{
"event": "PreToolUse",
"tool_name": "Bash",
"tool_input": {
"command": "ssh root@prod.karlkratz.com \"cat \/etc\/nftables.conf\" 2>&1",
"timeout": 15000,
"description": "Read current nftables.conf"
}
}
{
"tool_response": {
"stdout": "table ip filter {\n\tchain INPUT {\n\t\ttype filter hook input priority filter; policy drop;\n\t\tip saddr 185.175.196.237 counter packets 0 bytes 0 drop\n\t\tip saddr 52.230.35.34 counter packets 0 bytes 0 drop\n\t\tip saddr 20.27.221.169 counter packets 15 bytes 780 drop\n\t\tip saddr 4.241.216.217 counter packets 0 bytes 0 drop\n\t\tip saddr 4.194.107.19 counter packets 5 bytes 260 drop\n\t\tip saddr 62.60.130.228 counter packets 0 bytes 0 drop\n\t\tip saddr 212.51.136.121 counter packets 0 bytes 0 drop\n\t\tip saddr 150.109.46.88 counter packets 8 bytes 480 drop\n\t\txt match \"set\" counter packets 19505 bytes 1996841 accept\n\t\tip saddr 145.224.73.102 counter packets 4975038 bytes 605192213 accept\n\t\tiifname \"lo\" counter packets 150301755 bytes 18096367521 accept\n\t\tct state related,established counter packets 13352852 bytes 12109787024 accept\n\t\txt match \"set\" counter packets 30 bytes 1604 drop\n\t\tcounter packets 304757 bytes 19835812 jump SEMRUSH_BLOCK\n\t\tcounter packets 304747 bytes 19835212 jump XOVI_BLOCK\n\t\tip protocol tcp tcp dport { 25, 587, 465, 80, 443 } counter packets 125655 bytes 6667224 accept\n\t\txt match \"set\" counter packets 84149 bytes 6999416 drop\n\t\tip saddr != 127.0.0.1 tcp dport 6333 counter packets 0 bytes 0 drop\n\t\tudp dport 49152-65535 counter packets 0 bytes 0 accept\n\t\ttcp dport 3478 counter packets 0 bytes 0 accept\n\t\tudp dport 3478 counter packets 0 bytes 0 accept\n\t\tip saddr 91.99.63.201 tcp dport 11434 counter packets 0 bytes 0 accept\n\t\tip saddr 148.251.182.181 tcp dport 11434 counter packets 0 bytes 0 accept\n\t\tip saddr 127.0.0.1 tcp dport 11434 counter packets 0 bytes 0 accept\n\t\tip saddr 91.99.63.201 counter packets 0 bytes 0 accept\n\t\tip saddr 148.251.182.181 counter packets 3 bytes 180 accept\n\t\tip saddr 91.107.225.81 counter packets 0 bytes 0 accept\n\t\tcounter packets 94940 bytes 6168392 jump ufw-before-logging-input\n\t\tcounter packets 94940 bytes 6168392 jump ufw-before-input\n\t\tcounter packets 2 bytes 80 jump ufw-after-input\n\t\tcounter packets 2 bytes 80 jump ufw-after-logging-input\n\t\tcounter packets 2 bytes 80 jump ufw-reject-input\n\t\tcounter packets 2 bytes 80 jump ufw-track-input\n\t\ttcp dport 11434 counter packets 0 bytes 0 drop\n\t\tip saddr 88.198.50.199 tcp dport 22 counter packets 0 bytes 0 accept\n\t\tip saddr != 127.0.0.1 tcp dport 6333 counter packets 0 bytes 0 drop\n\t\tip saddr != 127.0.0.1 tcp dport 6334 counter packets 0 bytes 0 drop\n\t}\n\n\tchain FORWARD {\n\t\ttype filter hook forward priority filter; policy drop;\n\t\tcounter packets 0 bytes 0 jump DOCKER-USER\n\t\tcounter packets 0 bytes 0 jump DOCKER-ISOLATION-STAGE-1\n\t\toifname \"docker0\" ct state related,established counter packets 0 bytes 0 accept\n\t\toifname \"docker0\" counter packets 0 bytes 0 jump DOCKER\n\t\tiifname \"docker0\" oifname != \"docker0\" counter packets 0 bytes 0 accept\n\t\tiifname \"docker0\" oifname \"docker0\" counter packets 0 bytes 0 accept\n\t\tcounter packets 0 bytes 0 jump ufw-before-logging-forward\n\t\tcounter packets 0 bytes 0 jump ufw-before-forward\n\t\tcounter packets 0 bytes 0 jump ufw-after-forward\n\t\tcounter packets 0 bytes 0 jump ufw-after-logging-forward\n\t\tcounter packets 0 bytes 0 jump ufw-reject-forward\n\t\tcounter packets 0 bytes 0 jump ufw-track-forward\n\t}\n\n\tchain OUTPUT {\n\t\ttype filter hook output priority filter; policy accept;\n\t\tcounter