https://pastein.ru/t/HGT
Загрузка данных
[root@UFA-ASTERISK etc]# iptables -L --line-numbers
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 fpbxfirewall all -- anywhere anywhere
2 ACCEPT udp -- 78.41.102.199 anywhere udp dpts:ndmp:60000
3 ACCEPT udp -- rtcomm-195-20-197-50.bashrtcomm.ru anywhere udp dpts:ndmp:60000
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
Chain fpbx-rtp (1 references)
num target prot opt source destination
1 ACCEPT udp -- anywhere anywhere udp dpts:ndmp:60000
2 ACCEPT udp -- anywhere anywhere udp dpts:terabase:hfcs-manager
Chain fpbxattacker (6 references)
num target prot opt source destination
1 all -- anywhere anywhere recent: SET name: ATTACKER side: source mask: 255.255.255.255
2 DROP all -- anywhere anywhere
Chain fpbxblacklist (1 references)
num target prot opt source destination
Chain fpbxfirewall (1 references)
num target prot opt source destination
1 ACCEPT all -- anywhere anywhere
2 ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED
3 ACCEPT icmp -- anywhere anywhere
4 ACCEPT all -- anywhere 255.255.255.255
5 ACCEPT all -- anywhere anywhere PKTTYPE = multicast
6 ACCEPT udp -- anywhere anywhere udp spts:bootps:bootpc dpts:bootps:bootpc
7 fpbx-rtp all -- anywhere anywhere
8 fpbxblacklist all -- anywhere anywhere
9 fpbxsignalling all -- anywhere anywhere
10 fpbxsmarthosts all -- anywhere anywhere
11 fpbxregistrations all -- anywhere anywhere
12 fpbxnets all -- anywhere anywhere
13 fpbxhosts all -- anywhere anywhere
14 fpbxinterfaces all -- anywhere anywhere
15 fpbxreject all -- anywhere anywhere
16 fpbxrfw all -- anywhere anywhere mark match 0x2/0x2
17 ACCEPT udp -- anywhere anywhere state RELATED,ESTABLISHED
18 fpbxlogdrop all -- anywhere anywhere
Chain fpbxhosts (1 references)
num target prot opt source destination
1 zone-trusted all -- UFA-ASTERISK anywhere
Chain fpbxinterfaces (1 references)
num target prot opt source destination
1 zone-external all -- anywhere anywhere
2 zone-internal all -- anywhere anywhere
3 zone-internal all -- anywhere anywhere
4 zone-internal all -- anywhere anywhere
Chain fpbxknownreg (52 references)
num target prot opt source destination
1 all -- anywhere anywhere recent: REMOVE name: REPEAT side: source mask: 255.255.255.255
2 all -- anywhere anywhere recent: REMOVE name: ATTACKER side: source mask: 255.255.255.255
3 ACCEPT all -- anywhere anywhere mark match 0x1/0x1
4 fpbxsvc-ucp all -- anywhere anywhere
5 fpbxsvc-zulu all -- anywhere anywhere
6 fpbxsvc-restapps all -- anywhere anywhere
7 fpbxsvc-restapps_ssl all -- anywhere anywhere
8 fpbxsvc-provis all -- anywhere anywhere
9 fpbxsvc-provis_ssl all -- anywhere anywhere
Chain fpbxlogdrop (1 references)
num target prot opt source destination
1 DROP all -- anywhere anywhere
Chain fpbxnets (1 references)
num target prot opt source destination
1 zone-trusted all -- 10.102.77.74 anywhere
2 zone-internal all -- 10.10.0.0/16 anywhere
3 zone-internal all -- 10.102.0.0/16 anywhere
Chain fpbxratelimit (0 references)
num target prot opt source destination
1 ACCEPT all -- anywhere anywhere mark match 0x4/0x4
2 ACCEPT all -- anywhere anywhere recent: CHECK seconds: 90 hit_count: 1 name: WHITELIST side: source mask: 255.255.255.255
