Chain INPUT (policy DROP) target prot opt source destination fail2ban-ssh tcp -- anywhere anywhere tcp dpt:ssh ACCEPT 0 -- anywhere anywhere ACCEPT 0 -- localnet/24 anywhere ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:www ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT udp -- anywhere anywhere state RELATED,ESTABLISHED DROP 0 -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain fail2ban-ssh (1 references) target prot opt source destination RETURN 0 -- anywhere anywhere