The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]



"firewalld: политика по-умолчанию "
Вариант для распечатки  
Пред. тема | След. тема 
Форум Открытые системы на сервере (Firewall, Фильтрация пакетов / Linux)
Изначальное сообщение [ Отслеживать ]

"firewalld: политика по-умолчанию "  +/
Сообщение от A Clockwork Orange (?), 01-Окт-23, 01:29 
настроен firewalld
вывод всех цепочек приведен ниже.
политика по-умолчанию цепочки IMPUT для зоны public ACCEPT, но firewall не пропускает соединение, если нет разрешающего правила.
Каким образом так получается?

[adm@li ~]$ sudo iptables -nvL --line-numbers
[sudo] password for adm:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination        
1    12982  927K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
2      953 57180 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0          
3     5860  285K INPUT_direct  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
4     5860  285K INPUT_ZONES_SOURCE  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
5     5860  285K INPUT_ZONES  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
6       14   868 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
7     1776 90463 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
2        0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0          
3        0     0 FORWARD_direct  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
4        0     0 FORWARD_IN_ZONES_SOURCE  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
5        0     0 FORWARD_IN_ZONES  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
6        0     0 FORWARD_OUT_ZONES_SOURCE  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
7        0     0 FORWARD_OUT_ZONES  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
8        0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
9        0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT 2471 packets, 272K bytes)
num   pkts bytes target     prot opt in     out     source               destination        
1     4572  289K ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0          
2    12873 1471K OUTPUT_direct  all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain FORWARD_IN_ZONES (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 FWDI_public  all  --  enp63s0 *       0.0.0.0/0            0.0.0.0/0           [goto]
2        0     0 FWDI_public  all  --  +      *       0.0.0.0/0            0.0.0.0/0           [goto]

Chain FORWARD_IN_ZONES_SOURCE (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain FORWARD_OUT_ZONES (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 FWDO_public  all  --  *      enp63s0  0.0.0.0/0            0.0.0.0/0           [goto]
2        0     0 FWDO_public  all  --  *      +       0.0.0.0/0            0.0.0.0/0           [goto]

Chain FORWARD_OUT_ZONES_SOURCE (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain FORWARD_direct (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain FWDI_public (2 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 FWDI_public_log  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
2        0     0 FWDI_public_deny  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
3        0     0 FWDI_public_allow  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
4        0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain FWDI_public_allow (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain FWDI_public_deny (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain FWDI_public_log (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain FWDO_public (2 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 FWDO_public_log  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
2        0     0 FWDO_public_deny  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
3        0     0 FWDO_public_allow  all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain FWDO_public_allow (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain FWDO_public_deny (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain FWDO_public_log (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain INPUT_ZONES (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1     5860  285K IN_public  all  --  enp63s0 *       0.0.0.0/0            0.0.0.0/0           [goto]
2        0     0 IN_public  all  --  +      *       0.0.0.0/0            0.0.0.0/0           [goto]

Chain INPUT_ZONES_SOURCE (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain INPUT_direct (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain IN_public (2 references)
num   pkts bytes target     prot opt in     out     source               destination        
1     5860  285K IN_public_log  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
2     5860  285K IN_public_deny  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
3     4253  189K IN_public_allow  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
4     2191 81314 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain IN_public_allow (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        7   420 ACCEPT     tcp  --  *      *       abc.abc.abc.0/17        0.0.0.0/0            tcp dpt:22 ctstate NEW,UNTRACKED
2        0     0 ACCEPT     tcp  --  *      *       abc.abc.abc.0/24       0.0.0.0/0            tcp dpt:22 ctstate NEW,UNTRACKED
3      213 12728 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED
4       35  2178 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED
5        8   456 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED
6        3   164 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED
7        2   104 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED

Chain IN_public_deny (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 REJECT     tcp  --  *      *       101.35.83.14         0.0.0.0/0            tcp dpt:22 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
2      785 47100 REJECT     tcp  --  *      *       80.94.95.181         0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
3        0     0 REJECT     tcp  --  *      *       80.94.95.181         0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
4        0     0 REJECT     tcp  --  *      *       80.94.95.181         0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
5        0     0 REJECT     tcp  --  *      *       80.94.95.181         0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
6        0     0 REJECT     tcp  --  *      *       80.94.95.181         0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
7        0     0 REJECT     tcp  --  *      *       80.94.95.181         0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
8        0     0 REJECT     tcp  --  *      *       80.94.95.181         0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
9      792 47520 REJECT     tcp  --  *      *       77.90.185.59         0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
10       0     0 REJECT     tcp  --  *      *       77.90.185.59         0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
11       0     0 REJECT     tcp  --  *      *       77.90.185.59         0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
12       0     0 REJECT     tcp  --  *      *       77.90.185.59         0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
13       0     0 REJECT     tcp  --  *      *       77.90.185.59         0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
14       0     0 REJECT     tcp  --  *      *       77.90.185.59         0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
15       0     0 REJECT     tcp  --  *      *       77.90.185.59         0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
16       0     0 REJECT     tcp  --  *      *       111.230.13.85        0.0.0.0/0            tcp dpt:22 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
17       0     0 REJECT     tcp  --  *      *       103.18.166.71        0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
18       0     0 REJECT     tcp  --  *      *       103.18.166.71        0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
19       0     0 REJECT     tcp  --  *      *       103.18.166.71        0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
20       0     0 REJECT     tcp  --  *      *       103.18.166.71        0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
21       0     0 REJECT     tcp  --  *      *       103.18.166.71        0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
22       0     0 REJECT     tcp  --  *      *       103.18.166.71        0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
23       0     0 REJECT     tcp  --  *      *       103.18.166.71        0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
24       0     0 REJECT     tcp  --  *      *       109.237.98.153       0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
25       0     0 REJECT     tcp  --  *      *       109.237.98.153       0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
26       0     0 REJECT     tcp  --  *      *       109.237.98.153       0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
27       0     0 REJECT     tcp  --  *      *       109.237.98.153       0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
28       0     0 REJECT     tcp  --  *      *       109.237.98.153       0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
29       0     0 REJECT     tcp  --  *      *       109.237.98.153       0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
30       0     0 REJECT     tcp  --  *      *       109.237.98.153       0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
31       0     0 REJECT     tcp  --  *      *       185.225.74.115       0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
32       0     0 REJECT     tcp  --  *      *       185.225.74.115       0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
33       0     0 REJECT     tcp  --  *      *       185.225.74.115       0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
34       0     0 REJECT     tcp  --  *      *       185.225.74.115       0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
35       0     0 REJECT     tcp  --  *      *       185.225.74.115       0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
36       0     0 REJECT     tcp  --  *      *       185.225.74.115       0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
37       0     0 REJECT     tcp  --  *      *       185.225.74.115       0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
38       0     0 REJECT     tcp  --  *      *       159.75.168.200       0.0.0.0/0            tcp dpt:22 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
39       0     0 REJECT     tcp  --  *      *       185.225.74.34        0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
40       0     0 REJECT     tcp  --  *      *       185.225.74.34        0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
41       0     0 REJECT     tcp  --  *      *       185.225.74.34        0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
42       0     0 REJECT     tcp  --  *      *       185.225.74.34        0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
43       0     0 REJECT     tcp  --  *      *       185.225.74.34        0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
44       0     0 REJECT     tcp  --  *      *       185.225.74.34        0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
45       0     0 REJECT     tcp  --  *      *       185.225.74.34        0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
46       0     0 REJECT     tcp  --  *      *       193.42.33.87         0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
47       0     0 REJECT     tcp  --  *      *       193.42.33.87         0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
48       0     0 REJECT     tcp  --  *      *       193.42.33.87         0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
49       0     0 REJECT     tcp  --  *      *       193.42.33.87         0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
50       0     0 REJECT     tcp  --  *      *       193.42.33.87         0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
51       0     0 REJECT     tcp  --  *      *       193.42.33.87         0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
52       0     0 REJECT     tcp  --  *      *       193.42.33.87         0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
53       0     0 REJECT     tcp  --  *      *       185.224.128.160      0.0.0.0/0            tcp dpt:22 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
54       0     0 REJECT     tcp  --  *      *       20.212.9.216         0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
55       0     0 REJECT     tcp  --  *      *       20.212.9.216         0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
56       0     0 REJECT     tcp  --  *      *       20.212.9.216         0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
57       0     0 REJECT     tcp  --  *      *       20.212.9.216         0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
58       0     0 REJECT     tcp  --  *      *       20.212.9.216         0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
59       0     0 REJECT     tcp  --  *      *       20.212.9.216         0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
60       0     0 REJECT     tcp  --  *      *       20.212.9.216         0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
61       0     0 REJECT     tcp  --  *      *       43.138.243.169       0.0.0.0/0            tcp dpt:22 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
62       0     0 REJECT     tcp  --  *      *       41.145.195.76        0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
63       0     0 REJECT     tcp  --  *      *       41.145.195.76        0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
64       0     0 REJECT     tcp  --  *      *       41.145.195.76        0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
65       0     0 REJECT     tcp  --  *      *       41.145.195.76        0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
66       0     0 REJECT     tcp  --  *      *       41.145.195.76        0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
67       0     0 REJECT     tcp  --  *      *       41.145.195.76        0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
68       0     0 REJECT     tcp  --  *      *       41.145.195.76        0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
69       0     0 REJECT     tcp  --  *      *       49.249.220.180       0.0.0.0/0            tcp dpt:22 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
70       0     0 REJECT     tcp  --  *      *       45.129.14.106        0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
71       0     0 REJECT     tcp  --  *      *       45.129.14.106        0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
72       0     0 REJECT     tcp  --  *      *       45.129.14.106        0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
73       0     0 REJECT     tcp  --  *      *       45.129.14.106        0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
74       0     0 REJECT     tcp  --  *      *       45.129.14.106        0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
75       0     0 REJECT     tcp  --  *      *       45.129.14.106        0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
76       0     0 REJECT     tcp  --  *      *       45.129.14.106        0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
77      30  1800 REJECT     tcp  --  *      *       45.81.39.220         0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
78       0     0 REJECT     tcp  --  *      *       45.81.39.220         0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
79       0     0 REJECT     tcp  --  *      *       45.81.39.220         0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
80       0     0 REJECT     tcp  --  *      *       45.81.39.220         0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
81       0     0 REJECT     tcp  --  *      *       45.81.39.220         0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
82       0     0 REJECT     tcp  --  *      *       45.81.39.220         0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
83       0     0 REJECT     tcp  --  *      *       45.81.39.220         0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
84       0     0 REJECT     tcp  --  *      *       79.110.62.188        0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
85       0     0 REJECT     tcp  --  *      *       79.110.62.188        0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
86       0     0 REJECT     tcp  --  *      *       79.110.62.188        0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
87       0     0 REJECT     tcp  --  *      *       79.110.62.188        0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
88       0     0 REJECT     tcp  --  *      *       79.110.62.188        0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
89       0     0 REJECT     tcp  --  *      *       79.110.62.188        0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
90       0     0 REJECT     tcp  --  *      *       79.110.62.188        0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
91       0     0 REJECT     tcp  --  *      *       80.76.51.197         0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
92       0     0 REJECT     tcp  --  *      *       80.76.51.197         0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
93       0     0 REJECT     tcp  --  *      *       80.76.51.197         0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
94       0     0 REJECT     tcp  --  *      *       80.76.51.197         0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
95       0     0 REJECT     tcp  --  *      *       80.76.51.197         0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
96       0     0 REJECT     tcp  --  *      *       80.76.51.197         0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
97       0     0 REJECT     tcp  --  *      *       80.76.51.197         0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
98       0     0 REJECT     tcp  --  *      *       81.161.229.70        0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
99       0     0 REJECT     tcp  --  *      *       81.161.229.70        0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
100      0     0 REJECT     tcp  --  *      *       81.161.229.70        0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
101      0     0 REJECT     tcp  --  *      *       81.161.229.70        0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
102      0     0 REJECT     tcp  --  *      *       81.161.229.70        0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
103      0     0 REJECT     tcp  --  *      *       81.161.229.70        0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
104      0     0 REJECT     tcp  --  *      *       81.161.229.70        0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
105      0     0 REJECT     tcp  --  *      *       85.31.45.34          0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
106      0     0 REJECT     tcp  --  *      *       85.31.45.34          0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
107      0     0 REJECT     tcp  --  *      *       85.31.45.34          0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
108      0     0 REJECT     tcp  --  *      *       85.31.45.34          0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
109      0     0 REJECT     tcp  --  *      *       85.31.45.34          0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
110      0     0 REJECT     tcp  --  *      *       85.31.45.34          0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
111      0     0 REJECT     tcp  --  *      *       85.31.45.34          0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
112      0     0 REJECT     tcp  --  *      *       88.148.12.73         0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
113      0     0 REJECT     tcp  --  *      *       88.148.12.73         0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
114      0     0 REJECT     tcp  --  *      *       88.148.12.73         0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
115      0     0 REJECT     tcp  --  *      *       88.148.12.73         0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
116      0     0 REJECT     tcp  --  *      *       88.148.12.73         0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
117      0     0 REJECT     tcp  --  *      *       88.148.12.73         0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
118      0     0 REJECT     tcp  --  *      *       88.148.12.73         0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
119      0     0 REJECT     tcp  --  *      *       94.156.253.68        0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
120      0     0 REJECT     tcp  --  *      *       94.156.253.68        0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
121      0     0 REJECT     tcp  --  *      *       94.156.253.68        0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
122      0     0 REJECT     tcp  --  *      *       94.156.253.68        0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
123      0     0 REJECT     tcp  --  *      *       94.156.253.68        0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
124      0     0 REJECT     tcp  --  *      *       94.156.253.68        0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
125      0     0 REJECT     tcp  --  *      *       94.156.253.68        0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
126      0     0 REJECT     tcp  --  *      *       94.156.6.82          0.0.0.0/0            tcp dpt:25 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
127      0     0 REJECT     tcp  --  *      *       94.156.6.82          0.0.0.0/0            tcp dpt:465 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
128      0     0 REJECT     tcp  --  *      *       94.156.6.82          0.0.0.0/0            tcp dpt:587 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
129      0     0 REJECT     tcp  --  *      *       94.156.6.82          0.0.0.0/0            tcp dpt:143 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
130      0     0 REJECT     tcp  --  *      *       94.156.6.82          0.0.0.0/0            tcp dpt:993 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
131      0     0 REJECT     tcp  --  *      *       94.156.6.82          0.0.0.0/0            tcp dpt:110 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable
132      0     0 REJECT     tcp  --  *      *       94.156.6.82          0.0.0.0/0            tcp dpt:995 ctstate NEW,UNTRACKED reject-with icmp-port-unreachable

Chain IN_public_log (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Chain OUTPUT_direct (1 references)
num   pkts bytes target     prot opt in     out     source               destination        

Ответить | Правка | Cообщить модератору

Оглавление

Сообщения [Сортировка по времени | RSS]


1. " "  +/
Сообщение от A Clockwork Orange (?), 01-Окт-23, 08:05 
Спасибо. Правило нашли. Вопрос закрыт.
Ответить | Правка | Наверх | Cообщить модератору

2. "firewalld: политика по-умолчанию "  +/
Сообщение от BarS (??), 05-Окт-23, 07:09 
7     1776 90463 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibited
Ответить | Правка | Наверх | Cообщить модератору

Архив | Удалить

Рекомендовать для помещения в FAQ | Индекс форумов | Темы | Пред. тема | След. тема




Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру