Static hostname: gate Icon name: computer-desktop Chassis: desktop šŸ–„ļø Machine ID: ea73efcb620c413594ddd130781b9afe Boot ID: 742e41322c414018967ed5484c6ad5b0 Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux 6.1.0-43-amd64 Architecture: x86-64 Hardware Vendor: Acer Hardware Model: Aspire X1920 Firmware Version: P01-B3 Date : 2026-08-25 10:50:08 CEST 10:50:08 up 4 days, 4:04, 1 user, load average: 0,05, 0,04, 0,03 ā— firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Fri 2026-08-21 06:46:23 CEST; 4 days ago Docs: man:systemd-sysv-generator(8) Process: 421 ExecStart=/etc/init.d/firewall start (code=exited, status=0/SUCCESS) CPU: 697ms aoĆ»t 21 06:46:22 gate firewall[421]: + VPN IPSEC / XL2TP : [OK] aoĆ»t 21 06:46:22 gate firewall[421]: +---> SWAN FR : 172.16.8.78/28 aoĆ»t 21 06:46:22 gate firewall[421]: + LAN NAT : [OK] aoĆ»t 21 06:46:22 gate firewall[421]: + NAS NAT & NAS <-> NET and LAN: [OK] aoĆ»t 21 06:46:22 gate firewall[421]: + WLAN SRV : [OK] aoĆ»t 21 06:46:22 gate firewall[421]: + DNS : [OK] aoĆ»t 21 06:46:22 gate firewall[421]: + HTTP SRV : [OK] aoĆ»t 21 06:46:22 gate firewall[421]: + LIQUIDSOAP : [OK] aoĆ»t 21 06:46:23 gate firewall[421]: + On fixe les portes : DROP aoĆ»t 21 06:46:23 gate systemd[1]: Started firewall.service - LSB: Start daemon at boot time. Chain INPUT (policy DROP 184K packets, 12M bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol ipsec udp dpt:1701 0 0 DROP 0 -- * * 222.52.66.207 0.0.0.0/0 0 0 DROP 0 -- * * 190.210.152.17 0.0.0.0/0 0 0 DROP 0 -- * * 212.237.35.210 0.0.0.0/0 0 0 DROP 0 -- * * 58.208.0.0 0.0.0.0/0 0 0 DROP 0 -- * * 203.115.105.245 0.0.0.0/0 0 0 DROP 0 -- * * 62.105.136.154 0.0.0.0/0 0 0 DROP 0 -- * * 87.236.232.36 0.0.0.0/0 0 0 DROP 0 -- * * 179.4.122.93 0.0.0.0/0 0 0 DROP 0 -- * * 203.128.244.214 0.0.0.0/0 0 0 DROP 0 -- * * 222.192.176.40 0.0.0.0/0 0 0 DROP 0 -- * * 194.247.227.8 0.0.0.0/0 0 0 DROP 0 -- * * 59.120.160.184 0.0.0.0/0 0 0 DROP 0 -- * * 203.193.173.41 0.0.0.0/0 0 0 DROP 0 -- * * 123.129.65.43 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.136.210 0.0.0.0/0 0 0 DROP 0 -- * * 45.63.15.172 0.0.0.0/0 0 0 DROP 0 -- * * 104.207.132.28 0.0.0.0/0 0 0 DROP 0 -- * * 104.16.0.0/12 0.0.0.0/0 0 0 DROP 0 -- * * 54.209.6.177 0.0.0.0/0 0 0 DROP 0 -- * * 5.9.89.170 0.0.0.0/0 0 0 DROP 0 -- * * 94.154.239.69 0.0.0.0/0 0 0 DROP 0 -- * * 162.210.196.100 0.0.0.0/0 0 0 DROP 0 -- * * 104.31.0.0/16 0.0.0.0/0 0 0 DROP 0 -- * * 104.27.0.0/16 0.0.0.0/0 0 0 DROP 0 -- * * 188.143.232.0/24 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.136.218 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.142.114 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.152.218 0.0.0.0/0 0 0 DROP 0 -- * * 188.143.232.0/24 0.0.0.0/0 0 0 DROP 0 -- * * 195.154.182.63 0.0.0.0/0 0 0 DROP 0 -- * * 220.220.9.128 0.0.0.0/0 0 0 DROP 0 -- * * 108.181.49.123 0.0.0.0/0 0 0 DROP 0 -- * * 111.231.207.136 0.0.0.0/0 0 0 DROP 0 -- * * 91.219.236.0/22 0.0.0.0/0 0 0 DROP 0 -- * * 104.254.93.69 0.0.0.0/0 0 0 DROP 0 -- * * 185.104.184.123 0.0.0.0/0 0 0 DROP 0 -- * * 203.195.202.153 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.84.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.210.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.62.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.8.45.0 0.0.0.0/0 0 0 DROP 0 -- * * 105.108.0.0 0.0.0.0/0 585K 46M DROP 1 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 128K 6701K syn-flood 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 74 35518 DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 syn-flood 6 -- usbbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 0 0 DROP 6 -- usbbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP 0 -- netbr0 * 172.16.0.0/12 0.0.0.0/0 22951 1575K DROP 0 -- netbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 127.0.0.0/8 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 172.16.0.0/12 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 127.0.0.0/8 0.0.0.0/0 70026 57M ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 1 44 gre 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 gre 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 15M 2505M ACCEPT 0 -- * * 0.0.0.0/0 192.168.1.254 state RELATED,ESTABLISHED 515K 35M ACCEPT 1 -- * * 0.0.0.0/0 192.168.1.254 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 192.168.2.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 192.168.2.254 limit: avg 5/sec burst 4 2 168 ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 172.16.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 10.106.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.106.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT 6 -- netbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.0.254 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.0.254 0.0.0.0/0 tcp dpt:22 38246 2286K 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 31367 1880K DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 7339 758K ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.0.254 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.0.254 0.0.0.0/0 udp dpt:873 5 240 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 477 21388 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 2 80 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 36 1712 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8123 83 3916 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 85 6735 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 12 3948 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 113 43166 ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 46 16428 ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 0 0 ACCEPT 50 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 esp 3 144 ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 6 256 ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT 17 -- netbr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 100 mode srcip srcmask 28 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 1 44 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 137 6192 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8000 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 4152K 374M ACCEPT 0 -- * * 172.16.0.1 0.0.0.0/0 8355K 8750M ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.1 4320K 1116M ACCEPT 0 -- * * 10.106.0.252 0.0.0.0/0 2452K 216M ACCEPT 0 -- * * 0.0.0.0/0 10.106.0.252 53M 128G ACCEPT 0 -- * * 172.16.0.142 0.0.0.0/0 70M 25G ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.142 0 0 ACCEPT 0 -- * * 172.16.0.140 0.0.0.0/0 0 0 ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.140 0 0 ACCEPT 0 -- * * 172.16.8.64/28 0.0.0.0/0 0 0 ACCEPT 0 -- * * 0.0.0.0/0 172.16.8.64/28 4826K 324M ACCEPT 0 -- srvbr0 netbr0 0.0.0.0/0 0.0.0.0/0 4836K 324M ACCEPT 0 -- netbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 usbbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- usbbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 lanbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- lanbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- wlanbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 wlanbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 2 packets, 80 bytes) pkts bytes target prot opt in out source destination 70756 57M ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 12M 1938M ACCEPT 0 -- * * 192.168.1.254 0.0.0.0/0 ! state INVALID 413 62676 ACCEPT 0 -- * * 192.168.1.254 0.0.0.0/0 0 0 ACCEPT 0 -- * * 192.168.2.254 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 192.168.2.254 0.0.0.0/0 4567 505K ACCEPT 0 -- * * 172.16.0.254 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 172.16.0.254 0.0.0.0/0 38453 3483K ACCEPT 0 -- * * 10.106.0.254 0.0.0.0/0 ! state INVALID 1 80 ACCEPT 0 -- * * 10.106.0.254 0.0.0.0/0 0 0 ACCEPT 6 -- * * 0.0.0.0/0 158.69.126.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 83.159.31.116 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.253 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.0.254 tcp spt:22 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 LOG 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8000 Chain black (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: blacklist side: source mask: 255.255.255.255 Chain gre (2 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: blacklist side: source mask: 255.255.255.255 0 0 black 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 600 reap hit_count: 10 name: timer side: source mask: 255.255.255.255 1 44 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: timer side: source mask: 255.255.255.255 Chain syn-flood (2 references) pkts bytes target prot opt in out source destination 103K 5321K RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 24384 1381K DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0