Static hostname: vps-au Icon name: computer-vm Chassis: vm 🖴 Machine ID: 0e665427498647a1a3cc070dee804cbd Boot ID: 3461b4164198450b82f7b98d97adb65d Virtualization: kvm Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux 6.1.0-50-cloud-amd64 Architecture: x86-64 Hardware Vendor: OpenStack Foundation Hardware Model: OpenStack Nova Firmware Version: 1.16.3-debian-1.16.3-2~bpo12+1 Date : 2026-09-08 07:55:09 AEST 07:55:09 up 61 days, 10:10, 1 user, load average: 0,59, 0,23, 0,15 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Mon 2026-07-27 21:56:54 AEST; 1 month 11 days ago Docs: man:systemd-sysv-generator(8) CPU: 255ms juil. 27 21:56:54 vps-au firewall[1974967]: + SSH : [OK] juil. 27 21:56:54 vps-au firewall[1974967]: + RSYNC : [OK] juil. 27 21:56:54 vps-au firewall[1974967]: + TCP : [OK] juil. 27 21:56:54 vps-au firewall[1974967]: + UDP : [OK] juil. 27 21:56:54 vps-au firewall[1974967]: + VPN IPSEC / XL2TP : [OK] juil. 27 21:56:54 vps-au firewall[1974967]: + VSERVERS NAT : [OK] juil. 27 21:56:54 vps-au firewall[1974967]: + HTTP : [OK] juil. 27 21:56:54 vps-au firewall[1974967]: + LOG BURST 5 : [OK] juil. 27 21:56:54 vps-au firewall[1974967]: + On fixe les portes : DROP juil. 27 21:56:54 vps-au systemd[1]: Started firewall.service - LSB: Start daemon at boot time. Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 7069K 638M DROP 1 -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 321M 19G syn-flood 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 144K 68M DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP 0 -f * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 4 3120 DROP 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 3628K 304M DROP 0 -- netbr0 * 10.0.0.0/8 0.0.0.0/0 300K 29M DROP 0 -- netbr0 * 172.16.0.0/12 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 127.0.0.0/8 0.0.0.0/0 162K 97M ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 1 44 CHECK_GRE 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 CHECK_GRE 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 713 42220 DROP 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81 25 1252 DROP 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:81 302M 226G ACCEPT 0 -- * * 0.0.0.0/0 139.99.171.39 state RELATED,ESTABLISHED 1845K 68M ACCEPT 1 -- * * 0.0.0.0/0 139.99.171.39 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 10.139.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.139.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 172.16.5.131 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 172.16.5.131 limit: avg 5/sec burst 4 0 0 ACCEPT 6 -- netbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lxbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lxbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lxbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lxbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lxbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lxbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lxbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 4599 270K 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 181 10852 DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 4701 297K ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- lxbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- lxbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- lxbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 7 336 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 965 57199 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 629 49867 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 3 85 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 849 284K ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 410 130K ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 0 0 ACCEPT 50 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 esp 0 0 ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 2 88 ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 3172K 187M ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 691K 28M ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 22609 1336K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 1144 47397 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 5404 911K LOG 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 45757 7964K DROP 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 777 43632 LOG 1 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 1866 126K DROP 1 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 5391 261K LOG 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 108K 5471K DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 1465 680K LOG 0 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 1465 680K DROP 0 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- lxbr0 netbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- netbr0 lxbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 162K 97M ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 CHECK_GRE 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:47 state NEW 0 0 CHECK_GRE 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:47 state NEW 0 0 DROP 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:81 0 0 DROP 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:81 376M 298G ACCEPT 0 -- * * 139.99.171.39 0.0.0.0/0 0 0 ACCEPT 0 -- * * 10.139.0.254 0.0.0.0/0 0 0 ACCEPT 0 -- * * 172.16.5.131 0.0.0.0/0 0 0 ACCEPT 17 -- * netbr0 0.0.0.0/0 0.0.0.0/0 udp spt:500 0 0 ACCEPT 17 -- * netbr0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 0 0 ACCEPT 6 -- * netbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 0 0 ACCEPT 6 -- * netbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 0 0 LOG 17 -- * netbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP 17 -- * netbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG 1 -- * netbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 0 0 DROP 1 -- * netbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG 6 -- * netbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 0 0 DROP 6 -- * netbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG 0 -- * netbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP 0 -- * netbr0 0.0.0.0/0 0.0.0.0/0 Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BLACKLIST side: source mask: 255.255.255.255 Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: 255.255.255.255 0 0 BLACK 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: 255.255.255.255 1 44 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: TIMER side: source mask: 255.255.255.255 Chain syn-flood (1 references) pkts bytes target prot opt in out source destination 3240K 190M RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 318M 19G DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0