Static hostname: vps-de Icon name: computer-vm Chassis: vm Deployment: vps-de Machine ID: 78a0c4a814ac43358dd592e98f6a0784 Boot ID: 1363038210824a2c8a76d8e823c3312f Virtualization: kvm Operating System: Debian GNU/Linux 11 (bullseye) Kernel: Linux 6.2.9-ninja Architecture: x86-64 Date : 2026-10-24 10:20:10 CEST 10:20:10 up 107 days, 10:33, 0 users, load average: 0,47, 0,28, 0,27 ● firewall-ipv6.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall-ipv6; generated) Active: active (exited) since Wed 2026-09-09 22:20:01 CEST; 1 months 14 days ago Docs: man:systemd-sysv-generator(8) Process: 1085908 ExecStart=/etc/init.d/firewall-ipv6 start (code=exited, status=0/SUCCESS) CPU: 563ms Warning: journal has been rotated since unit was started, output may be incomplete. Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 31929 2045K DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 128 limit: above 1/sec burst 1 mode srcip 1414K 140M aICMPs icmpv6 * * ::/0 ::/0 2214 2224K DROP tcp vmbr0 * ::/0 ::/0 tcp flags:!0x17/0x02 state NEW 520K 41M Syn-FLOOD tcp vmbr0 * ::/0 ::/0 tcp flags:0x17/0x02 0 0 DROP tcp * * ::/0 ::/0 tcp flags:0x3F/0x3F 4 320 DROP tcp * * ::/0 ::/0 tcp flags:0x3F/0x00 0 0 LOG all * * ::/0 ::/0 rt type:0 segslefts:0:2 LOG flags 0 level 4 prefix "IPv6-RH0-ATTACK-2-HOPS: " 0 0 DROP all * * ::/0 ::/0 rt type:0 segslefts:0:2 0-addrs ::1,::2 0-not-strict 0 0 LOG all * * ::/0 ::/0 rt type:0 segsleft:0 LOG flags 0 level 4 prefix "IPv6-RH0-ATTACK: " 0 0 DROP all * * ::/0 ::/0 rt type:0 segsleft:0 0 0 CHECK_GRE tcp * * ::/0 ::/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp * * ::/0 ::/0 udp dpt:47 state NEW 35591 2827K DROP tcp * * ::/0 ::/0 tcp dpt:81 0 0 DROP udp * * ::/0 ::/0 udp dpt:81 759K 2640M ACCEPT all lo * ::/0 ::/0 0 0 ACCEPT all * * ::/0 ff00::/8 75573 15M ACCEPT tcp * * 2607:5300:60:9300::/56 ::/0 tcp dpt:22 0 0 ACCEPT tcp * * fc00::/7 ::/0 tcp dpt:22 0 0 ACCEPT tcp * * fec0::/10 ::/0 tcp dpt:22 3280 253K tcp * * ::/0 ::/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 90 6332 DROP tcp * * ::/0 ::/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 34685 4934K ACCEPT tcp * * ::/0 ::/0 tcp dpt:22 0 0 ACCEPT tcp * * 2607:5300:60:9300::/56 ::/0 tcp dpt:873 0 0 ACCEPT udp * * 2607:5300:60:9300::/56 ::/0 udp dpt:873 0 0 ACCEPT tcp * * fc00::/7 ::/0 tcp dpt:873 0 0 ACCEPT udp * * fc00::/7 ::/0 udp dpt:873 0 0 ACCEPT tcp * * fec0::/10 ::/0 tcp dpt:873 0 0 ACCEPT udp * * fec0::/10 ::/0 udp dpt:873 7 448 ACCEPT tcp * * ::/0 ::/0 tcp dpt:514 6 384 ACCEPT tcp * * ::/0 ::/0 tcp dpt:4949 1 64 ACCEPT tcp * * ::/0 ::/0 tcp dpt:5201 81 6094 ACCEPT udp * * ::/0 ::/0 udp dpt:123 107 10298 ACCEPT udp * * ::/0 ::/0 udp dpt:161 0 0 ACCEPT udp * * ::/0 ::/0 udp dpt:514 0 0 ACCEPT udp * * ::/0 ::/0 udp dpt:546 0 0 ACCEPT udp * * ::/0 ::/0 udp dpt:547 32185 2545K ACCEPT tcp * * ::/0 ::/0 state NEW tcp dpt:80 173K 14M ACCEPT tcp * * ::/0 ::/0 state NEW tcp dpt:443 0 0 ACCEPT tcp * * ::/0 ::/0 state NEW tcp dpt:53 0 0 DROP tcp vmbr0 * ::/0 ::/0 tcp dpt:53 limit: above 20/sec burst 100 mode srcip srcmask 28 0 0 udp vmbr0 * ::/0 ::/0 udp dpt:53 state NEW recent: SET name: NAMED side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 DROP udp vmbr0 * ::/0 ::/0 udp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 97 47234 ACCEPT udp vmbr0 * ::/0 ::/0 udp dpt:500 38 17188 ACCEPT udp vmbr0 * ::/0 ::/0 udp dpt:4500 0 0 ACCEPT esp vmbr0 * ::/0 ::/0 esp 0 0 ACCEPT tcp vmbr0 * ::/0 ::/0 tcp dpt:50 0 0 ACCEPT tcp vmbr0 * ::/0 ::/0 tcp dpt:51 0 0 ACCEPT all * * fc00:5300:60:9389::/64 ::/0 0 0 ACCEPT all * * fc01::10:0:0:0/80 ::/0 0 0 ACCEPT all * * fc01::172:16:0:0/104 ::/0 0 0 ACCEPT all * * fc01::192:168:0:0/104 ::/0 0 0 ACCEPT all * * fc00:41d0:701:1100::/64 ::/0 0 0 ACCEPT all * * fc00:41d0:801:2000::/64 ::/0 0 0 ACCEPT all * * fc00:1f00:8100:400::/64 ::/0 0 0 ACCEPT all * * fc00:4780:28:5295::/64 ::/0 0 0 ACCEPT all * * fc00::10:0:3:0/112 ::/0 0 0 ACCEPT all * * fee0::/16 ::/0 0 0 ACCEPT all * * fee1::/16 ::/0 0 0 ACCEPT all * * fee2::/120 ::/0 0 0 ACCEPT all * * fee3::/120 ::/0 0 0 ACCEPT all * * fee4::/120 ::/0 0 0 ACCEPT all * * fee5::/120 ::/0 0 0 DROP all * * fec0::/10 ::/0 0 0 DROP all * * fc00::/7 ::/0 1591M 2016G ACCEPT all * * ::/0 2001:41d0:701:1100::6530 0 0 ACCEPT all * * ::/0 fee3::1 0 0 ACCEPT all * * ::/0 ::/0 state RELATED,ESTABLISHED 0 0 LOG all * * ::/0 ::/0 LOG flags 0 level 4 prefix "INPUT-v6:" Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 434K 97M aICMPs icmpv6 * * ::/0 ::/0 0 0 DROP all * * ::/0 ::/0 rt type:0 segsleft:0 0 0 ACCEPT all lo * ::/0 ::/0 0 0 ACCEPT all * lo ::/0 ::/0 0 0 ACCEPT all * * ff00::/8 ff00::/8 16M 2592M ACCEPT all vmbr1 vmbr0 ::/0 ::/0 15M 2782M ACCEPT all vmbr0 vmbr1 ::/0 ::/0 0 0 ACCEPT all * * fc00:5300:60:9389::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:5300:60:9389::/64 0 0 ACCEPT all * * fc00:5300:60:9389::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:5300:60:9389::/64 0 0 ACCEPT all * * fc01::10:0:0:0/80 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc01::10:0:0:0/80 0 0 ACCEPT all * * fc01::10:0:0:0/80 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc01::10:0:0:0/80 0 0 ACCEPT all * * fc01::172:16:0:0/104 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc01::172:16:0:0/104 0 0 ACCEPT all * * fc01::172:16:0:0/104 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc01::172:16:0:0/104 0 0 ACCEPT all * * fc01::192:168:0:0/104 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc01::192:168:0:0/104 0 0 ACCEPT all * * fc01::192:168:0:0/104 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc01::192:168:0:0/104 0 0 ACCEPT all * * fc00:41d0:701:1100::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:41d0:701:1100::/64 0 0 ACCEPT all * * fc00:41d0:701:1100::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:41d0:701:1100::/64 0 0 ACCEPT all * * fc00:41d0:801:2000::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:41d0:801:2000::/64 0 0 ACCEPT all * * fc00:41d0:801:2000::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:41d0:801:2000::/64 0 0 ACCEPT all * * fc00:1f00:8100:400::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:1f00:8100:400::/64 0 0 ACCEPT all * * fc00:1f00:8100:400::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:1f00:8100:400::/64 0 0 ACCEPT all * * fc00:4780:28:5295::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:4780:28:5295::/64 0 0 ACCEPT all * * fc00:4780:28:5295::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:4780:28:5295::/64 0 0 ACCEPT all * * fc00::10:0:3:0/112 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00::10:0:3:0/112 0 0 ACCEPT all * * fc00::10:0:3:0/112 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00::10:0:3:0/112 0 0 ACCEPT all * * fee0::/16 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee0::/16 0 0 ACCEPT all * * fee0::/16 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee0::/16 0 0 ACCEPT all * * fee1::/16 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee1::/16 0 0 ACCEPT all * * fee1::/16 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee1::/16 0 0 ACCEPT all * * fee2::/120 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee2::/120 0 0 ACCEPT all * * fee2::/120 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee2::/120 0 0 ACCEPT all * * fee3::/120 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee3::/120 0 0 ACCEPT all * * fee3::/120 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee3::/120 0 0 ACCEPT all * * fee4::/120 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee4::/120 0 0 ACCEPT all * * fee4::/120 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee4::/120 0 0 ACCEPT all * * fee5::/120 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee5::/120 0 0 ACCEPT all * * fee5::/120 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee5::/120 0 0 DROP all * * fec0::/10 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00::/7 0 0 ACCEPT all * * fc00::/7 fec0::/10 0 0 DROP all * * fc00::/7 fc00::/7 0 0 LOG all * * ::/0 ::/0 LOG flags 0 level 4 prefix "FORWARD-v6:" Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 894K 70M aICMPs icmpv6 * * ::/0 ::/0 0 0 DROP all * * ::/0 ::/0 rt type:0 segsleft:0 0 0 CHECK_GRE tcp * * ::/0 ::/0 tcp spt:47 state NEW 0 0 CHECK_GRE udp * * ::/0 ::/0 udp spt:47 state NEW 0 0 DROP tcp * * ::/0 ::/0 tcp spt:81 0 0 DROP udp * * ::/0 ::/0 udp spt:81 759K 2640M ACCEPT all * lo ::/0 ::/0 0 0 ACCEPT all * * ::/0 ff00::/8 69005 15M ACCEPT tcp * * ::/0 2607:5300:60:9300::/56 tcp spt:22 0 0 ACCEPT tcp * * ::/0 fc00::/7 tcp spt:22 0 0 ACCEPT tcp * * ::/0 fec0::/10 tcp spt:22 0 0 ACCEPT tcp * * ::/0 2607:5300:60:9300::/56 tcp spt:873 0 0 ACCEPT udp * * ::/0 2607:5300:60:9300::/56 udp spt:873 0 0 ACCEPT tcp * * ::/0 fc00::/7 tcp spt:873 0 0 ACCEPT udp * * ::/0 fc00::/7 udp spt:873 0 0 ACCEPT tcp * * ::/0 fec0::/10 tcp spt:873 0 0 ACCEPT udp * * ::/0 fec0::/10 udp spt:873 4 240 ACCEPT tcp * * ::/0 ::/0 tcp spt:514 4 240 ACCEPT tcp * * ::/0 ::/0 tcp spt:4949 1 60 ACCEPT tcp * * ::/0 ::/0 tcp spt:5201 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:123 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:161 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:514 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:546 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:547 184K 85M ACCEPT tcp * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:80 791K 384M ACCEPT tcp * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:443 0 0 ACCEPT tcp * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:53 2 120 LOG tcp * * ::/0 ::/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 0 0 ACCEPT udp * * ::/0 ::/0 state RELATED,ESTABLISHED udp spt:53 0 0 LOG udp * * ::/0 ::/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 ACCEPT udp * vmbr0 ::/0 ::/0 udp spt:500 0 0 ACCEPT udp * vmbr0 ::/0 ::/0 udp spt:4500 0 0 ACCEPT tcp * vmbr0 ::/0 ::/0 tcp spt:50 0 0 ACCEPT tcp * vmbr0 ::/0 ::/0 tcp spt:51 4208K 337M ACCEPT all * * ::/0 fc00:5300:60:9389::/64 2803K 224M ACCEPT all * * ::/0 fc01::10:0:0:0/80 0 0 ACCEPT all * * ::/0 fc01::172:16:0:0/104 0 0 ACCEPT all * * ::/0 fc01::192:168:0:0/104 0 0 ACCEPT all * * ::/0 fc00:41d0:701:1100::/64 0 0 ACCEPT all * * ::/0 fc00:41d0:801:2000::/64 0 0 ACCEPT all * * ::/0 fc00:1f00:8100:400::/64 0 0 ACCEPT all * * ::/0 fc00:4780:28:5295::/64 0 0 ACCEPT all * * ::/0 fc00::10:0:3:0/112 0 0 ACCEPT all * * ::/0 fee0::/16 0 0 ACCEPT all * * ::/0 fee1::/16 0 0 ACCEPT all * * ::/0 fee2::/120 0 0 ACCEPT all * * ::/0 fee3::/120 0 0 ACCEPT all * * ::/0 fee4::/120 0 0 ACCEPT all * * ::/0 fee5::/120 0 0 DROP all * * ::/0 fec0::/10 0 0 DROP all * * ::/0 fc00::/7 1392M 548G ACCEPT all * * 2001:41d0:701:1100::6530 ::/0 0 0 ACCEPT all * * fee3::1 ::/0 0 0 ACCEPT all * * ::/0 ::/0 0 0 LOG all * * ::/0 ::/0 LOG flags 0 level 4 prefix "OUTPUT-v6:" Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all * * ::/0 ::/0 recent: SET name: BLACKLIST side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP all * * ::/0 ::/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 BLACK all * * ::/0 ::/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 ACCEPT all * * ::/0 ::/0 recent: SET name: TIMER side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Chain Syn-FLOOD (1 references) pkts bytes target prot opt in out source destination 290K 23M RETURN all * * ::/0 ::/0 limit: avg 1/sec burst 4 231K 18M DROP all * * ::/0 ::/0 Chain aICMPs (3 references) pkts bytes target prot opt in out source destination 1156K 190M ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 1 48 61440 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 2 code 0 338 299K ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 3 code 0 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 3 code 1 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 4 code 0 135 19260 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 4 code 1 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 4 code 2 277K 25M ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 128 code 0 85181 5359K ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 129 code 0 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 130 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 131 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 132 code 0 ctstate NEW HL match HL == 1 1052 58912 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 133 code 0 HL match HL == 255 118K 11M ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 134 code 0 HL match HL == 255 552K 40M ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 135 code 0 HL match HL == 255 552K 35M ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 136 code 0 HL match HL == 255 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 137 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 138 code 0 2 144 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 139 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 140 code 0 0 0 ACCEPT icmpv6 * * ::/0 ff02::1 ipv6-icmptype 141 code 0 HL match HL == 255 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 142 code 0 HL match HL == 255 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 143 ctstate NEW HL match HL == 1 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 144 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 145 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 146 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 147 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 148 HL match HL == 255 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 149 HL match HL == 255 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 151 ctstate NEW HL match HL == 1 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 152 ctstate NEW HL match HL == 1 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 153 ctstate NEW HL match HL == 1 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 200 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 201 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 255