Static hostname: vps-au Icon name: computer-vm Chassis: vm 🖴 Machine ID: 0e665427498647a1a3cc070dee804cbd Boot ID: 3461b4164198450b82f7b98d97adb65d Virtualization: kvm Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux 6.1.0-50-cloud-amd64 Architecture: x86-64 Hardware Vendor: OpenStack Foundation Hardware Model: OpenStack Nova Firmware Version: 1.16.3-debian-1.16.3-2~bpo12+1 Date : 2026-10-25 15:25:10 AEDT 15:25:10 up 108 days, 16:40, 0 user, load average: 0,37, 0,20, 0,11 ● firewall-ipv6.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall-ipv6; generated) Active: active (exited) since Thu 2026-09-10 06:20:34 AEST; 1 month 14 days ago Docs: man:systemd-sysv-generator(8) Process: 2096785 ExecStart=/etc/init.d/firewall-ipv6 start (code=exited, status=0/SUCCESS) CPU: 451ms sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: | sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: + IPv6 - Addrs WAN ---------------------------------------------------- sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: |\ sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: | | sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: | + IPv6 - Addrs WAN : [OK] sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: | sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: + GENERIQUE : [OK] sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: + LOGGING : [OK] sept. 10 06:20:34 vps-au firewall-ipv6[2096785]: + POLICY DROP : [OK] sept. 10 06:20:34 vps-au systemd[1]: Started firewall-ipv6.service - LSB: Start daemon at boot time. Chain INPUT (policy DROP 129K packets, 11M bytes) pkts bytes target prot opt in out source destination 98981 6335K DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 128 code 0 limit: above 1/sec burst 1 mode srcip 2710K 216M Syn-FLOOD 6 -- netbr0 * ::/0 ::/0 tcp flags:0x17/0x02 1074 892K DROP 6 -- netbr0 * ::/0 ::/0 tcp flags:!0x17/0x02 state NEW 0 0 LOG 0 -- * * ::/0 ::/0 rt type:0 segslefts:0:2 LOG flags 0 level 4 prefix "IPv6-RH0-ATTACK-2-HOPS: " 0 0 DROP 0 -- * * ::/0 ::/0 rt type:0 segslefts:0:2 0-addrs ::1,::2 0-not-strict 0 0 LOG 0 -- * * ::/0 ::/0 rt type:0 segsleft:0 LOG flags 0 level 4 prefix "IPv6-RH0-ATTACK: " 0 0 DROP 0 -- * * ::/0 ::/0 rt type:0 segsleft:0 0 0 CHECK_GRE 6 -- * * ::/0 ::/0 tcp dpt:47 state NEW 0 0 CHECK_GRE 17 -- * * ::/0 ::/0 udp dpt:47 state NEW 73 4552 DROP 6 -- * * ::/0 ::/0 tcp dpt:81 0 0 DROP 17 -- * * ::/0 ::/0 udp dpt:81 869K 3006M ACCEPT 0 -- lo * ::/0 ::/0 1339K 147M aICMPs 58 -- * * ::/0 ::/0 0 0 ACCEPT 0 -- * * ::/0 ff00::/8 0 0 ACCEPT 6 -- * * 2607:5300:60:9300::/56 ::/0 tcp dpt:22 0 0 ACCEPT 6 -- * * 2a01:cb1d:5:af00::/56 ::/0 tcp dpt:22 74719 15M ACCEPT 6 -- * * fc00::/7 ::/0 tcp dpt:22 0 0 ACCEPT 6 -- * * fec0::/10 ::/0 tcp dpt:22 4579 360K 6 -- * * ::/0 ::/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 8 628 DROP 6 -- * * ::/0 ::/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 41079 6231K ACCEPT 6 -- * * ::/0 ::/0 tcp dpt:22 0 0 ACCEPT 6 -- * * 2607:5300:60:9300::/56 ::/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 2607:5300:60:9300::/56 ::/0 udp dpt:873 0 0 ACCEPT 6 -- * * 2a01:cb1d:5:af00::/56 ::/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 2a01:cb1d:5:af00::/56 ::/0 udp dpt:873 0 0 ACCEPT 6 -- * * fc00::/7 ::/0 tcp dpt:873 0 0 ACCEPT 17 -- * * fc00::/7 ::/0 udp dpt:873 0 0 ACCEPT 6 -- * * fec0::/10 ::/0 tcp dpt:873 0 0 ACCEPT 17 -- * * fec0::/10 ::/0 udp dpt:873 1 64 ACCEPT 6 -- * * ::/0 ::/0 tcp dpt:514 1 64 ACCEPT 6 -- * * ::/0 ::/0 tcp dpt:4949 60 4140 ACCEPT 17 -- * * ::/0 ::/0 udp dpt:123 83 7831 ACCEPT 17 -- * * ::/0 ::/0 udp dpt:161 