# Generated by webmin
*filter
:FORWARD_OUT_ZONES - [0:0]
:FORWARD_OUT_ZONES_SOURCE - [0:0]
:FORWARD ACCEPT [0:0]
:FORWARD_IN_ZONES - [0:0]
:IN_public_allow - [0:0]
:IN_public_deny - [0:0]
:FWDO_public_allow - [0:0]
:FWDI_public - [0:0]
:FWDO_public_log - [0:0]
:INPUT_ZONES_SOURCE - [0:0]
:IN_public - [0:0]
:IN_public_log - [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT_direct - [0:0]
:FWDO_public - [0:0]
:INPUT_direct - [0:0]
:FORWARD_direct - [0:0]
:OUTPUT ACCEPT [0:0]
:FORWARD_IN_ZONES_SOURCE - [0:0]
:FWDI_public_deny - [0:0]
:FWDI_public_allow - [0:0]
:FWDI_public_log - [0:0]
:INPUT_ZONES - [0:0]
:FWDO_public_deny - [0:0]
-A FORWARD -o ens192 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A FORWARD -i ens192 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:
-A OUTPUT -o ens192 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A INPUT -i ens192 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -j INPUT_direct
-A INPUT -j INPUT_ZONES_SOURCE
-A INPUT -j INPUT_ZONES
-A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -j FORWARD_direct
-A FORWARD -j FORWARD_IN_ZONES_SOURCE
-A FORWARD -j FORWARD_IN_ZONES
-A FORWARD -j FORWARD_OUT_ZONES_SOURCE
-A FORWARD -j FORWARD_OUT_ZONES
-A FORWARD -m conntrack --ctstate INVALID -j DROP
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A OUTPUT -j OUTPUT_direct
-A FORWARD_IN_ZONES    -g FWDI_public
-A FORWARD_OUT_ZONES    -g FWDO_public
-A FWDI_public -j FWDI_public_log
-A FWDI_public -j FWDI_public_deny
-A FWDI_public -j FWDI_public_allow
-A FWDI_public -p icmp -j ACCEPT
-A FWDO_public -j FWDO_public_log
-A FWDO_public -j FWDO_public_deny
-A FWDO_public -j FWDO_public_allow
-A INPUT_ZONES    -g IN_public
-A INPUT_direct -p tcp -m multiport -m set -j REJECT --reject-with icmp-port-unreachable --dports 22 --match-set fail2ban-sshd src
-A INPUT_direct -p tcp -m multiport -m set -j REJECT --reject-with icmp-port-unreachable --dports 10000 --match-set fail2ban-webmin-auth src
-A INPUT_direct -p tcp -m multiport -m set -j REJECT --reject-with icmp-port-unreachable --dports 21,20,990,989 --match-set fail2ban-proftpd src
-A INPUT_direct -p tcp -m multiport -m set -j REJECT --reject-with icmp-port-unreachable --dports 25,465,587 --match-set fail2ban-postfix src
-A INPUT_direct -p tcp -m multiport -m set -j REJECT --reject-with icmp-port-unreachable --dports 110,995,143,993,587,465,4190 --match-set fail2ban-dovecot src
-A INPUT_direct -p tcp -m multiport -m set -j REJECT --reject-with icmp-port-unreachable --dports 22,115 --match-set fail2ban-ssh-ddos src
-A IN_public -j IN_public_log
-A IN_public -j IN_public_deny
-A IN_public -j IN_public_allow
-A IN_public -p icmp -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 587 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 53 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 20 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 2222 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 10000:10100 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 20000 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 1025:65535 --ctstate NEW -j ACCEPT
-A IN_public_allow -p udp -m udp -m conntrack --dport 53 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 22 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 25 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 465 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 21 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 110 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 995 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 143 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 993 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 80 --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp -m conntrack --dport 443 --ctstate NEW -j ACCEPT
COMMIT
# Completed
# Generated by webmin
*mangle
:POSTROUTING ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:PRE_public_deny - [0:0]
:INPUT_direct - [0:0]
:PRE_public_allow - [0:0]
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:FORWARD_direct - [0:0]
:PRE_public_log - [0:0]
:PRE_public - [0:0]
:INPUT ACCEPT [0:0]
:PREROUTING_ZONES_SOURCE - [0:0]
:PREROUTING_direct - [0:0]
:POSTROUTING_direct - [0:0]
:OUTPUT_direct - [0:0]
:PREROUTING_ZONES - [0:0]
-A PREROUTING -j PREROUTING_direct
-A PREROUTING -j PREROUTING_ZONES_SOURCE
-A PREROUTING -j PREROUTING_ZONES
-A INPUT -j INPUT_direct
-A FORWARD -j FORWARD_direct
-A OUTPUT -j OUTPUT_direct
-A POSTROUTING -j POSTROUTING_direct
-A PREROUTING_ZONES  -g PRE_public
-A PRE_public -j PRE_public_log
-A PRE_public -j PRE_public_deny
-A PRE_public -j PRE_public_allow
COMMIT
# Completed
# Generated by webmin
*nat
:POSTROUTING ACCEPT [0:0]
:PRE_public_allow - [0:0]
:PREROUTING ACCEPT [0:0]
:PRE_public_deny - [0:0]
:POSTROUTING_ZONES - [0:0]
:PRE_public_log - [0:0]
:OUTPUT ACCEPT [0:0]
:POST_public - [0:0]
:POSTROUTING_ZONES_SOURCE - [0:0]
:POST_public_allow - [0:0]
:INPUT ACCEPT [0:0]
:PRE_public - [0:0]
:PREROUTING_ZONES_SOURCE - [0:0]
:POSTROUTING_direct - [0:0]
:POST_public_deny - [0:0]
:PREROUTING_direct - [0:0]
:POST_public_log - [0:0]
:OUTPUT_direct - [0:0]
:PREROUTING_ZONES - [0:0]
-A PREROUTING -j PREROUTING_direct
-A PREROUTING -j PREROUTING_ZONES_SOURCE
-A PREROUTING -j PREROUTING_ZONES
-A OUTPUT -j OUTPUT_direct
-A POSTROUTING -j POSTROUTING_direct
-A POSTROUTING -j POSTROUTING_ZONES_SOURCE
-A POSTROUTING -j POSTROUTING_ZONES
-A POSTROUTING_ZONES  -g POST_public
-A POST_public -j POST_public_log
-A POST_public -j POST_public_deny
-A POST_public -j POST_public_allow
-A PREROUTING_ZONES  -g PRE_public
-A PRE_public -j PRE_public_log
-A PRE_public -j PRE_public_deny
-A PRE_public -j PRE_public_allow
COMMIT
# Completed