3 all -- anywhere anywhere state NEW recent: SET name: REPEAT side: source mask: 255.255.255.255
4 all -- anywhere anywhere state NEW recent: SET name: DISCOVERED side: source mask: 255.255.255.255
5 LOG all -- anywhere anywhere LOG level warning
6 fpbxattacker all -- anywhere anywhere recent: CHECK seconds: 86400 hit_count: 1 name: ATTACKER side: source mask: 255.255.255.255
7 fpbxattacker all -- anywhere anywhere recent: CHECK seconds: 86400 hit_count: 100 name: REPEAT side: source mask: 255.255.255.255
8 fpbxattacker all -- anywhere anywhere recent: CHECK seconds: 3600 hit_count: 50 name: REPEAT side: source mask: 255.255.255.255
9 fpbxshortblock all -- anywhere anywhere recent: CHECK seconds: 60 hit_count: 10 name: REPEAT side: source mask: 255.255.255.255
10 ACCEPT all -- anywhere anywhere
Chain fpbxregistrations (1 references)
num target prot opt source destination
1 fpbxknownreg all -- 10.102.100.52 anywhere
2 fpbxknownreg all -- 10.102.100.66 anywhere
3 fpbxknownreg all -- 10.102.100.67 anywhere
4 fpbxknownreg all -- 10.102.100.71 anywhere
5 fpbxknownreg all -- 10.102.100.75 anywhere
6 fpbxknownreg all -- 10.102.100.72 anywhere
7 fpbxknownreg all -- 10.102.100.114 anywhere
8 fpbxknownreg all -- 10.102.100.65 anywhere
9 fpbxknownreg all -- 10.102.100.76 anywhere
10 fpbxknownreg all -- 10.102.100.69 anywhere
11 fpbxknownreg all -- 10.102.100.77 anywhere
12 fpbxknownreg all -- 10.238.126.19 anywhere
13 fpbxknownreg all -- 207.mtsnet.ru anywhere
14 fpbxknownreg all -- 194.186.194.83 anywhere
15 fpbxknownreg all -- 185.195.242.31 anywhere
16 fpbxknownreg all -- 46-180-135-203.goodline.info anywhere
17 fpbxknownreg all -- 194.186.3.123 anywhere
18 fpbxknownreg all -- static-customer-195-222-131-29.perm.comstar-r.ru anywhere
19 fpbxknownreg all -- 109.236.111.202 anywhere
20 fpbxknownreg all -- 10.102.100.74 anywhere
21 fpbxknownreg all -- 10.102.100.59 anywhere
22 fpbxknownreg all -- 10.102.100.79 anywhere
23 fpbxknownreg all -- 10.102.100.57 anywhere
24 fpbxknownreg all -- 10.102.100.78 anywhere
25 fpbxknownreg all -- 10.102.100.81 anywhere
26 fpbxknownreg all -- 10.102.100.82 anywhere
27 fpbxknownreg all -- 10.102.100.51 anywhere
28 fpbxknownreg all -- 10.102.100.63 anywhere
29 fpbxknownreg all -- 10.102.100.85 anywhere
30 fpbxknownreg all -- 10.102.100.58 anywhere
31 fpbxknownreg all -- 10.102.100.68 anywhere
32 fpbxknownreg all -- 10.102.100.60 anywhere
33 fpbxknownreg all -- 10.102.100.80 anywhere
34 fpbxknownreg all -- 10.102.100.86 anywhere
35 fpbxknownreg all -- 10.102.100.87 anywhere
36 fpbxknownreg all -- 10.102.100.111 anywhere
37 fpbxknownreg all -- 10.102.100.62 anywhere
38 fpbxknownreg all -- 10.102.100.61 anywhere
39 fpbxknownreg all -- 10.102.100.54 anywhere
40 fpbxknownreg all -- 10.102.100.83 anywhere
41 fpbxknownreg all -- 10.102.100.123 anywhere
42 fpbxknownreg all -- 10.102.100.99 anywhere
43 fpbxknownreg all -- 10.102.100.64 anywhere
44 fpbxknownreg all -- 10.102.100.130 anywhere
45 fpbxknownreg all -- 10.102.100.70 anywhere
46 fpbxknownreg all -- 10.102.100.56 anywhere
47 fpbxknownreg all -- 10.102.100.84 anywhere
