Static hostname: gate Icon name: computer-desktop Chassis: desktop šŸ–„ļø Machine ID: ea73efcb620c413594ddd130781b9afe Boot ID: 946559a95e00414aa4975adeb1b38ded Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux 6.1.0-43-amd64 Architecture: x86-64 Hardware Vendor: Acer Hardware Model: Aspire X1920 Firmware Version: P01-B3 Date : 2026-09-15 11:40:08 CEST 11:40:08 up 18 days, 42 min, 1 user, load average: 0,00, 0,00, 0,00 ā— firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Fri 2026-08-28 10:58:10 CEST; 2 weeks 4 days ago Docs: man:systemd-sysv-generator(8) Process: 530 ExecStart=/etc/init.d/firewall start (code=exited, status=0/SUCCESS) CPU: 577ms aoĆ»t 28 10:58:10 gate firewall[530]: + VPN IPSEC / XL2TP : [OK] aoĆ»t 28 10:58:10 gate firewall[530]: +---> SWAN FR : 172.16.8.78/28 aoĆ»t 28 10:58:10 gate firewall[530]: + LAN NAT : [OK] aoĆ»t 28 10:58:10 gate firewall[530]: + NAS NAT & NAS <-> NET and LAN: [OK] aoĆ»t 28 10:58:10 gate firewall[530]: + WLAN SRV : [OK] aoĆ»t 28 10:58:10 gate firewall[530]: + DNS : [OK] aoĆ»t 28 10:58:10 gate firewall[530]: + HTTP SRV : [OK] aoĆ»t 28 10:58:10 gate firewall[530]: + LIQUIDSOAP : [OK] aoĆ»t 28 10:58:10 gate firewall[530]: + On fixe les portes : DROP aoĆ»t 28 10:58:10 gate systemd[1]: Started firewall.service - LSB: Start daemon at boot time. Chain INPUT (policy DROP 784K packets, 58M bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol ipsec udp dpt:1701 0 0 DROP 0 -- * * 222.52.66.207 0.0.0.0/0 0 0 DROP 0 -- * * 190.210.152.17 0.0.0.0/0 0 0 DROP 0 -- * * 212.237.35.210 0.0.0.0/0 0 0 DROP 0 -- * * 58.208.0.0 0.0.0.0/0 0 0 DROP 0 -- * * 203.115.105.245 0.0.0.0/0 0 0 DROP 0 -- * * 62.105.136.154 0.0.0.0/0 0 0 DROP 0 -- * * 87.236.232.36 0.0.0.0/0 0 0 DROP 0 -- * * 179.4.122.93 0.0.0.0/0 0 0 DROP 0 -- * * 203.128.244.214 0.0.0.0/0 0 0 DROP 0 -- * * 222.192.176.40 0.0.0.0/0 0 0 DROP 0 -- * * 194.247.227.8 0.0.0.0/0 0 0 DROP 0 -- * * 59.120.160.184 0.0.0.0/0 0 0 DROP 0 -- * * 203.193.173.41 0.0.0.0/0 0 0 DROP 0 -- * * 123.129.65.43 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.136.210 0.0.0.0/0 0 0 DROP 0 -- * * 45.63.15.172 0.0.0.0/0 0 0 DROP 0 -- * * 104.207.132.28 0.0.0.0/0 38 2192 DROP 0 -- * * 104.16.0.0/12 0.0.0.0/0 0 0 DROP 0 -- * * 54.209.6.177 0.0.0.0/0 0 0 DROP 0 -- * * 5.9.89.170 0.0.0.0/0 0 0 DROP 0 -- * * 94.154.239.69 0.0.0.0/0 0 0 DROP 0 -- * * 162.210.196.100 0.0.0.0/0 0 0 DROP 0 -- * * 104.31.0.0/16 0.0.0.0/0 0 0 DROP 0 -- * * 104.27.0.0/16 0.0.0.0/0 0 0 DROP 0 -- * * 188.143.232.0/24 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.136.218 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.142.114 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.152.218 0.0.0.0/0 0 0 DROP 0 -- * * 188.143.232.0/24 0.0.0.0/0 0 0 DROP 0 -- * * 195.154.182.63 0.0.0.0/0 0 0 DROP 0 -- * * 220.220.9.128 0.0.0.0/0 0 0 DROP 0 -- * * 108.181.49.123 0.0.0.0/0 0 0 DROP 0 -- * * 111.231.207.136 0.0.0.0/0 0 0 DROP 0 -- * * 91.219.236.0/22 0.0.0.0/0 0 0 DROP 0 -- * * 104.254.93.69 0.0.0.0/0 0 0 DROP 0 -- * * 185.104.184.123 0.0.0.0/0 0 0 DROP 0 -- * * 203.195.202.153 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.84.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.210.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.62.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.8.45.0 0.0.0.0/0 0 0 DROP 0 -- * * 105.108.0.0 0.0.0.0/0 2639K 206M DROP 1 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 697K 38M syn-flood 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 91 26157 DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 syn-flood 6 -- usbbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 0 0 DROP 6 -- usbbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP 0 -- netbr0 * 172.16.0.0/12 0.0.0.0/0 103K 7127K DROP 0 -- netbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 127.0.0.0/8 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 172.16.0.0/12 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 127.0.0.0/8 0.0.0.0/0 597 83573 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 3 120 gre 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 gre 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 76M 11G ACCEPT 0 -- * * 0.0.0.0/0 192.168.1.254 state RELATED,ESTABLISHED 2615K 174M ACCEPT 1 -- * * 0.0.0.0/0 192.168.1.254 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 10.46.80.102 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.46.80.102 limit: avg 5/sec burst 4 1 84 ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 172.16.0.254 limit: avg 5/sec burst 4 213 19357 ACCEPT 0 -- * * 0.0.0.0/0 10.106.