thanks debbie10t for response ,
I did all the changes you have asked me and one in the link but I still have the same problem
look again my new configuration:
client.ovpn
client
dev tap
dev tun
proto udp
remote 37.187.199.85 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C://keys//ca.crt"
cert "C://keys//client1.crt"
key "C://keys//client1.key"
ns-cert-type server
comp-lzo
verb 3
push "dhcp-option DNS 10.8.0.6"
redirect-gateway
server.conf
local 37.187.199.85
port 1194
proto udp
dev tap
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
log /etc/openvpn/server.log
push "dhcp-option dns 8.8.8.8"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
log client :
Thu Mar 06 23:41:14 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Thu Mar 06 23:41:14 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Mar 06 23:41:14 2014 LZO compression initialized
Thu Mar 06 23:41:14 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Mar 06 23:41:14 2014 Socket Buffers: R=[8192->8192] S=[65536->65536]
Thu Mar 06 23:41:14 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Mar 06 23:41:14 2014 Local Options hash (VER=V4): '41690919'
Thu Mar 06 23:41:14 2014 Expected Remote Options hash (VER=V4): '530fdded'
Thu Mar 06 23:41:14 2014 UDPv4 link local: [undef]
Thu Mar 06 23:41:14 2014 UDPv4 link remote: 37.187.199.85:1194
Thu Mar 06 23:41:14 2014 TLS: Initial packet from 37.187.199.85:1194, sid=15addd11 4cc53d40
Thu Mar 06 23:41:17 2014 VERIFY OK: depth=1, /C=fr/ST=fr/L=paris/O=meg_web_synergie/OU=fr/CN=Meg_web_synegie_CA/name=EasyRSA/emailAddress=chaker.info@gmail.com
Thu Mar 06 23:41:17 2014 VERIFY OK: nsCertType=SERVER
Thu Mar 06 23:41:17 2014 VERIFY OK: depth=0, /C=fr/ST=FR/L=Paris/O=Meg_web_synegie/OU=FR/CN=server/name=EasyRSA/emailAddress=m_gozlan@hotmail.com
Thu Mar 06 23:41:18 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 06 23:41:18 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 06 23:41:18 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 06 23:41:18 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 06 23:41:18 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Mar 06 23:41:18 2014 [server] Peer Connection Initiated with 37.187.199.85:1194
Thu Mar 06 23:41:20 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Mar 06 23:41:20 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option dns 8.8.8.8,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Mar 06 23:41:20 2014 Options error: --dhcp-option: unknown option type 'dns' or missing parameter
Thu Mar 06 23:41:20 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Mar 06 23:41:20 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Mar 06 23:41:20 2014 OPTIONS IMPORT: route options modified
Thu Mar 06 23:41:20 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Mar 06 23:41:20 2014 ROUTE default_gateway=192.168.1.1
Thu Mar 06 23:41:20 2014 TAP-WIN32 device [Connexion au r??seau local 8] opened: \\.\Global\{24794FFD-B116-41A2-ABC5-24E97B7083FC}.tap
Thu Mar 06 23:41:20 2014 TAP-Win32 Driver Version 9.9
Thu Mar 06 23:41:20 2014 TAP-Win32 MTU=1500
Thu Mar 06 23:41:20 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {24794FFD-B116-41A2-ABC5-24E97B7083FC} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Mar 06 23:41:20 2014 Successful ARP Flush on interface [36] {24794FFD-B116-41A2-ABC5-24E97B7083FC}
Thu Mar 06 23:41:25 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Thu Mar 06 23:41:25 2014 C:\WINDOWS\system32\route.exe ADD 37.187.199.85 MASK 255.255.255.255 192.168.1.1
Thu Mar 06 23:41:25 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Thu Mar 06 23:41:25 2014 Route addition via IPAPI succeeded [adaptive]
