Static hostname: hst-fr Icon name: computer-vm Chassis: vm 🖴 Machine ID: 670145ea93d8dd9a9e397078c61e2718 Boot ID: 0f817d48f69f4f53b145fe9a2ad92ba4 Product UUID: d660a663-6560-4ff5-835a-5548e1c010bb Virtualization: kvm Operating System: Debian GNU/Linux 13 (trixie) Kernel: Linux 6.12.95+deb13-cloud-amd64 Architecture: x86-64 Hardware Vendor: QEMU Hardware Model: Standard PC _i440FX + PIIX, 1996_ Firmware Version: rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org Firmware Date: Tue 2014-04-01 Firmware Age: 12y 4month 2w 4d Date : 2026-08-19 12:45:08 CEST 12:45:08 up 40 days, 20:55, 1 user, load average: 0.30, 0.13, 0.09 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Thu 2026-07-09 15:50:56 CEST; 1 month 10 days ago Invocation: 8b01252e9e1b4f389d829ebdc92ba8f9 Docs: man:systemd-sysv-generator(8) Mem peak: 4.1M CPU: 10.635s Notice: journal has been rotated since unit was started, output may be incomplete. Chain INPUT (policy DROP 20 packets, 1033 bytes) pkts bytes target prot opt in out source destination 2473K 249M DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 833K 49M syn-flood tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 7530 557K DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP all -f * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 25 2907 DROP all -- eth0 * 10.0.0.0/8 0.0.0.0/0 300K 28M DROP all -- eth0 * 172.16.0.0/12 0.0.0.0/0 0 0 DROP all -- eth0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- eth0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP all -- eth0 * 127.0.0.0/8 0.0.0.0/0 194K 19M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 71M 28G ACCEPT all -- * * 0.0.0.0/0 147.79.115.130 state RELATED,ESTABLISHED 72986 4719K ACCEPT icmp -- * * 0.0.0.0/0 147.79.115.130 limit: avg 5/sec burst 4 50716 2029K ACCEPT all -- * * 0.0.0.0/0 10.175.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.175.0.254 limit: avg 5/sec burst 4 241K 365M ACCEPT all -- * * 0.0.0.0/0 10.0.3.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.0.3.1 limit: avg 5/sec burst 4 0 0 ACCEPT tcp -- eth0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 3855 225K tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 662 39252 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 3196 186K ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 9 432 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 240 17337 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 69 5291 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 3320 1013K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 170 39007 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 106 16082 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 0 0 ACCEPT esp -- eth0 * 0.0.0.0/0 0.0.0.0/0 esp 5 216 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 1 40 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT tcp -- eth0 * 104.113.170.241 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 104.113.170.241 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 151.231.39.39 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 151.231.39.39 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 121.201.29.121 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 183.39.223.233 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 183.15.177.153 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 216.105.171.68 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 173.254.28.48 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 162.212.252.227 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 222.70.229.251 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 148.66.136.61 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 185.17.52.46 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 59.127.92.11 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 45.61.237.40 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 180.86.4.148 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 201.64.112.162 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 20 mode srcip 0 0 tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW recent: SET name: NAMED side: source mask: 255.255.255.255 0 0 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 71825 4282K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 85 3892 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 301K 18M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 1281 52500 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 5625 2771K LOG udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 9703 5087K DROP udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 3 191 LOG icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 3 191 DROP icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 5890 302K LOG tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 113K 6041K DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 352 161K LOG all -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 422 168K DROP all -- eth0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 331 22595 ACCEPT all -- incusbr0 eth0 0.0.0.0/0 0.0.0.0/0 643 66637 ACCEPT all -- eth0 incusbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lxcbr0 eth0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- eth0 lxcbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lxcbr0 incusbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- incusbr0 lxcbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 1 packets, 40 bytes) pkts bytes target prot opt in out source destination 322K 30M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 96M 24G ACCEPT all -- * * 147.79.115.130 0.0.0.0/0 126K 8512K ACCEPT all -- * * 10.175.0.254 0.0.0.0/0 486K 35M ACCEPT all -- * * 10.0.3.1 0.0.0.0/0 0 0 ACCEPT udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp spt:500 0 0 ACCEPT udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 0 0 ACCEPT tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 0 0 ACCEPT tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 0 0 LOG udp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP udp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG icmp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 0 0 DROP icmp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 0 0 DROP tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP all -- * eth0 0.0.0.0/0 0.0.0.0/0 Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BLACKLIST side: source mask: 255.255.255.255 Chain CHECK_GRE (2 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: 255.255.255.255 0 0 BLACK all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: 255.255.255.255 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: TIMER side: source mask: 255.255.255.255 Chain syn-flood (1 references) pkts bytes target prot opt in out source destination 496K 29M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 337K 20M DROP all -- * * 0.0.0.0/0 0.0.0.0/0