0 0 ACCEPT 17 -- * * ::/0 ::/0 udp dpt:514 0 0 ACCEPT 17 -- * * ::/0 ::/0 udp dpt:546 0 0 ACCEPT 17 -- * * ::/0 ::/0 udp dpt:547 18233 1446K ACCEPT 6 -- * * ::/0 ::/0 state NEW tcp dpt:80 0 0 ACCEPT 6 -- * * ::/0 ::/0 state RELATED tcp dpt:80 87927 10M ACCEPT 6 -- * * ::/0 ::/0 state ESTABLISHED tcp dpt:80 225K 18M ACCEPT 6 -- * * ::/0 ::/0 state NEW tcp dpt:443 0 0 ACCEPT 6 -- * * ::/0 ::/0 state RELATED tcp dpt:443 803K 121M ACCEPT 6 -- * * ::/0 ::/0 state ESTABLISHED tcp dpt:443 35M 3642M ACCEPT 0 -- * * fc00:5300:60:9389::/64 ::/0 18M 2022M ACCEPT 0 -- * * fc01::10:0:0:0/80 ::/0 0 0 ACCEPT 0 -- * * fc01::172:16:0:0/104 ::/0 0 0 ACCEPT 0 -- * * fc01::192:168:0:0/104 ::/0 0 0 ACCEPT 0 -- * * fc00:41d0:701:1100::/64 ::/0 0 0 ACCEPT 0 -- * * fc00:41d0:801:2000::/64 ::/0 0 0 ACCEPT 0 -- * * fc00:1f00:8100:400::/64 ::/0 0 0 ACCEPT 0 -- * * fc00:4780:28:5295::/64 ::/0 0 0 ACCEPT 0 -- * * fc00::10:0:3:0/112 ::/0 0 0 ACCEPT 0 -- * * fee0::/16 ::/0 0 0 ACCEPT 0 -- * * fee1::/16 ::/0 0 0 ACCEPT 0 -- * * fee2::/120 ::/0 0 0 ACCEPT 0 -- * * fee3::/120 ::/0 0 0 ACCEPT 0 -- * * fee4::/120 ::/0 0 0 ACCEPT 0 -- * * fee5::/120 ::/0 0 0 DROP 0 -- * * fec0::/10 ::/0 0 0 DROP 0 -- * * fc00::/7 ::/0 199M 266G ACCEPT 0 -- * * ::/0 ::/0 state RELATED,ESTABLISHED 129K 11M LOG 0 -- * * ::/0 ::/0 LOG flags 0 level 4 prefix "INPUT-v6:" Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * ::/0 ::/0 rt type:0 segsleft:0 0 0 ACCEPT 0 -- lo * ::/0 ::/0 0 0 ACCEPT 0 -- * lo ::/0 ::/0 0 0 ACCEPT 0 -- * * ff00::/8 ff00::/8 0 0 ACCEPT 0 -- * * fc00:5300:60:9389::/64 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc00:5300:60:9389::/64 0 0 ACCEPT 0 -- * * fc00:5300:60:9389::/64 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc00:5300:60:9389::/64 0 0 ACCEPT 0 -- * * fc01::10:0:0:0/80 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc01::10:0:0:0/80 0 0 ACCEPT 0 -- * * fc01::10:0:0:0/80 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc01::10:0:0:0/80 0 0 ACCEPT 0 -- * * fc01::172:16:0:0/104 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc01::172:16:0:0/104 0 0 ACCEPT 0 -- * * fc01::172:16:0:0/104 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc01::172:16:0:0/104 0 0 ACCEPT 0 -- * * fc01::192:168:0:0/104 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc01::192:168:0:0/104 0 0 ACCEPT 0 -- * * fc01::192:168:0:0/104 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc01::192:168:0:0/104 0 0 ACCEPT 0 -- * * fc00:41d0:701:1100::/64 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc00:41d0:701:1100::/64 0 0 ACCEPT 0 -- * * fc00:41d0:701:1100::/64 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc00:41d0:701:1100::/64 0 0 ACCEPT 0 -- * * fc00:41d0:801:2000::/64 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc00:41d0:801:2000::/64 0 0 ACCEPT 0 -- * * fc00:41d0:801:2000::/64 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc00:41d0:801:2000::/64 0 0 ACCEPT 0 -- * * fc00:1f00:8100:400::/64 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc00:1f00:8100:400::/64 0 0 ACCEPT 0 -- * * fc00:1f00:8100:400::/64 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc00:1f00:8100:400::/64 0 0 ACCEPT 0 -- * * fc00:4780:28:5295::/64 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc00:4780:28:5295::/64 0 0 ACCEPT 0 -- * * fc00:4780:28:5295::/64 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc00:4780:28:5295::/64 0 0 ACCEPT 0 -- * * fc00::10:0:3:0/112 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fc00::10:0:3:0/112 0 0 ACCEPT 0 -- * * fc00::10:0:3:0/112 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc00::10:0:3:0/112 0 0 ACCEPT 0 -- * * fee0::/16 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fee0::/16 0 0 ACCEPT 0 -- * * fee0::/16 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fee0::/16 0 0 ACCEPT 0 -- * * fee1::/16 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fee1::/16 0 0 ACCEPT 0 -- * * fee1::/16 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fee1::/16 0 0 ACCEPT 0 -- * * fee2::/120 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fee2::/120 0 0 ACCEPT 0 -- * * fee2::/120 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fee2::/120 0 0 ACCEPT 0 -- * * fee3::/120 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fee3::/120 0 0 ACCEPT 0 -- * * fee3::/120 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fee3::/120 0 0 ACCEPT 0 -- * * fee4::/120 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fee4::/120 0 0 ACCEPT 0 -- * * fee4::/120 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fee4::/120 0 0 ACCEPT 0 -- * * fee5::/120 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fee5::/120 0 0 ACCEPT 0 -- * * fee5::/120 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fee5::/120 0 0 DROP 0 -- * * fec0::/10 fec0::/10 0 0 ACCEPT 0 -- * * fec0::/10 fc00::/7 0 0 ACCEPT 0 -- * * fc00::/7 fec0::/10 0 0 DROP 0 -- * * fc00::/7 fc00::/7 0 0 LOG 0 -- * * ::/0 ::/0 LOG flags 0 level 4 prefix "FORWARD-v6:" Chain OUTPUT (policy DROP 47715 packets, 3851K bytes) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * ::/0 ::/0 rt type:0 segsleft:0 0 0 CHECK_GRE 6 -- * * ::/0 ::/0 tcp spt:47 state NEW 0 0 CHECK_GRE 17 -- * * ::/0 ::/0 udp spt:47 state NEW 0 0 DROP 6 -- * * ::/0 ::/0 tcp spt:81 0 0 DROP 17 -- * * ::/0 ::/0 udp spt:81 869K 3006M ACCEPT 0 -- * lo ::/0 ::/0 577K 46M aICMPs 58 -- * * ::/0 ::/0 0 0 ACCEPT 0 -- * * ::/0 ff00::/8 0 0 ACCEPT 6 -- * * ::/0 2607:5300:60:9300::/56 tcp spt:22 0 0 ACCEPT 6 -- * * ::/0 2a01:cb1d:5:af00::/56 tcp spt:22 67326 16M ACCEPT 6 -- * * ::/0 fc00::/7 tcp spt:22 0 0 ACCEPT 6 -- * * ::/0 fec0::/10 tcp spt:22 0 0 ACCEPT 6 -- * * ::/0 2607:5300:60:9300::/56 tcp spt:873 0 0 ACCEPT 17 -- * * ::/0 2607:5300:60:9300::/56 udp spt:873 0 0 ACCEPT 6 -- * * ::/0 2a01:cb1d:5:af00::/56 tcp spt:873 0 0 ACCEPT 17 -- * * ::/0 2a01:cb1d:5:af00::/56 udp spt:873 0 0 ACCEPT 6 -- * * ::/0 fc00::/7 tcp spt:873 0 0 ACCEPT 17 -- * * ::/0 fc00::/7 udp spt:873 0 0 ACCEPT 6 -- * * ::/0 fec0::/10 tcp spt:873 0 0 ACCEPT 17 -- * * ::/0 fec0::/10 udp spt:873 1 60 ACCEPT 6 -- * * ::/0 ::/0 tcp spt:514 1 60 ACCEPT 6 -- * * ::/0 ::/0 tcp spt:4949 0 0 ACCEPT 17 -- * * ::/0 ::/0 udp spt:123 0 0 ACCEPT 17 -- * * ::/0 ::/0 udp spt:161 0 0 ACCEPT 17 -- * * ::/0 ::/0 udp spt:514 0 0 ACCEPT 17 -- * * ::/0 ::/0 udp spt:546 0 0 ACCEPT 17 -- * * ::/0 ::/0 udp spt:547 272 115K ACCEPT 6 -- * * ::/0 ::/0 state NEW tcp spt:80 0 0 ACCEPT 6 -- * * ::/0 ::/0 state RELATED tcp spt:80 123K 105M ACCEPT 6 -- * * ::/0 ::/0 state ESTABLISHED tcp spt:80 308 348K ACCEPT 6 -- * * ::/0 ::/0 state NEW tcp spt:443 0 0 ACCEPT 6 -- * * ::/0 ::/0 state RELATED tcp spt:443 779K 269M ACCEPT 6 -- * * ::/0 ::/0 state ESTABLISHED tcp spt:443 58M 4382M ACCEPT 0 -- * * ::/0 fc00:5300:60:9389::/64 31M 2393M ACCEPT 0 -- * * ::/0 fc01::10:0:0:0/80 0 0 ACCEPT 0 -- * * ::/0 fc01::172:16:0:0/104 0 0 ACCEPT 0 -- * * ::/0 fc01::192:168:0:0/104 0 0 ACCEPT 0 -- * * ::/0 fc00:41d0:701:1100::/64 0 0 ACCEPT 0 -- * * ::/0 fc00:41d0:801:2000::/64 0 0 ACCEPT 0 -- * * ::/0 fc00:1f00:8100:400::/64 0 0 ACCEPT 0 -- * * ::/0 fc00:4780:28:5295::/64 0 0 ACCEPT 0 -- * * ::/0 fc00::10:0:3:0/112 0 0 ACCEPT 0 -- * * ::/0 fee0::/16 0 0 ACCEPT 0 -- * * ::/0 fee1::/16 0 0 ACCEPT 0 -- * * ::/0 fee2::/120 0 0 ACCEPT 0 -- * * ::/0 fee3::/120 0 0 ACCEPT 0 -- * * ::/0 fee4::/120 0 0 ACCEPT 0 -- * * ::/0 fee5::/120 0 0 DROP 0 -- * * ::/0 fec0::/10 0 0 DROP 0 -- * * ::/0 fc00::/7 20M 1679M ACCEPT 0 -- * * ::/0 ::/0 state NEW 188M 50G ACCEPT 0 -- * * ::/0 ::/0 state ESTABLISHED 0 0 ACCEPT 0 -- * * ::/0 ::/0 state RELATED 47715 3851K LOG 0 -- * * ::/0 ::/0 LOG flags 0 level 4 prefix "OUTPUT-v6:" Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * ::/0 ::/0 recent: SET name: BLACKLIST side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * ::/0 ::/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 BLACK 0 -- * * ::/0 ::/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 ACCEPT 0 -- * * ::/0 ::/0 recent: SET name: TIMER side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Chain Syn-FLOOD (1 references) pkts bytes target prot opt in out source destination 371K 29M RETURN 0 -- * * ::/0 ::/0 limit: avg 1/sec burst 4 2340K 187M DROP 0 -- * * ::/0 ::/0 Chain aICMPs (2 references) pkts bytes target prot opt in out source destination 10394 1525K ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 1 11 14080 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 2 code 0 769K 102M ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 3 code 0 1 96 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 3 code 1 1 96 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 4 code 0 1 96 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 4 code 1 1 96 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 4 code 2 313K 27M ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 128 code 0 312K 27M ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 129 code 0 0 0 ACCEPT 58 -- * * fe80::/64 ::/0 ipv6-icmptype 130 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT 58 -- * * fe80::/64 ::/0 ipv6-icmptype 131 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT 58 -- * * fe80::/64 ::/0 ipv6-icmptype 132 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 133 code 0 HL match HL == 255 0 0 ACCEPT 58 -- * * fe80::/64 ::/0 ipv6-icmptype 134 code 0 HL match HL == 255 256K 18M ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 135 code 0 HL match HL == 255 256K 16M ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 136 code 0 HL match HL == 255 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 137 code 0 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 138 code 0 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 139 code 0 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 140 code 0 0 0 ACCEPT 58 -- * * ::/0 ff02::1 ipv6-icmptype 141 code 0 HL match HL == 255 0 0 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 142 code 0 HL match HL == 255 0 0 ACCEPT 58 -- * * fe80::/64 ::/0 ipv6-icmptype 143 ctstate NEW HL match HL == 1 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 144 code 0 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 145 code 0 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 146 code 0 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 147 0 0 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 148 HL match HL == 255 0 0 ACCEPT 58 -- * * ::/0 ::/0 ipv6-icmptype 149 HL match HL == 255 0 0 ACCEPT 58 -- * * fe80::/64 ::/0 ipv6-icmptype 151 ctstate NEW HL match HL == 1 0 0 ACCEPT 58 -- * * fe80::/64 ::/0 ipv6-icmptype 152 ctstate NEW HL match HL == 1 0 0 ACCEPT 58 -- * * fe80::/64 ::/0 ipv6-icmptype 153 ctstate NEW HL match HL == 1 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 200 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 201 0 0 DROP 58 -- * * ::/0 ::/0 ipv6-icmptype 255