:25
75 0 0 tcp -- !lo * 192.168.254.65 0.0.0.0/0 tcp dpt:110
76 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.65 tcp spt:110
77 0 0 icmp -- !lo * 192.168.254.65 0.0.0.0/0
78 0 0 icmp -- !lo * 0.0.0.0/0 192.168.254.65
79 0 0 tcp -- !lo * 192.168.254.65 0.0.0.0/0
80 0 0 tcp -- !lo * 0.0.0.0/0 192.168.254.65
81 0 0 udp -- !lo * 192.168.254.65 0.0.0.0/0
82 0 0 udp -- !lo * 0.0.0.0/0 192.168.254.65
83 0 0 all -- !lo * 192.168.254.65 0.0.0.0/0
84 0 0 all -- !lo * 0.0.0.0/0 192.168.254.65
85 8050 1388K all -- !lo * 0.0.0.0/0 0.0.0.0/0
debug[227]: Command:/sbin/iptables -v -t nat -L -n --line-numbers
Chain PREROUTING (policy ACCEPT 5173 packets, 751K bytes)
num pkts bytes target prot opt in out source destination
1 0 0 REDIRECT tcp -- !lo * 200.161.109.106 0.0.0.0/0 multiport dports 80,2082,2095 redir ports 8888
2 0 0 REDIRECT tcp -- !lo * 200.161.109.106 0.0.0.0/0 multiport dports 21 redir ports 8889
3 0 0 REDIRECT tcp -- !lo * 74.62.2.37 0.0.0.0/0 multiport dports 80,2082,2095 redir ports 8888
4 0 0 REDIRECT tcp -- !lo * 74.62.2.37 0.0.0.0/0 multiport dports 21 redir ports 8889
5 0 0 DNAT tcp -- !lo * 0.0.0.0/0 192.168.254.64 tcp dpt:666 to:85.13.195.235:25
6 0 0 REDIRECT tcp -- !lo * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2222 redir ports 25
Chain POSTROUTING (policy ACCEPT 25426 packets, 1764K bytes)
num pkts bytes target prot opt in out source destination
1 462 27720 SNAT tcp -- * !lo 0.0.0.0/0 85.13.195.235 to:192.168.254.64
Chain OUTPUT (policy ACCEPT 25888 packets, 1791K bytes)
num pkts bytes target prot opt in out source destination
ip6tables:
debug[235]: Command:/sbin/ip6tables -v -L -n --line-numbers
Chain INPUT (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 LOCALINPUT all !lo * ::/0 ::/0
2 0 0 ACCEPT all lo * ::/0 ::/0
3 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:22
4 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:25
5 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:53
6 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:80
7 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:110
8 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:143
9 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:443
10 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:465
11 0 0 ACCEPT tcp !lo * ::/0 ::/0 tcp dpt:587
12 0 0 ACCEPT udp !lo * ::/0 ::/0 udp dpt:53
13 0 0 ACCEPT icmpv6 !lo * ::/0 ::/0
14 0 0 LOGDROPIN all !lo * ::/0 ::/0
Chain FORWARD (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 LOCALOUTPUT all * !lo ::/0 ::/0
2 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:25 OWNER GID match 32006
3 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:25 OWNER GID match 12
4 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:25 OWNER UID match 32001
5 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:25 OWNER UID match 0
6 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:25
7 0 0 ACCEPT all * lo ::/0 ::/0
8 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:53
9 0 0 ACCEPT udp * !lo ::/0 ::/0 udp dpt:53
10 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp spt:53
11 0 0 ACCEPT udp * !lo ::/0 ::/0 udp spt:53
12 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:22
13 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:25
14 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:53
15 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:80
16 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:110
17 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:113
18 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:443
19 0 0 ACCEPT tcp * !lo ::/0 ::/0 tcp dpt:587
20 0 0 ACCEPT udp * !lo ::/0 ::/0 udp dpt:53
21 0 0 ACCEPT udp * !lo ::/0 ::/0 udp dpt:113
22 0 0 ACCEPT icmpv6 * !lo ::/0 ::/0
23 0 0 LOGDROPOUT all * !lo ::/0 ::/0
Chain GALLOWIN (1 references)
num pkts bytes target prot opt in out source destination
Chain GALLOWOUT (1 references)
num pkts bytes target prot opt in out source destination
Chain GDENYIN (1 references)
num pkts bytes target prot opt in out source destination
Chain GDENYOUT (1 references)
num pkts bytes target prot opt in out source destination
Chain LOCALINPUT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 GALLOWIN all !lo * ::/0 ::/0
2 0 0 GDENYIN all !lo * ::/0 ::/0
Chain LOCALOUTPUT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 GALLOWOUT all * !lo ::/0 ::/0
2 0 0 GDENYOUT all * !lo ::/0 ::/0
Chain LOGDROPIN (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:67
2 0 0 DROP udp * * ::/0 ::/0 udp dpt:67
3 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:68
4 0 0 DROP udp * * ::/0 ::/0 udp dpt:68
5 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:111
6 0 0 DROP udp * * ::/0 ::/0 udp dpt:111
7 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:113
8 0 0 DROP udp * * ::/0 ::/0 udp dpt:113
9 0 0 DROP tcp * * ::/0 ::/0 tcp dpts:135:139
10 0 0 DROP udp * * ::/0 ::/0 udp dpts:135:139
11 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:445
12 0 0 DROP udp * * ::/0 ::/0 udp dpt:445
13 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:500
14 0 0 DROP udp * * ::/0 ::/0 udp dpt:500
15 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:513
16 0 0 DROP udp * * ::/0 ::/0 udp dpt:513
17 0 0 DROP tcp * * ::/0 ::/0 tcp dpt:520
18 0 0 DROP udp * * ::/0 ::/0 udp dpt:520
19 0 0 LOG tcp * * ::/0 ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP6IN Blocked* '
20 0 0 LOG udp * * ::/0 ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP6IN Blocked* '
21 0 0 LOG icmpv6 * * ::/0 ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP6IN Blocked* '
22 0 0 DROP all * * ::/0 ::/0
Chain LOGDROPOUT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 LOG tcp * * ::/0 ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP6OUT Blocked* '
2 0 0 LOG udp * * ::/0 ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP6OUT Blocked* '
3 0 0 LOG icmpv6 * * ::/0 ::/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP6OUT Blocked* '
4 0 0 DROP all * * ::/0 ::/0
|
ConfigServer Security & Firewall - csf v5.40