48 fpbxknownreg all -- 10.102.100.53 anywhere
49 fpbxknownreg all -- 10.102.100.73 anywhere
50 fpbxknownreg all -- 10.102.100.129 anywhere
51 fpbxknownreg all -- 10.102.100.55 anywhere
52 fpbxknownreg all -- 10.102.100.121 anywhere
Chain fpbxreject (1 references)
num target prot opt source destination
1 rejsvc-nfs all -- anywhere anywhere
2 rejsvc-smb all -- anywhere anywhere
Chain fpbxrfw (1 references)
num target prot opt source destination
1 ACCEPT all -- anywhere anywhere recent: CHECK seconds: 90 hit_count: 1 name: WHITELIST side: source mask: 255.255.255.255
2 all -- anywhere anywhere recent: SET name: REPEAT side: source mask: 255.255.255.255
3 all -- anywhere anywhere recent: SET name: DISCOVERED side: source mask: 255.255.255.255
4 fpbxattacker all -- anywhere anywhere recent: CHECK seconds: 10 hit_count: 50 name: REPEAT side: source mask: 255.255.255.255
5 fpbxattacker all -- anywhere anywhere recent: CHECK seconds: 86400 hit_count: 1 name: ATTACKER side: source mask: 255.255.255.255
6 fpbxshortblock all -- anywhere anywhere recent: CHECK seconds: 60 hit_count: 10 name: SIGNALLING side: source mask: 255.255.255.255
7 all -- anywhere anywhere recent: SET name: SIGNALLING side: source mask: 255.255.255.255
8 fpbxattacker all -- anywhere anywhere recent: CHECK seconds: 86400 hit_count: 100 name: REPEAT side: source mask: 255.255.255.255
9 ACCEPT all -- anywhere anywhere
Chain fpbxshortblock (2 references)
num target prot opt source destination
1 all -- anywhere anywhere recent: SET name: CLAMPED side: source mask: 255.255.255.255
2 REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain fpbxsignalling (1 references)
num target prot opt source destination
1 MARK udp -- anywhere anywhere udp dpt:sip MARK set 0x1
2 MARK udp -- anywhere anywhere udp dpt:5160 MARK set 0x3
Chain fpbxsmarthosts (1 references)
num target prot opt source destination
1 ACCEPT all -- 10.238.126.19 anywhere mark match 0x1/0x1
2 ACCEPT all -- 185.195.242.31 anywhere mark match 0x1/0x1
3 ACCEPT all -- 46-180-135-203.goodline.info anywhere mark match 0x1/0x1
4 ACCEPT all -- 194.186.3.123 anywhere mark match 0x1/0x1
5 ACCEPT all -- 109.236.111.202 anywhere mark match 0x1/0x1
6 ACCEPT all -- 194.186.194.83 anywhere mark match 0x1/0x1
7 ACCEPT all -- static-customer-195-222-131-29.perm.comstar-r.ru anywhere mark match 0x1/0x1
8 ACCEPT all -- 207.mtsnet.ru anywhere mark match 0x1/0x1
9 ACCEPT all -- rtcomm-195-20-197-50.bashrtcomm.ru anywhere mark match 0x1/0x1
Chain fpbxsvc-chansip (1 references)
num target prot opt source destination
1 ACCEPT udp -- anywhere anywhere udp dpt:sip
Chain fpbxsvc-ftp (1 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:ftp
Chain fpbxsvc-http (1 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:http
Chain fpbxsvc-https (1 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:https
Chain fpbxsvc-iax (1 references)
num target prot opt source destination
1 ACCEPT udp -- anywhere anywhere udp dpt:iax
Chain fpbxsvc-isymphony (1 references)
num target prot opt source destination
Chain fpbxsvc-letsencrypt (0 references)
num target prot opt source destination
Chain fpbxsvc-nfs (0 references)
