Shorewall 4.0.15 Dump at mavis - Mon Jul 27 16:34:57 EDT 2009

   Shorewall-shell 4.0.15
   Shorewall-perl  4.0.15

Counters reset Mon Jul 27 12:34:53 EDT 2009

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 3856  471K eth0_in    all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
17648 1464K eth1_in    all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 tun+_in    all  --  tun+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:INPUT:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
67613   51M eth0_fwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
57820   10M eth1_fwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 tun+_fwd   all  --  tun+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:FORWARD:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 3242  427K eth0_out   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
 5567  724K eth1_out   all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 tun+_out   all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:OUTPUT:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain Drop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
   97  5464 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
   97  5464 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    2    96 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
   27  1096 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain Reject (16 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
11424  942K dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    6   304 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    6   304 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain all2fw (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:all2fw:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain all2loc (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:all2loc:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain all2net (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:all2net:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain all2vpn (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:all2vpn:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
11418  942K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   41  1740 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (6 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   73  4060 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
67613   51M net2loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 net2vpn    all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           

Chain eth0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  545 57775 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
   80 26571 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 3776  444K net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   55 18040 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 3187  409K fw2net     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 6889  582K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
57820   10M loc2net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2vpn    all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           

Chain eth1_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
15212 1217K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
   27  9227 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
17621 1454K loc2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   25  8509 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 5542  716K fw2loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:fw2all:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 5541  716K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    1    48 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:fw2loc:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1682  310K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
 1504 99101 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    1    60 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:123 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1194 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:fw2net:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:fw2vpn:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:loc2all:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 2436  246K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
 3760  266K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    1    52 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
11424  942K Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    6   304 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:loc2fw:REJECT:' queue_threshold 1 
    6   304 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
50931 9917K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
 3436  177K ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
  127  6584 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
 3326  399K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 3311  413K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    2   120 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.42         tcp dpt:22 
  366 25620 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1194 
   97  5464 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
   54  3628 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:net2fw:DROP:' queue_threshold 1 
   54  3628 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
67540   51M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   38  1992 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:22 
    5   276 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:25 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:110 
   29  1740 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:995 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:443 
    1    52 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:143 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:220 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:585 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:993 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:10000 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:10001 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:8767 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            10.32.64.13         udp dpt:8767 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:8768 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            10.32.64.13         udp dpt:8768 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:8769 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            10.32.64.13         udp dpt:8769 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.13         tcp dpt:8770 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            10.32.64.13         udp dpt:8770 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.32.64.3          tcp dpt:3389 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:net2loc:DROP:' queue_threshold 1 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:net2vpn:DROP:' queue_threshold 1 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain reject (23 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    6   304 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 LOG        all  --  *      *       224.0.0.0/4          0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           

Chain tun+_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 vpn2net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           

Chain tun+_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 vpn2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tun+_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw2vpn     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:vpn2all:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:vpn2fw:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:vpn2net:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Log (/var/log/messages)


NAT Table

Chain PREROUTING (policy ACCEPT 20464 packets, 1755K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1475  151K net_dnat   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 1615 packets, 125K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 6704  610K eth0_masq  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 1536 packets, 120K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 5187  495K MASQUERADE  all  --  *      *       10.0.0.0/8           0.0.0.0/0           

Chain net_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   38  1992 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 to:10.32.64.13 
    5   276 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 to:10.32.64.13 
   29  1740 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:995 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 to:10.32.64.13 
    1    52 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:220 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:585 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:993 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10001 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8767 to:10.32.64.13 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:8767 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8768 to:10.32.64.13 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:8768 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8769 to:10.32.64.13 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:8769 to:10.32.64.13 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8770 to:10.32.64.13 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:8770 to:10.32.64.13 
    2   120 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:23 to:10.32.64.42:22 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3389 to:10.32.64.3:3389 

Mangle Table

Chain PREROUTING (policy ACCEPT 148K packets, 64M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 148K   64M tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 21504 packets, 1935K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 125K packets, 62M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 125K   62M tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 8809 packets, 1151K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 8809 1151K tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 134K packets, 63M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 134K   63M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table

tcp      6 88 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52996 dport=80 packets=7 bytes=2244 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52996 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 28 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52912 dport=80 packets=5 bytes=779 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52912 packets=5 bytes=361 [ASSURED] mark=0 secmark=0 use=1
tcp      6 38 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52934 dport=80 packets=5 bytes=708 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52934 packets=5 bytes=360 [ASSURED] mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=128.241.217.115 sport=52815 dport=80 packets=6 bytes=717 src=128.241.217.115 dst=65.100.249.52 sport=80 dport=52815 packets=5 bytes=2736 [ASSURED] mark=0 secmark=0 use=1
tcp      6 108 TIME_WAIT src=10.32.64.10 dst=96.17.109.82 sport=52907 dport=80 packets=9 bytes=2361 src=96.17.109.82 dst=65.100.249.52 sport=80 dport=52907 packets=10 bytes=8740 [ASSURED] mark=0 secmark=0 use=1
tcp      6 428346 ESTABLISHED src=99.182.113.98 dst=65.100.249.52 sport=35155 dport=23 packets=441 bytes=38061 src=10.32.64.42 dst=99.182.113.98 sport=22 dport=35155 packets=315 bytes=92468 [ASSURED] mark=0 secmark=0 use=1
tcp      6 39 SYN_SENT src=10.32.64.192 dst=192.168.56.1 sport=57461 dport=63331 packets=3 bytes=152 [UNREPLIED] src=192.168.56.1 dst=65.100.249.52 sport=63331 dport=57461 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 75 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52991 dport=80 packets=5 bytes=1266 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52991 packets=5 bytes=631 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=96.6.122.88 sport=52950 dport=80 packets=10 bytes=2222 src=96.6.122.88 dst=65.100.249.52 sport=80 dport=52950 packets=10 bytes=8455 [ASSURED] mark=0 secmark=0 use=1
tcp      6 27 TIME_WAIT src=10.32.64.10 dst=209.85.147.109 sport=52884 dport=995 packets=12 bytes=983 src=209.85.147.109 dst=65.100.249.52 sport=995 dport=52884 packets=16 bytes=1822 [ASSURED] mark=0 secmark=0 use=1
tcp      6 273841 ESTABLISHED src=192.168.1.93 dst=72.14.213.102 sport=1743 dport=80 packets=1 bytes=40 [UNREPLIED] src=72.14.213.102 dst=192.168.1.93 sport=80 dport=1743 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431956 ESTABLISHED src=10.32.64.10 dst=96.17.109.65 sport=52900 dport=80 packets=49 bytes=25683 src=96.17.109.65 dst=65.100.249.52 sport=80 dport=52900 packets=42 bytes=10433 [ASSURED] mark=0 secmark=0 use=1
tcp      6 54 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52971 dport=80 packets=6 bytes=1459 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52971 packets=7 bytes=4193 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431989 ESTABLISHED src=10.32.64.10 dst=129.21.160.66 sport=54101 dport=443 packets=485 bytes=23602 src=129.21.160.66 dst=65.100.249.52 sport=443 dport=54101 packets=495 bytes=30356 [ASSURED] mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=96.17.109.82 sport=52813 dport=80 packets=10 bytes=2478 src=96.17.109.82 dst=65.100.249.52 sport=80 dport=52813 packets=12 bytes=12005 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=128.241.217.91 sport=53008 dport=80 packets=4 bytes=637 src=128.241.217.91 dst=65.100.249.52 sport=80 dport=53008 packets=4 bytes=2656 [ASSURED] mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=128.241.217.114 sport=52809 dport=80 packets=6 bytes=717 src=128.241.217.114 dst=65.100.249.52 sport=80 dport=52809 packets=5 bytes=2854 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431972 ESTABLISHED src=10.32.64.10 dst=174.133.57.150 sport=53997 dport=6667 packets=2183 bytes=94986 src=174.133.57.150 dst=65.100.249.52 sport=6667 dport=53997 packets=1785 bytes=240318 [ASSURED] mark=0 secmark=0 use=1
udp      17 11 src=10.32.64.10 dst=10.32.64.42 sport=61307 dport=53 packets=1 bytes=62 src=10.32.64.42 dst=10.32.64.10 sport=53 dport=61307 packets=1 bytes=140 mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=96.17.109.35 sport=52799 dport=80 packets=11 bytes=2220 src=96.17.109.35 dst=65.100.249.52 sport=80 dport=52799 packets=11 bytes=8350 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431993 ESTABLISHED src=10.32.64.10 dst=209.177.146.34 sport=53993 dport=6667 packets=1580 bytes=71366 src=209.177.146.34 dst=65.100.249.52 sport=6667 dport=53993 packets=1640 bytes=1206543 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431968 ESTABLISHED src=10.32.64.10 dst=69.63.176.195 sport=53027 dport=80 packets=4 bytes=2653 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=53027 packets=3 bytes=132 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=80.12.98.120 sport=53012 dport=80 packets=4 bytes=621 src=80.12.98.120 dst=65.100.249.52 sport=80 dport=53012 packets=3 bytes=825 [ASSURED] mark=0 secmark=0 use=1
