Hi, when I surf to the website with ip 129.132.112.231 I get the following blocks:
Jan 18 20:09:31 strawberry ipmon[108]: 20:09:31.659122 tun0 @0:27 b 129.132.112.231,80 -> 192.168.1.9,1066 PR tcp len 20 48 -A 4292436563 2530732 8192 IN Jan 18 20:09:37 strawberry ipmon[108]: 20:09:37.663074 tun0 @0:27 b 129.132.112.231,80 -> 192.168.1.9,1066 PR tcp len 20 48 -A 4292436563 2530732 8192 IN Jan 18 20:09:49 strawberry ipmon[108]: 20:09:49.669917 tun0 @0:27 b 129.132.112.231,80 -> 192.168.1.9,1066 PR tcp len 20 48 -A 4292436563 2530732 8192 IN Jan 18 20:09:49 strawberry ipmon[108]: 20:09:49.862139 tun0 @0:27 b 129.132.112.231,80 -> 192.168.1.9,1067 PR tcp len 20 48 -A 4292415405 2551890 8192 IN Jan 18 20:09:53 strawberry ipmon[108]: 20:09:52.766679 tun0 @0:27 b 129.132.112.231,80 -> 192.168.1.9,1067 PR tcp len 20 48 -A 4292415405 2551890 8192 IN Jan 18 20:09:59 strawberry ipmon[108]: 20:09:58.766592 tun0 @0:27 b 129.132.112.231,80 -> 192.168.1.9,1067 PR tcp len 20 48 -A 4292415405 2551890 8192 IN ipnat -l MAP 192.168.1.9 2333 <- -> 217.0.88.95 19874 [129.132.112.231 80] MAP 192.168.1.9 2315 <- -> 217.0.88.95 19845 [129.132.112.231 80] MAP 192.168.1.9 2314 <- -> 217.0.88.95 19844 [129.132.112.231 80] MAP 192.168.1.9 2313 <- -> 217.0.88.95 19843 [129.132.112.231 80] MAP 192.168.1.9 2309 <- -> 217.0.88.95 19841 [129.132.112.231 80] ipfstat -ni @27 block in log quick on tun0 from any to 192.168.1.0/28 ipfstat -no @27 pass out quick on tun0 proto tcp from 192.168.1.0/28 to any port = 25 ipf -V 3.4.20 (264) Any suggestions are welcome Tom