num target prot opt source destination
Chain fpbxsvc-pjsip (1 references)
num target prot opt source destination
1 ACCEPT udp -- anywhere anywhere udp dpt:5160
Chain fpbxsvc-provis (3 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:ctf
Chain fpbxsvc-provis_ssl (3 references)
num target prot opt source destination
Chain fpbxsvc-restapps (2 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:xfer
Chain fpbxsvc-restapps_ssl (2 references)
num target prot opt source destination
Chain fpbxsvc-smb (0 references)
num target prot opt source destination
Chain fpbxsvc-ssh (1 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
Chain fpbxsvc-tftp (1 references)
num target prot opt source destination
1 ACCEPT udp -- anywhere anywhere udp dpt:tftp
Chain fpbxsvc-ucp (4 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:81
2 ACCEPT tcp -- anywhere anywhere tcp dpt:vcom-tunnel
3 ACCEPT tcp -- anywhere anywhere tcp dpt:mcreport
Chain fpbxsvc-vpn (3 references)
num target prot opt source destination
1 ACCEPT udp -- anywhere anywhere udp dpt:openvpn
Chain fpbxsvc-webrtc (1 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:radan-http
2 ACCEPT tcp -- anywhere anywhere tcp dpt:8089
Chain fpbxsvc-xmpp (3 references)
num target prot opt source destination
1 ACCEPT tcp -- anywhere anywhere tcp dpt:xmpp-client
Chain fpbxsvc-zulu (4 references)
num target prot opt source destination
Chain rejsvc-nfs (1 references)
num target prot opt source destination
Chain rejsvc-smb (1 references)
num target prot opt source destination
Chain zone-external (1 references)
num target prot opt source destination
1 all -- anywhere anywhere mark match 0x10/0x10
2 fpbxsvc-ucp all -- anywhere anywhere
3 fpbxsvc-zulu all -- anywhere anywhere
4 fpbxsvc-vpn all -- anywhere anywhere
5 fpbxsvc-xmpp all -- anywhere anywhere
Chain zone-internal (5 references)
num target prot opt source destination
1 all -- anywhere anywhere mark match 0x4/0x4
2 fpbxsvc-ssh all -- anywhere anywhere
3 fpbxsvc-http all -- anywhere anywhere
4 fpbxsvc-https all -- anywhere anywhere
5 fpbxsvc-ucp all -- anywhere anywhere
6 fpbxsvc-pjsip all -- anywhere anywhere
7 fpbxsvc-chansip all -- anywhere anywhere
8 fpbxsvc-iax all -- anywhere anywhere
9 fpbxsvc-webrtc all -- anywhere anywhere
10 fpbxsvc-zulu all -- anywhere anywhere
11 fpbxsvc-isymphony all -- anywhere anywhere
12 fpbxsvc-provis all -- anywhere anywhere
13 fpbxsvc-provis_ssl all -- anywhere anywhere
14 fpbxsvc-vpn all -- anywhere anywhere
15 fpbxsvc-restapps all -- anywhere anywhere
16 fpbxsvc-restapps_ssl all -- anywhere anywhere
17 fpbxsvc-xmpp all -- anywhere anywhere
18 fpbxsvc-ftp all -- anywhere anywhere
19 fpbxsvc-tftp all -- anywhere anywhere
Chain zone-other (0 references)
num target prot opt source destination
1 all -- anywhere anywhere mark match 0x8/0x8
2 fpbxsvc-ucp all -- anywhere anywhere
3 fpbxsvc-zulu all -- anywhere anywhere
4 fpbxsvc-provis all -- anywhere anywhere
5 fpbxsvc-provis_ssl all -- anywhere anywhere
6 fpbxsvc-vpn all -- anywhere anywhere
7 fpbxsvc-xmpp all -- anywhere anywhere
Chain zone-trusted (2 references)
num target prot opt source destination
1 ACCEPT all -- anywhere anywhere
