231 lines
15 KiB
Plaintext
231 lines
15 KiB
Plaintext
*filter
|
|
:ufw-user-input - [0:0]
|
|
:ufw-user-output - [0:0]
|
|
:ufw-user-forward - [0:0]
|
|
:ufw-before-logging-input - [0:0]
|
|
:ufw-before-logging-output - [0:0]
|
|
:ufw-before-logging-forward - [0:0]
|
|
:ufw-user-logging-input - [0:0]
|
|
:ufw-user-logging-output - [0:0]
|
|
:ufw-user-logging-forward - [0:0]
|
|
:ufw-after-logging-input - [0:0]
|
|
:ufw-after-logging-output - [0:0]
|
|
:ufw-after-logging-forward - [0:0]
|
|
:ufw-logging-deny - [0:0]
|
|
:ufw-logging-allow - [0:0]
|
|
:ufw-user-limit - [0:0]
|
|
:ufw-user-limit-accept - [0:0]
|
|
### RULES ###
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 51.15.213.240 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 51.15.213.240 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 51.15.231.68 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 51.15.231.68 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.215 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.215 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.144.53.78 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.144.53.78 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 180.252.138.55 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206769742e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 180.252.138.55 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.180 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.180 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.186 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.186 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 88.214.50.101 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 88.214.50.101 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 159.89.127.165 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 159.89.127.165 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.158 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.158 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 185.177.72.22 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 185.177.72.22 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.174 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.174 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 206.81.24.74 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 206.81.24.74 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 193.32.248.136 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 193.32.248.136 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 13.79.87.25 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206d696d69722e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 13.79.87.25 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 66.249.88.36 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 66.249.88.36 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 88.214.24.50 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 88.214.24.50 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 84.20.18.75 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 84.20.18.75 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 217.197.163.51 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 217.197.163.51 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 149.50.97.212 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206d696d69722e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 149.50.97.212 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.155 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206769742e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.155 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.153 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206769742e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.153 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.150 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.150 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.145 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.145 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 45.130.203.138 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 45.130.203.138 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 185.177.72.30 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 185.177.72.30 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 207.180.203.50 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 207.180.203.50 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 185.177.72.36 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206d696d69722e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 185.177.72.36 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 159.65.18.197 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 159.65.18.197 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 124.198.132.49 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206769742e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 124.198.132.49 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 220.151.9.22 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 220.151.9.22 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 40.113.19.56 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206d696d69722e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 40.113.19.56 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 103.163.161.30 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 103.163.161.30 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 52.169.13.133 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 52.169.13.133 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 74.125.213.8 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 74.125.213.8 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 74.125.213.7 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 74.125.213.7 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 109.202.99.46 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206769742e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 109.202.99.46 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 213.232.87.230 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 213.232.87.230 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 159.89.198.71 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 159.89.198.71 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 68.183.9.16 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 68.183.9.16 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 13.229.242.24 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206769742e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 13.229.242.24 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 172.192.16.240 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206d696d69722e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 172.192.16.240 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 77.237.247.205 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 77.237.247.205 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 13.60.16.104 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206d696d69722e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 13.60.16.104 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 54.179.133.235 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206b6174616c6f672e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 54.179.133.235 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 157.230.42.14 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 157.230.42.14 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 188.166.108.93 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 188.166.108.93 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 164.90.228.79 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 164.90.228.79 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 18.206.243.172 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206d696d69722e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 18.206.243.172 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 185.177.72.47 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420756e6966692e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 185.177.72.47 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 100.25.4.167 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 100.25.4.167 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 3.26.116.210 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 3.26.116.210 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 52.53.222.111 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 52.53.222.111 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 74.125.213.9 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 74.125.213.9 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 68.183.231.190 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 68.183.231.190 -j REJECT
|
|
|
|
### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p tcp --dport 22 -j ACCEPT
|
|
|
|
### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p tcp --dport 80 -j ACCEPT
|
|
|
|
### tuple ### allow any 443 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p tcp --dport 443 -j ACCEPT
|
|
-A ufw-user-input -p udp --dport 443 -j ACCEPT
|
|
|
|
### tuple ### allow any any 0.0.0.0/0 any 172.16.254.11 in
|
|
-A ufw-user-input -s 172.16.254.11 -j ACCEPT
|
|
|
|
### tuple ### allow any any 0.0.0.0/0 any 172.16.254.125 in
|
|
-A ufw-user-input -s 172.16.254.125 -j ACCEPT
|
|
|
|
### tuple ### allow udp 443 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p udp --dport 443 -j ACCEPT
|
|
|
|
### tuple ### allow udp 80 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p udp --dport 80 -j ACCEPT
|
|
|
|
### tuple ### allow tcp 10051 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p tcp --dport 10051 -j ACCEPT
|
|
|
|
### tuple ### allow tcp 6162 0.0.0.0/0 any 0.0.0.0/0 in comment=566565616d207472616e73706f72742072756c65
|
|
-A ufw-user-input -p tcp --dport 6162 -j ACCEPT
|
|
|
|
### tuple ### allow tcp 6160 0.0.0.0/0 any 0.0.0.0/0 in comment=566565616d206465706c6f796d656e742072756c65
|
|
-A ufw-user-input -p tcp --dport 6160 -j ACCEPT
|
|
|
|
### END RULES ###
|
|
|
|
### LOGGING ###
|
|
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
|
|
-I ufw-logging-deny -m conntrack --ctstate INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
|
|
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
|
|
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
|
|
### END LOGGING ###
|
|
|
|
### RATE LIMITING ###
|
|
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
|
|
-A ufw-user-limit -j REJECT
|
|
-A ufw-user-limit-accept -j ACCEPT
|
|
### END RATE LIMITING ###
|
|
COMMIT
|