tcp      6 76 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52880 dport=80 packets=7 bytes=2789 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52880 packets=7 bytes=540 [ASSURED] mark=0 secmark=0 use=1
tcp      6 49 TIME_WAIT src=10.32.64.10 dst=96.17.109.56 sport=52958 dport=80 packets=4 bytes=172 src=96.17.109.56 dst=65.100.249.52 sport=80 dport=52958 packets=3 bytes=132 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431982 ESTABLISHED src=10.32.64.10 dst=204.16.33.163 sport=63517 dport=6660 packets=226 bytes=14785 src=204.16.33.163 dst=65.100.249.52 sport=6660 dport=63517 packets=154 bytes=24299 [ASSURED] mark=0 secmark=0 use=1
tcp      6 62 SYN_SENT src=10.32.64.192 dst=192.168.0.4 sport=57462 dport=63331 packets=3 bytes=152 [UNREPLIED] src=192.168.0.4 dst=65.100.249.52 sport=63331 dport=57462 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=128.241.217.113 sport=52807 dport=80 packets=6 bytes=717 src=128.241.217.113 dst=65.100.249.52 sport=80 dport=52807 packets=5 bytes=2828 [ASSURED] mark=0 secmark=0 use=1
tcp      6 36 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52924 dport=80 packets=5 bytes=1218 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52924 packets=5 bytes=361 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431988 ESTABLISHED src=10.32.64.10 dst=69.63.187.11 sport=53037 dport=80 packets=5 bytes=2654 src=69.63.187.11 dst=65.100.249.52 sport=80 dport=53037 packets=5 bytes=2120 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431934 ESTABLISHED src=10.32.64.10 dst=69.63.176.141 sport=52944 dport=80 packets=14 bytes=9122 src=69.63.176.141 dst=65.100.249.52 sport=80 dport=52944 packets=16 bytes=3228 [ASSURED] mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=128.241.217.91 sport=52811 dport=80 packets=6 bytes=717 src=128.241.217.91 dst=65.100.249.52 sport=80 dport=52811 packets=5 bytes=2914 [ASSURED] mark=0 secmark=0 use=1
tcp      6 88 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=53021 dport=80 packets=7 bytes=2768 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=53021 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431990 ESTABLISHED src=10.32.64.10 dst=65.54.172.106 sport=53954 dport=1863 packets=1780 bytes=75624 src=65.54.172.106 dst=65.100.249.52 sport=1863 dport=53954 packets=1847 bytes=346061 [ASSURED] mark=0 secmark=0 use=1
udp      17 17 src=10.32.64.10 dst=10.32.64.42 sport=60917 dport=53 packets=1 bytes=62 src=10.32.64.42 dst=10.32.64.10 sport=53 dport=60917 packets=1 bytes=78 mark=0 secmark=0 use=1
tcp      6 30 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52914 dport=80 packets=7 bytes=3018 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52914 packets=7 bytes=1143 [ASSURED] mark=0 secmark=0 use=1
tcp      6 38 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52936 dport=80 packets=5 bytes=803 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52936 packets=5 bytes=362 [ASSURED] mark=0 secmark=0 use=1
tcp      6 21 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52823 dport=80 packets=7 bytes=2761 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52823 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=96.6.122.88 sport=52803 dport=80 packets=14 bytes=2717 src=96.6.122.88 dst=65.100.249.52 sport=80 dport=52803 packets=13 bytes=12606 [ASSURED] mark=0 secmark=0 use=1
tcp      6 88 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52966 dport=80 packets=7 bytes=2777 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52966 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 71 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52986 dport=80 packets=6 bytes=1090 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52986 packets=7 bytes=5057 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431990 ESTABLISHED src=10.32.64.10 dst=10.32.64.42 sport=62783 dport=22 packets=1912 bytes=204073 src=10.32.64.42 dst=10.32.64.10 sport=22 dport=62783 packets=1563 bytes=326692 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431986 ESTABLISHED src=10.32.64.192 dst=207.46.124.212 sport=49225 dport=1863 packets=3866 bytes=176541 src=207.46.124.212 dst=65.100.249.52 sport=1863 dport=49225 packets=2419 bytes=203582 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=128.241.217.113 sport=53002 dport=80 packets=4 bytes=622 src=128.241.217.113 dst=65.100.249.52 sport=80 dport=53002 packets=3 bytes=1535 [ASSURED] mark=0 secmark=0 use=1
tcp      6 107 TIME_WAIT src=10.32.64.10 dst=69.63.186.30 sport=53035 dport=80 packets=10 bytes=2310 src=69.63.186.30 dst=65.100.249.52 sport=80 dport=53035 packets=14 bytes=11185 [ASSURED] mark=0 secmark=0 use=1
tcp      6 64 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52981 dport=80 packets=5 bytes=1075 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52981 packets=5 bytes=659 [ASSURED] mark=0 secmark=0 use=1
tcp      6 36 TIME_WAIT src=10.32.64.10 dst=96.17.109.10 sport=52817 dport=80 packets=14 bytes=1540 src=96.17.109.10 dst=65.100.249.52 sport=80 dport=52817 packets=17 bytes=18436 [ASSURED] mark=0 secmark=0 use=1
tcp      6 86 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52916 dport=80 packets=7 bytes=2778 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52916 packets=7 bytes=540 [ASSURED] mark=0 secmark=0 use=1
tcp      6 38 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52940 dport=80 packets=5 bytes=789 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52940 packets=5 bytes=361 [ASSURED] mark=0 secmark=0 use=1
tcp      6 36 TIME_WAIT src=10.32.64.10 dst=69.63.187.11 sport=52792 dport=80 packets=20 bytes=7018 src=69.63.187.11 dst=65.100.249.52 sport=80 dport=52792 packets=28 bytes=27052 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431981 ESTABLISHED src=10.32.64.10 dst=65.54.172.38 sport=53955 dport=1863 packets=1105 bytes=48968 src=65.54.172.38 dst=65.100.249.52 sport=1863 dport=53955 packets=918 bytes=103840 [ASSURED] mark=0 secmark=0 use=1
tcp      6 35 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52918 dport=80 packets=5 bytes=1422 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52918 packets=5 bytes=945 [ASSURED] mark=0 secmark=0 use=1
tcp      6 56 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52975 dport=80 packets=11 bytes=1252 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52975 packets=17 bytes=19930 [ASSURED] mark=0 secmark=0 use=1
tcp      6 277259 ESTABLISHED src=192.168.1.93 dst=208.96.34.5 sport=2044 dport=80 packets=1 bytes=52 [UNREPLIED] src=208.96.34.5 dst=192.168.1.93 sport=80 dport=2044 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 36 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52928 dport=80 packets=5 bytes=1231 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52928 packets=5 bytes=362 [ASSURED] mark=0 secmark=0 use=1
tcp      6 38 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52939 dport=80 packets=5 bytes=805 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52939 packets=5 bytes=362 [ASSURED] mark=0 secmark=0 use=1
tcp      6 88 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52978 dport=80 packets=7 bytes=2777 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52978 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431965 ESTABLISHED src=10.32.64.10 dst=80.12.98.209 sport=53016 dport=80 packets=4 bytes=637 src=80.12.98.209 dst=65.100.249.52 sport=80 dport=53016 packets=5 bytes=3333 [ASSURED] mark=0 secmark=0 use=1
tcp      6 85 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=53018 dport=80 packets=7 bytes=2989 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=53018 packets=7 bytes=1143 [ASSURED] mark=0 secmark=0 use=1
tcp      6 45 TIME_WAIT src=10.32.64.10 dst=69.63.180.14 sport=52952 dport=80 packets=10 bytes=2310 src=69.63.180.14 dst=65.100.249.52 sport=80 dport=52952 packets=14 bytes=11185 [ASSURED] mark=0 secmark=0 use=1
tcp      6 54 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52969 dport=80 packets=5 bytes=1422 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52969 packets=5 bytes=945 [ASSURED] mark=0 secmark=0 use=1
tcp      6 102 TIME_WAIT src=10.32.64.10 dst=63.135.80.91 sport=53031 dport=80 packets=7 bytes=2864 src=63.135.80.91 dst=65.100.249.52 sport=80 dport=53031 packets=6 bytes=3358 [ASSURED] mark=0 secmark=0 use=1
tcp      6 75 TIME_WAIT src=10.32.64.10 dst=66.133.117.146 sport=52892 dport=143 packets=30 bytes=1701 src=66.133.117.146 dst=65.100.249.52 sport=143 dport=52892 packets=31 bytes=8874 [ASSURED] mark=0 secmark=0 use=1
tcp      6 108 TIME_WAIT src=10.32.64.10 dst=96.17.109.82 sport=52908 dport=80 packets=10 bytes=2403 src=96.17.109.82 dst=65.100.249.52 sport=80 dport=52908 packets=11 bytes=9408 [ASSURED] mark=0 secmark=0 use=1
tcp      6 54 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52973 dport=80 packets=7 bytes=3009 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52973 packets=7 bytes=1143 [ASSURED] mark=0 secmark=0 use=1
tcp      6 102 TIME_WAIT src=10.32.64.10 dst=63.135.80.83 sport=53033 dport=80 packets=37 bytes=3933 src=63.135.80.83 dst=65.100.249.52 sport=80 dport=53033 packets=67 bytes=93410 [ASSURED] mark=0 secmark=0 use=1
tcp      6 28 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52910 dport=80 packets=5 bytes=777 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52910 packets=5 bytes=361 [ASSURED] mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=96.6.122.88 sport=52802 dport=80 packets=12 bytes=2204 src=96.6.122.88 dst=65.100.249.52 sport=80 dport=52802 packets=12 bytes=10635 [ASSURED] mark=0 secmark=0 use=1
tcp      6 21 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52845 dport=80 packets=7 bytes=2243 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52845 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=128.241.217.91 sport=53010 dport=80 packets=4 bytes=622 src=128.241.217.91 dst=65.100.249.52 sport=80 dport=53010 packets=3 bytes=1159 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431933 ESTABLISHED src=10.32.64.10 dst=69.63.180.14 sport=52883 dport=80 packets=65 bytes=13755 src=69.63.180.14 dst=65.100.249.52 sport=80 dport=52883 packets=109 bytes=125584 [ASSURED] mark=0 secmark=0 use=1
tcp      6 85 SYN_SENT src=10.32.64.192 dst=192.168.0.2 sport=57463 dport=63331 packets=3 bytes=152 [UNREPLIED] src=192.168.0.2 dst=65.100.249.52 sport=63331 dport=57463 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 109 SYN_SENT src=10.32.64.192 dst=192.168.2.100 sport=57464 dport=63331 packets=3 bytes=152 [UNREPLIED] src=192.168.2.100 dst=65.100.249.52 sport=63331 dport=57464 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431933 ESTABLISHED src=10.32.64.10 dst=74.125.53.102 sport=52896 dport=80 packets=11 bytes=4166 src=74.125.53.102 dst=65.100.249.52 sport=80 dport=52896 packets=7 bytes=1932 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431987 ESTABLISHED src=10.32.64.10 dst=68.180.217.20 sport=53941 dport=5050 packets=1166 bytes=95947 src=68.180.217.20 dst=65.100.249.52 sport=5050 dport=53941 packets=1158 bytes=93856 [ASSURED] mark=0 secmark=0 use=1
udp      17 17 src=65.100.249.52 dst=192.168.1.1 sport=16982 dport=53 packets=1 bytes=62 src=192.168.1.1 dst=65.100.249.52 sport=53 dport=16982 packets=1 bytes=78 mark=0 secmark=0 use=1
tcp      6 49 TIME_WAIT src=10.32.64.10 dst=96.17.109.35 sport=52957 dport=80 packets=4 bytes=172 src=96.17.109.35 dst=65.100.249.52 sport=80 dport=52957 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431968 ESTABLISHED src=10.32.64.10 dst=69.63.176.195 sport=53023 dport=80 packets=4 bytes=2125 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=53023 packets=3 bytes=132 [ASSURED] mark=0 secmark=0 use=1
tcp      6 76 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52878 dport=80 packets=7 bytes=2789 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52878 packets=7 bytes=540 [ASSURED] mark=0 secmark=0 use=1
tcp      6 76 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52993 dport=80 packets=7 bytes=1130 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52993 packets=9 bytes=8015 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=216.246.122.249 sport=53006 dport=80 packets=11 bytes=4648 src=216.246.122.249 dst=65.100.249.52 sport=80 dport=53006 packets=13 bytes=12579 [ASSURED] mark=0 secmark=0 use=1
tcp      6 88 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52946 dport=80 packets=7 bytes=2778 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52946 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 76 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52876 dport=80 packets=7 bytes=2244 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52876 packets=7 bytes=540 [ASSURED] mark=0 secmark=0 use=1
