« back to all changes in this revision
Viewing changes to tests/root/logging/result
- browse files at revision 48
- compare with another revision
- download diff
- download tarball
- view history from revision 48
- Committer: Bazaar Package Importer
- Author(s): Jamie Strandboge
- Date: 2009-11-11 14:26:56 UTC
- mfrom: (30.1.7 upstream) (0.1.9 sid)
- Revision ID: james.westby@ubuntu.com-20091111142656-gg3uz8l3007f86uf
Tags: 0.29.1-1
* new upstream release, fixing LP: #459925 and LP: #480789
* debian/postinst: run 'ufw logging <log level>' to update the user
rules for logging (this action does nothing when ufw is not enabled)
* debian/ufw.upstart.ubuntu: don't use 'quiet' since we also now look for
QUIET
* debian/rules:
- only install upstart on Ubuntu 9.10 and later
- use $(PYTHON) with setup.py
* debian/postinst: run 'ufw logging <log level>' to update the user
rules for logging (this action does nothing when ufw is not enabled)
* debian/ufw.upstart.ubuntu: don't use 'quiet' since we also now look for
QUIET
* debian/rules:
- only install upstart on Ubuntu 9.10 and later
- use $(PYTHON) with setup.py
- files added:
- debian/preinst
- files modified:
- ChangeLog
added
removed
tests/root/logging/result
19
19
:ufw-user-input - [0:0]
20
20
:ufw-user-output - [0:0]
21
21
:ufw-user-forward - [0:0]
22
:ufw-before-logging-input - [0:0]
23
:ufw-before-logging-output - [0:0]
24
:ufw-before-logging-forward - [0:0]
25
:ufw-user-logging-input - [0:0]
26
:ufw-user-logging-output - [0:0]
27
:ufw-user-logging-forward - [0:0]
28
:ufw-after-logging-input - [0:0]
29
:ufw-after-logging-output - [0:0]
30
:ufw-after-logging-forward - [0:0]
31
:ufw-logging-deny - [0:0]
32
:ufw-logging-allow - [0:0]
22
33
:ufw-user-limit - [0:0]
23
34
:ufw-user-limit-accept - [0:0]
24
35
### RULES ###
46
57
-A ufw-user-input -p tcp -m multiport --dports 139,445 -j ACCEPT -m comment --comment 'dapp_Samba'
47
58
48
59
### END RULES ###
60
61
### LOGGING ###
62
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
63
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
64
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
65
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
66
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
67
### END LOGGING ###
68
69
### RATE LIMITING ###
49
70
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
50
71
-A ufw-user-limit -j REJECT
51
72
-A ufw-user-limit-accept -j ACCEPT
73
### END RATE LIMITING ###
52
74
COMMIT
53
75
*filter
54
76
:ufw6-user-input - [0:0]
55
77
:ufw6-user-output - [0:0]
56
78
:ufw6-user-forward - [0:0]
79
:ufw6-before-logging-input - [0:0]
80
:ufw6-before-logging-output - [0:0]
81
:ufw6-before-logging-forward - [0:0]
82
:ufw6-user-logging-input - [0:0]
83
:ufw6-user-logging-output - [0:0]
84
:ufw6-user-logging-forward - [0:0]
85
:ufw6-after-logging-input - [0:0]
86
:ufw6-after-logging-output - [0:0]
87
:ufw6-after-logging-forward - [0:0]
88
:ufw6-logging-deny - [0:0]
89
:ufw6-logging-allow - [0:0]
57
90
### RULES ###
58
91
59
92
### tuple ### allow_log any 23 ::/0 any ::/0 in
85
118
-A ufw6-user-input -p tcp -d 2001:db8:3:4:5:6:7:8 --dport 25 -s 2001:db8::/32 -j ACCEPT
86
119
87
120
### END RULES ###
121
122
### LOGGING ###
123
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
124
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
125
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
126
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
127
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
128
### END LOGGING ###
88
129
COMMIT
89
130
5: disable
90
131
106
147
:ufw-user-input - [0:0]
107
148
:ufw-user-output - [0:0]
108
149
:ufw-user-forward - [0:0]
150
:ufw-before-logging-input - [0:0]
151
:ufw-before-logging-output - [0:0]
152
:ufw-before-logging-forward - [0:0]
153
:ufw-user-logging-input - [0:0]
154
:ufw-user-logging-output - [0:0]
155
:ufw-user-logging-forward - [0:0]
156
:ufw-after-logging-input - [0:0]
157
:ufw-after-logging-output - [0:0]
158
:ufw-after-logging-forward - [0:0]
159
:ufw-logging-deny - [0:0]
160
:ufw-logging-allow - [0:0]
109
161
:ufw-user-limit - [0:0]
110
162
:ufw-user-limit-accept - [0:0]
111
163
### RULES ###
112
164
113
165
### END RULES ###
166
167
### LOGGING ###
168
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
169
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
170
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
171
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
172
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
173
### END LOGGING ###
174
175
### RATE LIMITING ###
114
176
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
115
177
-A ufw-user-limit -j REJECT
116
178
-A ufw-user-limit-accept -j ACCEPT
179
### END RATE LIMITING ###
117
180
COMMIT
118
181
*filter
119
182
:ufw6-user-input - [0:0]
120
183
:ufw6-user-output - [0:0]
121
184
:ufw6-user-forward - [0:0]
185
:ufw6-before-logging-input - [0:0]
186
:ufw6-before-logging-output - [0:0]
187
:ufw6-before-logging-forward - [0:0]
188
:ufw6-user-logging-input - [0:0]
189
:ufw6-user-logging-output - [0:0]
190
:ufw6-user-logging-forward - [0:0]
191
:ufw6-after-logging-input - [0:0]
192
:ufw6-after-logging-output - [0:0]
193
:ufw6-after-logging-forward - [0:0]
194
:ufw6-logging-deny - [0:0]
195
:ufw6-logging-allow - [0:0]
122
196
### RULES ###
123
197
124
198
### END RULES ###
199
200
### LOGGING ###
201
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
202
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
203
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
204
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
205
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
206
### END LOGGING ###
125
207
COMMIT
126
208
10: allow log-all 23
127
209
137
219
:ufw-user-input - [0:0]
138
220
:ufw-user-output - [0:0]
139
221
:ufw-user-forward - [0:0]
222
:ufw-before-logging-input - [0:0]
223
:ufw-before-logging-output - [0:0]
224
:ufw-before-logging-forward - [0:0]
225
:ufw-user-logging-input - [0:0]
226
:ufw-user-logging-output - [0:0]
227
:ufw-user-logging-forward - [0:0]
228
:ufw-after-logging-input - [0:0]
229
:ufw-after-logging-output - [0:0]
230
:ufw-after-logging-forward - [0:0]
231
:ufw-logging-deny - [0:0]
232
:ufw-logging-allow - [0:0]
140
233
:ufw-user-limit - [0:0]
141
234
:ufw-user-limit-accept - [0:0]
142
235
### RULES ###
164
257
-A ufw-user-input -p tcp -m multiport --dports 139,445 -j ACCEPT -m comment --comment 'dapp_Samba'
165
258
166
259
### END RULES ###
260
261
### LOGGING ###
262
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
263
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
264
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
265
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
266
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
267
### END LOGGING ###
268
269
### RATE LIMITING ###
167
270
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
168
271
-A ufw-user-limit -j REJECT
169
272
-A ufw-user-limit-accept -j ACCEPT
273
### END RATE LIMITING ###
170
274
COMMIT
171
275
*filter
172
276
:ufw6-user-input - [0:0]
173
277
:ufw6-user-output - [0:0]
174
278
:ufw6-user-forward - [0:0]
279
:ufw6-before-logging-input - [0:0]
280
:ufw6-before-logging-output - [0:0]
281
:ufw6-before-logging-forward - [0:0]
282
:ufw6-user-logging-input - [0:0]
283
:ufw6-user-logging-output - [0:0]
284
:ufw6-user-logging-forward - [0:0]
285
:ufw6-after-logging-input - [0:0]
286
:ufw6-after-logging-output - [0:0]
287
:ufw6-after-logging-forward - [0:0]
288
:ufw6-logging-deny - [0:0]
289
:ufw6-logging-allow - [0:0]
175
290
### RULES ###
176
291
177
292
### tuple ### allow_log-all any 23 ::/0 any ::/0 in
203
318
-A ufw6-user-input -p tcp -d 2001:db8:3:4:5:6:7:8 --dport 25 -s 2001:db8::/32 -j ACCEPT
204
319
205
320
### END RULES ###
321
322
### LOGGING ###
323
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
324
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
325
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
326
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
327
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
328
### END LOGGING ###
206
329
COMMIT
207
330
13: disable
208
331
224
347
:ufw-user-input - [0:0]
225
348
:ufw-user-output - [0:0]
226
349
:ufw-user-forward - [0:0]
350
:ufw-before-logging-input - [0:0]
351
:ufw-before-logging-output - [0:0]
352
:ufw-before-logging-forward - [0:0]
353
:ufw-user-logging-input - [0:0]
354
:ufw-user-logging-output - [0:0]
355
:ufw-user-logging-forward - [0:0]
356
:ufw-after-logging-input - [0:0]
357
:ufw-after-logging-output - [0:0]
358
:ufw-after-logging-forward - [0:0]
359
:ufw-logging-deny - [0:0]
360
:ufw-logging-allow - [0:0]
227
361
:ufw-user-limit - [0:0]
228
362
:ufw-user-limit-accept - [0:0]
229
363
### RULES ###
230
364
231
365
### END RULES ###
366
367
### LOGGING ###
368
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
369
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
370
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
371
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
372
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
373
### END LOGGING ###
374
375
### RATE LIMITING ###
232
376
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
233
377
-A ufw-user-limit -j REJECT
234
378
-A ufw-user-limit-accept -j ACCEPT
379
### END RATE LIMITING ###
235
380
COMMIT
236
381
*filter
237
382
:ufw6-user-input - [0:0]
238
383
:ufw6-user-output - [0:0]
239
384
:ufw6-user-forward - [0:0]
385
:ufw6-before-logging-input - [0:0]
386
:ufw6-before-logging-output - [0:0]
387
:ufw6-before-logging-forward - [0:0]
388
:ufw6-user-logging-input - [0:0]
389
:ufw6-user-logging-output - [0:0]
390
:ufw6-user-logging-forward - [0:0]
391
:ufw6-after-logging-input - [0:0]
392
:ufw6-after-logging-output - [0:0]
393
:ufw6-after-logging-forward - [0:0]
394
:ufw6-logging-deny - [0:0]
395
:ufw6-logging-allow - [0:0]
240
396
### RULES ###
241
397
242
398
### END RULES ###
399
400
### LOGGING ###
401
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
402
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
403
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
404
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
405
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
406
### END LOGGING ###
243
407
COMMIT
244
408
18: deny log 23
245
409
255
419
:ufw-user-input - [0:0]
256
420
:ufw-user-output - [0:0]
257
421
:ufw-user-forward - [0:0]
422
:ufw-before-logging-input - [0:0]
423
:ufw-before-logging-output - [0:0]
424
:ufw-before-logging-forward - [0:0]
425
:ufw-user-logging-input - [0:0]
426
:ufw-user-logging-output - [0:0]
427
:ufw-user-logging-forward - [0:0]
428
:ufw-after-logging-input - [0:0]
429
:ufw-after-logging-output - [0:0]
430
:ufw-after-logging-forward - [0:0]
431
:ufw-logging-deny - [0:0]
432
:ufw-logging-allow - [0:0]
258
433
:ufw-user-limit - [0:0]
259
434
:ufw-user-limit-accept - [0:0]
260
435
### RULES ###
282
457
-A ufw-user-input -p tcp -m multiport --dports 139,445 -j DROP -m comment --comment 'dapp_Samba'
283
458
284
459
### END RULES ###
460
461
### LOGGING ###
462
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
463
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
464
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
465
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
466
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
467
### END LOGGING ###
468
469
### RATE LIMITING ###
285
470
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
286
471
-A ufw-user-limit -j REJECT
287
472
-A ufw-user-limit-accept -j ACCEPT
473
### END RATE LIMITING ###
288
474
COMMIT
289
475
*filter
290
476
:ufw6-user-input - [0:0]
291
477
:ufw6-user-output - [0:0]
292
478
:ufw6-user-forward - [0:0]
479
:ufw6-before-logging-input - [0:0]
480
:ufw6-before-logging-output - [0:0]
481
:ufw6-before-logging-forward - [0:0]
482
:ufw6-user-logging-input - [0:0]
483
:ufw6-user-logging-output - [0:0]
484
:ufw6-user-logging-forward - [0:0]
485
:ufw6-after-logging-input - [0:0]
486
:ufw6-after-logging-output - [0:0]
487
:ufw6-after-logging-forward - [0:0]
488
:ufw6-logging-deny - [0:0]
489
:ufw6-logging-allow - [0:0]
293
490
### RULES ###
294
491
295
492
### tuple ### deny_log any 23 ::/0 any ::/0 in
321
518
-A ufw6-user-input -p tcp -d 2001:db8:3:4:5:6:7:8 --dport 25 -s 2001:db8::/32 -j DROP
322
519
323
520
### END RULES ###
521
522
### LOGGING ###
523
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
524
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
525
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
526
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
527
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
528
### END LOGGING ###
324
529
COMMIT
325
530
21: disable
326
531
342
547
:ufw-user-input - [0:0]
343
548
:ufw-user-output - [0:0]
344
549
:ufw-user-forward - [0:0]
550
:ufw-before-logging-input - [0:0]
551
:ufw-before-logging-output - [0:0]
552
:ufw-before-logging-forward - [0:0]
553
:ufw-user-logging-input - [0:0]
554
:ufw-user-logging-output - [0:0]
555
:ufw-user-logging-forward - [0:0]
556
:ufw-after-logging-input - [0:0]
557
:ufw-after-logging-output - [0:0]
558
:ufw-after-logging-forward - [0:0]
559
:ufw-logging-deny - [0:0]
560
:ufw-logging-allow - [0:0]
345
561
:ufw-user-limit - [0:0]
346
562
:ufw-user-limit-accept - [0:0]
347
563
### RULES ###
348
564
349
565
### END RULES ###
566
567
### LOGGING ###
568
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
569
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
570
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
571
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
572
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
573
### END LOGGING ###
574
575
### RATE LIMITING ###
350
576
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
351
577
-A ufw-user-limit -j REJECT
352
578
-A ufw-user-limit-accept -j ACCEPT
579
### END RATE LIMITING ###
353
580
COMMIT
354
581
*filter
355
582
:ufw6-user-input - [0:0]
356
583
:ufw6-user-output - [0:0]
357
584
:ufw6-user-forward - [0:0]
585
:ufw6-before-logging-input - [0:0]
586
:ufw6-before-logging-output - [0:0]
587
:ufw6-before-logging-forward - [0:0]
588
:ufw6-user-logging-input - [0:0]
589
:ufw6-user-logging-output - [0:0]
590
:ufw6-user-logging-forward - [0:0]
591
:ufw6-after-logging-input - [0:0]
592
:ufw6-after-logging-output - [0:0]
593
:ufw6-after-logging-forward - [0:0]
594
:ufw6-logging-deny - [0:0]
595
:ufw6-logging-allow - [0:0]
358
596
### RULES ###
359
597
360
598
### END RULES ###
599
600
### LOGGING ###
601
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
602
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
603
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
604
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
605
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
606
### END LOGGING ###
361
607
COMMIT
362
608
26: deny log-all 23
363
609
373
619
:ufw-user-input - [0:0]
374
620
:ufw-user-output - [0:0]
375
621
:ufw-user-forward - [0:0]
622
:ufw-before-logging-input - [0:0]
623
:ufw-before-logging-output - [0:0]
624
:ufw-before-logging-forward - [0:0]
625
:ufw-user-logging-input - [0:0]
626
:ufw-user-logging-output - [0:0]
627
:ufw-user-logging-forward - [0:0]
628
:ufw-after-logging-input - [0:0]
629
:ufw-after-logging-output - [0:0]
630
:ufw-after-logging-forward - [0:0]
631
:ufw-logging-deny - [0:0]
632
:ufw-logging-allow - [0:0]
376
633
:ufw-user-limit - [0:0]
377
634
:ufw-user-limit-accept - [0:0]
378
635
### RULES ###
400
657
-A ufw-user-input -p tcp -m multiport --dports 139,445 -j DROP -m comment --comment 'dapp_Samba'
401
658
402
659
### END RULES ###
660
661
### LOGGING ###
662
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
663
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
664
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
665
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
666
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
667
### END LOGGING ###
668
669
### RATE LIMITING ###
403
670
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
404
671
-A ufw-user-limit -j REJECT
405
672
-A ufw-user-limit-accept -j ACCEPT
673
### END RATE LIMITING ###
406
674
COMMIT
407
675
*filter
408
676
:ufw6-user-input - [0:0]
409
677
:ufw6-user-output - [0:0]
410
678
:ufw6-user-forward - [0:0]
679
:ufw6-before-logging-input - [0:0]
680
:ufw6-before-logging-output - [0:0]
681
:ufw6-before-logging-forward - [0:0]
682
:ufw6-user-logging-input - [0:0]
683
:ufw6-user-logging-output - [0:0]
684
:ufw6-user-logging-forward - [0:0]
685
:ufw6-after-logging-input - [0:0]
686
:ufw6-after-logging-output - [0:0]
687
:ufw6-after-logging-forward - [0:0]
688
:ufw6-logging-deny - [0:0]
689
:ufw6-logging-allow - [0:0]
411
690
### RULES ###
412
691
413
692
### tuple ### deny_log-all any 23 ::/0 any ::/0 in
439
718
-A ufw6-user-input -p tcp -d 2001:db8:3:4:5:6:7:8 --dport 25 -s 2001:db8::/32 -j DROP
440
719
441
720
### END RULES ###
721
722
### LOGGING ###
723
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
724
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
725
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
726
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
727
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
728
### END LOGGING ###
442
729
COMMIT
443
730
29: disable
444
731
460
747
:ufw-user-input - [0:0]
461
748
:ufw-user-output - [0:0]
462
749
:ufw-user-forward - [0:0]
750
:ufw-before-logging-input - [0:0]
751
:ufw-before-logging-output - [0:0]
752
:ufw-before-logging-forward - [0:0]
753
:ufw-user-logging-input - [0:0]
754
:ufw-user-logging-output - [0:0]
755
:ufw-user-logging-forward - [0:0]
756
:ufw-after-logging-input - [0:0]
757
:ufw-after-logging-output - [0:0]
758
:ufw-after-logging-forward - [0:0]
759
:ufw-logging-deny - [0:0]
760
:ufw-logging-allow - [0:0]
463
761
:ufw-user-limit - [0:0]
464
762
:ufw-user-limit-accept - [0:0]
465
763
### RULES ###
466
764
467
765
### END RULES ###
766
767
### LOGGING ###
768
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
769
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
770
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
771
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
772
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
773
### END LOGGING ###
774
775
### RATE LIMITING ###
468
776
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
469
777
-A ufw-user-limit -j REJECT
470
778
-A ufw-user-limit-accept -j ACCEPT
779
### END RATE LIMITING ###
471
780
COMMIT
472
781
*filter
473
782
:ufw6-user-input - [0:0]
474
783
:ufw6-user-output - [0:0]
475
784
:ufw6-user-forward - [0:0]
785
:ufw6-before-logging-input - [0:0]
786
:ufw6-before-logging-output - [0:0]
787
:ufw6-before-logging-forward - [0:0]
788
:ufw6-user-logging-input - [0:0]
789
:ufw6-user-logging-output - [0:0]
790
:ufw6-user-logging-forward - [0:0]
791
:ufw6-after-logging-input - [0:0]
792
:ufw6-after-logging-output - [0:0]
793
:ufw6-after-logging-forward - [0:0]
794
:ufw6-logging-deny - [0:0]
795
:ufw6-logging-allow - [0:0]
476
796
### RULES ###
477
797
478
798
### END RULES ###
799
800
### LOGGING ###
801
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
802
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
803
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
804
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
805
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
806
### END LOGGING ###
479
807
COMMIT
480
808
34: limit log 23
481
809
491
819
:ufw-user-input - [0:0]
492
820
:ufw-user-output - [0:0]
493
821
:ufw-user-forward - [0:0]
822
:ufw-before-logging-input - [0:0]
823
:ufw-before-logging-output - [0:0]
824
:ufw-before-logging-forward - [0:0]
825
:ufw-user-logging-input - [0:0]
826
:ufw-user-logging-output - [0:0]
827
:ufw-user-logging-forward - [0:0]
828
:ufw-after-logging-input - [0:0]
829
:ufw-after-logging-output - [0:0]
830
:ufw-after-logging-forward - [0:0]
831
:ufw-logging-deny - [0:0]
832
:ufw-logging-allow - [0:0]
494
833
:ufw-user-limit - [0:0]
495
834
:ufw-user-limit-accept - [0:0]
496
835
### RULES ###
526
865
-A ufw-user-input -p tcp -m multiport --dports 139,445 -j ufw-user-limit-accept -m comment --comment 'dapp_Samba'
527
866
528
867
### END RULES ###
868
869
### LOGGING ###
870
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
871
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
872
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
873
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
874
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
875
### END LOGGING ###
876
877
### RATE LIMITING ###
529
878
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
530
879
-A ufw-user-limit -j REJECT
531
880
-A ufw-user-limit-accept -j ACCEPT
881
### END RATE LIMITING ###
532
882
COMMIT
533
883
*filter
534
884
:ufw6-user-input - [0:0]
535
885
:ufw6-user-output - [0:0]
536
886
:ufw6-user-forward - [0:0]
887
:ufw6-before-logging-input - [0:0]
888
:ufw6-before-logging-output - [0:0]
889
:ufw6-before-logging-forward - [0:0]
890
:ufw6-user-logging-input - [0:0]
891
:ufw6-user-logging-output - [0:0]
892
:ufw6-user-logging-forward - [0:0]
893
:ufw6-after-logging-input - [0:0]
894
:ufw6-after-logging-output - [0:0]
895
:ufw6-after-logging-forward - [0:0]
896
:ufw6-logging-deny - [0:0]
897
:ufw6-logging-allow - [0:0]
537
898
### RULES ###
538
899
539
900
### END RULES ###
901
902
### LOGGING ###
903
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
904
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
905
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
906
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
907
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
908
### END LOGGING ###
540
909
COMMIT
541
910
37: disable
542
911
558
927
:ufw-user-input - [0:0]
559
928
:ufw-user-output - [0:0]
560
929
:ufw-user-forward - [0:0]
930
:ufw-before-logging-input - [0:0]
931
:ufw-before-logging-output - [0:0]
932
:ufw-before-logging-forward - [0:0]
933
:ufw-user-logging-input - [0:0]
934
:ufw-user-logging-output - [0:0]
935
:ufw-user-logging-forward - [0:0]
936
:ufw-after-logging-input - [0:0]
937
:ufw-after-logging-output - [0:0]
938
:ufw-after-logging-forward - [0:0]
939
:ufw-logging-deny - [0:0]
940
:ufw-logging-allow - [0:0]
561
941
:ufw-user-limit - [0:0]
562
942
:ufw-user-limit-accept - [0:0]
563
943
### RULES ###
564
944
565
945
### END RULES ###
946
947
### LOGGING ###
948
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
949
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
950
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
951
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
952
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
953
### END LOGGING ###
954
955
### RATE LIMITING ###
566
956
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
567
957
-A ufw-user-limit -j REJECT
568
958
-A ufw-user-limit-accept -j ACCEPT
959
### END RATE LIMITING ###
569
960
COMMIT
570
961
*filter
571
962
:ufw6-user-input - [0:0]
572
963
:ufw6-user-output - [0:0]
573
964
:ufw6-user-forward - [0:0]
965
:ufw6-before-logging-input - [0:0]
966
:ufw6-before-logging-output - [0:0]
967
:ufw6-before-logging-forward - [0:0]
968
:ufw6-user-logging-input - [0:0]
969
:ufw6-user-logging-output - [0:0]
970
:ufw6-user-logging-forward - [0:0]
971
:ufw6-after-logging-input - [0:0]
972
:ufw6-after-logging-output - [0:0]
973
:ufw6-after-logging-forward - [0:0]
974
:ufw6-logging-deny - [0:0]
975
:ufw6-logging-allow - [0:0]
574
976
### RULES ###
575
977
576
978
### END RULES ###
979
980
### LOGGING ###
981
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
982
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
983
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
984
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
985
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
986
### END LOGGING ###
577
987
COMMIT
578
988
42: limit log-all 23
579
989
589
999
:ufw-user-input - [0:0]
590
1000
:ufw-user-output - [0:0]
591
1001
:ufw-user-forward - [0:0]
1002
:ufw-before-logging-input - [0:0]
1003
:ufw-before-logging-output - [0:0]
1004
:ufw-before-logging-forward - [0:0]
1005
:ufw-user-logging-input - [0:0]
1006
:ufw-user-logging-output - [0:0]
1007
:ufw-user-logging-forward - [0:0]
1008
:ufw-after-logging-input - [0:0]
1009
:ufw-after-logging-output - [0:0]
1010
:ufw-after-logging-forward - [0:0]
1011
:ufw-logging-deny - [0:0]
1012
:ufw-logging-allow - [0:0]
592
1013
:ufw-user-limit - [0:0]
593
1014
:ufw-user-limit-accept - [0:0]
594
1015
### RULES ###
624
1045
-A ufw-user-input -p tcp -m multiport --dports 139,445 -j ufw-user-limit-accept -m comment --comment 'dapp_Samba'
625
1046
626
1047
### END RULES ###
1048
1049
### LOGGING ###
1050
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1051
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1052
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1053
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1054
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1055
### END LOGGING ###
1056
1057
### RATE LIMITING ###
627
1058
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
628
1059
-A ufw-user-limit -j REJECT
629
1060
-A ufw-user-limit-accept -j ACCEPT
1061
### END RATE LIMITING ###
630
1062
COMMIT
631
1063
*filter
632
1064
:ufw6-user-input - [0:0]
633
1065
:ufw6-user-output - [0:0]
634
1066
:ufw6-user-forward - [0:0]
1067
:ufw6-before-logging-input - [0:0]
1068
:ufw6-before-logging-output - [0:0]
1069
:ufw6-before-logging-forward - [0:0]
1070
:ufw6-user-logging-input - [0:0]
1071
:ufw6-user-logging-output - [0:0]
1072
:ufw6-user-logging-forward - [0:0]
1073
:ufw6-after-logging-input - [0:0]
1074
:ufw6-after-logging-output - [0:0]
1075
:ufw6-after-logging-forward - [0:0]
1076
:ufw6-logging-deny - [0:0]
1077
:ufw6-logging-allow - [0:0]
635
1078
### RULES ###
636
1079
637
1080
### END RULES ###
1081
1082
### LOGGING ###
1083
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1084
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1085
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1086
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1087
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1088
### END LOGGING ###
638
1089
COMMIT
639
1090
45: disable
640
1091
656
1107
:ufw-user-input - [0:0]
657
1108
:ufw-user-output - [0:0]
658
1109
:ufw-user-forward - [0:0]
1110
:ufw-before-logging-input - [0:0]
1111
:ufw-before-logging-output - [0:0]
1112
:ufw-before-logging-forward - [0:0]
1113
:ufw-user-logging-input - [0:0]
1114
:ufw-user-logging-output - [0:0]
1115
:ufw-user-logging-forward - [0:0]
1116
:ufw-after-logging-input - [0:0]
1117
:ufw-after-logging-output - [0:0]
1118
:ufw-after-logging-forward - [0:0]
1119
:ufw-logging-deny - [0:0]
1120
:ufw-logging-allow - [0:0]
659
1121
:ufw-user-limit - [0:0]
660
1122
:ufw-user-limit-accept - [0:0]
661
1123
### RULES ###
662
1124
663
1125
### END RULES ###
1126
1127
### LOGGING ###
1128
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1129
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1130
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1131
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1132
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1133
### END LOGGING ###
1134
1135
### RATE LIMITING ###
664
1136
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
665
1137
-A ufw-user-limit -j REJECT
666
1138
-A ufw-user-limit-accept -j ACCEPT
1139
### END RATE LIMITING ###
667
1140
COMMIT
668
1141
*filter
669
1142
:ufw6-user-input - [0:0]
670
1143
:ufw6-user-output - [0:0]
671
1144
:ufw6-user-forward - [0:0]
1145
:ufw6-before-logging-input - [0:0]
1146
:ufw6-before-logging-output - [0:0]
1147
:ufw6-before-logging-forward - [0:0]
1148
:ufw6-user-logging-input - [0:0]
1149
:ufw6-user-logging-output - [0:0]
1150
:ufw6-user-logging-forward - [0:0]
1151
:ufw6-after-logging-input - [0:0]
1152
:ufw6-after-logging-output - [0:0]
1153
:ufw6-after-logging-forward - [0:0]
1154
:ufw6-logging-deny - [0:0]
1155
:ufw6-logging-allow - [0:0]
672
1156
### RULES ###
673
1157
674
1158
### END RULES ###
1159
1160
### LOGGING ###
1161
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1162
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1163
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1164
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1165
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1166
### END LOGGING ###
675
1167
COMMIT
676
1168
50: reject log 23
677
1169
687
1179
:ufw-user-input - [0:0]
688
1180
:ufw-user-output - [0:0]
689
1181
:ufw-user-forward - [0:0]
1182
:ufw-before-logging-input - [0:0]
1183
:ufw-before-logging-output - [0:0]
1184
:ufw-before-logging-forward - [0:0]
1185
:ufw-user-logging-input - [0:0]
1186
:ufw-user-logging-output - [0:0]
1187
:ufw-user-logging-forward - [0:0]
1188
:ufw-after-logging-input - [0:0]
1189
:ufw-after-logging-output - [0:0]
1190
:ufw-after-logging-forward - [0:0]
1191
:ufw-logging-deny - [0:0]
1192
:ufw-logging-allow - [0:0]
690
1193
:ufw-user-limit - [0:0]
691
1194
:ufw-user-limit-accept - [0:0]
692
1195
### RULES ###
714
1217
-A ufw-user-input -p tcp -m multiport --dports 139,445 -j REJECT --reject-with tcp-reset -m comment --comment 'dapp_Samba'
715
1218
716
1219
### END RULES ###
1220
1221
### LOGGING ###
1222
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1223
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1224
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1225
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1226
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1227
### END LOGGING ###
1228
1229
### RATE LIMITING ###
717
1230
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
718
1231
-A ufw-user-limit -j REJECT
719
1232
-A ufw-user-limit-accept -j ACCEPT
1233
### END RATE LIMITING ###
720
1234
COMMIT
721
1235
*filter
722
1236
:ufw6-user-input - [0:0]
723
1237
:ufw6-user-output - [0:0]
724
1238
:ufw6-user-forward - [0:0]
1239
:ufw6-before-logging-input - [0:0]
1240
:ufw6-before-logging-output - [0:0]
1241
:ufw6-before-logging-forward - [0:0]
1242
:ufw6-user-logging-input - [0:0]
1243
:ufw6-user-logging-output - [0:0]
1244
:ufw6-user-logging-forward - [0:0]
1245
:ufw6-after-logging-input - [0:0]
1246
:ufw6-after-logging-output - [0:0]
1247
:ufw6-after-logging-forward - [0:0]
1248
:ufw6-logging-deny - [0:0]
1249
:ufw6-logging-allow - [0:0]
725
1250
### RULES ###
726
1251
727
1252
### tuple ### reject_log any 23 ::/0 any ::/0 in
753
1278
-A ufw6-user-input -p tcp -d 2001:db8:3:4:5:6:7:8 --dport 25 -s 2001:db8::/32 -j REJECT --reject-with tcp-reset
754
1279
755
1280
### END RULES ###
1281
1282
### LOGGING ###
1283
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1284
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1285
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1286
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1287
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1288
### END LOGGING ###
756
1289
COMMIT
757
1290
53: disable
758
1291
774
1307
:ufw-user-input - [0:0]
775
1308
:ufw-user-output - [0:0]
776
1309
:ufw-user-forward - [0:0]
1310
:ufw-before-logging-input - [0:0]
1311
:ufw-before-logging-output - [0:0]
1312
:ufw-before-logging-forward - [0:0]
1313
:ufw-user-logging-input - [0:0]
1314
:ufw-user-logging-output - [0:0]
1315
:ufw-user-logging-forward - [0:0]
1316
:ufw-after-logging-input - [0:0]
1317
:ufw-after-logging-output - [0:0]
1318
:ufw-after-logging-forward - [0:0]
1319
:ufw-logging-deny - [0:0]
1320
:ufw-logging-allow - [0:0]
777
1321
:ufw-user-limit - [0:0]
778
1322
:ufw-user-limit-accept - [0:0]
779
1323
### RULES ###
780
1324
781
1325
### END RULES ###
1326
1327
### LOGGING ###
1328
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1329
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1330
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1331
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1332
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1333
### END LOGGING ###
1334
1335
### RATE LIMITING ###
782
1336
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
783
1337
-A ufw-user-limit -j REJECT
784
1338
-A ufw-user-limit-accept -j ACCEPT
1339
### END RATE LIMITING ###
785
1340
COMMIT
786
1341
*filter
787
1342
:ufw6-user-input - [0:0]
788
1343
:ufw6-user-output - [0:0]
789
1344
:ufw6-user-forward - [0:0]
1345
:ufw6-before-logging-input - [0:0]
1346
:ufw6-before-logging-output - [0:0]
1347
:ufw6-before-logging-forward - [0:0]
1348
:ufw6-user-logging-input - [0:0]
1349
:ufw6-user-logging-output - [0:0]
1350
:ufw6-user-logging-forward - [0:0]
1351
:ufw6-after-logging-input - [0:0]
1352
:ufw6-after-logging-output - [0:0]
1353
:ufw6-after-logging-forward - [0:0]
1354
:ufw6-logging-deny - [0:0]
1355
:ufw6-logging-allow - [0:0]
790
1356
### RULES ###
791
1357
792
1358
### END RULES ###
1359
1360
### LOGGING ###
1361
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1362
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1363
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1364
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1365
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1366
### END LOGGING ###
793
1367
COMMIT
794
1368
58: reject log-all 23
795
1369
805
1379
:ufw-user-input - [0:0]
806
1380
:ufw-user-output - [0:0]
807
1381
:ufw-user-forward - [0:0]
1382
:ufw-before-logging-input - [0:0]
1383
:ufw-before-logging-output - [0:0]
1384
:ufw-before-logging-forward - [0:0]
1385
:ufw-user-logging-input - [0:0]
1386
:ufw-user-logging-output - [0:0]
1387
:ufw-user-logging-forward - [0:0]
1388
:ufw-after-logging-input - [0:0]
1389
:ufw-after-logging-output - [0:0]
1390
:ufw-after-logging-forward - [0:0]
1391
:ufw-logging-deny - [0:0]
1392
:ufw-logging-allow - [0:0]
808
1393
:ufw-user-limit - [0:0]
809
1394
:ufw-user-limit-accept - [0:0]
810
1395
### RULES ###
832
1417
-A ufw-user-input -p tcp -m multiport --dports 139,445 -j REJECT --reject-with tcp-reset -m comment --comment 'dapp_Samba'
833
1418
834
1419
### END RULES ###
1420
1421
### LOGGING ###
1422
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1423
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1424
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1425
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1426
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1427
### END LOGGING ###
1428
1429
### RATE LIMITING ###
835
1430
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
836
1431
-A ufw-user-limit -j REJECT
837
1432
-A ufw-user-limit-accept -j ACCEPT
1433
### END RATE LIMITING ###
838
1434
COMMIT
839
1435
*filter
840
1436
:ufw6-user-input - [0:0]
841
1437
:ufw6-user-output - [0:0]
842
1438
:ufw6-user-forward - [0:0]
1439
:ufw6-before-logging-input - [0:0]
1440
:ufw6-before-logging-output - [0:0]
1441
:ufw6-before-logging-forward - [0:0]
1442
:ufw6-user-logging-input - [0:0]
1443
:ufw6-user-logging-output - [0:0]
1444
:ufw6-user-logging-forward - [0:0]
1445
:ufw6-after-logging-input - [0:0]
1446
:ufw6-after-logging-output - [0:0]
1447
:ufw6-after-logging-forward - [0:0]
1448
:ufw6-logging-deny - [0:0]
1449
:ufw6-logging-allow - [0:0]
843
1450
### RULES ###
844
1451
845
1452
### tuple ### reject_log-all any 23 ::/0 any ::/0 in
871
1478
-A ufw6-user-input -p tcp -d 2001:db8:3:4:5:6:7:8 --dport 25 -s 2001:db8::/32 -j REJECT --reject-with tcp-reset
872
1479
873
1480
### END RULES ###
1481
1482
### LOGGING ###
1483
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1484
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1485
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1486
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1487
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1488
### END LOGGING ###
874
1489
COMMIT
875
1490
61: disable
876
1491
892
1507
:ufw-user-input - [0:0]
893
1508
:ufw-user-output - [0:0]
894
1509
:ufw-user-forward - [0:0]
1510
:ufw-before-logging-input - [0:0]
1511
:ufw-before-logging-output - [0:0]
1512
:ufw-before-logging-forward - [0:0]
1513
:ufw-user-logging-input - [0:0]
1514
:ufw-user-logging-output - [0:0]
1515
:ufw-user-logging-forward - [0:0]
1516
:ufw-after-logging-input - [0:0]
1517
:ufw-after-logging-output - [0:0]
1518
:ufw-after-logging-forward - [0:0]
1519
:ufw-logging-deny - [0:0]
1520
:ufw-logging-allow - [0:0]
895
1521
:ufw-user-limit - [0:0]
896
1522
:ufw-user-limit-accept - [0:0]
897
1523
### RULES ###
898
1524
899
1525
### END RULES ###
1526
1527
### LOGGING ###
1528
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1529
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1530
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1531
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1532
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1533
### END LOGGING ###
1534
1535
### RATE LIMITING ###
900
1536
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
901
1537
-A ufw-user-limit -j REJECT
902
1538
-A ufw-user-limit-accept -j ACCEPT
1539
### END RATE LIMITING ###
903
1540
COMMIT
904
1541
*filter
905
1542
:ufw6-user-input - [0:0]
906
1543
:ufw6-user-output - [0:0]
907
1544
:ufw6-user-forward - [0:0]
1545
:ufw6-before-logging-input - [0:0]
1546
:ufw6-before-logging-output - [0:0]
1547
:ufw6-before-logging-forward - [0:0]
1548
:ufw6-user-logging-input - [0:0]
1549
:ufw6-user-logging-output - [0:0]
1550
:ufw6-user-logging-forward - [0:0]
1551
:ufw6-after-logging-input - [0:0]
1552
:ufw6-after-logging-output - [0:0]
1553
:ufw6-after-logging-forward - [0:0]
1554
:ufw6-logging-deny - [0:0]
1555
:ufw6-logging-allow - [0:0]
908
1556
### RULES ###
909
1557
910
1558
### END RULES ###
1559
1560
### LOGGING ###
1561
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1562
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1563
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1564
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1565
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1566
### END LOGGING ###
911
1567
COMMIT
912
1568
contents of user*.rules:
913
1569
*filter
914
1570
:ufw-user-input - [0:0]
915
1571
:ufw-user-output - [0:0]
916
1572
:ufw-user-forward - [0:0]
1573
:ufw-before-logging-input - [0:0]
1574
:ufw-before-logging-output - [0:0]
1575
:ufw-before-logging-forward - [0:0]
1576
:ufw-user-logging-input - [0:0]
1577
:ufw-user-logging-output - [0:0]
1578
:ufw-user-logging-forward - [0:0]
1579
:ufw-after-logging-input - [0:0]
1580
:ufw-after-logging-output - [0:0]
1581
:ufw-after-logging-forward - [0:0]
1582
:ufw-logging-deny - [0:0]
1583
:ufw-logging-allow - [0:0]
917
1584
:ufw-user-limit - [0:0]
918
1585
:ufw-user-limit-accept - [0:0]
919
1586
### RULES ###
920
1587
921
1588
### END RULES ###
1589
1590
### LOGGING ###
1591
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1592
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1593
-I ufw-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1594
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1595
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1596
### END LOGGING ###
1597
1598
### RATE LIMITING ###
922
1599
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
923
1600
-A ufw-user-limit -j REJECT
924
1601
-A ufw-user-limit-accept -j ACCEPT
1602
### END RATE LIMITING ###
925
1603
COMMIT
926
1604
*filter
927
1605
:ufw6-user-input - [0:0]
928
1606
:ufw6-user-output - [0:0]
929
1607
:ufw6-user-forward - [0:0]
1608
:ufw6-before-logging-input - [0:0]
1609
:ufw6-before-logging-output - [0:0]
1610
:ufw6-before-logging-forward - [0:0]
1611
:ufw6-user-logging-input - [0:0]
1612
:ufw6-user-logging-output - [0:0]
1613
:ufw6-user-logging-forward - [0:0]
1614
:ufw6-after-logging-input - [0:0]
1615
:ufw6-after-logging-output - [0:0]
1616
:ufw6-after-logging-forward - [0:0]
1617
:ufw6-logging-deny - [0:0]
1618
:ufw6-logging-allow - [0:0]
930
1619
### RULES ###
931
1620
932
1621
### END RULES ###
1622
1623
### LOGGING ###
1624
-A ufw6-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1625
-A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1626
-I ufw6-logging-deny -m state --state INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
1627
-A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
1628
-A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
1629
### END LOGGING ###
933
1630
COMMIT
1631
Verify iptables-restore headers
1632
Setting IPV6 to yes
934
1633
66: disable
935
1634
936
1635
1636
67: enable
1637
1638
1639
68: tests/testarea/lib/ufw/ufw-init flush-all
1640
1641
1642
69: tests/testarea/lib/ufw/ufw-init start
1643
1644
1645
70: tests/testarea/lib/ufw/ufw-init stop
1646
1647
1648
71: tests/testarea/lib/ufw/ufw-init start
1649
1650
1651
72: logging off
1652
1653
1654
73: tests/testarea/lib/ufw/ufw-init flush-all
1655
1656
1657
74: tests/testarea/lib/ufw/ufw-init start
1658
1659
1660
75: tests/testarea/lib/ufw/ufw-init stop
1661
1662
1663
76: tests/testarea/lib/ufw/ufw-init start
1664
1665
1666
77: logging on
1667
1668
1669
78: tests/testarea/lib/ufw/ufw-init flush-all
1670
1671
1672
79: tests/testarea/lib/ufw/ufw-init start
1673
1674
1675
80: tests/testarea/lib/ufw/ufw-init stop
1676
1677
1678
81: tests/testarea/lib/ufw/ufw-init start
1679
1680
1681
82: logging low
1682
1683
1684
83: tests/testarea/lib/ufw/ufw-init flush-all
1685
1686
1687
84: tests/testarea/lib/ufw/ufw-init start
1688
1689
1690
85: tests/testarea/lib/ufw/ufw-init stop
1691
1692
1693
86: tests/testarea/lib/ufw/ufw-init start
1694
1695
1696
87: logging medium
1697
1698
1699
88: tests/testarea/lib/ufw/ufw-init flush-all
1700
1701
1702
89: tests/testarea/lib/ufw/ufw-init start
1703
1704
1705
90: tests/testarea/lib/ufw/ufw-init stop
1706
1707
1708
91: tests/testarea/lib/ufw/ufw-init start
1709
1710
1711
92: logging high
1712
1713
1714
93: tests/testarea/lib/ufw/ufw-init flush-all
1715
1716
1717
94: tests/testarea/lib/ufw/ufw-init start
1718
1719
1720
95: tests/testarea/lib/ufw/ufw-init stop
1721
1722
1723
96: tests/testarea/lib/ufw/ufw-init start
1724
1725
1726
97: logging full
1727
1728
1729
98: tests/testarea/lib/ufw/ufw-init flush-all
1730
1731
1732
99: tests/testarea/lib/ufw/ufw-init start
1733
1734
1735
100: tests/testarea/lib/ufw/ufw-init stop
1736
1737
1738
101: tests/testarea/lib/ufw/ufw-init start
1739
1740
1741
Setting IPV6 to no
1742
102: disable
1743
1744
1745
103: enable
1746
1747
1748
104: tests/testarea/lib/ufw/ufw-init flush-all
1749
1750
1751
105: tests/testarea/lib/ufw/ufw-init start
1752
1753
1754
106: tests/testarea/lib/ufw/ufw-init stop
1755
1756
1757
107: tests/testarea/lib/ufw/ufw-init start
1758
1759
1760
108: logging off
1761
1762
1763
109: tests/testarea/lib/ufw/ufw-init flush-all
1764
1765
1766
110: tests/testarea/lib/ufw/ufw-init start
1767
1768
1769
111: tests/testarea/lib/ufw/ufw-init stop
1770
1771
1772
112: tests/testarea/lib/ufw/ufw-init start
1773
1774
1775
113: logging on
1776
1777
1778
114: tests/testarea/lib/ufw/ufw-init flush-all
1779
1780
1781
115: tests/testarea/lib/ufw/ufw-init start
1782
1783
1784
116: tests/testarea/lib/ufw/ufw-init stop
1785
1786
1787
117: tests/testarea/lib/ufw/ufw-init start
1788
1789
1790
118: logging low
1791
1792
1793
119: tests/testarea/lib/ufw/ufw-init flush-all
1794
1795
1796
120: tests/testarea/lib/ufw/ufw-init start
1797
1798
1799
121: tests/testarea/lib/ufw/ufw-init stop
1800
1801
1802
122: tests/testarea/lib/ufw/ufw-init start
1803
1804
1805
123: logging medium
1806
1807
1808
124: tests/testarea/lib/ufw/ufw-init flush-all
1809
1810
1811
125: tests/testarea/lib/ufw/ufw-init start
1812
1813
1814
126: tests/testarea/lib/ufw/ufw-init stop
1815
1816
1817
127: tests/testarea/lib/ufw/ufw-init start
1818
1819
1820
128: logging high
1821
1822
1823
129: tests/testarea/lib/ufw/ufw-init flush-all
1824
1825
1826
130: tests/testarea/lib/ufw/ufw-init start
1827
1828
1829
131: tests/testarea/lib/ufw/ufw-init stop
1830
1831
1832
132: tests/testarea/lib/ufw/ufw-init start
1833
1834
1835
133: logging full
1836
1837
1838
134: tests/testarea/lib/ufw/ufw-init flush-all
1839
1840
1841
135: tests/testarea/lib/ufw/ufw-init start
1842
1843
1844
136: tests/testarea/lib/ufw/ufw-init stop
1845
1846
1847
137: tests/testarea/lib/ufw/ufw-init start
1848
1849
1850
138: disable
1851
1852
Loggerhead is a web-based interface for Breezy
Version: 2.0.1