Guest User

Untitled

a guest
Jun 14th, 2020
37
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. mail:~ # iptables -nvL --line-numbers
  2. Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
  3. num pkts bytes target prot opt in out source destination
  4. 1 177K 21M f2b-dovecot tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 110,995,143,993,587,587,2000
  5. 2 23M 2200M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  6. 3 51724 3666K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  7. 4 109K 11M INPUT_direct all -- * * 0.0.0.0/0 0.0.0.0/0
  8. 5 109K 11M INPUT_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0
  9. 6 109K 11M INPUT_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0
  10. 7 865 35618 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  11. 8 27536 4902K REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  12.  
  13. Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
  14. num pkts bytes target prot opt in out source destination
  15. 1 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  16. 2 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  17. 3 0 0 FORWARD_direct all -- * * 0.0.0.0/0 0.0.0.0/0
  18. 4 0 0 FORWARD_IN_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0
  19. 5 0 0 FORWARD_IN_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0
  20. 6 0 0 FORWARD_OUT_ZONES_SOURCE all -- * * 0.0.0.0/0 0.0.0.0/0
  21. 7 0 0 FORWARD_OUT_ZONES all -- * * 0.0.0.0/0 0.0.0.0/0
  22. 8 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  23. 9 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  24.  
  25. Chain OUTPUT (policy ACCEPT 67 packets, 7377 bytes)
  26. num pkts bytes target prot opt in out source destination
  27. 1 22M 59G OUTPUT_direct all -- * * 0.0.0.0/0 0.0.0.0/0
  28.  
  29. Chain FORWARD_IN_ZONES (1 references)
  30. num pkts bytes target prot opt in out source destination
  31. 1 0 0 FWDI_public all -- eth1 * 0.0.0.0/0 0.0.0.0/0 [goto]
  32. 2 0 0 FWDI_public all -- + * 0.0.0.0/0 0.0.0.0/0 [goto]
  33.  
  34. Chain FORWARD_IN_ZONES_SOURCE (1 references)
  35. num pkts bytes target prot opt in out source destination
  36.  
  37. Chain FORWARD_OUT_ZONES (1 references)
  38. num pkts bytes target prot opt in out source destination
  39. 1 0 0 FWDO_public all -- * eth1 0.0.0.0/0 0.0.0.0/0 [goto]
  40. 2 0 0 FWDO_public all -- * + 0.0.0.0/0 0.0.0.0/0 [goto]
  41.  
  42. Chain FORWARD_OUT_ZONES_SOURCE (1 references)
  43. num pkts bytes target prot opt in out source destination
  44.  
  45. Chain FORWARD_direct (1 references)
  46. num pkts bytes target prot opt in out source destination
  47.  
  48. Chain FWDI_public (2 references)
  49. num pkts bytes target prot opt in out source destination
  50. 1 0 0 FWDI_public_log all -- * * 0.0.0.0/0 0.0.0.0/0
  51. 2 0 0 FWDI_public_deny all -- * * 0.0.0.0/0 0.0.0.0/0
  52. 3 0 0 FWDI_public_allow all -- * * 0.0.0.0/0 0.0.0.0/0
  53. 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
  54.  
  55. Chain FWDI_public_allow (1 references)
  56. num pkts bytes target prot opt in out source destination
  57.  
  58. Chain FWDI_public_deny (1 references)
  59. num pkts bytes target prot opt in out source destination
  60.  
  61. Chain FWDI_public_log (1 references)
  62. num pkts bytes target prot opt in out source destination
  63.  
  64. Chain FWDO_public (2 references)
  65. num pkts bytes target prot opt in out source destination
  66. 1 0 0 FWDO_public_log all -- * * 0.0.0.0/0 0.0.0.0/0
  67. 2 0 0 FWDO_public_deny all -- * * 0.0.0.0/0 0.0.0.0/0
  68. 3 0 0 FWDO_public_allow all -- * * 0.0.0.0/0 0.0.0.0/0
  69.  
  70. Chain FWDO_public_allow (1 references)
  71. num pkts bytes target prot opt in out source destination
  72.  
  73. Chain FWDO_public_deny (1 references)
  74. num pkts bytes target prot opt in out source destination
  75.  
  76. Chain FWDO_public_log (1 references)
  77. num pkts bytes target prot opt in out source destination
  78.  
  79. Chain INPUT_ZONES (1 references)
  80. num pkts bytes target prot opt in out source destination
  81. 1 109K 11M IN_public all -- eth1 * 0.0.0.0/0 0.0.0.0/0 [goto]
  82. 2 0 0 IN_public all -- + * 0.0.0.0/0 0.0.0.0/0 [goto]
  83.  
  84. Chain INPUT_ZONES_SOURCE (1 references)
  85. num pkts bytes target prot opt in out source destination
  86.  
  87. Chain INPUT_direct (1 references)
  88. num pkts bytes target prot opt in out source destination
  89.  
  90. Chain IN_public (2 references)
  91. num pkts bytes target prot opt in out source destination
  92. 1 109K 11M IN_public_log all -- * * 0.0.0.0/0 0.0.0.0/0
  93. 2 109K 11M IN_public_deny all -- * * 0.0.0.0/0 0.0.0.0/0
  94. 3 109K 11M IN_public_allow all -- * * 0.0.0.0/0 0.0.0.0/0
  95. 4 7 1592 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
  96.  
  97. Chain IN_public_allow (1 references)
  98. num pkts bytes target prot opt in out source destination
  99. 1 3 192 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW
  100. 2 2797 125K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ctstate NEW
  101. 3 1492 88312 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 ctstate NEW
  102. 4 287 105K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 ctstate NEW
  103. 5 662 36252 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 ctstate NEW
  104. 6 40694 2957K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 ctstate NEW
  105. 7 954 60372 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 ctstate NEW
  106. 8 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:389 ctstate NEW
  107. 9 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:636 ctstate NEW
  108. 10 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306 ctstate NEW
  109. 11 192 14592 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 ctstate NEW
  110. 12 5403 424K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 ctstate NEW
  111. 13 661 157K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138 ctstate NEW
  112. 14 30 1920 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 ctstate NEW
  113. 15 60 3840 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 ctstate NEW
  114. 16 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 ctstate NEW
  115. 17 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138 ctstate NEW
  116. 18 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5060 ctstate NEW
  117. 19 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:5060 ctstate NEW
  118. 20 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5061 ctstate NEW
  119. 21 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:5061 ctstate NEW
  120. 22 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:427 ctstate NEW
  121. 23 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:427 ctstate NEW
  122. 24 26309 1576K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 ctstate NEW
  123. 25 937 54560 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 ctstate NEW
  124. 26 1 44 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4190 ctstate NEW
  125. 27 13 812 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4848 ctstate NEW
  126. 28 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:57389 ctstate NEW
  127. 29 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:55389 ctstate NEW
  128. 30 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:54306 ctstate NEW
  129. 31 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:55306 ctstate NEW
  130. 32 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:57210 ctstate NEW
  131. 33 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:57200 ctstate NEW
  132. 34 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:54307 ctstate NEW
  133. 35 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25565 ctstate NEW
  134. 36 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:57017 ctstate NEW
  135. 37 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:63701 ctstate NEW
  136. 38 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:63702 ctstate NEW
  137. 39 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:55555:60000 ctstate NEW
  138.  
  139. Chain IN_public_deny (1 references)
  140. num pkts bytes target prot opt in out source destination
  141.  
  142. Chain IN_public_log (1 references)
  143. num pkts bytes target prot opt in out source destination
  144.  
  145. Chain OUTPUT_direct (1 references)
  146. num pkts bytes target prot opt in out source destination
  147.  
  148. Chain f2b-dovecot (1 references)
  149. num pkts bytes target prot opt in out source destination
  150. 1 0 0 REJECT all -- * * 185.143.72.23 0.0.0.0/0 reject-with icmp-port-unreachable
  151. 2 0 0 REJECT all -- * * 141.98.80.150 0.0.0.0/0 reject-with icmp-port-unreachable
  152. 3 36 2144 REJECT all -- * * 212.70.149.34 0.0.0.0/0 reject-with icmp-port-unreachable
  153. 4 0 0 REJECT all -- * * 46.38.145.254 0.0.0.0/0 reject-with icmp-port-unreachable
  154. 5 0 0 REJECT all -- * * 185.143.72.25 0.0.0.0/0 reject-with icmp-port-unreachable
  155. 6 0 0 REJECT all -- * * 46.38.150.191 0.0.0.0/0 reject-with icmp-port-unreachable
  156. 7 0 0 REJECT all -- * * 87.246.7.66 0.0.0.0/0 reject-with icmp-port-unreachable
  157. 8 0 0 REJECT all -- * * 46.38.145.4 0.0.0.0/0 reject-with icmp-port-unreachable
  158. 9 0 0 REJECT all -- * * 46.38.145.253 0.0.0.0/0 reject-with icmp-port-unreachable
  159. 10 0 0 REJECT all -- * * 46.38.145.5 0.0.0.0/0 reject-with icmp-port-unreachable
  160. 11 0 0 REJECT all -- * * 46.38.145.250 0.0.0.0/0 reject-with icmp-port-unreachable
  161. 12 0 0 REJECT all -- * * 46.38.145.252 0.0.0.0/0 reject-with icmp-port-unreachable
  162. 13 0 0 REJECT all -- * * 46.38.145.248 0.0.0.0/0 reject-with icmp-port-unreachable
  163. 14 0 0 REJECT all -- * * 46.38.145.249 0.0.0.0/0 reject-with icmp-port-unreachable
  164. 15 0 0 REJECT all -- * * 46.38.150.190 0.0.0.0/0 reject-with icmp-port-unreachable
  165. 16 0 0 REJECT all -- * * 46.38.145.6 0.0.0.0/0 reject-with icmp-port-unreachable
  166. 17 0 0 REJECT all -- * * 46.38.145.251 0.0.0.0/0 reject-with icmp-port-unreachable
  167. 18 0 0 REJECT all -- * * 46.38.150.188 0.0.0.0/0 reject-with icmp-port-unreachable
  168. 19 0 0 REJECT all -- * * 46.38.150.153 0.0.0.0/0 reject-with icmp-port-unreachable
  169. 20 0 0 REJECT all -- * * 46.38.150.142 0.0.0.0/0 reject-with icmp-port-unreachable
  170. 21 0 0 REJECT all -- * * 87.246.7.70 0.0.0.0/0 reject-with icmp-port-unreachable
  171. 22 0 0 REJECT all -- * * 212.70.149.18 0.0.0.0/0 reject-with icmp-port-unreachable
  172. 23 0 0 REJECT all -- * * 212.70.149.2 0.0.0.0/0 reject-with icmp-port-unreachable
  173. 24 172K 20M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
RAW Paste Data