Shorewall 4.2.6 Dump at Gate-BE - Thu Feb 26 14:13:18 CET 2009

   Shorewall-perl 4.2.6

Counters reset Thu Feb 26 11:14:00 CET 2009

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 8941 1342K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 1744  245K net2fw     all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
 5107  506K net2fw     all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           
   77 14109 dmz2fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
94195 4350K loc2fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2fw     all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           
  426  241K ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 3315  237K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
15474 7788K net_frwd   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
21283   24M net_frwd   all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz_frwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
30293 4493K loc_frwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn_frwd   all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1227 90814 fw2net     all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
 1171 74347 fw2net     all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
   77 14109 fw2dmz     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 180K   23M fw2loc     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vpn     all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
  426  241K ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   61  8775 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain Drop (7 references)
 pkts bytes target     prot opt in     out     source               destination         
 4868  472K            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
 4868  472K dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
 4022  339K dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    4   228 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
 2016  103K dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain Reject (4 references)
 pkts bytes target     prot opt in     out     source               destination         
 1777  158K            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
 1777  158K dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
 1716  149K dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
 1600  144K reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
   34  1632 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
   60  2880 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain dmz2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   77 14109 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       192.168.1.100        192.168.155.178     tcp dpt:515 
    0     0 ACCEPT     all  --  *      *       192.168.1.48         192.168.155.181     
    0     0 ACCEPT     all  --  *      *       192.168.1.48         192.168.155.183     
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            192.168.155.206     
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spts:30000:50000 dpts:30000:50000 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:1025:1720 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dmz2net    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2net    all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2vpn    all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  907  142K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   67  2728 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   77 14109 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 180K   23M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   55  5070 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,139 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,139 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:25 
  513 52635 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  301 15671 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  180 15120 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
 1917  134K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
90639 3730K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
 2496  312K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,139 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:500 dpt:500 
 1060  308K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
27051 4263K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5631 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:5632 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:3389 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3389 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:123 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:123 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:5900:5910 
    8   384 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
   10   408 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:21 
   48 12276 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:25 
  654 31392 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:80 
  804 35536 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:13443 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:13443 
    2   120 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:2525 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:7000:7099 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:587 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3101 
 1716  149K Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
   70  3500 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
11355 2002K loc2net    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
18938 2491K loc2net    all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2dmz    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2vpn    all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.1.110       tcp dpts:1025:1720 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.1.110       udp spts:30000:50000 dpts:30000:50000 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2dmz:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 1960  283K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   96  2688 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
 4795  465K Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 3890  329K LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2fw:DROP:' 
 3890  329K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
36684   31M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2loc:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   73  7156 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
   73  7156 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2vpn:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net_frwd (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 net2net    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
   73  7156 net2net    all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
    0     0 net2dmz    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
36684   31M net2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 net2vpn    all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain reject (11 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
   94  4512 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
 1610  144K REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 LOG        all  --  *      *       224.0.0.0/4          0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           

Chain vpn2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain vpn_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 vpn2net    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2net    all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2dmz    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Log (/var/log/messages)


NAT Table

Chain PREROUTING (policy ACCEPT 9423 packets, 863K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 9496  870K dnat       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 2233 packets, 170K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1536 88834 eth2_masq  all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
 1574 91583 dsl1_masq  all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 2203 packets, 175K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  778  121K net_dnat   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
 4063  340K net_dnat   all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           

Chain dsl1_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  654 31392 MASQUERADE  all  --  *      *       192.168.155.0/24     0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       169.254.0.0/16       0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       192.168.2.0/24       0.0.0.0/0           

Chain eth2_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  843 37296 MASQUERADE  all  --  *      *       192.168.155.0/24     0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       169.254.0.0/16       0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       192.168.2.0/24       0.0.0.0/0           

Chain net_dnat (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:1025:1720 to:192.168.1.110 
   73  7156 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spts:30000:50000 dpts:30000:50000 to:192.168.1.110 

Mangle Table

Chain PREROUTING (policy ACCEPT 169K packets, 41M bytes)
 pkts bytes target     prot opt in     out     source               destination         
62740   36M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
 2257  222K routemark  all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
 5685  514K routemark  all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
17228 8035K tcpre      all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
26390   24M tcpre      all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           
97939 4834K tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain INPUT (policy ACCEPT 102K packets, 5356K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 67050 packets, 36M bytes)
 pkts bytes target     prot opt in     out     source               destination         
67050   36M fortos     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
67050   36M tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 183K packets, 24M bytes)
 pkts bytes target     prot opt in     out     source               destination         
  352 30112 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
 183K   24M tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain POSTROUTING (policy ACCEPT 249K packets, 60M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 249K   60M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fortos (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 TOS        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spts:30000:30100 TOS set 0x10 
    0     0 TOS        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:30000:30100 TOS set 0x10 

Chain routemark (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 2257  222K MARK       all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 
 5685  514K MARK       all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
 7942  735K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match !0x0/0xff CONNMARK save mask 0xff 

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MARK       tcp  --  eth1   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
91794 3775K MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
   77 14109 MARK       udp  --  eth1   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
 5192  766K MARK       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
  654 31392 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 MARK set 0x2 
   48 12276 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 MARK set 0x1 
  804 35536 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 MARK set 0x1 
    0     0 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3101 MARK set 0x1 
  450 37752 MARK       icmp --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 
    0     0 MARK       udp  --  eth1   *       0.0.0.0/0            0.0.0.0/0           udp dpts:30000:50000 MARK set 0x1 

Conntrack Table

ipv4     2 tcp      6 108 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=4573 dport=110 packets=8 bytes=380 src=84.16.68.124 dst=192.168.1.155 sport=110 dport=4573 packets=9 bytes=487 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 105 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=4572 dport=110 packets=8 bytes=380 src=84.16.68.124 dst=192.168.1.155 sport=110 dport=4572 packets=9 bytes=488 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 18 src=192.168.155.121 dst=255.255.255.255 sport=68 dport=67 packets=2 bytes=656 [UNREPLIED] src=255.255.255.255 dst=192.168.155.121 sport=67 dport=68 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 tcp      6 1 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=4558 dport=110 packets=8 bytes=377 src=84.16.68.124 dst=192.168.1.155 sport=110 dport=4558 packets=9 bytes=483 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 8 src=192.168.155.248 dst=192.168.155.248 sport=47933 dport=2160 packets=413 bytes=239866 [UNREPLIED] src=192.168.155.248 dst=192.168.155.248 sport=2160 dport=47933 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 udp      17 8 src=192.168.155.205 dst=192.168.155.255 sport=57180 dport=3052 packets=413 bytes=239866 [UNREPLIED] src=192.168.155.255 dst=192.168.155.205 sport=3052 dport=57180 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 tcp      6 431987 ESTABLISHED src=192.168.155.116 dst=192.168.155.248 sport=1628 dport=22 packets=44632 bytes=1815096 src=192.168.155.248 dst=192.168.155.116 sport=22 dport=1628 packets=88319 bytes=11299756 [ASSURED] mark=0 secmark=0 use=1
ipv4     2 udp      17 32 src=192.168.1.155 dst=66.93.22.226 sport=52939 dport=53 packets=2 bytes=146 src=66.93.22.226 dst=192.168.1.155 sport=53 dport=52939 packets=2 bytes=234 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 9 src=192.168.155.250 dst=192.168.155.255 sport=137 dport=137 packets=1 bytes=78 [UNREPLIED] src=192.168.155.255 dst=192.168.155.250 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 udp      17 13 src=192.168.155.126 dst=255.255.255.255 sport=1025 dport=1947 packets=1 bytes=68 [UNREPLIED] src=255.255.255.255 dst=192.168.155.126 sport=1947 dport=1025 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 tcp      6 431998 ESTABLISHED src=192.168.155.116 dst=192.168.155.248 sport=1755 dport=22 packets=500 bytes=40752 src=192.168.155.248 dst=192.168.155.116 sport=22 dport=1755 packets=464 bytes=68012 [ASSURED] mark=0 secmark=0 use=1
ipv4     2 udp      17 32 src=62.235.193.23 dst=192.12.94.30 sport=52939 dport=53 packets=4 bytes=292 src=192.12.94.30 dst=62.235.193.23 sport=53 dport=52939 packets=4 bytes=580 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 28 src=192.168.155.121 dst=192.168.155.255 sport=137 dport=137 packets=6 bytes=468 [UNREPLIED] src=192.168.155.255 dst=192.168.155.121 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 tcp      6 431984 ESTABLISHED src=192.168.155.116 dst=192.168.155.248 sport=1631 dport=22 packets=45032 bytes=1833976 src=192.168.155.248 dst=192.168.155.116 sport=22 dport=1631 packets=88973 bytes=11680844 [ASSURED] mark=0 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
    inet 127.0.0.2/8 brd 127.255.255.255 scope host secondary lo
2: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    inet 10.0.0.13/8 brd 10.255.255.255 scope global eth3
3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc htb state UNKNOWN qlen 1000
    inet 192.168.1.155/24 brd 192.168.1.255 scope global eth2
4: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
    inet 192.168.2.1/24 brd 192.168.2.255 scope global eth1
5: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    inet 192.168.155.248/24 brd 192.168.155.255 scope global eth0
6: dsl1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc htb state UNKNOWN qlen 3
    inet 62.235.193.23 peer 62.235.193.1/32 scope global dsl1