Thu Mar 06 23:41:25 2014 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Mar 06 23:41:25 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Mar 06 23:41:25 2014 Route addition via IPAPI succeeded [adaptive]
Thu Mar 06 23:41:25 2014 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Mar 06 23:41:25 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Mar 06 23:41:25 2014 Route addition via IPAPI succeeded [adaptive]
Thu Mar 06 23:41:25 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Thu Mar 06 23:41:25 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Mar 06 23:41:25 2014 Route addition via IPAPI succeeded [adaptive]
Thu Mar 06 23:41:25 2014 Initialization Sequence Completed
Thu Mar 06 23:41:46 2014 TCP/UDP: Closing socket
Thu Mar 06 23:41:46 2014 C:\WINDOWS\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Thu Mar 06 23:41:46 2014 Route deletion via IPAPI succeeded [adaptive]
Thu Mar 06 23:41:46 2014 C:\WINDOWS\system32\route.exe DELETE 37.187.199.85 MASK 255.255.255.255 192.168.1.1
Thu Mar 06 23:41:46 2014 Route deletion via IPAPI succeeded [adaptive]
Thu Mar 06 23:41:46 2014 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Mar 06 23:41:46 2014 Route deletion via IPAPI succeeded [adaptive]
Thu Mar 06 23:41:46 2014 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Mar 06 23:41:46 2014 Route deletion via IPAPI succeeded [adaptive]
Thu Mar 06 23:41:46 2014 Closing TUN/TAP interface
Thu Mar 06 23:41:46 2014 SIGTERM[hard,] received, process exiting
log server :
Thu Mar 6 23:41:02 2014 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Thu Mar 6 23:41:02 2014 Diffie-Hellman initialized with 2048 bit key
Thu Mar 6 23:41:02 2014 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Mar 6 23:41:02 2014 ROUTE_GATEWAY 37.187.199.254/255.255.255.0 IFACE=eth0 HWADDR=02:00:25:bb:c7:55
Thu Mar 6 23:41:02 2014 TUN/TAP device tun0 opened
Thu Mar 6 23:41:02 2014 TUN/TAP TX queue length set to 100
Thu Mar 6 23:41:02 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Mar 6 23:41:02 2014 /sbin/ip link set dev tun0 up mtu 1500
Thu Mar 6 23:41:02 2014 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Thu Mar 6 23:41:02 2014 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Thu Mar 6 23:41:02 2014 UDPv4 link local (bound): [AF_INET]37.187.199.85:1194
Thu Mar 6 23:41:02 2014 UDPv4 link remote: [undef]
Thu Mar 6 23:41:02 2014 MULTI: multi_init called, r=256 v=256
Thu Mar 6 23:41:02 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Thu Mar 6 23:41:02 2014 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6
Thu Mar 6 23:41:02 2014 succeeded -> ifconfig_pool_set()
Thu Mar 6 23:41:02 2014 IFCONFIG POOL LIST
Thu Mar 6 23:41:02 2014 client1,10.8.0.4
Thu Mar 6 23:41:02 2014 Initialization Sequence Completed
Thu Mar 6 23:41:16 2014 197.27.40.64:60288 TLS: Initial packet from [AF_INET]197.27.40.64:60288, sid=9a86a184 558abc18
Thu Mar 6 23:41:19 2014 197.27.40.64:60288 VERIFY OK: depth=1, C=fr, ST=fr, L=paris, O=meg web synergie, OU=fr, CN=Meg web synegie CA, name=EasyRSA, emailAddress=chaker.info@gmail.com
Thu Mar 6 23:41:19 2014 197.27.40.64:60288 VERIFY OK: depth=0, C=fr, ST=fr, L=paris, O=Meg web synergie, OU=fr, CN=client1, name=EasyRSA, emailAddress=chaker.info@gmail.com
Thu Mar 6 23:41:19 2014 197.27.40.64:60288 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 6 23:41:19 2014 197.27.40.64:60288 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 6 23:41:19 2014 197.27.40.64:60288 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 6 23:41:19 2014 197.27.40.64:60288 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 6 23:41:20 2014 197.27.40.64:60288 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Mar 6 23:41:20 2014 197.27.40.64:60288 [client1] Peer Connection Initiated with [AF_INET]197.27.40.64:60288
Thu Mar 6 23:41:20 2014 client1/197.27.40.64:60288 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Thu Mar 6 23:41:20 2014 client1/197.27.40.64:60288 MULTI: Learn: 10.8.0.6 -> client1/197.27.40.64:60288
Thu Mar 6 23:41:20 2014 client1/197.27.40.64:60288 MULTI: primary virtual IP for client1/197.27.40.64:60288: 10.8.0.6
Thu Mar 6 23:41:22 2014 client1/197.27.40.64:60288 PUSH: Received control message: 'PUSH_REQUEST'
Thu Mar 6 23:41:22 2014 client1/197.27.40.64:60288 send_push_reply(): safe_cap=940
Thu Mar 6 23:41:22 2014 client1/197.27.40.64:60288 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option dns 8.8.8.8,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Thu Mar 6 23:42:53 2014 79.183.226.172:54933 TLS: Initial packet from [AF_INET]79.183.226.172:54933, sid=40387c6f 52477e42
Thu Mar 6 23:42:54 2014 79.183.226.172:54933 VERIFY OK: depth=1, C=fr, ST=fr, L=paris, O=meg web synergie, OU=fr, CN=Meg web synegie CA, name=EasyRSA, emailAddress=chaker.info@gmail.com
Thu Mar 6 23:42:54 2014 79.183.226.172:54933 VERIFY OK: depth=0, C=fr, ST=fr, L=paris, O=Meg web synergie, OU=fr, CN=client1, name=EasyRSA, emailAddress=chaker.info@gmail.com
Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Mar 6 23:42:55 2014 79.183.226.172:54933 [client1] Peer Connection Initiated with [AF_INET]79.183.226.172:54933
Thu Mar 6 23:42:55 2014 MULTI: new connection by client 'client1' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Thu Mar 6 23:42:55 2014 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Thu Mar 6 23:42:55 2014 MULTI: Learn: 10.8.0.6 -> client1/79.183.226.172:54933
Thu Mar 6 23:42:55 2014 MULTI: primary virtual IP for client1/79.183.226.172:54933: 10.8.0.6
Thu Mar 6 23:42:57 2014 client1/79.183.226.172:54933 PUSH: Received control message: 'PUSH_REQUEST'
Thu Mar 6 23:42:57 2014 client1/79.183.226.172:54933 send_push_reply(): safe_cap=940
Thu Mar 6 23:42:57 2014 client1/79.183.226.172:54933 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option dns 8.8.8.8,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
iptables -L -t nat :
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
RETURN tcp -- anywhere anywhere multiport dports smtp,urd,submission owner GID match mailman
RETURN tcp -- anywhere anywhere multiport dports smtp,urd,submission owner GID match mail
RETURN tcp -- anywhere localhost.localdomain multiport dports smtp,urd,submission owner UID match cpanel
RETURN tcp -- anywhere anywhere multiport dports smtp,urd,submission owner UID match root
REDIRECT tcp -- anywhere anywhere multiport dports smtp,urd,submission
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
SNAT all -- anywhere anywhere to:37.187.199.85
MASQUERADE all -- anywhere anywhere
MASQUERADE all -- 10.8.0.0/24 anywhere
SNAT all -- 1.2.4.0/24 anywhere to:37.187.199.85
MASQUERADE all -- 1.2.4.0/24 anywhere
MASQUERADE all -- anywhere anywhere
MASQUERADE all -- 10.8.0.0/24 anywhere
MASQUERADE all -- 10.8.0.0/24 anywhere
MASQUERADE all -- 10.8.0.0/24 anywhere
sestatus :
SELinux status: disabled
iptables -L :
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
acctboth all -- anywhere anywhere
ACCEPT tcp -- cdns.ovh.net anywhere tcp dpt:domain
ACCEPT udp -- cdns.ovh.net anywhere udp dpt:domain
ACCEPT tcp -- cdns.ovh.net anywhere tcp spt:domain
ACCEPT udp -- cdns.ovh.net anywhere udp spt:domain
LOCALINPUT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
INVALID tcp -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp-data
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:domain
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:http
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:imap
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:https
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:urd
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:submission
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:imaps
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3s
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:tsrmagt
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:tpcsrvr
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:infowave
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:radsec
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:gnunet
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:eli
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nbx-ser
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nbx-dir
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:openvpn
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp-data
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:domain
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:openvpn
ACCEPT icmp -- anywhere anywhere icmp echo-request limit: avg 1/sec burst 5
ACCEPT icmp -- anywhere anywhere icmp echo-reply limit: avg 1/sec burst 5
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
LOGDROPIN all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere multiport dports smtp,urd,submission owner GID match mailman
ACCEPT tcp -- anywhere anywhere multiport dports smtp,urd,submission owner GID match mail
ACCEPT tcp -- anywhere localhost.localdomain multiport dports smtp,urd,submission owner UID match cpanel
ACCEPT tcp -- anywhere anywhere multiport dports smtp,urd,submission owner UID match root
acctboth all -- anywhere anywhere
ACCEPT tcp -- anywhere cdns.ovh.net tcp dpt:domain
ACCEPT udp -- anywhere cdns.ovh.net udp dpt:domain
ACCEPT tcp -- anywhere cdns.ovh.net tcp spt:domain
ACCEPT udp -- anywhere cdns.ovh.net udp spt:domain
LOCALOUTPUT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp spt:domain
ACCEPT udp -- anywhere anywhere udp spt:domain
ACCEPT all -- anywhere anywhere
INVALID tcp -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp-data
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:time
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nicname
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:domain
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:http
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:auth
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:https
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:submission
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:rsync
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:gnunet
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:eli
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:sep
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:sms-chat
ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:openvpn
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp-data
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:domain
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:auth
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ntp
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:rsync
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:6277
ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:openvpn
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
DROP all -- anywhere anywhere
Chain ALLOWIN (1 references)
target prot opt source destination
ACCEPT all -- sge91-1-82-234-15-56.fbx.proxad.net anywhere
ACCEPT all -- 41.230.239.88 anywhere
Chain ALLOWOUT (1 references)
target prot opt source destination
ACCEPT all -- anywhere sge91-1-82-234-15-56.fbx.proxad.net
ACCEPT all -- anywhere 41.230.239.88
Chain DENYIN (1 references)
target prot opt source destination
DROP all -- 121.199.56.139 anywhere
DROP all -- 250.ip-37-187-62.eu anywhere
DROP all -- 176-31-115-73.ovh.net anywhere
DROP all -- 112.ip-37-187-67.eu anywhere
DROP all -- weblinux01.tecla.com.br anywhere
DROP all -- 200.51.174.61.dial.wz.zj.dynamic.163data.com.cn anywhere
DROP all -- 210.51.174.61.dial.wz.zj.dynamic.163data.com.cn anywhere
DROP all -- ks3373898.kimsufi.com anywhere
DROP all -- whl0094.whservidor.com anywhere
DROP all -- 80.247.72.57 anywhere
DROP all -- bband-dyn140.178-41-243.t-com.sk anywhere
DROP all -- 189-47-132-239.dsl.telesp.net.br anywhere
DROP all -- dynamic.vdc.vn anywhere
DROP all -- 68-188-72-60.static.stls.mo.charter.com anywhere
DROP all -- 210.186.155.170 anywhere
DROP all -- 173-14-48-145-Michigan.hfc.comcastbusiness.net anywhere
DROP all -- p578bd5ec.dip0.t-ipconnect.de anywhere
DROP all -- 232.Red-83-40-53.dynamicIP.rima-tde.net anywhere
DROP all -- ks3289417.kimsufi.com anywhere
DROP all -- 80.174.162.141.dyn.user.ono.com anywhere
DROP all -- 190.85.26.37 anywhere
DROP all -- wsip-174-79-39-4.ph.ph.cox.net anywhere
DROP all -- ool-6038b4da.static.optonline.net anywhere
DROP all -- host130.181-15-98.telecom.net.ar anywhere
DROP all -- s208-180-21-173.bcstcmta02.clsttx.tl.sta.suddenlink.net anywhere
DROP all -- host213-120-102-252.in-addr.btopenworld.com anywhere
DROP all -- ool-4b7ff3d2.static.optonline.net anywhere
DROP all -- mail.dati.com.tr anywhere
DROP all -- 221.164.212.117 anywhere
DROP all -- 75-151-145-195-Philadelphia.hfc.comcastbusiness.net anywhere
DROP all -- adsl-074-165-019-209.sip.asm.bellsouth.net anywhere
DROP all -- diagmed.cas.gvt.net.br anywhere
DROP all -- cable-89-216-21-136.static.sbb.rs anywhere
DROP all -- 122-146-1-206.static.sparqnet.net anywhere
DROP all -- 82.114.80.154 anywhere
DROP all -- h72-2-20-183.bigpipeinc.com anywhere
DROP all -- 177-139-182-86.dsl.telesp.net.br anywhere
DROP all -- 190.5.230.178 anywhere
DROP all -- s4-163.gazduirejocuri.ro anywhere
DROP all -- 206-248-138-44.dsl.teksavvy.com anywhere
DROP all -- 12.236.34.135 anywhere
DROP all -- 203.129.196.27 anywhere
DROP all -- etr5.avf.hu anywhere
DROP all -- abs-static-239.177.251.27.aircel.co.in anywhere
DROP all -- h-74-3-121-10.snva.ca.megapath.net anywhere
DROP all -- 192.241.70.95.dsl.static.turk.net anywhere
DROP all -- 105-236-74-109.access.mtnbusiness.co.za anywhere
DROP all -- 80.174.162.211.dyn.user.ono.com anywhere
DROP all -- ll62-2-210-251-62.ll62.iam.net.ma anywhere
DROP all -- 209-252-14-93.ip.mcleodusa.net anywhere
DROP all -- microsoft02.dominiotemporarioidc.com anywhere
DROP all -- 79.136.209.173 anywhere
DROP all -- h200.7.141.67.dynamic.ip.windstream.net anywhere
DROP all -- 122.155.0.68 anywhere
DROP all -- alphacontrols.vianw.co.uk anywhere
DROP all -- static-97-161-86-188.ipcom.comunitel.net anywhere
DROP all -- 201.196.50.12 anywhere
DROP all -- 91.82.88.231 anywhere
DROP all -- 189.11.0.226 anywhere
DROP all -- evrica-otchet.mv.ru anywhere
DROP all -- adsl-dyn126.91-127-52.t-com.sk anywhere
DROP all -- 222.239.255.35 anywhere
DROP all -- localhost anywhere
DROP all -- 38.99.82.191 anywhere
DROP all -- 153.ezday.co.kr anywhere
DROP all -- 83.222.230.90 anywhere
DROP all -- vps3d220-ststic.vdrs.net anywhere
DROP all -- host-93-104-250-18.allgaeudsl.de anywhere
DROP all -- 162.13.11.254 anywhere
DROP all -- static.vdc.vn anywhere
DROP all -- 58.247.84.219 anywhere
DROP all -- v39373.1blu.de anywhere
DROP all -- 195.54.2.11 anywhere
DROP all -- 109.120.173.172.addr.datapoint.ru anywhere
DROP all -- srv445.sd-france.net anywhere
DROP all -- 203.248.143.169 anywhere
DROP all -- 178.163.25.184 anywhere
DROP all -- 48.151.57.37.triolan.net anywhere
DROP all -- hst-12-151.fibermax.bg anywhere
Chain DENYOUT (1 references)
target prot opt source destination
DROP all -- anywhere 121.199.56.139
DROP all -- anywhere 250.ip-37-187-62.eu
DROP all -- anywhere 176-31-115-73.ovh.net
DROP all -- anywhere 112.ip-37-187-67.eu
DROP all -- anywhere weblinux01.tecla.com.br
DROP all -- anywhere 200.51.174.61.dial.wz.zj.dynamic.163data.com.cn
DROP all -- anywhere 210.51.174.61.dial.wz.zj.dynamic.163data.com.cn
DROP all -- anywhere ks3373898.kimsufi.com
DROP all -- anywhere whl0094.whservidor.com
DROP all -- anywhere 80.247.72.57
DROP all -- anywhere bband-dyn140.178-41-243.t-com.sk
DROP all -- anywhere 189-47-132-239.dsl.telesp.net.br
DROP all -- anywhere dynamic.vdc.vn
DROP all -- anywhere 68-188-72-60.static.stls.mo.charter.com
DROP all -- anywhere 210.186.155.170
DROP all -- anywhere 173-14-48-145-Michigan.hfc.comcastbusiness.net
DROP all -- anywhere p578bd5ec.dip0.t-ipconnect.de
DROP all -- anywhere 232.Red-83-40-53.dynamicIP.rima-tde.net
DROP all -- anywhere ks3289417.kimsufi.com
DROP all -- anywhere 80.174.162.141.dyn.user.ono.com
DROP all -- anywhere 190.85.26.37
DROP all -- anywhere wsip-174-79-39-4.ph.ph.cox.net
DROP all -- anywhere ool-6038b4da.static.optonline.net
DROP all -- anywhere host130.181-15-98.telecom.net.ar
DROP all -- anywhere s208-180-21-173.bcstcmta02.clsttx.tl.sta.suddenlink.net
DROP all -- anywhere host213-120-102-252.in-addr.btopenworld.com
DROP all -- anywhere ool-4b7ff3d2.static.optonline.net
DROP all -- anywhere mail.dati.com.tr
DROP all -- anywhere 221.164.212.117
DROP all -- anywhere 75-151-145-195-Philadelphia.hfc.comcastbusiness.net
DROP all -- anywhere adsl-074-165-019-209.sip.asm.bellsouth.net
DROP all -- anywhere diagmed.cas.gvt.net.br
DROP all -- anywhere cable-89-216-21-136.static.sbb.rs
DROP all -- anywhere 122-146-1-206.static.sparqnet.net
DROP all -- anywhere 82.114.80.154
DROP all -- anywhere h72-2-20-183.bigpipeinc.com
DROP all -- anywhere 177-139-182-86.dsl.telesp.net.br
DROP all -- anywhere 190.5.230.178
DROP all -- anywhere s4-163.gazduirejocuri.ro
DROP all -- anywhere 206-248-138-44.dsl.teksavvy.com
DROP all -- anywhere 12.236.34.135
DROP all -- anywhere 203.129.196.27
DROP all -- anywhere s-sql5.avf.hu
DROP all -- anywhere abs-static-239.177.251.27.aircel.co.in
DROP all -- anywhere h-74-3-121-10.snva.ca.megapath.net
DROP all -- anywhere 192.241.70.95.dsl.static.turk.net
DROP all -- anywhere 105-236-74-109.access.mtnbusiness.co.za
DROP all -- anywhere 80.174.162.211.dyn.user.ono.com
DROP all -- anywhere ll62-2-210-251-62.ll62.iam.net.ma
DROP all -- anywhere 209-252-14-93.ip.mcleodusa.net
DROP all -- anywhere microsoft02.dominiotemporarioidc.com
DROP all -- anywhere 79.136.209.173
DROP all -- anywhere h200.7.141.67.dynamic.ip.windstream.net
DROP all -- anywhere 122.155.0.68
DROP all -- anywhere alphacontrols.vianw.co.uk
DROP all -- anywhere static-97-161-86-188.ipcom.comunitel.net
DROP all -- anywhere 201.196.50.12
DROP all -- anywhere 91.82.88.231
DROP all -- anywhere 189.11.0.226
DROP all -- anywhere evrica-otchet.mv.ru
DROP all -- anywhere adsl-dyn126.91-127-52.t-com.sk
DROP all -- anywhere 222.239.255.35
DROP all -- anywhere localhost
DROP all -- anywhere 38.99.82.191
DROP all -- anywhere 153.ezday.co.kr
DROP all -- anywhere 83.222.230.90
DROP all -- anywhere vps3d220-ststic.vdrs.net
DROP all -- anywhere host-93-104-250-18.allgaeudsl.de
DROP all -- anywhere 162.13.11.254
DROP all -- anywhere static.vdc.vn
DROP all -- anywhere 58.247.84.219
DROP all -- anywhere v39373.1blu.de
DROP all -- anywhere 195.54.2.11
DROP all -- anywhere 109.120.173.172.addr.datapoint.ru
DROP all -- anywhere srv445.sd-france.net
DROP all -- anywhere 203.248.143.169
DROP all -- anywhere 178.163.25.184
DROP all -- anywhere 48.151.57.37.triolan.net
DROP all -- anywhere hst-12-151.fibermax.bg
Chain INVALID (2 references)
target prot opt source destination
INVDROP all -- anywhere anywhere ctstate INVALID
INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
INVDROP tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
INVDROP tcp -- anywhere anywhere tcp flags:FIN,RST/FIN,RST
INVDROP tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN
INVDROP tcp -- anywhere anywhere tcp flags:PSH,ACK/PSH
INVDROP tcp -- anywhere anywhere tcp flags:ACK,URG/URG
INVDROP tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN ctstate NEW
Chain INVDROP (10 references)
target prot opt source destination
DROP all -- anywhere anywhere
Chain LOCALINPUT (1 references)
target prot opt source destination
ALLOWIN all -- anywhere anywhere
DENYIN all -- anywhere anywhere
Chain LOCALOUTPUT (1 references)
target prot opt source destination
ALLOWOUT all -- anywhere anywhere
DENYOUT all -- anywhere anywhere
Chain LOGDROPIN (1 references)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp dpt:bootps
DROP udp -- anywhere anywhere udp dpt:bootps
DROP tcp -- anywhere anywhere tcp dpt:bootpc
DROP udp -- anywhere anywhere udp dpt:bootpc
DROP tcp -- anywhere anywhere tcp dpt:sunrpc
DROP udp -- anywhere anywhere udp dpt:sunrpc
DROP tcp -- anywhere anywhere tcp dpt:auth
DROP udp -- anywhere anywhere udp dpt:auth
DROP tcp -- anywhere anywhere tcp dpts:epmap:netbios-ssn
DROP udp -- anywhere anywhere udp dpts:epmap:netbios-ssn
DROP tcp -- anywhere anywhere tcp dpt:microsoft-ds
DROP udp -- anywhere anywhere udp dpt:microsoft-ds
DROP tcp -- anywhere anywhere tcp dpt:isakmp
DROP udp -- anywhere anywhere udp dpt:isakmp
DROP tcp -- anywhere anywhere tcp dpt:login
DROP udp -- anywhere anywhere udp dpt:who
DROP tcp -- anywhere anywhere tcp dpt:efs
DROP udp -- anywhere anywhere udp dpt:router
LOG tcp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *TCP_IN Blocked* '
LOG udp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *UDP_IN Blocked* '
LOG icmp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *ICMP_IN Blocked* '
DROP all -- anywhere anywhere
Chain LOGDROPOUT (0 references)
target prot opt source destination
LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *TCP_OUT Blocked* '
LOG udp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *UDP_OUT Blocked* '
LOG icmp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *ICMP_OUT Blocked* '
DROP all -- anywhere anywhere
Chain acctboth (2 references)
target prot opt source destination
tcp -- vps41334.ovh.net anywhere tcp dpt:http
tcp -- anywhere vps41334.ovh.net tcp spt:http
tcp -- vps41334.ovh.net anywhere tcp dpt:smtp
tcp -- anywhere vps41334.ovh.net tcp spt:smtp
tcp -- vps41334.ovh.net anywhere tcp dpt:pop3
tcp -- anywhere vps41334.ovh.net tcp spt:pop3
icmp -- vps41334.ovh.net anywhere
icmp -- anywhere vps41334.ovh.net
tcp -- vps41334.ovh.net anywhere
tcp -- anywhere vps41334.ovh.net
udp -- vps41334.ovh.net anywhere
udp -- anywhere vps41334.ovh.net
all -- vps41334.ovh.net anywhere
all -- anywhere vps41334.ovh.net
tcp -- 10.8.0.1 anywhere tcp dpt:http
tcp -- anywhere 10.8.0.1 tcp spt:http
tcp -- 10.8.0.1 anywhere tcp dpt:smtp
tcp -- anywhere 10.8.0.1 tcp spt:smtp
tcp -- 10.8.0.1 anywhere tcp dpt:pop3
tcp -- anywhere 10.8.0.1 tcp spt:pop3
icmp -- 10.8.0.1 anywhere
icmp -- anywhere 10.8.0.1
tcp -- 10.8.0.1 anywhere
tcp -- anywhere 10.8.0.1
udp -- 10.8.0.1 anywhere
udp -- anywhere 10.8.0.1
all -- 10.8.0.1 anywhere
all -- anywhere 10.8.0.1
all -- anywhere anywhere