packets 165784324 bytes 28488267797 jump ufw-before-logging-output\n\t\tcounter packets 165784324 bytes 28488267797 jump ufw-before-output\n\t\tcounter packets 619730 bytes 38769058 jump ufw-after-output\n\t\tcounter packets 619730 bytes 38769058 jump ufw-after-logging-output\n\t\tcounter packets 619730 bytes 38769058 jump ufw-reject-output\n\t\tcounter packets 619730 bytes 38769058 jump ufw-track-output\n\t}\n\n\tchain DOCKER {\n\t}\n\n\tchain DOCKER-ISOLATION-STAGE-1 {\n\t\tiifname \"docker0\" oifname != \"docker0\" counter packets 0 bytes 0 jump DOCKER-ISOLATION-STAGE-2\n\t\tcounter packets 0 bytes 0 return\n\t}\n\n\tchain DOCKER-ISOLATION-STAGE-2 {\n\t\toifname \"docker0\" counter packets 0 bytes 0 drop\n\t\tcounter packets 0 bytes 0 return\n\t}\n\n\tchain DOCKER-USER {\n\t\tcounter packets 0 bytes 0 return\n\t}\n\n\tchain SEMRUSH_BLOCK {\n\t}\n\n\tchain XOVI_BLOCK {\n\t}\n\n\tchain ufw-after-forward {\n\t}\n\n\tchain ufw-after-input {\n\t\tudp dport 137 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\tudp dport 138 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\ttcp dport 139 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\ttcp dport 445 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\tudp dport 67 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\tudp dport 68 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\tfib daddr type broadcast counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t}\n\n\tchain ufw-after-logging-forward {\n\t\tlimit rate 3\/minute burst 10 packets counter packets 0 bytes 0 log prefix \"[UFW BLOCK] \"\n\t}\n\n\tchain ufw-after-logging-input {\n\t\tlimit rate 3\/minute burst 10 packets counter packets 2 bytes 80 log prefix \"[UFW BLOCK] \"\n\t}\n\n\tchain ufw-after-logging-output {\n\t}\n\n\tchain ufw-after-output {\n\t}\n\n\tchain ufw-before-forward {\n\t\tct state related,established counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type destination-unreachable counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type time-exceeded counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type parameter-problem counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type echo-request counter packets 0 bytes 0 accept\n\t\tcounter packets 0 bytes 0 jump ufw-user-forward\n\t}\n\n\tchain ufw-before-input {\n\t\tiifname \"lo\" counter packets 0 bytes 0 accept\n\t\tct state related,established counter packets 0 bytes 0 accept\n\t\tct state invalid counter packets 390 bytes 18836 jump ufw-logging-deny\n\t\tct state invalid counter packets 390 bytes 18836 drop\n\t\tip protocol icmp icmp type destination-unreachable counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type time-exceeded counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type parameter-problem counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type echo-request counter packets 372 bytes 20213 accept\n\t\tudp sport 67 udp dport 68 counter packets 0 bytes 0 accept\n\t\tcounter packets 94178 bytes 6129343 jump ufw-not-local\n\t\tip daddr 224.0.0.251 udp dport 5353 counter packets 0 bytes 0 accept\n\t\tip daddr 239.255.255.250 udp dport 1900 counter packets 0 bytes 0 accept\n\t\tcounter packets 94178 bytes 6129343 jump ufw-user-input\n\t}\n\n\tchain ufw-before-logging-forward {\n\t}\n\n\tchain ufw-before-logging-input {\n\t}\n\n\tchain ufw-before-logging-output {\n\t}\n\n\tchain ufw-before-output {\n\t\toifname \"lo\" counter packets 150293119 bytes 18095918449 accept\n\t\tct state related,established counter packets 14871475 bytes 10353580290 accept\n\t\tcounter packets 619730 bytes 38769058 jump ufw-user-output\n\t}\n\n\tchain ufw-logging-allow {\n\t\tlimit rate 3\/minute burst 10 packets counter packets 0 bytes 0 log prefix \"[UFW ALLOW] \"\n\t}\n\n\tchain ufw-logging-deny {\n\t\tct state invalid limit rate 3\/minute burst 10 packets counter packets 368 bytes 17832 return\n\t\tlimit rate 3\/minute burst 10 packets counter packets 22 bytes 1004 log prefix \"[UFW BLOCK] \"\n\t}\n\n\tchain ufw-not-local {\n\t\tfib daddr type local counter packets 94176 bytes 6129243 return\n\t\tfib daddr type multicast counter packets 0 bytes 0 return\n\t\tfib daddr type broadcast counter packets 2 bytes 100 return\n\t\tlimit rate 3\/minute burst 10 packets counter packets 0 bytes 0 jump ufw-logging-deny\n\t\tcounter packets 0 bytes 0 drop\n\t}\n\n\tchain ufw-reject-forward {\n\t}\n\n\tchain ufw-reject-input {\n\t}\n\n\tchain ufw-reject-output {\n\t}\n\n\tchain ufw-skip-to-policy-forward {\n\t\tcounter packets 0 bytes 0 drop\n\t}\n\n\tchain ufw-skip-to-policy-input {\n\t\tcounter packets 0 bytes 0 drop\n\t}\n\n\tchain ufw-skip-to-policy-output {\n\t\tcounter packets 0 bytes 0 accept\n\t}\n\n\tchain ufw-track-forward {\n\t}\n\n\tchain ufw-track-input {\n\t}\n\n\tchain ufw-track-output {\n\t\tip protocol tcp ct state new counter packets 459906 bytes 27610889 accept\n\t\tip protocol udp ct state new counter packets 154843 bytes 10714488 accept\n\t}\n\n\tchain ufw-user-forward {\n\t}\n\n\tchain ufw-user-input {\n\t\ttcp dport 22 counter packets 93581 bytes 5989168 accept\n\t\ttcp dport 80 counter packets 0 bytes 0 accept\n\t\ttcp dport 443 counter packets 0 bytes 0 accept\n\t\tudp dport 443 counter packets 0 bytes 0 accept\n\t\ttcp dport 11434 counter packets 0 bytes 0 accept\n\t\ttcp dport 8000 counter packets 0 bytes 0 accept\n\t\ttcp dport 25 counter packets 0 bytes 0 accept\n\t\ttcp dport 587 counter packets 0 bytes 0 accept\n\t\ttcp dport 993 counter packets 595 bytes 140095 accept\n\t}\n\n\tchain ufw-user-limit {\n\t\tlimit rate 3\/minute burst 5 packets counter packets 0 bytes 0 log prefix \"[UFW LIMIT BLOCK] \"\n\t\tcounter packets 0 bytes 0 reject\n\t}\n\n\tchain ufw-user-limit-accept {\n\t\tcounter packets 0 bytes 0 accept\n\t}\n\n\tchain ufw-user-logging-forward {\n\t}\n\n\tchain ufw-user-logging-input {\n\t}\n\n\tchain ufw-user-logging-output {\n\t}\n\n\tchain ufw-user-output {\n\t}\n}\ntable ip nat {\n\tchain PREROUTING {\n\t\ttype nat hook prerouting priority dstnat; policy accept;\n\t\tfib daddr type local counter packets 487295 bytes 30625958 jump DOCKER\n\t}\n\n\tchain INPUT {\n\t\ttype nat hook input priority srcnat; policy accept;\n\t}\n\n\tchain OUTPUT {\n\t\ttype nat hook output priority dstnat; policy accept;\n\t\tip daddr != 127.0.0.0\/8 fib daddr type local counter packets 23077 bytes 1384620 jump DOCKER\n\t}\n\n\tchain POSTROUTING {\n\t\ttype nat hook postrouting priority srcnat; policy accept;\n\t\tip saddr 172.17.0.0\/16 oifname != \"docker0\" counter packets 0 bytes 0 masquerade\n\t}\n\n\tchain DOCKER {\n\t\tiifname \"docker0\" counter packets 0 bytes 0 return\n\t}\n}\ntable ip6 filter {\n\tchain INPUT {\n\t\ttype filter hook input priority filter; policy drop;\n\t\tiifname \"lo\" counter packets 36 bytes 2520 accept\n\t\tct state established,related counter packets 2743970 bytes 5555227401 accept\n\t\tmeta l4proto ipv6-icmp counter packets 4 bytes 192 accept\n\t}\n\n\tchain FORWARD {\n\t\ttype filter hook forward priority filter; policy drop;\n\t}\n\n\tchain OUTPUT {\n\t\ttype filter hook output priority filter; policy accept;\n\t\toifname \"lo\" counter packets 36 bytes 2520 accept\n\t}\n}\ntable inet filter {\n\tset g... [TRUNCATED-ab4ccdf639be678d]",
"stderr": "",
"interrupted": false,
"isImage": false,
"noOutputExpected": false
}
}