tcp      6 70 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52984 dport=80 packets=5 bytes=1454 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52984 packets=5 bytes=631 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431985 ESTABLISHED src=10.32.64.10 dst=64.12.104.105 sport=53936 dport=443 packets=789 bytes=42212 src=64.12.104.105 dst=65.100.249.52 sport=443 dport=53936 packets=799 bytes=58327 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=24.143.195.104 sport=53014 dport=80 packets=6 bytes=2234 src=24.143.195.104 dst=65.100.249.52 sport=80 dport=53014 packets=6 bytes=3932 [ASSURED] mark=0 secmark=0 use=1
tcp      6 76 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52995 dport=80 packets=5 bytes=1059 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52995 packets=5 bytes=628 [ASSURED] mark=0 secmark=0 use=1
tcp      6 108 TIME_WAIT src=10.32.64.10 dst=8.5.245.80 sport=52926 dport=80 packets=12 bytes=5047 src=8.5.245.80 dst=65.100.249.52 sport=80 dport=52926 packets=13 bytes=11907 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431968 ESTABLISHED src=10.32.64.10 dst=69.63.176.195 sport=53026 dport=80 packets=4 bytes=2651 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=53026 packets=3 bytes=132 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431965 ESTABLISHED src=10.32.64.10 dst=96.17.109.35 sport=52964 dport=80 packets=6 bytes=1140 src=96.17.109.35 dst=65.100.249.52 sport=80 dport=52964 packets=4 bytes=2032 [ASSURED] mark=0 secmark=0 use=1
tcp      6 21 TIME_WAIT src=10.32.64.10 dst=128.241.217.113 sport=52805 dport=80 packets=7 bytes=768 src=128.241.217.113 dst=65.100.249.52 sport=80 dport=52805 packets=6 bytes=4455 [ASSURED] mark=0 secmark=0 use=1
tcp      6 74 TIME_WAIT src=124.115.0.138 dst=65.100.249.52 sport=55110 dport=80 packets=6 bytes=562 src=10.32.64.13 dst=124.115.0.138 sport=80 dport=55110 packets=4 bytes=681 [ASSURED] mark=0 secmark=0 use=1
udp      17 11 src=10.32.64.10 dst=10.32.64.42 sport=55741 dport=53 packets=1 bytes=64 src=10.32.64.42 dst=10.32.64.10 sport=53 dport=55741 packets=1 bytes=146 mark=0 secmark=0 use=1
tcp      6 36 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52920 dport=80 packets=6 bytes=1459 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52920 packets=7 bytes=4192 [ASSURED] mark=0 secmark=0 use=1
udp      17 11 src=65.100.249.52 dst=192.168.1.1 sport=62656 dport=53 packets=1 bytes=64 src=192.168.1.1 dst=65.100.249.52 sport=53 dport=62656 packets=1 bytes=146 mark=0 secmark=0 use=1
tcp      6 431988 ESTABLISHED src=10.32.64.10 dst=10.32.64.42 sport=53959 dport=22 packets=951 bytes=78001 src=10.32.64.42 dst=10.32.64.10 sport=22 dport=53959 packets=499 bytes=50128 [ASSURED] mark=0 secmark=0 use=1
tcp      6 76 TIME_WAIT src=10.32.64.10 dst=66.133.117.146 sport=52885 dport=143 packets=9 bytes=462 src=66.133.117.146 dst=65.100.249.52 sport=143 dport=52885 packets=8 bytes=882 [ASSURED] mark=0 secmark=0 use=1
tcp      6 277257 ESTABLISHED src=192.168.1.93 dst=208.96.34.5 sport=2042 dport=80 packets=1 bytes=52 [UNREPLIED] src=208.96.34.5 dst=192.168.1.93 sport=80 dport=2042 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 37 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52930 dport=80 packets=5 bytes=1218 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52930 packets=5 bytes=361 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=99.182.113.98 dst=65.100.249.52 sport=45809 dport=23 packets=1337 bytes=108001 src=10.32.64.42 dst=99.182.113.98 sport=22 dport=45809 packets=878 bytes=107904 [ASSURED] mark=0 secmark=0 use=1
tcp      6 29 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52904 dport=80 packets=5 bytes=1431 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52904 packets=5 bytes=945 [ASSURED] mark=0 secmark=0 use=1
tcp      6 28 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52903 dport=80 packets=5 bytes=775 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52903 packets=5 bytes=362 [ASSURED] mark=0 secmark=0 use=1
udp      17 11 src=65.100.249.52 dst=192.168.1.1 sport=53435 dport=53 packets=1 bytes=62 src=192.168.1.1 dst=65.100.249.52 sport=53 dport=53435 packets=1 bytes=140 mark=0 secmark=0 use=1
tcp      6 431995 ESTABLISHED src=10.32.64.10 dst=210.50.192.155 sport=53998 dport=6667 packets=3118 bytes=130483 src=210.50.192.155 dst=65.100.249.52 sport=6667 dport=53998 packets=2722 bytes=383138 [ASSURED] mark=0 secmark=0 use=1
tcp      6 39 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52948 dport=80 packets=11 bytes=1252 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52948 packets=17 bytes=19930 [ASSURED] mark=0 secmark=0 use=1
tcp      6 71 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52988 dport=80 packets=5 bytes=1059 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52988 packets=5 bytes=628 [ASSURED] mark=0 secmark=0 use=1
tcp      6 36 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52923 dport=80 packets=5 bytes=1218 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52923 packets=5 bytes=361 [ASSURED] mark=0 secmark=0 use=1
tcp      6 38 TIME_WAIT src=10.32.64.10 dst=174.129.1.103 sport=52942 dport=80 packets=5 bytes=1151 src=174.129.1.103 dst=65.100.249.52 sport=80 dport=52942 packets=5 bytes=384 [ASSURED] mark=0 secmark=0 use=1
tcp      6 37 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52932 dport=80 packets=7 bytes=3009 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52932 packets=7 bytes=1143 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431956 ESTABLISHED src=10.32.64.10 dst=96.17.109.65 sport=52899 dport=80 packets=48 bytes=25768 src=96.17.109.65 dst=65.100.249.52 sport=80 dport=52899 packets=42 bytes=10452 [ASSURED] mark=0 secmark=0 use=1
tcp      6 277257 ESTABLISHED src=192.168.1.93 dst=208.96.34.5 sport=2043 dport=80 packets=1 bytes=52 [UNREPLIED] src=208.96.34.5 dst=192.168.1.93 sport=80 dport=2043 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 403043 ESTABLISHED src=10.32.64.10 dst=64.4.9.63 sport=52858 dport=1863 packets=338 bytes=15091 src=64.4.9.63 dst=65.100.249.52 sport=1863 dport=52858 packets=575 bytes=104359 [ASSURED] mark=0 secmark=0 use=1
tcp      6 21 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52869 dport=80 packets=7 bytes=2762 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52869 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=216.246.122.249 sport=53005 dport=80 packets=9 bytes=4533 src=216.246.122.249 dst=65.100.249.52 sport=80 dport=53005 packets=10 bytes=7917 [ASSURED] mark=0 secmark=0 use=1
tcp      6 26 TIME_WAIT src=10.32.64.10 dst=96.17.109.35 sport=52798 dport=80 packets=13 bytes=2284 src=96.17.109.35 dst=65.100.249.52 sport=80 dport=52798 packets=15 bytes=13973 [ASSURED] mark=0 secmark=0 use=1
tcp      6 88 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52998 dport=80 packets=7 bytes=2778 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52998 packets=7 bytes=623 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431983 ESTABLISHED src=10.32.64.10 dst=68.180.217.32 sport=53924 dport=5050 packets=510 bytes=36470 src=68.180.217.32 dst=65.100.249.52 sport=5050 dport=53924 packets=507 bytes=34137 [ASSURED] mark=0 secmark=0 use=1
tcp      6 101 TIME_WAIT src=10.32.64.10 dst=63.135.80.83 sport=53029 dport=80 packets=6 bytes=2839 src=63.135.80.83 dst=65.100.249.52 sport=80 dport=53029 packets=4 bytes=1220 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=10.32.64.10 dst=96.6.122.88 sport=52962 dport=80 packets=11 bytes=2189 src=96.6.122.88 dst=65.100.249.52 sport=80 dport=52962 packets=13 bytes=11501 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431989 ESTABLISHED src=10.32.64.10 dst=209.85.229.125 sport=53919 dport=5222 packets=1192 bytes=100340 src=209.85.229.125 dst=65.100.249.52 sport=5222 dport=53919 packets=1720 bytes=1343308 [ASSURED] mark=0 secmark=0 use=1
tcp      6 49 TIME_WAIT src=10.32.64.10 dst=96.17.109.35 sport=52956 dport=80 packets=4 bytes=172 src=96.17.109.35 dst=65.100.249.52 sport=80 dport=52956 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=1
tcp      6 49 TIME_WAIT src=10.32.64.10 dst=69.63.176.195 sport=52960 dport=80 packets=7 bytes=3084 src=69.63.176.195 dst=65.100.249.52 sport=80 dport=52960 packets=7 bytes=1143 [ASSURED] mark=0 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:50:2c:09:85:7c brd ff:ff:ff:ff:ff:ff
    inet 65.100.249.52/29 brd 65.100.249.55 scope global eth0
    inet6 fe80::250:2cff:fe09:857c/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:60:97:78:05:b4 brd ff:ff:ff:ff:ff:ff
    inet 10.32.64.42/8 brd 10.255.255.255 scope global eth1
    inet6 fe80::260:97ff:fe78:5b4/64 scope link 
       valid_lft forever preferred_lft forever
4: eth2_rename_ren: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:80:ad:87:99:02 brd ff:ff:ff:ff:ff:ff

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    690964     15818    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    690964     15818    0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:50:2c:09:85:7c brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    268088481  540631   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    57933297   295205   0       0       0       0      
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:60:97:78:05:b4 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    226468102  1591401  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    1212796327 1409854  0       0       0       0      
4: eth2_rename_ren: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:80:ad:87:99:02 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      

Bridges

bridge name	bridge id		STP enabled	interfaces

/proc

   /proc/version = Linux version 2.6.26-2-686 (Debian 2.6.26-17) (dannf@debian.org) (gcc version 4.1.3 20080704 (prerelease) (Debian 4.1.2-25)) #1 SMP Sun Jun 21 04:57:38 UTC 2009
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 0
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/log_martians = 0
   /proc/sys/net/ipv4/conf/eth2_rename_ren/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2_rename_ren/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2_rename_ren/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2_rename_ren/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth2_rename_ren/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 10.0.0.0 dev eth1  proto kernel  scope link  src 10.32.64.42 
broadcast 65.100.249.48 dev eth0  proto kernel  scope link  src 65.100.249.52 
broadcast 10.255.255.255 dev eth1  proto kernel  scope link  src 10.32.64.42 
local 10.32.64.42 dev eth1  proto kernel  scope host  src 10.32.64.42 
local 65.100.249.52 dev eth0  proto kernel  scope host  src 65.100.249.52 
broadcast 65.100.249.55 dev eth0  proto kernel  scope link  src 65.100.249.52 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

65.100.249.48/29 dev eth0  proto kernel  scope link  src 65.100.249.52 
10.0.0.0/8 dev eth1  proto kernel  scope link  src 10.32.64.42 
default via 65.100.249.51 dev eth0 

ARP

? (10.32.64.10) at 00:21:85:61:e0:10 [ether] on eth1
? (10.32.64.192) at 00:16:17:14:01:54 [ether] on eth1
? (10.32.64.198) at 00:24:21:67:5c:18 [ether] on eth1
? (65.100.249.51) at 00:19:e4:86:05:59 [ether] on eth0
? (10.32.64.3) at 00:20:78:0e:3c:3f [ether] on eth1
? (10.32.64.13) at 00:19:db:8a:5c:34 [ether] on eth1

Modules

iptable_filter          2624  1 
iptable_mangle          2688  1 
iptable_nat             4680  1 
iptable_raw             2176  0 
ip_tables              10160  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_addrtype            2304  4 
ipt_ah                  1664  0 
ipt_CLUSTERIP           5956  0 
ipt_ecn                 1888  0 
ipt_ECN                 2336  0 
ipt_LOG                 5028  2 
ipt_MASQUERADE          2592  1 
ipt_NETMAP              1760  0 
ipt_recent              6908  0 
ipt_REDIRECT            1760  0 
ipt_REJECT              2784  4 
ipt_ttl                 1600  0 
ipt_TTL                 1856  0 
ipt_ULOG                6820  19 
nf_conntrack           55540  29 ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda     3808  1 nf_nat_amanda
nf_conntrack_ftp        6852  1 nf_nat_ftp
nf_conntrack_h323      44712  1 nf_nat_h323
nf_conntrack_ipv4      12268  33 iptable_nat,nf_nat
nf_conntrack_irc        5124  1 nf_nat_irc
nf_conntrack_netbios_ns     2368  0 
nf_conntrack_netlink    14176  0 
nf_conntrack_pptp       5476  1 nf_nat_pptp
nf_conntrack_proto_gre     4416  1 nf_conntrack_pptp
nf_conntrack_proto_sctp     6600  0 
nf_conntrack_sip       16092  1 nf_nat_sip
nf_conntrack_tftp       4180  1 nf_nat_tftp
nf_nat                 15544  13 ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_netlink,iptable_nat
nf_nat_amanda           1824  0 
nf_nat_ftp              2528  0 
nf_nat_h323             5728  0 
nf_nat_irc              2080  0 
nf_nat_pptp             2880  0 
nf_nat_proto_gre        2212  1 nf_nat_pptp
nf_nat_sip              5440  0 
nf_nat_snmp_basic       8296  0 
nf_nat_tftp             1568  0 
xt_CLASSIFY             1696  0 
xt_comment              1664  0 
xt_connmark             2368  0 
xt_CONNMARK             2944  0 
xt_conntrack            3488  0 
xt_dccp                 2696  0 
xt_dscp                 2368  0 
xt_DSCP                 2944  0 
xt_hashlimit            9360  0 
xt_helper               2112  0 
xt_iprange              2272  0 
xt_length               1760  0 
xt_limit                2180  0 
xt_mac                  1728  0 
xt_mark                 1952  0 
xt_MARK                 2304  0 
xt_multiport            2816  4 
xt_NFLOG                1824  0 
xt_NFQUEUE              1792  0 
xt_owner                2560  0 
xt_physdev              2352  0 
xt_pkttype              1728  0 
xt_policy               2848  0 
xt_state                2016  30 
xt_tcpmss               1984  0 
xt_tcpudp               2816  83 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   New Connection Tracking Match Syntax: Available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   Ipset Match: Not available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Available
   MARK Target: Available
   Extended MARK Target: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available

Traffic Control

Device eth0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 192273868 bytes 1124592 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth1:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1211058836 bytes 1409854 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


TC Filters

Device eth0:

Device eth1:

