Shorewall 4.2.6 Dump at Gate-BE - Thu Feb 26 18:52:25 CET 2009

   Shorewall-perl 4.2.6

Counters reset Thu Feb 26 18:48:29 CET 2009

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  358 48731 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  172 40979 net2fw     all  --  dsl0   *       0.0.0.0/0            0.0.0.0/0           
  269 40555 net2fw     all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           
   62 12918 dmz2fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 1193 75498 loc2fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2fw     all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           
   18  6165 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   99  5207 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  303 20694 net_frwd   all  --  dsl0   *       0.0.0.0/0            0.0.0.0/0           
  334  171K net_frwd   all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           
    5   216 dmz_frwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
  613 93558 loc_frwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn_frwd   all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  186 13406 fw2net     all  --  *      dsl0    0.0.0.0/0            0.0.0.0/0           
  194 13665 fw2net     all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
   30  3998 fw2dmz     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 1818  297K fw2loc     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vpn     all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
   18  6165 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   16  2550 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain Drop (7 references)
 pkts bytes target     prot opt in     out     source               destination         
  103  6396            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
  103  6396 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
  103  6396 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
   69  3328 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain Reject (4 references)
 pkts bytes target     prot opt in     out     source               destination         
   23  2886            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
   23  2886 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    7   336 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    3   144 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain dmz2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   62 12918 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       192.168.1.100        192.168.155.178     tcp dpt:515 
    0     0 ACCEPT     all  --  *      *       192.168.1.48         192.168.155.181     
    0     0 ACCEPT     all  --  *      *       192.168.1.48         192.168.155.183     
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            192.168.155.206     
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    3   120 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spts:30000:50000 dpts:30000:50000 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:1025:1720 
    2    96 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dmz2net    all  --  *      dsl0    0.0.0.0/0            0.0.0.0/0           
    5   216 dmz2net    all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2vpn    all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   16  2550 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   15   708 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    7  1283 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   23  2715 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1784  293K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   20  1920 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,139 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,139 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:25 
   14  1675 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  116  8310 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    3   252 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
  261 18509 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    1    84 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1016 52208 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  109 11945 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,139 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:500 dpt:500 
   68 11345 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  532 89766 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5631 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:5632 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:3389 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3389 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:123 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:123 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:5900:5910 
    4   192 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:25 
   37  1768 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:80 
   31  1364 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:13443 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:13443 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:2525 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:7000:7099 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:587 
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3101 
    7   336 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    7   336 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  263 13381 loc2net    all  --  *      dsl0    0.0.0.0/0            0.0.0.0/0           
  349 80093 loc2net    all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
    1    84 loc2dmz    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2vpn    all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    3   128 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    7   343 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.1.110       tcp dpts:1025:1720 
    9   976 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.1.110       udp spts:30000:50000 dpts:30000:50000 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2dmz:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  336 75016 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    2   122 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
  103  6396 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
   88  5688 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2fw:DROP:' 
   88  5688 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  618  190K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2loc:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2vpn:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net_frwd (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 net2net    all  --  *      dsl0    0.0.0.0/0            0.0.0.0/0           
    0     0 net2net    all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
   19  1447 net2dmz    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
  618  190K net2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 net2vpn    all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain reject (11 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    3   144 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    4   192 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 LOG        all  --  *      *       224.0.0.0/4          0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           

Chain vpn2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain vpn_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 vpn2net    all  --  *      dsl0    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2net    all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2dmz    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Log (/var/log/messages)


NAT Table

Chain PREROUTING (policy ACCEPT 257 packets, 18922 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  264 19596 dnat       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 172 packets, 14238 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   87  5595 dsl0_masq  all  --  *      dsl0    0.0.0.0/0            0.0.0.0/0           
  125  7811 dsl1_masq  all  --  *      dsl1    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 177 packets, 15910 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   15  1876 net_dnat   all  --  dsl0   *       0.0.0.0/0            0.0.0.0/0           
   82  4608 net_dnat   all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           

Chain dsl0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   32  1412 MASQUERADE  all  --  *      *       192.168.155.0/24     0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       169.254.0.0/16       0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       192.168.1.0/24       0.0.0.0/0           

Chain dsl1_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   40  1920 MASQUERADE  all  --  *      *       192.168.155.0/24     0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       169.254.0.0/16       0.0.0.0/0           
    2    96 MASQUERADE  all  --  *      *       192.168.1.0/24       0.0.0.0/0           

Chain net_dnat (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    43 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:1025:1720 to:192.168.1.110 
    6   631 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spts:30000:50000 dpts:30000:50000 to:192.168.1.110 

Mangle Table

Chain PREROUTING (policy ACCEPT 2991 packets, 480K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1311  348K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
  105 12753 routemark  all  --  dsl0   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
  209 20628 routemark  all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
  475 61673 tcpre      all  --  dsl0   *       0.0.0.0/0            0.0.0.0/0           
  603  212K tcpre      all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           
 1366 98901 tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain INPUT (policy ACCEPT 1720 packets, 176K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 1255 packets, 285K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1255  285K fortos     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 1255  285K tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 2275 packets, 338K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  127 15146 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
 2148  323K tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain POSTROUTING (policy ACCEPT 3553 packets, 626K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 3553  626K tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fortos (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 TOS        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spts:30000:30100 TOS set 0x10 
    0     0 TOS        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:30000:30100 TOS set 0x10 

Chain routemark (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  105 12753 MARK       all  --  dsl0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 
  209 20628 MARK       all  --  dsl1   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
  314 33381 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match !0x0/0xff CONNMARK save mask 0xff 

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    6   288 MARK       tcp  --  eth1   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
 1092 55308 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
   62 12918 MARK       udp  --  eth1   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
  177 23349 MARK       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
   37  1768 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 MARK set 0x2 
    0     0 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 MARK set 0x1 
   31  1364 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 MARK set 0x1 
    1    48 MARK       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3101 MARK set 0x1 
   11   873 MARK       icmp --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 
    0     0 MARK       udp  --  eth1   *       0.0.0.0/0            0.0.0.0/0           udp dpts:30000:50000 MARK set 0x1 

Conntrack Table

ipv4     2 udp      17 159 src=87.65.216.23 dst=207.68.160.190 sport=51408 dport=53 packets=4 bytes=301 src=207.68.160.190 dst=87.65.216.23 sport=53 dport=51408 packets=4 bytes=479 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 65 TIME_WAIT src=192.168.155.129 dst=65.55.149.124 sport=1060 dport=80 packets=8 bytes=3986 src=65.55.149.124 dst=62.235.223.52 sport=80 dport=1060 packets=5 bytes=625 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 122 src=87.65.216.23 dst=204.2.178.133 sport=51408 dport=53 packets=2 bytes=167 src=204.2.178.133 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=407 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 122 src=62.235.223.52 dst=199.19.56.1 sport=51408 dport=53 packets=8 bytes=560 src=199.19.56.1 dst=62.235.223.52 sport=53 dport=51408 packets=8 bytes=3640 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 162 src=87.65.216.23 dst=213.200.97.118 sport=51408 dport=53 packets=2 bytes=154 src=213.200.97.118 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=454 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 38 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3432 dport=110 packets=8 bytes=380 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3432 packets=9 bytes=487 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 431976 ESTABLISHED src=192.168.155.129 dst=65.55.149.121 sport=1086 dport=80 packets=4 bytes=893 src=65.55.149.121 dst=62.235.223.52 sport=80 dport=1086 packets=2 bytes=475 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 10 src=192.168.155.129 dst=192.168.155.250 sport=52968 dport=53 packets=1 bytes=74 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=52968 packets=1 bytes=383 mark=0 secmark=0 use=1
ipv4     2 tcp      6 8 CLOSE src=192.168.155.129 dst=65.54.239.21 sport=1082 dport=80 packets=4 bytes=580 src=65.54.239.21 dst=62.235.223.52 sport=80 dport=1082 packets=3 bytes=418 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 149 src=87.65.216.23 dst=192.35.51.32 sport=51408 dport=53 packets=6 bytes=440 src=192.35.51.32 dst=87.65.216.23 sport=53 dport=51408 packets=6 bytes=1342 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 134 src=87.65.216.23 dst=212.74.77.54 sport=51408 dport=53 packets=2 bytes=144 src=212.74.77.54 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=272 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 102 TIME_WAIT src=192.168.155.129 dst=213.199.141.140 sport=1124 dport=80 packets=4 bytes=168 src=213.199.141.140 dst=62.235.223.52 sport=80 dport=1124 packets=2 bytes=84 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 9 src=87.65.216.23 dst=205.128.90.51 sport=51408 dport=53 packets=1 bytes=89 src=205.128.90.51 dst=87.65.216.23 sport=53 dport=51408 packets=1 bytes=316 mark=1 secmark=0 use=1
ipv4     2 tcp      6 38 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3433 dport=110 packets=8 bytes=376 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3433 packets=9 bytes=483 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 101 TIME_WAIT src=192.168.155.129 dst=213.199.166.30 sport=1122 dport=80 packets=5 bytes=455 src=213.199.166.30 dst=62.235.223.52 sport=80 dport=1122 packets=4 bytes=514 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 48 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3451 dport=110 packets=8 bytes=377 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3451 packets=9 bytes=484 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 20 src=87.65.216.23 dst=195.238.25.139 sport=51408 dport=53 packets=1 bytes=71 src=195.238.25.139 dst=87.65.216.23 sport=53 dport=51408 packets=1 bytes=280 mark=1 secmark=0 use=1
ipv4     2 tcp      6 431980 ESTABLISHED src=192.168.155.129 dst=207.46.113.93 sport=1090 dport=443 packets=13 bytes=5123 src=207.46.113.93 dst=62.235.223.52 sport=443 dport=1090 packets=10 bytes=5854 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 9 src=192.168.155.129 dst=192.168.155.250 sport=65002 dport=53 packets=1 bytes=72 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=65002 packets=1 bytes=243 mark=0 secmark=0 use=1
ipv4     2 tcp      6 101 TIME_WAIT src=192.168.155.129 dst=213.199.162.86 sport=1101 dport=80 packets=6 bytes=755 src=213.199.162.86 dst=62.235.223.52 sport=80 dport=1101 packets=5 bytes=3224 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 71 src=87.65.216.23 dst=199.254.31.1 sport=51408 dport=53 packets=2 bytes=154 src=199.254.31.1 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=386 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 59 TIME_WAIT src=192.168.155.129 dst=65.54.186.17 sport=1050 dport=443 packets=14 bytes=2651 src=65.54.186.17 dst=62.235.223.52 sport=443 dport=1050 packets=15 bytes=10222 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 74 TIME_WAIT src=192.168.155.129 dst=213.246.206.101 sport=1075 dport=80 packets=5 bytes=579 src=213.246.206.101 dst=62.235.223.52 sport=80 dport=1075 packets=4 bytes=386 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 43 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3442 dport=110 packets=8 bytes=379 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3442 packets=9 bytes=486 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 68 TIME_WAIT src=192.168.155.129 dst=65.55.149.124 sport=1064 dport=80 packets=6 bytes=2035 src=65.55.149.124 dst=62.235.223.52 sport=80 dport=1064 packets=4 bytes=585 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 97 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3454 dport=110 packets=8 bytes=380 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3454 packets=9 bytes=488 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 24 src=192.168.155.250 dst=192.168.155.250 sport=59229 dport=2160 packets=10 bytes=5765 [UNREPLIED] src=192.168.155.250 dst=192.168.155.250 sport=2160 dport=59229 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 udp      17 9 src=62.235.223.52 dst=212.187.162.134 sport=51408 dport=53 packets=1 bytes=93 src=212.187.162.134 dst=62.235.223.52 sport=53 dport=51408 packets=1 bytes=235 mark=2 secmark=0 use=1
ipv4     2 udp      17 71 src=62.235.223.52 dst=216.69.172.115 sport=51408 dport=53 packets=7 bytes=523 src=216.69.172.115 dst=62.235.223.52 sport=53 dport=51408 packets=7 bytes=1157 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 100 TIME_WAIT src=192.168.155.129 dst=212.123.6.237 sport=1102 dport=80 packets=5 bytes=550 src=212.123.6.237 dst=62.235.223.52 sport=80 dport=1102 packets=3 bytes=242 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 100 TIME_WAIT src=192.168.155.129 dst=213.199.166.30 sport=1092 dport=80 packets=5 bytes=458 src=213.199.166.30 dst=62.235.223.52 sport=80 dport=1092 packets=4 bytes=514 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 24 src=192.168.155.205 dst=192.168.155.255 sport=57180 dport=3052 packets=10 bytes=5765 [UNREPLIED] src=192.168.155.255 dst=192.168.155.205 sport=3052 dport=57180 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 tcp      6 431999 ESTABLISHED src=192.168.155.116 dst=192.168.155.250 sport=1159 dport=22 packets=95 bytes=8072 src=192.168.155.250 dst=192.168.155.116 sport=22 dport=1159 packets=68 bytes=7900 [ASSURED] mark=0 secmark=0 use=1
ipv4     2 udp      17 162 src=62.235.223.52 dst=213.199.161.77 sport=51408 dport=53 packets=18 bytes=1338 src=213.199.161.77 dst=62.235.223.52 sport=53 dport=51408 packets=18 bytes=2619 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 100 TIME_WAIT src=192.168.155.129 dst=213.199.166.30 sport=1096 dport=80 packets=5 bytes=462 src=213.199.166.30 dst=62.235.223.52 sport=80 dport=1096 packets=4 bytes=514 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 24 src=0.0.0.0 dst=255.255.255.255 sport=68 dport=67 packets=9 bytes=2952 [UNREPLIED] src=255.255.255.255 dst=0.0.0.0 sport=67 dport=68 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 udp      17 13 src=192.168.155.129 dst=192.168.155.250 sport=48813 dport=1900 packets=4 bytes=642 [UNREPLIED] src=192.168.155.250 dst=192.168.155.129 sport=1900 dport=48813 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 udp      17 1 src=192.168.155.129 dst=192.168.155.255 sport=137 dport=137 packets=6 bytes=468 [UNREPLIED] src=192.168.155.255 dst=192.168.155.129 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 udp      17 159 src=87.65.216.23 dst=192.55.83.30 sport=51408 dport=53 packets=3 bytes=234 src=192.55.83.30 dst=87.65.216.23 sport=53 dport=51408 packets=3 bytes=920 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 16 src=192.168.155.118 dst=192.168.155.255 sport=137 dport=137 packets=18 bytes=1404 [UNREPLIED] src=192.168.155.255 dst=192.168.155.118 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 tcp      6 69 TIME_WAIT src=192.168.155.129 dst=65.55.52.116 sport=1070 dport=80 packets=8 bytes=3618 src=65.55.52.116 dst=62.235.223.52 sport=80 dport=1070 packets=6 bytes=1196 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 148 src=87.65.216.23 dst=128.8.10.90 sport=51408 dport=53 packets=32 bytes=2340 src=128.8.10.90 dst=87.65.216.23 sport=53 dport=51408 packets=32 bytes=14874 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 68 TIME_WAIT src=192.168.155.129 dst=65.55.52.116 sport=1068 dport=80 packets=5 bytes=1583 src=65.55.52.116 dst=62.235.223.52 sport=80 dport=1068 packets=4 bytes=954 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 48 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3452 dport=110 packets=8 bytes=376 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3452 packets=9 bytes=484 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 10 src=192.168.155.129 dst=192.168.155.250 sport=51041 dport=53 packets=1 bytes=58 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=51041 packets=1 bytes=184 mark=0 secmark=0 use=1
ipv4     2 udp      17 12 src=192.168.155.129 dst=192.168.155.250 sport=50041 dport=53 packets=1 bytes=57 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=50041 packets=1 bytes=229 mark=0 secmark=0 use=1
ipv4     2 udp      17 122 src=62.235.223.52 dst=12.183.125.5 sport=51408 dport=53 packets=16 bytes=1032 src=12.183.125.5 dst=62.235.223.52 sport=53 dport=51408 packets=16 bytes=1120 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 147 src=87.65.216.23 dst=124.40.52.133 sport=51408 dport=53 packets=2 bytes=217 src=124.40.52.133 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=159 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 431998 ESTABLISHED src=192.168.155.116 dst=192.168.155.250 sport=1160 dport=22 packets=209 bytes=11696 src=192.168.155.250 dst=192.168.155.116 sport=22 dport=1160 packets=311 bytes=66000 [ASSURED] mark=0 secmark=0 use=1
ipv4     2 tcp      6 431978 ESTABLISHED src=192.168.155.129 dst=207.46.28.81 sport=1088 dport=80 packets=36 bytes=2044 src=207.46.28.81 dst=62.235.223.52 sport=80 dport=1088 packets=65 bytes=36386 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 159 src=87.65.216.23 dst=217.212.245.68 sport=51408 dport=53 packets=2 bytes=165 src=217.212.245.68 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=407 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 112 TIME_WAIT src=192.168.155.129 dst=213.199.141.140 sport=1126 dport=80 packets=4 bytes=168 src=213.199.141.140 dst=62.235.223.52 sport=80 dport=1126 packets=2 bytes=84 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 100 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3455 dport=110 packets=8 bytes=380 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3455 packets=9 bytes=487 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 45 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3446 dport=110 packets=8 bytes=378 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3446 packets=9 bytes=485 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 157 src=62.235.223.52 dst=195.219.3.169 sport=51408 dport=53 packets=3 bytes=261 src=195.219.3.169 dst=62.235.223.52 sport=53 dport=51408 packets=3 bytes=517 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 37 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3431 dport=110 packets=8 bytes=379 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3431 packets=11 bytes=564 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 148 src=62.235.223.52 dst=192.33.14.30 sport=51408 dport=53 packets=18 bytes=1262 src=192.33.14.30 dst=62.235.223.52 sport=53 dport=51408 packets=18 bytes=6730 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 47 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3450 dport=110 packets=8 bytes=378 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3450 packets=9 bytes=485 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 20 src=192.168.1.28 dst=192.168.1.1 sport=51724 dport=53 packets=1 bytes=60 src=192.168.1.1 dst=192.168.1.28 sport=53 dport=51724 packets=1 bytes=205 mark=0 secmark=0 use=1
ipv4     2 tcp      6 431920 ESTABLISHED src=192.168.155.200 dst=84.16.68.124 sport=3438 dport=110 packets=9 bytes=429 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3438 packets=11 bytes=2651 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 159 src=87.65.216.23 dst=64.215.164.170 sport=51408 dport=53 packets=2 bytes=137 src=64.215.164.170 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=438 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 10 src=192.168.155.129 dst=192.168.155.250 sport=60916 dport=53 packets=1 bytes=57 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=60916 packets=1 bytes=213 mark=0 secmark=0 use=1
ipv4     2 tcp      6 44 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3444 dport=110 packets=8 bytes=381 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3444 packets=9 bytes=488 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 39 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3435 dport=110 packets=8 bytes=376 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3435 packets=9 bytes=483 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 100 TIME_WAIT src=192.168.155.129 dst=65.54.194.102 sport=1104 dport=80 packets=4 bytes=168 src=65.54.194.102 dst=62.235.223.52 sport=80 dport=1104 packets=2 bytes=84 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 37 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3429 dport=110 packets=8 bytes=375 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3429 packets=9 bytes=483 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 431998 ESTABLISHED src=192.168.155.129 dst=207.46.106.60 sport=1084 dport=80 packets=39 bytes=20926 src=207.46.106.60 dst=62.235.223.52 sport=80 dport=1084 packets=25 bytes=14573 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 10 src=87.65.216.23 dst=8.12.209.47 sport=51408 dport=53 packets=1 bytes=78 src=8.12.209.47 dst=87.65.216.23 sport=53 dport=51408 packets=1 bytes=220 mark=1 secmark=0 use=1
ipv4     2 udp      17 124 src=62.235.223.52 dst=65.54.240.126 sport=51408 dport=53 packets=2 bytes=146 src=65.54.240.126 dst=62.235.223.52 sport=53 dport=51408 packets=2 bytes=226 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 39 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3436 dport=110 packets=8 bytes=378 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3436 packets=9 bytes=485 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 159 src=62.235.223.52 dst=213.244.181.21 sport=51408 dport=53 packets=2 bytes=139 src=213.244.181.21 dst=62.235.223.52 sport=53 dport=51408 packets=2 bytes=136 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 122 src=87.65.216.23 dst=81.52.250.135 sport=51408 dport=53 packets=2 bytes=137 src=81.52.250.135 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=409 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 123 src=62.235.223.52 dst=213.244.181.11 sport=51408 dport=53 packets=2 bytes=137 src=213.244.181.11 dst=62.235.223.52 sport=53 dport=51408 packets=2 bytes=199 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 45 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3445 dport=110 packets=8 bytes=380 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3445 packets=9 bytes=487 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 431917 ESTABLISHED src=192.168.155.200 dst=84.16.68.124 sport=3430 dport=110 packets=8 bytes=388 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3430 packets=8 bytes=1506 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 160 src=62.235.223.52 dst=195.59.44.134 sport=51408 dport=53 packets=3 bytes=296 src=195.59.44.134 dst=62.235.223.52 sport=53 dport=51408 packets=3 bytes=290 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 39 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3437 dport=110 packets=8 bytes=380 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3437 packets=9 bytes=487 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 147 src=62.235.223.52 dst=208.44.108.137 sport=51408 dport=53 packets=2 bytes=155 src=208.44.108.137 dst=62.235.223.52 sport=53 dport=51408 packets=2 bytes=189 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 431980 ESTABLISHED src=192.168.155.129 dst=92.122.216.107 sport=1105 dport=80 packets=5 bytes=391 src=92.122.216.107 dst=62.235.223.52 sport=80 dport=1105 packets=5 bytes=3640 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 108 TIME_WAIT src=192.168.155.129 dst=8.12.209.125 sport=1095 dport=80 packets=6 bytes=765 src=8.12.209.125 dst=62.235.223.52 sport=80 dport=1095 packets=5 bytes=372 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 149 src=62.235.223.52 dst=192.31.80.30 sport=51408 dport=53 packets=6 bytes=414 src=192.31.80.30 dst=62.235.223.52 sport=53 dport=51408 packets=6 bytes=1848 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 41 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3440 dport=110 packets=8 bytes=379 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3440 packets=9 bytes=489 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 46 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3449 dport=110 packets=8 bytes=379 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3449 packets=9 bytes=486 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 27 src=192.168.155.134 dst=192.168.155.255 sport=137 dport=137 packets=1 bytes=78 [UNREPLIED] src=192.168.155.255 dst=192.168.155.134 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 tcp      6 43 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3443 dport=110 packets=8 bytes=379 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3443 packets=9 bytes=486 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 5 src=192.168.155.129 dst=192.168.155.250 sport=65057 dport=53 packets=1 bytes=55 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=65057 packets=1 bytes=209 mark=0 secmark=0 use=1
ipv4     2 udp      17 10 src=192.168.155.129 dst=192.168.155.250 sport=54385 dport=53 packets=1 bytes=63 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=54385 packets=1 bytes=257 mark=0 secmark=0 use=1
ipv4     2 udp      17 148 src=62.235.223.52 dst=192.12.94.32 sport=51408 dport=53 packets=8 bytes=543 src=192.12.94.32 dst=62.235.223.52 sport=53 dport=51408 packets=8 bytes=2358 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 431999 ESTABLISHED src=192.168.155.116 dst=192.168.155.250 sport=1161 dport=22 packets=711 bytes=31984 src=192.168.155.250 dst=192.168.155.116 sport=22 dport=1161 packets=1350 bytes=202520 [ASSURED] mark=0 secmark=0 use=1
ipv4     2 udp      17 149 src=87.65.216.23 dst=65.55.238.126 sport=51408 dport=53 packets=4 bytes=265 src=65.55.238.126 dst=87.65.216.23 sport=53 dport=51408 packets=4 bytes=443 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 134 src=87.65.216.23 dst=212.74.78.17 sport=51408 dport=53 packets=2 bytes=144 src=212.74.78.17 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=246 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 40 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3439 dport=110 packets=8 bytes=378 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3439 packets=11 bytes=565 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 159 src=87.65.216.23 dst=192.54.112.30 sport=51408 dport=53 packets=17 bytes=1242 src=192.54.112.30 dst=87.65.216.23 sport=53 dport=51408 packets=17 bytes=4814 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 101 TIME_WAIT src=192.168.155.129 dst=213.199.166.30 sport=1118 dport=80 packets=5 bytes=468 src=213.199.166.30 dst=62.235.223.52 sport=80 dport=1118 packets=4 bytes=514 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 134 src=87.65.216.23 dst=192.52.178.30 sport=51408 dport=53 packets=14 bytes=1032 src=192.52.178.30 dst=87.65.216.23 sport=53 dport=51408 packets=13 bytes=2618 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 9 src=192.168.155.129 dst=192.168.155.250 sport=54151 dport=53 packets=1 bytes=56 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=54151 packets=1 bytes=219 mark=0 secmark=0 use=1
ipv4     2 tcp      6 39 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3434 dport=110 packets=8 bytes=376 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3434 packets=9 bytes=483 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 9 src=62.235.223.52 dst=91.200.16.101 sport=51408 dport=53 packets=1 bytes=67 src=91.200.16.101 dst=62.235.223.52 sport=53 dport=51408 packets=1 bytes=129 mark=2 secmark=0 use=1
ipv4     2 tcp      6 431981 ESTABLISHED src=192.168.155.129 dst=92.122.216.107 sport=1098 dport=80 packets=4 bytes=499 src=92.122.216.107 dst=62.235.223.52 sport=80 dport=1098 packets=3 bytes=348 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 52 TIME_WAIT src=192.168.155.129 dst=65.54.186.17 sport=1048 dport=80 packets=5 bytes=1206 src=65.54.186.17 dst=62.235.223.52 sport=80 dport=1048 packets=4 bytes=914 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 101 TIME_WAIT src=192.168.155.129 dst=213.199.166.30 sport=1109 dport=80 packets=5 bytes=456 src=213.199.166.30 dst=62.235.223.52 sport=80 dport=1109 packets=4 bytes=514 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 9 src=62.235.223.52 dst=199.93.57.45 sport=51408 dport=53 packets=1 bytes=89 src=199.93.57.45 dst=62.235.223.52 sport=53 dport=51408 packets=1 bytes=263 mark=2 secmark=0 use=1
ipv4     2 udp      17 9 src=87.65.216.23 dst=192.5.6.30 sport=51408 dport=53 packets=1 bytes=89 src=192.5.6.30 dst=87.65.216.23 sport=53 dport=51408 packets=1 bytes=299 mark=1 secmark=0 use=1
ipv4     2 tcp      6 11 TIME_WAIT src=192.168.155.136 dst=89.202.149.45 sport=2085 dport=80 packets=5 bytes=492 src=89.202.149.45 dst=62.235.223.52 sport=80 dport=2085 packets=5 bytes=745 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 149 src=62.235.223.52 dst=192.5.6.31 sport=51408 dport=53 packets=3 bytes=207 src=192.5.6.31 dst=62.235.223.52 sport=53 dport=51408 packets=2 bytes=254 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 145 src=87.65.216.23 dst=220.73.220.4 sport=51408 dport=53 packets=2 bytes=201 src=220.73.220.4 dst=87.65.216.23 sport=53 dport=51408 packets=2 bytes=151 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 5 src=62.235.223.52 dst=194.119.228.67 sport=48529 dport=53 packets=1 bytes=60 src=194.119.228.67 dst=62.235.223.52 sport=53 dport=48529 packets=1 bytes=187 mark=2 secmark=0 use=1
ipv4     2 tcp      6 42 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3441 dport=110 packets=8 bytes=380 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3441 packets=9 bytes=487 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 431975 ESTABLISHED src=192.168.155.206 dst=193.109.81.33 sport=1500 dport=3101 packets=14 bytes=1567 src=193.109.81.33 dst=87.65.216.23 sport=3101 dport=1500 packets=11 bytes=839 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 87 TIME_WAIT src=192.168.155.129 dst=65.54.186.17 sport=1079 dport=443 packets=20 bytes=9616 src=65.54.186.17 dst=62.235.223.52 sport=443 dport=1079 packets=20 bytes=18278 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 101 TIME_WAIT src=192.168.155.129 dst=213.199.166.30 sport=1112 dport=80 packets=5 bytes=462 src=213.199.166.30 dst=62.235.223.52 sport=80 dport=1112 packets=4 bytes=514 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 159 src=62.235.223.52 dst=96.17.77.202 sport=51408 dport=53 packets=8 bytes=524 src=96.17.77.202 dst=62.235.223.52 sport=53 dport=51408 packets=8 bytes=664 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 tcp      6 48 TIME_WAIT src=192.168.155.129 dst=65.54.186.17 sport=1046 dport=80 packets=6 bytes=1224 src=65.54.186.17 dst=62.235.223.52 sport=80 dport=1046 packets=6 bytes=2898 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 105 src=87.65.216.23 dst=192.12.94.30 sport=51408 dport=53 packets=10 bytes=690 src=192.12.94.30 dst=87.65.216.23 sport=53 dport=51408 packets=10 bytes=2430 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 tcp      6 101 TIME_WAIT src=192.168.155.129 dst=213.199.166.30 sport=1120 dport=80 packets=5 bytes=471 src=213.199.166.30 dst=62.235.223.52 sport=80 dport=1120 packets=4 bytes=514 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 105 src=62.235.223.52 dst=207.46.66.126 sport=51408 dport=53 packets=2 bytes=129 src=207.46.66.126 dst=62.235.223.52 sport=53 dport=51408 packets=2 bytes=385 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 9 src=192.168.155.129 dst=192.168.155.250 sport=64900 dport=53 packets=1 bytes=63 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=64900 packets=1 bytes=331 mark=0 secmark=0 use=1
ipv4     2 tcp      6 46 TIME_WAIT src=192.168.155.200 dst=84.16.68.124 sport=3448 dport=110 packets=8 bytes=379 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3448 packets=9 bytes=486 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 7 src=192.168.155.129 dst=192.168.155.250 sport=57276 dport=53 packets=1 bytes=70 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=57276 packets=1 bytes=386 mark=0 secmark=0 use=1
ipv4     2 tcp      6 64 TIME_WAIT src=192.168.155.129 dst=65.54.234.13 sport=1056 dport=80 packets=6 bytes=1279 src=65.54.234.13 dst=62.235.223.52 sport=80 dport=1056 packets=5 bytes=1353 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 12 src=192.168.155.206 dst=192.168.155.255 sport=138 dport=138 packets=1 bytes=236 [UNREPLIED] src=192.168.155.255 dst=192.168.155.206 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
ipv4     2 tcp      6 431984 ESTABLISHED src=192.168.155.129 dst=207.46.113.93 sport=1115 dport=443 packets=11 bytes=3008 src=207.46.113.93 dst=62.235.223.52 sport=443 dport=1115 packets=9 bytes=5797 [ASSURED] mark=2 secmark=0 use=1
ipv4     2 udp      17 9 src=192.168.155.129 dst=192.168.155.250 sport=53454 dport=53 packets=1 bytes=62 src=192.168.155.250 dst=192.168.155.129 sport=53 dport=53454 packets=1 bytes=261 mark=0 secmark=0 use=1
ipv4     2 tcp      6 431925 ESTABLISHED src=192.168.155.200 dst=84.16.68.124 sport=3447 dport=110 packets=8 bytes=389 src=84.16.68.124 dst=87.65.216.23 sport=110 dport=3447 packets=8 bytes=1507 [ASSURED] mark=1 secmark=0 use=1
ipv4     2 udp      17 9 src=87.65.216.23 dst=207.123.33.51 sport=51408 dport=53 packets=1 bytes=85 src=207.123.33.51 dst=87.65.216.23 sport=53 dport=51408 packets=1 bytes=227 mark=1 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
    inet 127.0.0.2/8 brd 127.255.255.255 scope host secondary lo
2: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    inet 10.0.0.13/8 brd 10.255.255.255 scope global eth3
3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    inet 10.0.0.12/8 brd 10.255.255.255 scope global eth2
4: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    inet 192.168.1.1/24 brd 192.168.1.255 scope global eth1
5: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    inet 192.168.155.250/24 brd 192.168.155.255 scope global eth0
6: dsl0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc htb state UNKNOWN qlen 3
    inet 87.65.216.23 peer 87.65.216.1/32 scope global dsl0
7: dsl1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc htb state UNKNOWN qlen 3
    inet 62.235.223.52 peer 62.235.223.1/32 scope global dsl1

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    6893       28       0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    6893       28       0       0       0       0      
2: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    link/ether 00:30:4f:22:0c:62 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    237413     709      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    112903     624      0       0       0       0      
3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    link/ether 00:30:4f:0a:d4:da brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    76190      531      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    38339      475      0       0       0       0      
4: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    link/ether 00:30:4f:1c:45:20 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    12021      60       0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    7258       65       0       0       0       0      
5: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    link/ether 00:30:4f:08:79:75 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    230033     1986     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    525953     2476     0       0       0       0      
6: dsl0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc htb state UNKNOWN qlen 3
    link/ppp 
    RX: bytes  packets  errors  dropped overrun mcast   
    63903      517      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    26961      455      0       0       0       0      
7: dsl1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc htb state UNKNOWN qlen 3
    link/ppp 
    RX: bytes  packets  errors  dropped overrun mcast   
    220614     694      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    98247      604      0       0       0       0      

/proc

   /proc/version = Linux version 2.6.25.5-1.1-pae (geeko@buildhost) (gcc version 4.3.1 20080507 (prerelease) [gcc-4_3-branch revision 135036] (SUSE Linux) ) #1 SMP 2008-06-07 01:55:22 +0200
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 1
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 1
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/dsl0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/dsl0/arp_filter = 0
   /proc/sys/net/ipv4/conf/dsl0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/dsl0/rp_filter = 1
   /proc/sys/net/ipv4/conf/dsl0/log_martians = 1
   /proc/sys/net/ipv4/conf/dsl1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/dsl1/arp_filter = 0
   /proc/sys/net/ipv4/conf/dsl1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/dsl1/rp_filter = 1
   /proc/sys/net/ipv4/conf/dsl1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth2/log_martians = 1
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth3/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 1
   /proc/sys/net/ipv4/conf/lo/log_martians = 1

Routing Rules

0:	from all lookup local 
10000:	from all fwmark 0x1 lookup Skynet 
10001:	from all fwmark 0x2 lookup Scarlet 
20000:	from 87.65.216.23 lookup Skynet 
20256:	from 62.235.223.52 lookup Scarlet 
32766:	from all lookup main 
32767:	from all lookup default 

Table Scarlet:

62.235.223.1 dev dsl1  scope link  src 62.235.223.52 
192.168.1.0/24 dev eth1  proto kernel  scope link  src 192.168.1.1 
192.168.155.0/24 dev eth0  proto kernel  scope link  src 192.168.155.250 
169.254.0.0/16 dev eth0  scope link 
default via 62.235.223.1 dev dsl1  src 62.235.223.52 

Table Skynet:

87.65.216.1 dev dsl0  scope link  src 87.65.216.23 
192.168.1.0/24 dev eth1  proto kernel  scope link  src 192.168.1.1 
192.168.155.0/24 dev eth0  proto kernel  scope link  src 192.168.155.250 
169.254.0.0/16 dev eth0  scope link 
default via 87.65.216.1 dev dsl0  src 87.65.216.23 

Table default:


Table local:

local 192.168.1.1 dev eth1  proto kernel  scope host  src 192.168.1.1 
broadcast 192.168.1.0 dev eth1  proto kernel  scope link  src 192.168.1.1 
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 10.0.0.0 dev eth2  proto kernel  scope link  src 10.0.0.12 
broadcast 10.0.0.0 dev eth3  proto kernel  scope link  src 10.0.0.13 
broadcast 192.168.155.0 dev eth0  proto kernel  scope link  src 192.168.155.250 
local 10.0.0.13 dev eth3  proto kernel  scope host  src 10.0.0.13 
local 10.0.0.12 dev eth2  proto kernel  scope host  src 10.0.0.12 
broadcast 192.168.1.255 dev eth1  proto kernel  scope link  src 192.168.1.1 
broadcast 10.255.255.255 dev eth2  proto kernel  scope link  src 10.0.0.12 
broadcast 10.255.255.255 dev eth3  proto kernel  scope link  src 10.0.0.13 
local 192.168.155.250 dev eth0  proto kernel  scope host  src 192.168.155.250 
local 62.235.223.52 dev dsl1  proto kernel  scope host  src 62.235.223.52 
local 87.65.216.23 dev dsl0  proto kernel  scope host  src 87.65.216.23 
local 127.0.0.2 dev lo  proto kernel  scope host  src 127.0.0.1 
broadcast 192.168.155.255 dev eth0  proto kernel  scope link  src 192.168.155.250 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

62.235.223.1 dev dsl1  proto kernel  scope link  src 62.235.223.52 
87.65.216.1 dev dsl0  proto kernel  scope link  src 87.65.216.23 
192.168.1.0/24 dev eth1  proto kernel  scope link  src 192.168.1.1 
192.168.155.0/24 dev eth0  proto kernel  scope link  src 192.168.155.250 
169.254.0.0/16 dev eth0  scope link 
10.0.0.0/8 dev eth2  proto kernel  scope link  src 10.0.0.12 
10.0.0.0/8 dev eth3  proto kernel  scope link  src 10.0.0.13 
127.0.0.0/8 dev lo  scope link 
default 
	nexthop via 87.65.216.1  dev dsl0 weight 1
	nexthop via 62.235.223.1  dev dsl1 weight 1

ARP

? (192.168.155.206) at 00:22:64:BE:DA:C6 [ether] on eth0
? (192.168.155.190) at 00:30:4F:24:94:CE [ether] on eth0
? (192.168.155.129) at 00:0F:EA:AD:37:11 [ether] on eth0
? (192.168.155.134) at 00:0E:7B:9C:BE:21 [ether] on eth0
? (192.168.1.110) at 00:30:4F:24:94:CF [ether] on eth1
? (192.168.1.28) at 00:13:E8:6C:05:87 [ether] on eth1
? (192.168.155.200) at 00:17:9A:7B:C4:E3 [ether] on eth0
? (192.168.155.136) at 00:0E:7B:9A:90:61 [ether] on eth0
? (192.168.155.116) at 02:FF:CC:A0:94:4B [ether] on eth0

Modules

ip_tables              30224  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_CLUSTERIP          24964  0 
ipt_ECN                19328  0 
ipt_LOG                22788  9 
ipt_MASQUERADE         20224  6 
ipt_NETMAP             18432  0 
ipt_REDIRECT           18432  0 
ipt_REJECT             20352  2 
ipt_TTL                18688  0 
ipt_ULOG               25352  0 
ipt_addrtype           19200  4 
ipt_ah                 18304  0 
ipt_ecn                18560  0 
ipt_recent             25756  0 
ipt_ttl                18304  0 
iptable_filter         19840  1 
iptable_mangle         19712  1 
iptable_nat            23688  1 
iptable_raw            19328  0 
nf_conntrack           79188  31 xt_connlimit,ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_sane,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda    21376  1 nf_nat_amanda
nf_conntrack_ftp       25380  1 nf_nat_ftp
nf_conntrack_h323      63488  1 nf_nat_h323
nf_conntrack_ipv4      27652  35 iptable_nat,nf_nat
nf_conntrack_irc       23068  1 nf_nat_irc
nf_conntrack_netbios_ns    19200  0 
nf_conntrack_netlink    35456  0 
nf_conntrack_pptp      23172  1 nf_nat_pptp
nf_conntrack_proto_gre    22528  1 nf_conntrack_pptp
nf_conntrack_proto_sctp    23816  0 
nf_conntrack_sane      21916  0 
nf_conntrack_sip       25620  1 nf_nat_sip
nf_conntrack_tftp      21396  1 nf_nat_tftp
nf_nat                 35736  13 ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_netlink,iptable_nat
nf_nat_amanda          18816  0 
nf_nat_ftp             19712  0 
nf_nat_h323            23808  0 
nf_nat_irc             19072  0 
nf_nat_pptp            20096  0 
nf_nat_proto_gre       19204  1 nf_nat_pptp
nf_nat_sip             21248  0 
nf_nat_snmp_basic      25992  0 
nf_nat_tftp            18176  0 
xt_CLASSIFY            18176  0 
xt_CONNMARK            20224  3 
xt_DSCP                19840  2 
xt_MARK                19072  12 
xt_NFLOG               18432  0 
xt_NFQUEUE             18304  0 
xt_comment             18176  18 
xt_connlimit           21000  0 
xt_connmark            19200  2 
xt_conntrack           20480  0 
xt_dccp                19720  0 
xt_dscp                19072  0 
xt_hashlimit           28944  0 
xt_helper              19072  0 
xt_iprange             18816  0 
xt_length              18304  0 
xt_limit               19076  0 
xt_mac                 18304  0 
xt_mark                18560  5 
xt_multiport           19584  7 
xt_owner               19328  0 
xt_physdev             18960  0 
xt_pkttype             18304  0 
xt_policy              19456  0 
xt_realm               18048  0 
xt_state               18944  27 
xt_tcpmss              18560  0 
xt_tcpudp              19584  60 
xt_time                19328  0 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Not available
   Old Connection Tracking Match Syntax: Not available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   Ipset Match: Not available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Available
   MARK Target: Available
   Extended MARK Target: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Available
   Goto Support: Available

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      2525/portmap        
tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTEN      2541/perl           
tcp        0      0 192.168.155.250:53      0.0.0.0:*               LISTEN      2873/named          
tcp        0      0 192.168.1.1:53          0.0.0.0:*               LISTEN      2873/named          
tcp        0      0 10.0.0.12:53            0.0.0.0:*               LISTEN      2873/named          
tcp        0      0 10.0.0.13:53            0.0.0.0:*               LISTEN      2873/named          
tcp        0      0 127.0.0.2:53            0.0.0.0:*               LISTEN      2873/named          
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      2873/named          
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      2948/sshd           
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      4409/master         
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      2873/named          
tcp        0      0 0.0.0.0:1723            0.0.0.0:*               LISTEN      4336/pptpd          
tcp        0      0 192.168.155.250:22      192.168.155.116:1160    ESTABLISHED 4494/1              
tcp        0      0 192.168.155.250:22      192.168.155.116:1159    ESTABLISHED 4461/0              
tcp        0     84 192.168.155.250:22      192.168.155.116:1161    ESTABLISHED 4527/2              
tcp        0      0 :::139                  :::*                    LISTEN      4339/smbd           
tcp        0      0 :::3052                 :::*                    LISTEN      2979/java           
tcp        0      0 :::6547                 :::*                    LISTEN      2979/java           
tcp        0      0 :::53                   :::*                    LISTEN      2873/named          
tcp        0      0 :::22                   :::*                    LISTEN      2948/sshd           
tcp        0      0 ::1:25                  :::*                    LISTEN      4409/master         
tcp        0      0 ::1:953                 :::*                    LISTEN      2873/named          
tcp        0      0 :::445                  :::*                    LISTEN      4339/smbd           
udp        0      0 192.168.1.1:137         0.0.0.0:*                           4313/nmbd           
udp        0      0 192.168.155.250:137     0.0.0.0:*                           4313/nmbd           
udp        0      0 10.0.0.12:137           0.0.0.0:*                           4313/nmbd           
udp        0      0 10.0.0.13:137           0.0.0.0:*                           4313/nmbd           
udp        0      0 0.0.0.0:137             0.0.0.0:*                           4313/nmbd           
udp        0      0 192.168.1.1:138         0.0.0.0:*                           4313/nmbd           
udp        0      0 192.168.155.250:138     0.0.0.0:*                           4313/nmbd           
udp        0      0 10.0.0.12:138           0.0.0.0:*                           4313/nmbd           
udp        0      0 10.0.0.13:138           0.0.0.0:*                           4313/nmbd           
udp        0      0 0.0.0.0:138             0.0.0.0:*                           4313/nmbd           
udp        0      0 0.0.0.0:10000           0.0.0.0:*                           2541/perl           
udp        0      0 192.168.155.250:53      0.0.0.0:*                           2873/named          
udp        0      0 192.168.1.1:53          0.0.0.0:*                           2873/named          
udp        0      0 10.0.0.12:53            0.0.0.0:*                           2873/named          
udp        0      0 10.0.0.13:53            0.0.0.0:*                           2873/named          
udp        0      0 127.0.0.2:53            0.0.0.0:*                           2873/named          
udp        0      0 127.0.0.1:53            0.0.0.0:*                           2873/named          
udp        0      0 0.0.0.0:51408           0.0.0.0:*                           2873/named          
udp        0      0 0.0.0.0:111             0.0.0.0:*                           2525/portmap        
udp        0      0 :::34562                :::*                                2873/named          
udp        0      0 :::53                   :::*                                2873/named          
udp        0      0 :::59229                :::*                                2979/java           
udp        0      0 :::3052                 :::*                                2979/java           
udp        0      0 :::2160                 :::*                                2979/java           

Traffic Control

Device eth3:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 112493 bytes 624 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth2:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 37908 bytes 475 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth1:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 7075 bytes 65 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 526664 bytes 2493 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device dsl0:
qdisc htb 1: root r2q 10 default 0 direct_packets_stat 449 ver 3.17
 Sent 26787 bytes 449 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 
qdisc ingress ffff: parent ffff:fff1 ---------------- 
 Sent 61673 bytes 475 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

class htb 1:1 root prio 0 quantum 6250 rate 500000bit ceil 500000bit burst 1592b/8 mpu 0b overhead 0b cburst 1592b/8 mpu 0b overhead 0b level 0 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 
 lended: 0 borrowed: 0 giants: 0
 tokens: 24875 ctokens: 24875


Device dsl1:
qdisc htb 2: root r2q 10 default 0 direct_packets_stat 541 ver 3.17
 Sent 93638 bytes 541 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 
qdisc ingress ffff: parent ffff:fff1 ---------------- 
 Sent 212800 bytes 657 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

class htb 2:1 root prio 0 quantum 6250 rate 500000bit ceil 500000bit burst 1592b/8 mpu 0b overhead 0b cburst 1592b/8 mpu 0b overhead 0b level 0 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 
 lended: 0 borrowed: 0 giants: 0
 tokens: 24875 ctokens: 24875



TC Filters

Device eth3:

Device eth2:

Device eth1:

Device eth0:

Device dsl0:

Device dsl1:

