Opened ports on my yunohost

[tebo]

hi,
I’ve just check my yunohost server with zenmap and it seems to have many opened ports but yunohost command line tells me something different.

My YunoHost server

Hardware: VPS arm64 scaleway - 4G ram
YunoHost version:

version: 3.8.4.9
yunohost-admin:
repo: stable
version: 3.8.3.4
moulinette:
repo: stable
version: 3.8.1.2
ssowat:
repo: stable
version: 3.8.0.2

I have access to my server : Through SSH

Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no but my firewall start but stuck in a failed mode.
I noticed some strange behave with my server (syslog got really big once).

Description of my issue:

There is something different between what

user@monserveur:~$ sudo yunohost firewall list 
opened_ports: 
  - 25
  - 53
  - 80
  - 443
  - 587
  - 993
  - 5222
  - 5269
  - 5353

And nmap tels me something really different.

nmap -T4 -A -v monserveur.fr
Scanning monserveur.fr (IP.IP.IP.IP) [1000 ports]
Discovered open port 53/tcp on IP.IP.IP.IP
Discovered open port 443/tcp on IP.IP.IP.IP
Discovered open port 143/tcp on IP.IP.IP.IP
Discovered open port 587/tcp on IP.IP.IP.IP
Discovered open port 3306/tcp on IP.IP.IP.IP
Discovered open port 80/tcp on IP.IP.IP.IP
Discovered open port 993/tcp on IP.IP.IP.IP
Discovered open port 5269/tcp on IP.IP.IP.IP
Discovered open port 636/tcp on IP.IP.IP.IP
Discovered open port 5222/tcp on IP.IP.IP.IP

when I try do do something with the “yunohost firewall” command but I get this message:

Warning: You cannot play with iptables here. You are either in a container or your kernel does not support it

I think that the yunohost firewall doesn’t work.
Should I block theses ports with Iptables ?

[Mamie]

I am not sure at all and have no computer with me to test but the difference might be that the firewall allows certains ports from the outside of the server, and nmap displays all ports opened, with some of them only available from the server itself.
Like 3306 (mysql) not opened in the firewall, but still listening.
You can try to access those ports from another computer to test this.