Static hostname: gate Icon name: computer-desktop Chassis: desktop 🖥️ Machine ID: ea73efcb620c413594ddd130781b9afe Boot ID: 0235465f95af41619c026a0d83cd5d1c Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux 6.1.0-43-amd64 Architecture: x86-64 Hardware Vendor: Acer Hardware Model: Aspire X1920 Firmware Version: P01-B3 Date : 2026-08-17 00:10:08 CEST 00:10:08 up 26 days, 21:23, 1 user, load average: 0,36, 0,11, 0,09 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Tue 2026-07-21 02:47:34 CEST; 3 weeks 5 days ago Docs: man:systemd-sysv-generator(8) Process: 425 ExecStart=/etc/init.d/firewall start (code=exited, status=0/SUCCESS) CPU: 693ms juil. 21 02:47:34 gate firewall[425]: + VPN IPSEC / XL2TP : [OK] juil. 21 02:47:34 gate firewall[425]: +---> SWAN FR : 172.16.8.78/28 juil. 21 02:47:34 gate firewall[425]: + LAN NAT : [OK] juil. 21 02:47:34 gate firewall[425]: + NAS NAT & NAS <-> NET and LAN: [OK] juil. 21 02:47:34 gate firewall[425]: + WLAN SRV : [OK] juil. 21 02:47:34 gate firewall[425]: + DNS : [OK] juil. 21 02:47:34 gate firewall[425]: + HTTP SRV : [OK] juil. 21 02:47:34 gate firewall[425]: + LIQUIDSOAP : [OK] juil. 21 02:47:34 gate firewall[425]: + On fixe les portes : DROP juil. 21 02:47:34 gate systemd[1]: Started firewall.service - LSB: Start daemon at boot time. Chain INPUT (policy DROP 993K packets, 67M bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol ipsec udp dpt:1701 0 0 DROP 0 -- * * 222.52.66.207 0.0.0.0/0 0 0 DROP 0 -- * * 190.210.152.17 0.0.0.0/0 0 0 DROP 0 -- * * 212.237.35.210 0.0.0.0/0 0 0 DROP 0 -- * * 58.208.0.0 0.0.0.0/0 0 0 DROP 0 -- * * 203.115.105.245 0.0.0.0/0 0 0 DROP 0 -- * * 62.105.136.154 0.0.0.0/0 0 0 DROP 0 -- * * 87.236.232.36 0.0.0.0/0 0 0 DROP 0 -- * * 179.4.122.93 0.0.0.0/0 0 0 DROP 0 -- * * 203.128.244.214 0.0.0.0/0 0 0 DROP 0 -- * * 222.192.176.40 0.0.0.0/0 0 0 DROP 0 -- * * 194.247.227.8 0.0.0.0/0 0 0 DROP 0 -- * * 59.120.160.184 0.0.0.0/0 0 0 DROP 0 -- * * 203.193.173.41 0.0.0.0/0 0 0 DROP 0 -- * * 123.129.65.43 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.136.210 0.0.0.0/0 0 0 DROP 0 -- * * 45.63.15.172 0.0.0.0/0 0 0 DROP 0 -- * * 104.207.132.28 0.0.0.0/0 61 3610 DROP 0 -- * * 104.16.0.0/12 0.0.0.0/0 0 0 DROP 0 -- * * 54.209.6.177 0.0.0.0/0 0 0 DROP 0 -- * * 5.9.89.170 0.0.0.0/0 0 0 DROP 0 -- * * 94.154.239.69 0.0.0.0/0 0 0 DROP 0 -- * * 162.210.196.100 0.0.0.0/0 0 0 DROP 0 -- * * 104.31.0.0/16 0.0.0.0/0 0 0 DROP 0 -- * * 104.27.0.0/16 0.0.0.0/0 0 0 DROP 0 -- * * 188.143.232.0/24 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.136.218 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.142.114 0.0.0.0/0 0 0 DROP 0 -- * * 107.151.152.218 0.0.0.0/0 0 0 DROP 0 -- * * 188.143.232.0/24 0.0.0.0/0 0 0 DROP 0 -- * * 195.154.182.63 0.0.0.0/0 0 0 DROP 0 -- * * 220.220.9.128 0.0.0.0/0 0 0 DROP 0 -- * * 108.181.49.123 0.0.0.0/0 0 0 DROP 0 -- * * 111.231.207.136 0.0.0.0/0 0 0 DROP 0 -- * * 91.219.236.0/22 0.0.0.0/0 0 0 DROP 0 -- * * 104.254.93.69 0.0.0.0/0 0 0 DROP 0 -- * * 185.104.184.123 0.0.0.0/0 0 0 DROP 0 -- * * 203.195.202.153 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.84.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.210.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.188.62.0 0.0.0.0/0 0 0 DROP 0 -- * * 5.8.45.0 0.0.0.0/0 0 0 DROP 0 -- * * 105.108.0.0 0.0.0.0/0 2454K 190M DROP 1 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 698K 38M syn-flood 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 77 9009 DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 syn-flood 6 -- usbbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 0 0 DROP 6 -- usbbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP 0 -- netbr0 * 172.16.0.0/12 0.0.0.0/0 94702 6607K DROP 0 -- netbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- netbr0 * 127.0.0.0/8 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 172.16.0.0/12 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 192.168.0.0/16 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP 0 -- usbbr0 * 127.0.0.0/8 0.0.0.0/0 2 224 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 gre 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 gre 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 43M 7925M ACCEPT 0 -- * * 0.0.0.0/0 192.168.1.254 state RELATED,ESTABLISHED 2383K 162M ACCEPT 1 -- * * 0.0.0.0/0 192.168.1.254 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 192.168.2.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 192.168.2.254 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 172.16.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT 0 -- * * 0.0.0.0/0 10.106.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 10.106.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT 6 -- netbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- netbr0 * 172.16.0.254 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- lanbr0 * 172.16.0.254 0.0.0.0/0 tcp dpt:22 260K 16M 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 220K 13M DROP 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 42210 4003K ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- lanbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT 6 -- srvbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT 6 -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT 6 -- * * 172.16.0.254 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT 17 -- * * 172.16.0.254 0.0.0.0/0 udp dpt:873 22 1096 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 1700 75378 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 13 616 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5201 111 5348 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8123 362 16550 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3128 317 24604 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 75 24665 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 0 0 ACCEPT 17 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT 17 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:111 0 0 ACCEPT 6 -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 378 157K ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 132 48565 ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 0 0 ACCEPT 50 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 esp 9 384 ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 4 164 ACCEPT 6 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT 17 -- netbr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP 17 -- netbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 100 mode srcip srcmask 28 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 1 52 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 29 3154 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 500 22514 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8000 Chain FORWARD (policy DROP 3 packets, 228 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 14M 1061M ACCEPT 0 -- * * 172.16.0.1 0.0.0.0/0 20M 18G ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.1 13M 3581M ACCEPT 0 -- * * 10.106.0.252 0.0.0.0/0 8760K 878M ACCEPT 0 -- * * 0.0.0.0/0 10.106.0.252 19M 11G ACCEPT 0 -- * * 172.16.0.142 0.0.0.0/0 42M 59G ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.142 0 0 ACCEPT 0 -- * * 172.16.0.140 0.0.0.0/0 0 0 ACCEPT 0 -- * * 0.0.0.0/0 172.16.0.140 0 0 ACCEPT 0 -- * * 172.16.8.64/28 0.0.0.0/0 0 0 ACCEPT 0 -- * * 0.0.0.0/0 172.16.8.64/28 104K 45M ACCEPT 0 -- srvbr0 netbr0 0.0.0.0/0 0.0.0.0/0 126K 9091K ACCEPT 0 -- netbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 usbbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- usbbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 lanbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- lanbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- wlanbr0 srvbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- srvbr0 wlanbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 2232 228K ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 37M 8287M ACCEPT 0 -- * * 192.168.1.254 0.0.0.0/0 ! state INVALID 1685 105K ACCEPT 0 -- * * 192.168.1.254 0.0.0.0/0 0 0 ACCEPT 0 -- * * 192.168.2.254 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 192.168.2.254 0.0.0.0/0 233 24783 ACCEPT 0 -- * * 172.16.0.254 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 172.16.0.254 0.0.0.0/0 110K 10M ACCEPT 0 -- * * 10.106.0.254 0.0.0.0/0 ! state INVALID 0 0 ACCEPT 0 -- * * 10.106.0.254 0.0.0.0/0 0 0 ACCEPT 6 -- * * 0.0.0.0/0 158.69.126.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 83.159.31.116 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.137 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.5.253 tcp spt:22 0 0 ACCEPT 6 -- * * 0.0.0.0/0 172.16.0.254 tcp spt:22 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:2049 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 0 0 ACCEPT 17 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 ACCEPT 17 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 udp spt:111 0 0 ACCEPT 6 -- * vmbr1 0.0.0.0/0 0.0.0.0/0 tcp spt:111 0 0 LOG 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:8000 Chain black (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: blacklist side: source mask: 255.255.255.255 Chain gre (2 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: blacklist side: source mask: 255.255.255.255 0 0 black 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 600 reap hit_count: 10 name: timer side: source mask: 255.255.255.255 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: timer side: source mask: 255.255.255.255 Chain syn-flood (2 references) pkts bytes target prot opt in out source destination 495K 27M RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 203K 11M DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0