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    241554     436      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    241554     436      0       0       0       0      
2: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    link/ether 00:30:4f:22:0c:62 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    25447431   39900    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2859904    19005    0       0       0       0      
3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc htb state UNKNOWN qlen 1000
    link/ether 00:30:4f:0a:d4:da brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    8345375    18121    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2319001    12816    0       0       0       0      
4: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
    link/ether 00:30:4f:1c:45:20 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
5: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:30:4f:08:79:75 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    11810894   133721   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    57815173   217175   0       0       0       0      
6: dsl1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc htb state UNKNOWN qlen 3
    link/ppp 
    RX: bytes  packets  errors  dropped overrun mcast   
    24418806   39320    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2418070    18420    0       0       0       0      

/proc

   /proc/version = Linux version 2.6.25.5-1.1-pae (geeko@buildhost) (gcc version 4.3.1 20080507 (prerelease) [gcc-4_3-branch revision 135036] (SUSE Linux) ) #1 SMP 2008-06-07 01:55:22 +0200
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 1
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 1
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/dsl1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/dsl1/arp_filter = 0
   /proc/sys/net/ipv4/conf/dsl1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/dsl1/rp_filter = 1
   /proc/sys/net/ipv4/conf/dsl1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth2/log_martians = 1
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth3/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 1
   /proc/sys/net/ipv4/conf/lo/log_martians = 1

Routing Rules

0:	from all lookup local 
10000:	from all fwmark 0x1 lookup Skynet 
10001:	from all fwmark 0x2 lookup Scarlet 
20000:	from 192.168.1.155 lookup Skynet 
20256:	from 62.235.193.23 lookup Scarlet 
32766:	from all lookup main 
32767:	from all lookup default 

Table Scarlet:

62.235.193.1 dev dsl1  scope link  src 62.235.193.23 
192.168.2.0/24 dev eth1  proto kernel  scope link  src 192.168.2.1 
192.168.155.0/24 dev eth0  proto kernel  scope link  src 192.168.155.248 
169.254.0.0/16 dev eth0  scope link 
default via 62.235.193.1 dev dsl1  src 62.235.193.23 

Table Skynet:

192.168.1.1 dev eth2  scope link  src 192.168.1.155 
0.0.0.0/24 via 192.168.1.1 dev eth2 
192.168.2.0/24 dev eth1  proto kernel  scope link  src 192.168.2.1 
192.168.1.0/24 dev eth2  proto kernel  scope link  src 192.168.1.155 
192.168.155.0/24 dev eth0  proto kernel  scope link  src 192.168.155.248 
169.254.0.0/16 dev eth0  scope link 
default via 192.168.1.1 dev eth2  src 192.168.1.155 

Table default:


Table local:

broadcast 192.168.1.0 dev eth2  proto kernel  scope link  src 192.168.1.155 
broadcast 192.168.2.255 dev eth1  proto kernel  scope link  src 192.168.2.1 
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 10.0.0.0 dev eth3  proto kernel  scope link  src 10.0.0.13 
broadcast 192.168.155.0 dev eth0  proto kernel  scope link  src 192.168.155.248 
local 10.0.0.13 dev eth3  proto kernel  scope host  src 10.0.0.13 
local 192.168.2.1 dev eth1  proto kernel  scope host  src 192.168.2.1 
local 62.235.193.23 dev dsl1  proto kernel  scope host  src 62.235.193.23 
broadcast 192.168.1.255 dev eth2  proto kernel  scope link  src 192.168.1.155 
broadcast 192.168.2.0 dev eth1  proto kernel  scope link  src 192.168.2.1 
local 192.168.155.248 dev eth0  proto kernel  scope host  src 192.168.155.248 
broadcast 10.255.255.255 dev eth3  proto kernel  scope link  src 10.0.0.13 
local 127.0.0.2 dev lo  proto kernel  scope host  src 127.0.0.1 
local 192.168.1.155 dev eth2  proto kernel  scope host  src 192.168.1.155 
broadcast 192.168.155.255 dev eth0  proto kernel  scope link  src 192.168.155.248 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

62.235.193.1 dev dsl1  proto kernel  scope link  src 62.235.193.23 
0.0.0.0/24 via 192.168.1.1 dev eth2 
192.168.2.0/24 dev eth1  proto kernel  scope link  src 192.168.2.1 
192.168.1.0/24 dev eth2  proto kernel  scope link  src 192.168.1.155 
192.168.155.0/24 dev eth0  proto kernel  scope link  src 192.168.155.248 
169.254.0.0/16 dev eth0  scope link 
10.0.0.0/8 dev eth3  proto kernel  scope link  src 10.0.0.13 
127.0.0.0/8 dev lo  scope link 
default 
	nexthop via 192.168.1.1  dev eth2 weight 1
	nexthop via 62.235.193.1  dev dsl1 weight 1

ARP

? (192.168.155.136) at 00:0E:7B:9A:90:61 [ether] on eth0
? (192.168.155.200) at 00:17:9A:7B:C4:E3 [ether] on eth0
? (192.168.1.1) at 00:30:4F:10:47:E3 [ether] on eth2
? (192.168.1.97) at 00:0E:35:A9:23:AB [ether] on eth2
? (192.168.155.140) at 00:0F:FE:17:03:27 [ether] on eth0
? (192.168.155.116) at 02:FF:CC:A0:94:4B [ether] on eth0
? (192.168.155.190) at 00:30:4F:24:94:CE [ether] on eth0
? (192.168.155.206) at 00:22:64:BE:DA:C6 [ether] on eth0

Modules

ip_tables              30224  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_CLUSTERIP          24964  0 
ipt_ECN                19328  0 
ipt_LOG                22788  9 
ipt_MASQUERADE         20224  6 
ipt_NETMAP             18432  0 
ipt_REDIRECT           18432  0 
ipt_REJECT             20352  2 
ipt_TTL                18688  0 
ipt_ULOG               25352  0 
ipt_addrtype           19200  4 
ipt_ah                 18304  0 
ipt_ecn                18560  0 
ipt_recent             25756  0 
ipt_ttl                18304  0 
iptable_filter         19840  1 
iptable_mangle         19712  1 
iptable_nat            23688  1 
iptable_raw            19328  0 
nf_conntrack           79188  31 xt_connlimit,ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_sane,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda    21376  1 nf_nat_amanda
nf_conntrack_ftp       25380  1 nf_nat_ftp
nf_conntrack_h323      63488  1 nf_nat_h323
nf_conntrack_ipv4      27652  35 iptable_nat,nf_nat
nf_conntrack_irc       23068  1 nf_nat_irc
nf_conntrack_netbios_ns    19200  0 
nf_conntrack_netlink    35456  0 
nf_conntrack_pptp      23172  1 nf_nat_pptp
nf_conntrack_proto_gre    22528  1 nf_conntrack_pptp
nf_conntrack_proto_sctp    23816  0 
nf_conntrack_sane      21916  0 
nf_conntrack_sip       25620  1 nf_nat_sip
nf_conntrack_tftp      21396  1 nf_nat_tftp
nf_nat                 35736  13 ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_netlink,iptable_nat
nf_nat_amanda          18816  0 
nf_nat_ftp             19712  0 
nf_nat_h323            23808  0 
nf_nat_irc             19072  0 
nf_nat_pptp            20096  0 
nf_nat_proto_gre       19204  1 nf_nat_pptp
nf_nat_sip             21248  0 
nf_nat_snmp_basic      25992  0 
nf_nat_tftp            18176  0 
xt_CLASSIFY            18176  0 
xt_CONNMARK            20224  3 
xt_DSCP                19840  2 
xt_MARK                19072  12 
xt_NFLOG               18432  0 
xt_NFQUEUE             18304  0 
xt_comment             18176  18 
xt_connlimit           21000  0 
xt_connmark            19200  2 
xt_conntrack           20480  0 
xt_dccp                19720  0 
xt_dscp                19072  0 
xt_hashlimit           28944  0 
xt_helper              19072  0 
xt_iprange             18816  0 
xt_length              18304  0 
xt_limit               19076  0 
xt_mac                 18304  0 
xt_mark                18560  5 
xt_multiport           19584  7 
xt_owner               19328  0 
xt_physdev             18960  0 
xt_pkttype             18304  0 
xt_policy              19456  0 
xt_realm               18048  0 
xt_state               18944  27 
xt_tcpmss              18560  0 
xt_tcpudp              19584  60 
xt_time                19328  0 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Not available
   Old Connection Tracking Match Syntax: Not available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   Ipset Match: Not available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Available
   MARK Target: Available
   Extended MARK Target: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Available
   Goto Support: Available

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      2485/portmap        
tcp        0      0 192.168.155.248:8080    0.0.0.0:*               LISTEN      4434/safesquid1     
tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTEN      2501/perl           
tcp        0      0 192.168.155.248:8081    0.0.0.0:*               LISTEN      4434/safesquid1     
tcp        0      0 62.235.193.23:53        0.0.0.0:*               LISTEN      2833/named          
tcp        0      0 192.168.155.248:53      0.0.0.0:*               LISTEN      2833/named          
tcp        0      0 192.168.2.1:53          0.0.0.0:*               LISTEN      2833/named          
tcp        0      0 192.168.1.155:53        0.0.0.0:*               LISTEN      2833/named          
tcp        0      0 10.0.0.13:53            0.0.0.0:*               LISTEN      2833/named          
tcp        0      0 127.0.0.2:53            0.0.0.0:*               LISTEN      2833/named          
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      2833/named          
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      2915/sshd           
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      4061/master         
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      2833/named          
tcp        0      0 0.0.0.0:1723            0.0.0.0:*               LISTEN      3998/pptpd          
tcp        0      0 192.168.155.248:22      192.168.155.116:1628    ESTABLISHED 4225/0              
tcp        0      0 192.168.155.248:22      192.168.155.116:1755    ESTABLISHED 4342/2              
tcp        0      0 192.168.155.248:22      192.168.155.116:1631    ESTABLISHED 4260/1              
tcp        0      0 :::139                  :::*                    LISTEN      4000/smbd           
tcp        0      0 :::3052                 :::*                    LISTEN      2941/java           
tcp        0      0 :::6547                 :::*                    LISTEN      2941/java           
tcp        0      0 :::53                   :::*                    LISTEN      2833/named          
tcp        0      0 :::22                   :::*                    LISTEN      2915/sshd           
tcp        0      0 ::1:25                  :::*                    LISTEN      4061/master         
tcp        0      0 ::1:953                 :::*                    LISTEN      2833/named          
tcp        0      0 :::445                  :::*                    LISTEN      4000/smbd           
udp        0      0 192.168.1.155:137       0.0.0.0:*                           3969/nmbd           
udp        0      0 192.168.2.1:137         0.0.0.0:*                           3969/nmbd           
udp        0      0 192.168.155.248:137     0.0.0.0:*                           3969/nmbd           
udp        0      0 10.0.0.13:137           0.0.0.0:*                           3969/nmbd           
udp        0      0 0.0.0.0:137             0.0.0.0:*                           3969/nmbd           
udp        0      0 192.168.1.155:138       0.0.0.0:*                           3969/nmbd           
udp        0      0 192.168.2.1:138         0.0.0.0:*                           3969/nmbd           
udp        0      0 192.168.155.248:138     0.0.0.0:*                           3969/nmbd           
udp        0      0 10.0.0.13:138           0.0.0.0:*                           3969/nmbd           
udp        0      0 0.0.0.0:138             0.0.0.0:*                           3969/nmbd           
udp        0      0 0.0.0.0:10000           0.0.0.0:*                           2501/perl           
udp        0      0 62.235.193.23:53        0.0.0.0:*                           2833/named          
udp        0      0 192.168.155.248:53      0.0.0.0:*                           2833/named          
udp        0      0 192.168.2.1:53          0.0.0.0:*                           2833/named          
udp        0      0 192.168.1.155:53        0.0.0.0:*                           2833/named          
udp        0      0 10.0.0.13:53            0.0.0.0:*                           2833/named          
udp        0      0 127.0.0.2:53            0.0.0.0:*                           2833/named          
udp        0      0 127.0.0.1:53            0.0.0.0:*                           2833/named          
udp        0      0 0.0.0.0:52939           0.0.0.0:*                           2833/named          
udp        0      0 0.0.0.0:111             0.0.0.0:*                           2485/portmap        
udp        0      0 :::44438                :::*                                2833/named          
udp        0      0 :::53                   :::*                                2833/named          
udp        0      0 :::47933                :::*                                2941/java           
udp        0      0 :::3052                 :::*                                2941/java           
udp        0      0 :::2160                 :::*                                2941/java           

Traffic Control

Device eth3:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 2841218 bytes 19005 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth2:
qdisc htb 1: root r2q 10 default 0 direct_packets_stat 12810 ver 3.17
 Sent 2278270 bytes 12810 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 
qdisc ingress ffff: parent ffff:fff1 ---------------- 
 Sent 8105744 bytes 18197 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

class htb 1:1 root prio 0 quantum 6250 rate 500000bit ceil 500000bit burst 1600b/8 mpu 0b overhead 0b cburst 1600b/8 mpu 0b overhead 0b level 0 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 
 lended: 0 borrowed: 0 giants: 0
 tokens: 25000 ctokens: 25000


Device eth1:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 57767133 bytes 217175 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device dsl1:
qdisc htb 2: root r2q 10 default 0 direct_packets_stat 18393 ver 3.17
 Sent 2415975 bytes 18393 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 
qdisc ingress ffff: parent ffff:fff1 ---------------- 
 Sent 24415082 bytes 39296 pkt (dropped 37, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

class htb 2:1 root prio 0 quantum 6250 rate 500000bit ceil 500000bit burst 1592b/8 mpu 0b overhead 0b cburst 1592b/8 mpu 0b overhead 0b level 0 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 
 lended: 0 borrowed: 0 giants: 0
 tokens: 24875 ctokens: 24875



TC Filters

Device eth3:

Device eth2:

Device eth1:

Device eth0:

Device dsl1:

