Exim 'Connection timed out' with CSF enabled, how?

webunity · Sep 29, 2021

So i see this kind of information in the logs:

2021-09-26 16:41:50 1mUVLi-000Chr-LL <= [email protected] H=([192.168.178.45]) [83.80.160.251] P=esmtpsa X=TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=plain:[email protected] S=17159 id=[email protected] T="Re: Factuur 20210391" from <[email protected]> for [email protected]
2021-09-26 16:43:58 1mUVLi-000Chr-LL H=hentex-nl.mail.protection.outlook.com [104.47.14.36] Connection timed out
2021-09-26 16:46:05 1mUVLi-000Chr-LL H=hentex-nl.mail.protection.outlook.com [104.47.12.36] Connection timed out
2021-09-26 16:46:05 1mUVLi-000Chr-LL == [email protected] R=lookuphost T=remote_smtp defer (110): Connection timed out
2021-09-26 17:11:36 1mUVLi-000Chr-LL H=hentex-nl.mail.protection.outlook.com [104.47.12.36] Connection timed out
2021-09-26 17:11:39 1mUVLi-000Chr-LL => [email protected] F=<[email protected]> R=lookuphost T=remote_smtp S=18340 H=hentex-nl.mail.protection.outlook.com [104.47.13.36] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.6.0 <[email protected]> [InternalId=22681722290899, Hostname=AS8P193MB1478.EURP193.PROD.OUTLOOK.COM] 26155 bytes in 0.082, 309.047 KB/sec Queued mail for delivery"
2021-09-26 17:11:39 1mUVLi-000Chr-LL Completed

And for example:

2021-09-29 11:51:14 1mVWF8-0004Z4-1G <= [email protected] H=77-161-244-182.fixed.kpn.net (mbp-van-esther.home) [77.161.244.182] P=esmtpsa X=TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=plain:[email protected] S=90918 id=[email protected] T="Riethoven" from <[email protected]> for [email protected]
2021-09-29 11:53:21 1mVWF8-0004Z4-1G H=mailfilter1.mijndomein.nl [135.125.7.164] Connection timed out
2021-09-29 11:55:28 1mVWF8-0004Z4-1G H=mailfilter1.mijndomein.nl [51.89.43.216] Connection timed out
2021-09-29 11:57:35 1mVWF8-0004Z4-1G H=mailfilter2.mijndomein.nl [135.125.7.163] Connection timed out
2021-09-29 11:59:43 1mVWF8-0004Z4-1G H=mailfilter2.mijndomein.nl [51.89.43.215] Connection timed out
2021-09-29 11:59:43 1mVWF8-0004Z4-1G == [email protected] R=lookuphost T=remote_smtp defer (110): Connection timed out
2021-09-29 13:11:35 1mVWF8-0004Z4-1G H=mailfilter2.mijndomein.nl [135.125.7.163] Connection timed out
2021-09-29 13:11:35 1mVWF8-0004Z4-1G == [email protected] R=lookuphost T=remote_smtp defer (110): Connection timed out
2021-09-29 14:07:22 1mVWF8-0004Z4-1G [135.125.7.163] SSL verify error: certificate name mismatch: DN="/CN=*.oxseu-vadesecure.net" H="mailfilter2.mijndomein.nl"
2021-09-29 14:07:22 1mVWF8-0004Z4-1G => [email protected] F=<[email protected]> R=lookuphost T=remote_smtp S=93094 H=mailfilter2.mijndomein.nl [135.125.7.163] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no C="250 2.6.0 Message accepted with ID N09VFxe6-eZUqihcEBWWvnvyf"
2021-09-29 14:07:22 1mVWF8-0004Z4-1G Completed

as you can see a lot of connection timeouts.

Also; when i do this with CSF enabled:

telnet mailfilter1.mijndomein.nl 25
Trying 51.89.43.216...
^C

it simply doesn't connect.

With CSF disabled (csf -x + iptables-save shows empty table) it goes fine:

telnet mailfilter1.mijndomein.nl 25
Trying 51.89.43.216...
Connected to mailfilter1.mijndomein.nl.
Escape character is '^]'.
220 Welcome to mx01.oxseu-vadesecure.net ESMTP oxseu2nmtai01p smtp
^]

this is the output of iptables-save when CSF is on:

# Generated by iptables-save v1.4.21 on Wed Sep 29 14:26:25 2021

*nat

REROUTING ACCEPT [862109:55811549]

:INPUT ACCEPT [7379:937276]

:OUTPUT ACCEPT [4782:338099]

OSTROUTING ACCEPT [4782:338099]

COMMIT

# Completed on Wed Sep 29 14:26:25 2021

# Generated by iptables-save v1.4.21 on Wed Sep 29 14:26:25 2021

*mangle

REROUTING ACCEPT [918371:63325239]

:INPUT ACCEPT [64065:8501586]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [41433:33945780]

OSTROUTING ACCEPT [41429:33945188]

COMMIT

# Completed on Wed Sep 29 14:26:25 2021

# Generated by iptables-save v1.4.21 on Wed Sep 29 14:26:25 2021

*raw

REROUTING ACCEPT [918375:63325539]

:OUTPUT ACCEPT [41434:33945874]

COMMIT

# Completed on Wed Sep 29 14:26:25 2021

# Generated by iptables-save v1.4.21 on Wed Sep 29 14:26:25 2021

*filter

:INPUT DROP [0:0]

:FORWARD DROP [0:0]

:OUTPUT DROP [0:0]

:ALLOWIN - [0:0]

:ALLOWOUT - [0:0]

ENYIN - [0:0]

ENYOUT - [0:0]

:LOCALINPUT - [0:0]

:LOCALOUTPUT - [0:0]

:LOGDROPIN - [0:0]

:LOGDROPOUT - [0:0]

:SMTPOUTPUT - [0:0]

-A INPUT -s 8.8.8.8/32 ! -i lo -p tcp -m tcp --dport 53 -j ACCEPT

-A INPUT -s 8.8.8.8/32 ! -i lo -p udp -m udp --dport 53 -j ACCEPT

-A INPUT -s 8.8.8.8/32 ! -i lo -p tcp -m tcp --sport 53 -j ACCEPT

-A INPUT -s 8.8.8.8/32 ! -i lo -p udp -m udp --sport 53 -j ACCEPT

-A INPUT -s 194.60.207.53/32 ! -i lo -p tcp -m tcp --dport 53 -j ACCEPT

-A INPUT -s 194.60.207.53/32 ! -i lo -p udp -m udp --dport 53 -j ACCEPT

-A INPUT -s 194.60.207.53/32 ! -i lo -p tcp -m tcp --sport 53 -j ACCEPT

-A INPUT -s 194.60.207.53/32 ! -i lo -p udp -m udp --sport 53 -j ACCEPT

-A INPUT -s 79.170.92.7/32 ! -i lo -p tcp -m tcp --dport 53 -j ACCEPT

-A INPUT -s 79.170.92.7/32 ! -i lo -p udp -m udp --dport 53 -j ACCEPT

-A INPUT -s 79.170.92.7/32 ! -i lo -p tcp -m tcp --sport 53 -j ACCEPT

-A INPUT -s 79.170.92.7/32 ! -i lo -p udp -m udp --sport 53 -j ACCEPT

-A INPUT -s 194.60.207.52/32 ! -i lo -p tcp -m tcp --dport 53 -j ACCEPT

-A INPUT -s 194.60.207.52/32 ! -i lo -p udp -m udp --dport 53 -j ACCEPT

-A INPUT -s 194.60.207.52/32 ! -i lo -p tcp -m tcp --sport 53 -j ACCEPT

-A INPUT -s 194.60.207.52/32 ! -i lo -p udp -m udp --sport 53 -j ACCEPT

-A INPUT ! -i lo -j LOCALINPUT

-A INPUT -i lo -j ACCEPT

-A INPUT ! -i lo -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT

-A INPUT ! -i lo -p icmp -m icmp --icmp-type 8 -j LOGDROPIN

-A INPUT ! -i lo -p icmp -j ACCEPT

-A INPUT ! -i lo -p udp -m udp --dport 32768:61000 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 32768:61000 ! --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 20 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 21 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 22 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 25 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 53 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 80 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 110 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 143 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 443 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 465 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 587 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 993 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 995 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 3306 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 2222 -j ACCEPT

-A INPUT ! -i lo -p tcp -m tcp --dport 35000:35999 -j ACCEPT

-A INPUT ! -i lo -p udp -m udp --dport 20 -j ACCEPT

-A INPUT ! -i lo -p udp -m udp --dport 21 -j ACCEPT

-A INPUT ! -i lo -p udp -m udp --dport 53 -j ACCEPT

-A INPUT ! -i lo -p udp -m udp --dport 80 -j ACCEPT

-A INPUT ! -i lo -p udp -m udp --dport 443 -j ACCEPT

-A INPUT ! -i lo -j LOGDROPIN

-A OUTPUT -d 8.8.8.8/32 ! -o lo -p tcp -m tcp --dport 53 -j ACCEPT

-A OUTPUT -d 8.8.8.8/32 ! -o lo -p udp -m udp --dport 53 -j ACCEPT

-A OUTPUT -d 8.8.8.8/32 ! -o lo -p tcp -m tcp --sport 53 -j ACCEPT

-A OUTPUT -d 8.8.8.8/32 ! -o lo -p udp -m udp --sport 53 -j ACCEPT

-A OUTPUT -d 194.60.207.53/32 ! -o lo -p tcp -m tcp --dport 53 -j ACCEPT

-A OUTPUT -d 194.60.207.53/32 ! -o lo -p udp -m udp --dport 53 -j ACCEPT

-A OUTPUT -d 194.60.207.53/32 ! -o lo -p tcp -m tcp --sport 53 -j ACCEPT

-A OUTPUT -d 194.60.207.53/32 ! -o lo -p udp -m udp --sport 53 -j ACCEPT

-A OUTPUT -d 79.170.92.7/32 ! -o lo -p tcp -m tcp --dport 53 -j ACCEPT

-A OUTPUT -d 79.170.92.7/32 ! -o lo -p udp -m udp --dport 53 -j ACCEPT

-A OUTPUT -d 79.170.92.7/32 ! -o lo -p tcp -m tcp --sport 53 -j ACCEPT

-A OUTPUT -d 79.170.92.7/32 ! -o lo -p udp -m udp --sport 53 -j ACCEPT

-A OUTPUT -d 194.60.207.52/32 ! -o lo -p tcp -m tcp --dport 53 -j ACCEPT

-A OUTPUT -d 194.60.207.52/32 ! -o lo -p udp -m udp --dport 53 -j ACCEPT

-A OUTPUT -d 194.60.207.52/32 ! -o lo -p tcp -m tcp --sport 53 -j ACCEPT

-A OUTPUT -d 194.60.207.52/32 ! -o lo -p udp -m udp --sport 53 -j ACCEPT

-A OUTPUT ! -o lo -j LOCALOUTPUT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 53 -j ACCEPT

-A OUTPUT ! -o lo -p udp -m udp --dport 53 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --sport 53 -j ACCEPT

-A OUTPUT ! -o lo -p udp -m udp --sport 53 -j ACCEPT

-A OUTPUT -j SMTPOUTPUT

-A OUTPUT -o lo -j ACCEPT

-A OUTPUT ! -o lo -p icmp -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 20 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 21 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 22 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 25 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 53 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 80 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 110 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 113 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 443 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 587 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 993 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 995 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 3306 -j ACCEPT

-A OUTPUT ! -o lo -p tcp -m tcp --dport 2222 -j ACCEPT

-A OUTPUT ! -o lo -p udp -m udp --dport 20 -j ACCEPT

-A OUTPUT ! -o lo -p udp -m udp --dport 21 -j ACCEPT

-A OUTPUT ! -o lo -p udp -m udp --dport 53 -j ACCEPT

-A OUTPUT ! -o lo -p udp -m udp --dport 113 -j ACCEPT

-A OUTPUT ! -o lo -p udp -m udp --dport 123 -j ACCEPT

-A OUTPUT ! -o lo -j ACCEPT

-A OUTPUT ! -o lo -j LOGDROPOUT

-A ALLOWIN -s 104.20.28.5/32 ! -i lo -j ACCEPT

-A ALLOWIN -s 104.20.29.5/32 ! -i lo -j ACCEPT

-A ALLOWIN -s 62.163.52.30/32 ! -i lo -j ACCEPT

-A ALLOWIN -s 213.222.24.140/32 ! -i lo -j ACCEPT

-A ALLOWOUT -d 104.20.28.5/32 ! -o lo -j ACCEPT

-A ALLOWOUT -d 104.20.29.5/32 ! -o lo -j ACCEPT

-A ALLOWOUT -d 62.163.52.30/32 ! -o lo -j ACCEPT

-A ALLOWOUT -d 213.222.24.140/32 ! -o lo -j ACCEPT

-A DENYIN -s 49.233.5.253/32 ! -i lo -j DROP

-A DENYIN -s 64.202.187.246/32 ! -i lo -j DROP

-A DENYIN -s 222.186.42.137/32 ! -i lo -j DROP

-A DENYIN -s 153.35.93.67/32 ! -i lo -j DROP

-A DENYIN -s 140.143.9.192/32 ! -i lo -j DROP

-A DENYIN -s 190.226.244.9/32 ! -i lo -j DROP

-A DENYIN -s 150.158.174.229/32 ! -i lo -j DROP

-A DENYIN -s 45.80.64.230/32 ! -i lo -j DROP

-A DENYIN -s 121.5.124.51/32 ! -i lo -j DROP

-A DENYIN -s 157.245.78.144/32 ! -i lo -j DROP

-A DENYIN -s 200.70.56.202/32 ! -i lo -j DROP

-A DENYIN -s 195.223.211.242/32 ! -i lo -j DROP

-A DENYIN -s 42.192.128.166/32 ! -i lo -j DROP

-A DENYIN -s 123.206.194.213/32 ! -i lo -j DROP

-A DENYIN -s 59.56.103.22/32 ! -i lo -j DROP

-A DENYIN -s 1.15.25.243/32 ! -i lo -j DROP

-A DENYIN -s 77.247.110.134/32 ! -i lo -j DROP

-A DENYIN -s 139.217.98.200/32 ! -i lo -j DROP

-A DENYIN -s 143.110.182.53/32 ! -i lo -j DROP

-A DENYIN -s 61.177.173.27/32 ! -i lo -j DROP

-A DENYIN -s 209.141.55.247/32 ! -i lo -j DROP

-A DENYIN -s 50.116.98.18/32 ! -i lo -j DROP

-A DENYIN -s 121.4.92.128/32 ! -i lo -j DROP

-A DENYIN -s 1.83.113.234/32 ! -i lo -j DROP

-A DENYIN -s 106.52.70.240/32 ! -i lo -j DROP

-A DENYIN -s 20.52.51.238/32 ! -i lo -j DROP

-A DENYIN -s 222.128.47.53/32 ! -i lo -j DROP

-A DENYIN -s 222.186.30.76/32 ! -i lo -j DROP

-A DENYIN -s 174.91.192.200/32 ! -i lo -j DROP

-A DENYIN -s 61.128.172.202/32 ! -i lo -j DROP

-A DENYIN -s 219.145.61.20/32 ! -i lo -j DROP

-A DENYIN -s 60.174.236.98/32 ! -i lo -j DROP

-A DENYIN -s 182.61.43.33/32 ! -i lo -j DROP

-A DENYIN -s 189.240.225.206/32 ! -i lo -j DROP

-A DENYIN -s 210.150.182.217/32 ! -i lo -j DROP

-A DENYIN -s 112.220.238.3/32 ! -i lo -j DROP

-A DENYIN -s 139.59.121.221/32 ! -i lo -j DROP

-A DENYIN -s 49.235.84.72/32 ! -i lo -j DROP

-A DENYIN -s 175.118.152.100/32 ! -i lo -j DROP

-A DENYIN -s 211.198.174.72/32 ! -i lo -j DROP

-A DENYIN -s 40.115.187.98/32 ! -i lo -j DROP

-A DENYIN -s 115.159.213.195/32 ! -i lo -j DROP

-A DENYIN -s 185.73.124.100/32 ! -i lo -j DROP

-A DENYIN -s 203.195.231.79/32 ! -i lo -j DROP

-A DENYIN -s 77.158.71.118/32 ! -i lo -j DROP

-A DENYIN -s 58.144.209.130/32 ! -i lo -j DROP

-A DENYIN -s 122.55.221.172/32 ! -i lo -j DROP

-A DENYIN -s 82.156.24.211/32 ! -i lo -j DROP

-A DENYIN -s 123.56.107.171/32 ! -i lo -j DROP

-A DENYIN -s 82.156.54.233/32 ! -i lo -j DROP

-A DENYIN -s 187.60.179.69/32 ! -i lo -j DROP

-A DENYIN -s 82.156.121.62/32 ! -i lo -j DROP

-A DENYIN -s 111.229.187.216/32 ! -i lo -j DROP

-A DENYIN -s 193.169.254.234/32 ! -i lo -j DROP

-A DENYIN -s 165.22.220.123/32 ! -i lo -j DROP

-A DENYIN -s 45.155.204.39/32 ! -i lo -j DROP

-A DENYIN -s 180.76.172.154/32 ! -i lo -j DROP

-A DENYIN -s 107.189.1.85/32 ! -i lo -j DROP

-A DENYIN -s 125.163.80.3/32 ! -i lo -j DROP

-A DENYIN -s 5.188.206.203/32 ! -i lo -j DROP

-A DENYIN -s 201.217.147.251/32 ! -i lo -j DROP

-A DENYIN -s 140.249.202.199/32 ! -i lo -j DROP

-A DENYIN -s 165.232.140.21/32 ! -i lo -j DROP

-A DENYIN -s 186.209.77.126/32 ! -i lo -j DROP

-A DENYIN -s 194.61.24.151/32 ! -i lo -j DROP

-A DENYIN -s 103.48.192.48/32 ! -i lo -j DROP

-A DENYIN -s 221.181.185.198/32 ! -i lo -j DROP

-A DENYIN -s 45.133.9.244/32 ! -i lo -j DROP

-A DENYIN -s 77.247.110.181/32 ! -i lo -j DROP

-A DENYIN -s 101.33.118.129/32 ! -i lo -j DROP

-A DENYIN -s 167.160.189.20/32 ! -i lo -j DROP

-A DENYIN -s 109.195.46.207/32 ! -i lo -j DROP

-A DENYIN -s 123.30.249.49/32 ! -i lo -j DROP

-A DENYIN -s 165.22.235.63/32 ! -i lo -j DROP

-A DENYIN -s 140.249.221.204/32 ! -i lo -j DROP

-A DENYIN -s 36.103.222.96/32 ! -i lo -j DROP

-A DENYIN -s 205.185.118.82/32 ! -i lo -j DROP

-A DENYIN -s 103.50.219.194/32 ! -i lo -j DROP

-A DENYIN -s 195.133.18.116/32 ! -i lo -j DROP

-A DENYIN -s 61.184.199.94/32 ! -i lo -j DROP

-A DENYIN -s 194.61.24.153/32 ! -i lo -j DROP

-A DENYIN -s 45.93.201.148/32 ! -i lo -j DROP

-A DENYIN -s 141.98.10.121/32 ! -i lo -j DROP

-A DENYIN -s 152.32.154.217/32 ! -i lo -j DROP

-A DENYIN -s 81.70.143.188/32 ! -i lo -j DROP

-A DENYIN -s 84.201.162.122/32 ! -i lo -j DROP

-A DENYIN -s 195.154.81.205/32 ! -i lo -j DROP

-A DENYIN -s 167.99.44.117/32 ! -i lo -j DROP

-A DENYIN -s 157.230.42.195/32 ! -i lo -j DROP

-A DENYIN -s 180.71.47.244/32 ! -i lo -j DROP

-A DENYIN -s 45.146.164.110/32 ! -i lo -j DROP

-A DENYIN -s 134.209.197.8/32 ! -i lo -j DROP

-A DENYIN -s 106.54.166.168/32 ! -i lo -j DROP

-A DENYIN -s 119.96.173.87/32 ! -i lo -j DROP

-A DENYIN -s 81.68.68.222/32 ! -i lo -j DROP

-A DENYIN -s 176.111.173.237/32 ! -i lo -j DROP

-A DENYIN -s 222.187.254.41/32 ! -i lo -j DROP

-A DENYIN -s 175.6.35.207/32 ! -i lo -j DROP

-A DENYIN -s 106.54.163.129/32 ! -i lo -j DROP

-A DENYIN -s 139.59.25.164/32 ! -i lo -j DROP

-A DENYIN -s 128.199.118.165/32 ! -i lo -j DROP

-A DENYIN -s 221.181.185.135/32 ! -i lo -j DROP

-A DENYIN -s 107.189.3.160/32 ! -i lo -j DROP

-A DENYIN -s 185.73.124.253/32 ! -i lo -j DROP

-A DENYIN -s 199.19.224.216/32 ! -i lo -j DROP

-A DENYIN -s 116.110.118.2/32 ! -i lo -j DROP

-A DENYIN -s 171.225.185.69/32 ! -i lo -j DROP

-A DENYIN -s 85.221.178.122/32 ! -i lo -j DROP

-A DENYIN -s 109.237.103.19/32 ! -i lo -j DROP

-A DENYIN -s 109.232.109.58/32 ! -i lo -j DROP

-A DENYIN -s 222.124.192.154/32 ! -i lo -j DROP

-A DENYIN -s 134.209.157.201/32 ! -i lo -j DROP

-A DENYIN -s 203.172.76.4/32 ! -i lo -j DROP

-A DENYIN -s 187.64.105.126/32 ! -i lo -j DROP

-A DENYIN -s 183.62.232.88/32 ! -i lo -j DROP

-A DENYIN -s 120.92.33.108/32 ! -i lo -j DROP

-A DENYIN -s 222.186.180.130/32 ! -i lo -j DROP

-A DENYIN -s 201.138.58.176/32 ! -i lo -j DROP

-A DENYIN -s 211.45.247.122/32 ! -i lo -j DROP

-A DENYIN -s 222.186.42.13/32 ! -i lo -j DROP

-A DENYIN -s 148.66.142.123/32 ! -i lo -j DROP

-A DENYIN -s 139.99.174.102/32 ! -i lo -j DROP

-A DENYIN -s 161.35.59.177/32 ! -i lo -j DROP

-A DENYIN -s 159.203.24.126/32 ! -i lo -j DROP

-A DENYIN -s 209.141.51.168/32 ! -i lo -j DROP

-A DENYIN -s 45.61.186.176/32 ! -i lo -j DROP

-A DENYIN -s 203.195.171.47/32 ! -i lo -j DROP

-A DENYIN -s 117.51.154.192/32 ! -i lo -j DROP

-A DENYIN -s 36.80.48.9/32 ! -i lo -j DROP

-A DENYIN -s 41.207.252.122/32 ! -i lo -j DROP

-A DENYIN -s 5.188.62.140/32 ! -i lo -j DROP

-A DENYIN -s 162.244.77.140/32 ! -i lo -j DROP

-A DENYIN -s 119.193.33.206/32 ! -i lo -j DROP

-A DENYIN -s 14.207.43.57/32 ! -i lo -j DROP

-A DENYIN -s 39.144.2.245/32 ! -i lo -j DROP

-A DENYIN -s 134.122.57.175/32 ! -i lo -j DROP

-A DENYIN -s 179.43.175.26/32 ! -i lo -j DROP

-A DENYIN -s 222.187.238.58/32 ! -i lo -j DROP

-A DENYIN -s 141.98.10.82/32 ! -i lo -j DROP

-A DENYIN -s 221.131.165.75/32 ! -i lo -j DROP

-A DENYIN -s 49.233.128.239/32 ! -i lo -j DROP

-A DENYIN -s 221.131.165.65/32 ! -i lo -j DROP

-A DENYIN -s 187.72.128.177/32 ! -i lo -j DROP

-A DENYIN -s 119.200.186.168/32 ! -i lo -j DROP

-A DENYIN -s 140.143.229.207/32 ! -i lo -j DROP

-A DENYIN -s 114.111.53.196/32 ! -i lo -j DROP

-A DENYIN -s 66.96.237.170/32 ! -i lo -j DROP

-A DENYIN -s 87.99.68.239/32 ! -i lo -j DROP

-A DENYIN -s 139.155.75.170/32 ! -i lo -j DROP

-A DENYIN -s 221.181.185.140/32 ! -i lo -j DROP

-A DENYIN -s 95.216.174.114/32 ! -i lo -j DROP

-A DENYIN -s 212.33.250.241/32 ! -i lo -j DROP

-A DENYIN -s 31.130.184.64/32 ! -i lo -j DROP

-A DENYIN -s 66.31.94.34/32 ! -i lo -j DROP

-A DENYIN -s 106.13.19.75/32 ! -i lo -j DROP

-A DENYIN -s 40.115.79.44/32 ! -i lo -j DROP

-A DENYIN -s 142.93.98.230/32 ! -i lo -j DROP

-A DENYIN -s 31.130.184.132/32 ! -i lo -j DROP

-A DENYIN -s 104.248.206.88/32 ! -i lo -j DROP

-A DENYIN -s 222.185.230.154/32 ! -i lo -j DROP

-A DENYIN -s 128.199.123.0/32 ! -i lo -j DROP

-A DENYIN -s 182.34.53.33/32 ! -i lo -j DROP

-A DENYIN -s 188.79.21.190/32 ! -i lo -j DROP

-A DENYIN -s 202.78.233.27/32 ! -i lo -j DROP

-A DENYIN -s 67.205.187.65/32 ! -i lo -j DROP

-A DENYIN -s 222.186.42.7/32 ! -i lo -j DROP

-A DENYIN -s 150.158.153.128/32 ! -i lo -j DROP

-A DENYIN -s 46.101.254.194/32 ! -i lo -j DROP

-A DENYIN -s 147.182.171.152/32 ! -i lo -j DROP

-A DENYIN -s 87.246.7.228/32 ! -i lo -j DROP

-A DENYIN -s 172.113.183.83/32 ! -i lo -j DROP

-A DENYIN -s 221.131.165.33/32 ! -i lo -j DROP

-A DENYIN -s 157.245.74.137/32 ! -i lo -j DROP

-A DENYIN -s 111.229.44.68/32 ! -i lo -j DROP

-A DENYIN -s 176.111.173.238/32 ! -i lo -j DROP

-A DENYIN -s 221.131.165.50/32 ! -i lo -j DROP

-A DENYIN -s 122.51.232.221/32 ! -i lo -j DROP

-A DENYIN -s 52.140.103.80/32 ! -i lo -j DROP

-A DENYIN -s 118.25.27.159/32 ! -i lo -j DROP

-A DENYIN -s 206.189.38.198/32 ! -i lo -j DROP

-A DENYIN -s 222.186.30.112/32 ! -i lo -j DROP

-A DENYIN -s 103.136.42.76/32 ! -i lo -j DROP

-A DENYIN -s 125.124.117.226/32 ! -i lo -j DROP

-A DENYIN -s 47.254.215.122/32 ! -i lo -j DROP

-A DENYIN -s 200.6.179.92/32 ! -i lo -j DROP

-A DENYIN -s 176.95.159.105/32 ! -i lo -j DROP

-A DENYIN -s 111.67.207.173/32 ! -i lo -j DROP

-A DENYIN -s 68.183.196.11/32 ! -i lo -j DROP

-A DENYIN -s 222.187.232.39/32 ! -i lo -j DROP

-A DENYIN -s 221.181.185.151/32 ! -i lo -j DROP

-A DENYIN -s 81.69.37.18/32 ! -i lo -j DROP

-A DENYIN -s 47.5.108.128/32 ! -i lo -j DROP

-A DENYIN -s 221.181.185.94/32 ! -i lo -j DROP

-A DENYIN -s 159.235.32.33/32 ! -i lo -j DROP

-A DENYIN -s 107.189.8.8/32 ! -i lo -j DROP

-A DENYIN -s 59.10.169.70/32 ! -i lo -j DROP

-A DENYIN -s 103.90.204.233/32 ! -i lo -j DROP

-A DENYIN -s 138.197.129.38/32 ! -i lo -j DROP

-A DENYIN -s 49.206.18.102/32 ! -i lo -j DROP

-A DENYIN -s 5.188.206.196/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.196/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.196/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 136.144.41.87/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 136.144.41.87/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 136.144.41.87/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.98/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.98/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.98/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 136.144.41.70/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 136.144.41.70/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 136.144.41.70/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 203.159.80.190/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 203.159.80.190/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 203.159.80.190/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 106.14.10.47/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 106.14.10.47/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 106.14.10.47/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.201/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.201/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.201/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 212.192.246.200/32 ! -i lo -p tcp -m tcp --dport 110 -j DROP

-A DENYIN -s 212.192.246.200/32 ! -i lo -p tcp -m tcp --dport 143 -j DROP

-A DENYIN -s 212.192.246.200/32 ! -i lo -p tcp -m tcp --dport 993 -j DROP

-A DENYIN -s 212.192.246.200/32 ! -i lo -p tcp -m tcp --dport 995 -j DROP

-A DENYIN -s 5.188.206.197/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.197/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.197/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.194/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.194/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.194/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 45.133.1.100/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 45.133.1.100/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 45.133.1.100/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.200/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.200/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.200/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 106.14.135.136/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 106.14.135.136/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 106.14.135.136/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.158/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.158/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.158/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.156/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.156/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.156/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.198/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.198/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.198/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.100/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.100/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.100/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.101/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.101/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.101/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.157/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.157/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.157/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 199.229.248.98/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 199.229.248.98/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 199.229.248.98/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 194.61.24.155/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 194.61.24.155/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 194.61.24.155/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 194.61.24.152/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 194.61.24.152/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 194.61.24.152/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.202/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.202/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.202/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.99/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.99/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.99/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.195/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.195/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.195/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.199/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.199/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.199/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 143.198.182.201/32 ! -i lo -p tcp -m tcp --dport 110 -j DROP

-A DENYIN -s 143.198.182.201/32 ! -i lo -p tcp -m tcp --dport 143 -j DROP

-A DENYIN -s 143.198.182.201/32 ! -i lo -p tcp -m tcp --dport 993 -j DROP

-A DENYIN -s 143.198.182.201/32 ! -i lo -p tcp -m tcp --dport 995 -j DROP

-A DENYIN -s 194.61.24.154/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 194.61.24.154/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 194.61.24.154/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 1.116.240.174/32 ! -i lo -p tcp -m tcp --dport 80 -j DROP

-A DENYIN -s 1.116.240.174/32 ! -i lo -p tcp -m tcp --dport 443 -j DROP

-A DENYIN -s 5.188.206.155/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.155/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.155/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.102/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.102/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.102/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 5.188.206.154/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 5.188.206.154/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 5.188.206.154/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 1.116.187.198/32 ! -i lo -p tcp -m tcp --dport 25 -j DROP

-A DENYIN -s 1.116.187.198/32 ! -i lo -p tcp -m tcp --dport 465 -j DROP

-A DENYIN -s 1.116.187.198/32 ! -i lo -p tcp -m tcp --dport 587 -j DROP

-A DENYIN -s 222.186.42.213/32 ! -i lo -j DROP

-A DENYOUT -d 49.233.5.253/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 64.202.187.246/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.186.42.137/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 153.35.93.67/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 140.143.9.192/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 190.226.244.9/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 150.158.174.229/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 45.80.64.230/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 121.5.124.51/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 157.245.78.144/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 200.70.56.202/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 195.223.211.242/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 42.192.128.166/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 123.206.194.213/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 59.56.103.22/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 1.15.25.243/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 77.247.110.134/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 139.217.98.200/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 143.110.182.53/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 61.177.173.27/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 209.141.55.247/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 50.116.98.18/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 121.4.92.128/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 1.83.113.234/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 106.52.70.240/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 20.52.51.238/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.128.47.53/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.186.30.76/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 174.91.192.200/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 61.128.172.202/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 219.145.61.20/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 60.174.236.98/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 182.61.43.33/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 189.240.225.206/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 210.150.182.217/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 112.220.238.3/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 139.59.121.221/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 49.235.84.72/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 175.118.152.100/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 211.198.174.72/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 40.115.187.98/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 115.159.213.195/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 185.73.124.100/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 203.195.231.79/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 77.158.71.118/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 58.144.209.130/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 122.55.221.172/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 82.156.24.211/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 123.56.107.171/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 82.156.54.233/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 187.60.179.69/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 82.156.121.62/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 111.229.187.216/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 193.169.254.234/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 165.22.220.123/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 45.155.204.39/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 180.76.172.154/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 107.189.1.85/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 125.163.80.3/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 5.188.206.203/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 201.217.147.251/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 140.249.202.199/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 165.232.140.21/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 186.209.77.126/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 194.61.24.151/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 103.48.192.48/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.181.185.198/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 45.133.9.244/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 77.247.110.181/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 101.33.118.129/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 167.160.189.20/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 109.195.46.207/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 123.30.249.49/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 165.22.235.63/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 140.249.221.204/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 36.103.222.96/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 205.185.118.82/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 103.50.219.194/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 195.133.18.116/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 61.184.199.94/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 194.61.24.153/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 45.93.201.148/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 141.98.10.121/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 152.32.154.217/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 81.70.143.188/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 84.201.162.122/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 195.154.81.205/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 167.99.44.117/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 157.230.42.195/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 180.71.47.244/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 45.146.164.110/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 134.209.197.8/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 106.54.166.168/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 119.96.173.87/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 81.68.68.222/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 176.111.173.237/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.187.254.41/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 175.6.35.207/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 106.54.163.129/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 139.59.25.164/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 128.199.118.165/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.181.185.135/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 107.189.3.160/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 185.73.124.253/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 199.19.224.216/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 116.110.118.2/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 171.225.185.69/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 85.221.178.122/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 109.237.103.19/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 109.232.109.58/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.124.192.154/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 134.209.157.201/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 203.172.76.4/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 187.64.105.126/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 183.62.232.88/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 120.92.33.108/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.186.180.130/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 201.138.58.176/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 211.45.247.122/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.186.42.13/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 148.66.142.123/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 139.99.174.102/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 161.35.59.177/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 159.203.24.126/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 209.141.51.168/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 45.61.186.176/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 203.195.171.47/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 117.51.154.192/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 36.80.48.9/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 41.207.252.122/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 5.188.62.140/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 162.244.77.140/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 119.193.33.206/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 14.207.43.57/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 39.144.2.245/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 134.122.57.175/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 179.43.175.26/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.187.238.58/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 141.98.10.82/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.131.165.75/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 49.233.128.239/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.131.165.65/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 187.72.128.177/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 119.200.186.168/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 140.143.229.207/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 114.111.53.196/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 66.96.237.170/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 87.99.68.239/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 139.155.75.170/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.181.185.140/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 95.216.174.114/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 212.33.250.241/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 31.130.184.64/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 66.31.94.34/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 106.13.19.75/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 40.115.79.44/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 142.93.98.230/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 31.130.184.132/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 104.248.206.88/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.185.230.154/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 128.199.123.0/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 182.34.53.33/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 188.79.21.190/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 202.78.233.27/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 67.205.187.65/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.186.42.7/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 150.158.153.128/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 46.101.254.194/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 147.182.171.152/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 87.246.7.228/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 172.113.183.83/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.131.165.33/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 157.245.74.137/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 111.229.44.68/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 176.111.173.238/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.131.165.50/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 122.51.232.221/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 52.140.103.80/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 118.25.27.159/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 206.189.38.198/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.186.30.112/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 103.136.42.76/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 125.124.117.226/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 47.254.215.122/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 200.6.179.92/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 176.95.159.105/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 111.67.207.173/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 68.183.196.11/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 222.187.232.39/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.181.185.151/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 81.69.37.18/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 47.5.108.128/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 221.181.185.94/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 159.235.32.33/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 107.189.8.8/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 59.10.169.70/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 103.90.204.233/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 138.197.129.38/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 49.206.18.102/32 ! -o lo -j LOGDROPOUT

-A DENYOUT -d 5.188.206.196/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.196/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.196/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 136.144.41.87/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 136.144.41.87/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 136.144.41.87/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.98/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.98/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.98/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 136.144.41.70/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 136.144.41.70/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 136.144.41.70/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 203.159.80.190/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 203.159.80.190/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 203.159.80.190/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 106.14.10.47/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 106.14.10.47/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 106.14.10.47/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.201/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.201/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.201/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 212.192.246.200/32 ! -o lo -p tcp -m tcp --dport 110 -j LOGDROPOUT

-A DENYOUT -d 212.192.246.200/32 ! -o lo -p tcp -m tcp --dport 143 -j LOGDROPOUT

-A DENYOUT -d 212.192.246.200/32 ! -o lo -p tcp -m tcp --dport 993 -j LOGDROPOUT

-A DENYOUT -d 212.192.246.200/32 ! -o lo -p tcp -m tcp --dport 995 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.197/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.197/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.197/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.194/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.194/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.194/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 45.133.1.100/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 45.133.1.100/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 45.133.1.100/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.200/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.200/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.200/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 106.14.135.136/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 106.14.135.136/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 106.14.135.136/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.158/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.158/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.158/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.156/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.156/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.156/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.198/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.198/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.198/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.100/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.100/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.100/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.101/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.101/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.101/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.157/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.157/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.157/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 199.229.248.98/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 199.229.248.98/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 199.229.248.98/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.155/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.155/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.155/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.152/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.152/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.152/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.202/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.202/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.202/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.99/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.99/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.99/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.195/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.195/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.195/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.199/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.199/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.199/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 143.198.182.201/32 ! -o lo -p tcp -m tcp --dport 110 -j LOGDROPOUT

-A DENYOUT -d 143.198.182.201/32 ! -o lo -p tcp -m tcp --dport 143 -j LOGDROPOUT

-A DENYOUT -d 143.198.182.201/32 ! -o lo -p tcp -m tcp --dport 993 -j LOGDROPOUT

-A DENYOUT -d 143.198.182.201/32 ! -o lo -p tcp -m tcp --dport 995 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.154/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.154/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 194.61.24.154/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 1.116.240.174/32 ! -o lo -p tcp -m tcp --dport 80 -j LOGDROPOUT

-A DENYOUT -d 1.116.240.174/32 ! -o lo -p tcp -m tcp --dport 443 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.155/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.155/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.155/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.102/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.102/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.102/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.154/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.154/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 5.188.206.154/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 1.116.187.198/32 ! -o lo -p tcp -m tcp --dport 25 -j LOGDROPOUT

-A DENYOUT -d 1.116.187.198/32 ! -o lo -p tcp -m tcp --dport 465 -j LOGDROPOUT

-A DENYOUT -d 1.116.187.198/32 ! -o lo -p tcp -m tcp --dport 587 -j LOGDROPOUT

-A DENYOUT -d 222.186.42.213/32 ! -o lo -j LOGDROPOUT

-A LOCALINPUT ! -i lo -j ALLOWIN

-A LOCALINPUT ! -i lo -j DENYIN

-A LOCALOUTPUT ! -o lo -j ALLOWOUT

-A LOCALOUTPUT ! -o lo -j DENYOUT

-A LOGDROPIN -p tcp -m tcp --dport 23 -j DROP

-A LOGDROPIN -p udp -m udp --dport 23 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 67 -j DROP

-A LOGDROPIN -p udp -m udp --dport 67 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 68 -j DROP

-A LOGDROPIN -p udp -m udp --dport 68 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 111 -j DROP

-A LOGDROPIN -p udp -m udp --dport 111 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 113 -j DROP

-A LOGDROPIN -p udp -m udp --dport 113 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 135:139 -j DROP

-A LOGDROPIN -p udp -m udp --dport 135:139 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 445 -j DROP

-A LOGDROPIN -p udp -m udp --dport 445 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 500 -j DROP

-A LOGDROPIN -p udp -m udp --dport 500 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 513 -j DROP

-A LOGDROPIN -p udp -m udp --dport 513 -j DROP

-A LOGDROPIN -p tcp -m tcp --dport 520 -j DROP

-A LOGDROPIN -p udp -m udp --dport 520 -j DROP

-A LOGDROPIN -p tcp -m limit --limit 30/min -j LOG --log-prefix "Firewall: *TCP_IN Blocked* "

-A LOGDROPIN -p udp -m limit --limit 30/min -j LOG --log-prefix "Firewall: *UDP_IN Blocked* "

-A LOGDROPIN -p icmp -m limit --limit 30/min -j LOG --log-prefix "Firewall: *ICMP_IN Blocked* "

-A LOGDROPIN -j DROP

-A LOGDROPOUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 30/min -j LOG --log-prefix "Firewall: *TCP_OUT Blocked* " --log-uid

-A LOGDROPOUT -p udp -m limit --limit 30/min -j LOG --log-prefix "Firewall: *UDP_OUT Blocked* " --log-uid

-A LOGDROPOUT -p icmp -m limit --limit 30/min -j LOG --log-prefix "Firewall: *ICMP_OUT Blocked* " --log-uid

-A LOGDROPOUT -j REJECT --reject-with icmp-port-unreachable

-A SMTPOUTPUT -o lo -p tcp -m multiport --dports 25,465,587 -j ACCEPT

-A SMTPOUTPUT -p tcp -m multiport --dports 25,465,587 -m owner --gid-owner 12 -j ACCEPT

-A SMTPOUTPUT -p tcp -m multiport --dports 25,465,587 -m owner --uid-owner 0 -j ACCEPT

-A SMTPOUTPUT -p tcp -m multiport --dports 25,465,587 -j LOGDROPOUT

COMMIT

# Completed on Wed Sep 29 14:26:25 2021

Any clue why i am having such connection issues? What other information would you need from me to check if my CSF is somehow configured to 'strict'?

Richard G · Sep 29, 2021

That is odd. Just to be sure, could you clear all CSF bans?
csf -df
and
csf -tf
and then try again and see if it makes any difference.
Try with telnet first.

Exim 'Connection timed out' with CSF enabled, how?

webunity

Verified User

Richard G

Verified User