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.106.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT 6 -- netbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.0.254 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.0.254 0.0.0.0/0 tcp dpt:22 245K 15M 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 206K 12M DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 40846 4114K ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.0.254 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.0.254 0.0.0.0/0 udp dpt:873 24 1248 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 1924 86044 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 28 1280 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 160 7788 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8123 357 15684 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 431 33003 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 73 24005 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 498 197K ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 283 85619 ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 0 0 ACCEPT 50 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 esp 9 384 ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 6 240 ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT 17 -- netbr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 100 mode srcip srcmask 28 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 3 120 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 581 25964 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8000 Chain FORWARD (policy DROP 5 packets, 380 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 16M 1467M ACCEPT 0 -- * * 172.16.0.1 0.0.0.0/0 22M 17G ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.1 17M 2295M ACCEPT 0 -- * * 10.106.0.252 0.0.0.0/0 9312K 829M ACCEPT 0 -- * * 0.0.0.0/0 10.106.0.252 14M 5020M ACCEPT 0 -- * * 172.16.0.142 0.0.0.0/0 20M 40G ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.142 105K 9165K ACCEPT 0 -- * * 172.16.0.140 0.0.0.0/0 2026 410K ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.140 0 0 ACCEPT 0 -- * * 172.16.8.64/28 0.0.0.0/0 0 0 ACCEPT 0 -- * * 0.0.0.0/0 172.16.8.64/28 2818 700K ACCEPT 0 -- srvbr0 netbr0 0.0.0.0/0 0.0.0.0/0 3587 306K ACCEPT 0 -- netbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 usbbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- usbbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 lanbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- lanbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- wlanbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 wlanbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 2 packets, 80 bytes) pkts bytes target prot opt in out source destination 2749 323K ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 58M 9317M ACCEPT 0 -- * * 192.168.1.254 0.0.0.0/0 ! state INVALID 1571 98584 ACCEPT 0 -- * * 192.168.1.254 0.0.0.0/0 0 0 ACCEPT 0 -- * * 10.46.80.102 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.46.80.102 0.0.0.0/0 21888 2879K ACCEPT 0 -- * * 172.16.0.254 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 172.16.0.254 0.0.0.0/0 169K 15M ACCEPT 0 -- * * 10.106.0.254 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.106.0.254 0.0.0.0/0 0 0 ACCEPT 6 -- * * 0.0.0.0/0 158.69.126.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 83.159.31.116 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.253 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.0.254 tcp spt:22 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 LOG 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8000 Chain black (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: blacklist side: source mask: 255.255.255.255 Chain gre (2 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: blacklist side: source mask: 255.255.255.255 0 0 black 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 600 reap hit_count: 10 name: timer side: source mask: 255.255.255.255 3 120 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: timer side: source mask: 255.255.255.255 Chain syn-flood (2 references) pkts bytes target prot opt in out source destination 492K 26M RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 205K 12M DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0