Shorewall 4.5.0.3 Dump at Muraco - lun abr 30 16:56:52 CEST 2012

Counters reset dom abr 29 21:39:50 CEST 2012

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 2952 1403K net2fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 3290  332K loc2fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
  726 65600 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:INPUT:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 407K  542M net2loc    all  --  eth1   eth0    0.0.0.0/0            0.0.0.0/0           
 243K   23M loc2net    all  --  eth0   eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:FORWARD:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  893  104K fw2net     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 2624  659K fw2loc     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
  726 65600 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:OUTPUT:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain Broadcast (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1874  242K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type MULTICAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type ANYCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain Invalid (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    6   240 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID 

Chain NotSyn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain Reject (7 references)
 pkts bytes target     prot opt in     out     source               destination         
 1880  243K            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
 1880  243K Broadcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    6   240 Invalid    all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 NotSyn     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain dynamic (4 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   13  4264 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 2368  598K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
  243 56918 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:fw2loc:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain fw2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    2   656 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
  560 49554 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
  120  7120 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
  211 46385 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  865  120K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
  865  120K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   23  7584 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 2486  215K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 2425  212K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    2   104 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 /* SSH */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
   56  2912 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
  780  109K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    4   298 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:loc2fw:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 9186  534K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 9186  534K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 239K   22M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 233K   22M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
 9186  534K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:logflags:DROP:' queue_threshold 1 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1958  264K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 1958  264K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   80 22294 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
  871 1122K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  992 1138K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 DROP       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 DROP       all  --  *      *       10.0.0.0/8           0.0.0.0/0           
    0     0 DROP       all  --  *      *       172.16.0.0/12        0.0.0.0/0           
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       all  --  *      *       240.0.0.0/5          0.0.0.0/0           
    0     0 DROP       all  --  *      *       127.0.0.0/8          0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/8            0.0.0.0/0           
    0     0 DROP       all  --  *      *       169.254.0.0/16       0.0.0.0/0           
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
 1880  243K Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:net2fw:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain net2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 403K  542M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 407K  542M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.2.2         tcp dpt:7171 limit: up to 1/sec burst 5 mode srcip 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.2.2         tcp dpt:8090 ctorigdstport 80 limit: up to 1/min burst 2 mode srcip htable-expire 60000 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.2.2         tcp dpt:8090 ctorigdstport 8090 limit: up to 1/min burst 2 mode srcip htable-expire 60000 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:net2loc:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain reject (13 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurflog (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `Shorewall:smurfs:DROP:' queue_threshold 1 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain smurfs (4 references)
 pkts bytes target     prot opt in     out     source               destination         
   12  3976 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 smurflog   all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] ADDRTYPE match src-type BROADCAST 
    0     0 smurflog   all  --  *      *       224.0.0.0/4          0.0.0.0/0           [goto] 

Chain tcpflags (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp spt:0 flags:0x17/0x02 

Log (/var/log/firewall.log)

Apr 29 16:39:32 loc2fw:REJECT: IN=eth0 OUT= SRC=192.168.2.2 DST=192.168.2.1 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=25055 DF PROTO=TCP SPT=53059 DPT=10001 SEQ=838905126 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:39:32 loc2fw:REJECT: IN=eth0 OUT= SRC=192.168.2.2 DST=192.168.2.1 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=25056 DF PROTO=TCP SPT=53058 DPT=10001 SEQ=497333173 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:41 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=25636 DF PROTO=TCP SPT=18742 DPT=10000 SEQ=3480889198 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:41 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=25637 DF PROTO=TCP SPT=18743 DPT=10000 SEQ=2048937976 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:41 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=25638 DF PROTO=TCP SPT=18744 DPT=10000 SEQ=359782154 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:44 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=25640 DF PROTO=TCP SPT=18742 DPT=10000 SEQ=3480889198 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:44 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=25641 DF PROTO=TCP SPT=18743 DPT=10000 SEQ=2048937976 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:44 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=25642 DF PROTO=TCP SPT=18744 DPT=10000 SEQ=359782154 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:50 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=25645 DF PROTO=TCP SPT=18742 DPT=10000 SEQ=3480889198 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:50 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=25646 DF PROTO=TCP SPT=18743 DPT=10000 SEQ=2048937976 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:40:50 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=25647 DF PROTO=TCP SPT=18744 DPT=10000 SEQ=359782154 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:03 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=24840 DF PROTO=TCP SPT=18795 DPT=80 SEQ=709622346 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:03 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=24841 DF PROTO=TCP SPT=18796 DPT=80 SEQ=2756705767 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:03 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=24842 DF PROTO=TCP SPT=18797 DPT=80 SEQ=2903950499 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:06 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=24843 DF PROTO=TCP SPT=18795 DPT=80 SEQ=709622346 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:06 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=24844 DF PROTO=TCP SPT=18796 DPT=80 SEQ=2756705767 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:06 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=52 TOS=00 PREC=0x00 TTL=128 ID=24845 DF PROTO=TCP SPT=18797 DPT=80 SEQ=2903950499 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:12 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=24847 DF PROTO=TCP SPT=18795 DPT=80 SEQ=709622346 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:12 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=24848 DF PROTO=TCP SPT=18796 DPT=80 SEQ=2756705767 ACK=0 WINDOW=8192 SYN URGP=0 
Apr 29 16:49:12 net2fw:DROP: IN=eth1 OUT= SRC=192.168.1.4 DST=192.168.1.135 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=24849 DF PROTO=TCP SPT=18797 DPT=80 SEQ=2903950499 ACK=0 WINDOW=8192 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 14 packets, 1508 bytes)
 pkts bytes target     prot opt in     out     source               destination         
11188  767K dnat       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 3 packets, 468 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 9336  559K eth1_masq  all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 3 packets, 468 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1705  203K net_dnat   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 9112  529K MASQUERADE  all  --  *      *       192.168.2.0/24       0.0.0.0/0           

Chain net_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:7171 to:192.168.2.2 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 to:192.168.2.2:8090 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8090 to:192.168.2.2:8090 

Mangle Table

Chain PREROUTING (policy ACCEPT 209 packets, 17587 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 656K  567M tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 135 packets, 11158 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 6968 1800K tcin       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 74 packets, 6429 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 649K  565M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK and 0xffffff00 
 649K  565M tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 101 packets, 16432 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 4243  829K tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 175 packets, 22861 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 654K  566M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 209 packets, 17587 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 101 packets, 16432 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table (39 out of 62588)

tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49201 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49201 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49206 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49206 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
udp      17 9 src=192.168.2.6 dst=62.42.63.52 sport=55940 dport=53 packets=2 bytes=124 src=62.42.63.52 dst=192.168.1.135 sport=53 dport=55940 packets=2 bytes=180 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431940 ESTABLISHED src=192.168.2.6 dst=65.52.193.252 sport=49300 dport=80 packets=4 bytes=368 src=65.52.193.252 dst=192.168.1.135 sport=80 dport=49300 packets=2 bytes=464 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431963 ESTABLISHED src=192.168.2.6 dst=74.125.230.209 sport=49229 dport=443 packets=12 bytes=1156 src=74.125.230.209 dst=192.168.1.135 sport=443 dport=49229 packets=12 bytes=3118 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.239 sport=49196 dport=80 packets=4 bytes=172 src=173.194.34.239 dst=192.168.1.135 sport=80 dport=49196 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431957 ESTABLISHED src=192.168.2.6 dst=173.194.34.245 sport=49219 dport=443 packets=8 bytes=679 src=173.194.34.245 dst=192.168.1.135 sport=443 dport=49219 packets=8 bytes=2565 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431957 ESTABLISHED src=192.168.2.6 dst=173.194.34.245 sport=49218 dport=443 packets=8 bytes=679 src=173.194.34.245 dst=192.168.1.135 sport=443 dport=49218 packets=8 bytes=2565 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=74.125.230.209 sport=49213 dport=80 packets=4 bytes=172 src=74.125.230.209 dst=192.168.1.135 sport=80 dport=49213 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=74.125.230.209 sport=49210 dport=80 packets=4 bytes=172 src=74.125.230.209 dst=192.168.1.135 sport=80 dport=49210 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49209 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49209 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.239 sport=49197 dport=80 packets=4 bytes=172 src=173.194.34.239 dst=192.168.1.135 sport=80 dport=49197 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.239 sport=49198 dport=80 packets=4 bytes=172 src=173.194.34.239 dst=192.168.1.135 sport=80 dport=49198 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431968 ESTABLISHED src=192.168.2.6 dst=173.194.34.239 sport=49236 dport=443 packets=30 bytes=2065 src=173.194.34.239 dst=192.168.1.135 sport=443 dport=49236 packets=48 bytes=53615 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431957 ESTABLISHED src=192.168.2.6 dst=173.194.34.245 sport=49220 dport=443 packets=8 bytes=679 src=173.194.34.245 dst=192.168.1.135 sport=443 dport=49220 packets=8 bytes=2565 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431961 ESTABLISHED src=192.168.2.6 dst=74.125.230.209 sport=49193 dport=80 packets=29 bytes=1870 src=74.125.230.209 dst=192.168.1.135 sport=80 dport=49193 packets=48 bytes=61810 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=74.125.230.209 sport=49214 dport=80 packets=4 bytes=172 src=74.125.230.209 dst=192.168.1.135 sport=80 dport=49214 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.239 sport=49203 dport=80 packets=4 bytes=172 src=173.194.34.239 dst=192.168.1.135 sport=80 dport=49203 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431957 ESTABLISHED src=192.168.2.6 dst=173.194.34.245 sport=49221 dport=443 packets=8 bytes=679 src=173.194.34.245 dst=192.168.1.135 sport=443 dport=49221 packets=8 bytes=2565 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=74.125.230.209 sport=49211 dport=80 packets=4 bytes=172 src=74.125.230.209 dst=192.168.1.135 sport=80 dport=49211 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
udp      17 13 src=192.168.2.6 dst=94.245.121.251 sport=54493 dport=3544 packets=1 bytes=89 src=94.245.121.251 dst=192.168.1.135 sport=3544 dport=54493 packets=1 bytes=137 mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.239 sport=49202 dport=80 packets=4 bytes=172 src=173.194.34.239 dst=192.168.1.135 sport=80 dport=49202 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49204 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49204 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49200 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49200 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=74.125.230.209 sport=49212 dport=80 packets=4 bytes=172 src=74.125.230.209 dst=192.168.1.135 sport=80 dport=49212 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431957 ESTABLISHED src=192.168.2.6 dst=173.194.34.245 sport=49217 dport=443 packets=8 bytes=679 src=173.194.34.245 dst=192.168.1.135 sport=443 dport=49217 packets=8 bytes=2565 [ASSURED] mark=0 secmark=0 use=2
tcp      6 60 TIME_WAIT src=192.168.2.6 dst=70.37.129.166 sport=49292 dport=80 packets=10 bytes=1058 src=70.37.129.166 dst=192.168.1.135 sport=80 dport=49292 packets=7 bytes=721 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49205 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49205 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 63 TIME_WAIT src=192.168.2.6 dst=70.37.129.99 sport=49302 dport=80 packets=6 bytes=486 src=70.37.129.99 dst=192.168.1.135 sport=80 dport=49302 packets=4 bytes=312 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431958 ESTABLISHED src=192.168.2.6 dst=173.194.34.245 sport=49222 dport=443 packets=8 bytes=679 src=173.194.34.245 dst=192.168.1.135 sport=443 dport=49222 packets=8 bytes=2565 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49199 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49199 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431959 ESTABLISHED src=192.168.2.6 dst=173.194.78.95 sport=49224 dport=443 packets=12 bytes=1152 src=173.194.78.95 dst=192.168.1.135 sport=443 dport=49224 packets=11 bytes=3692 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431932 ESTABLISHED src=192.168.2.6 dst=207.46.194.30 sport=49291 dport=80 packets=4 bytes=443 src=207.46.194.30 dst=192.168.1.135 sport=80 dport=49291 packets=2 bytes=228 [ASSURED] mark=0 secmark=0 use=2
tcp      6 299 ESTABLISHED src=192.168.2.6 dst=192.168.2.1 sport=49248 dport=22 packets=307 bytes=24704 src=192.168.2.1 dst=192.168.2.6 sport=22 dport=49248 packets=277 bytes=75305 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.41.143 sport=49223 dport=80 packets=4 bytes=172 src=173.194.41.143 dst=192.168.1.135 sport=80 dport=49223 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.228 sport=49216 dport=80 packets=4 bytes=172 src=173.194.34.228 dst=192.168.1.135 sport=80 dport=49216 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49207 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49207 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431962 ESTABLISHED src=192.168.2.6 dst=173.194.34.223 sport=49230 dport=80 packets=6 bytes=992 src=173.194.34.223 dst=192.168.1.135 sport=80 dport=49230 packets=5 bytes=729 [ASSURED] mark=0 secmark=0 use=2
tcp      6 7 TIME_WAIT src=192.168.2.6 dst=173.194.34.236 sport=49208 dport=80 packets=4 bytes=172 src=173.194.34.236 dst=192.168.1.135 sport=80 dport=49208 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=2

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    inet 192.168.2.1/24 brd 192.168.2.255 scope global eth0
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
    inet 192.168.1.135/24 brd 192.168.1.255 scope global eth1

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    109124     1270     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    109124     1270     0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:0a:cd:1f:29:d6 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    36816712   383165   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    827602076  786181   0       0       0       0      
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
    link/ether 3c:4a:92:74:43:84 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    899520387  823614   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    38890179   395261   0       0       0       0      

Per-IP Counters

   iptaccount is not installed

/proc

   /proc/version = Linux version 2.6.32-5-686 (Debian 2.6.32-41squeeze2) (dannf@debian.org) (gcc version 4.3.5 (Debian 4.3.5-4) ) #1 SMP Mon Mar 26 05:20:33 UTC 2012
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 1
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 1
   /proc/sys/net/ipv4/conf/lo/log_martians = 1

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

local 192.168.2.1 dev eth0 proto kernel scope host src 192.168.2.1
local 192.168.1.135 dev eth1 proto kernel scope host src 192.168.1.135
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
broadcast 192.168.2.255 dev eth0 proto kernel scope link src 192.168.2.1
broadcast 192.168.2.0 dev eth0 proto kernel scope link src 192.168.2.1
broadcast 192.168.1.255 dev eth1 proto kernel scope link src 192.168.1.135
broadcast 192.168.1.0 dev eth1 proto kernel scope link src 192.168.1.135
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1

Table main:

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.1
192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.135
default via 192.168.1.1 dev eth1

ARP

? (192.168.2.6) at 48:5d:60:f5:aa:12 [ether] on eth0
? (192.168.1.1) at 30:e4:db:8c:a8:74 [ether] on eth1

Modules

iptable_filter          1790  1 
iptable_mangle          2325  1 
iptable_nat             3519  1 
iptable_raw             1471  0 
ip_tables               7706  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_addrtype            1345  5 
ipt_ah                   749  0 
ipt_CLUSTERIP           3970  0 
ipt_ECN                 1276  0 
ipt_ecn                  928  0 
ipt_LOG                 3570  0 
ipt_MASQUERADE          1134  1 
ipt_NETMAP               825  0 
ipt_REDIRECT             803  0 
ipt_REJECT              1517  4 
ipt_ULOG                4613  10 
nf_conntrack           37871  31 xt_connlimit,ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_sane,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda     1637  1 nf_nat_amanda
nf_conntrack_ftp        4240  1 nf_nat_ftp
nf_conntrack_h323      30888  1 nf_nat_h323
nf_conntrack_ipv4       7597  20 iptable_nat,nf_nat
nf_conntrack_irc        2499  1 nf_nat_irc
nf_conntrack_netbios_ns      914  0 
nf_conntrack_netlink    11064  0 
nf_conntrack_pptp       3045  1 nf_nat_pptp
nf_conntrack_proto_gre     2799  1 nf_conntrack_pptp
nf_conntrack_proto_sctp     4754  0 
nf_conntrack_sane       2636  0 
nf_conntrack_sip       10682  1 nf_nat_sip
nf_conntrack_tftp       2321  1 nf_nat_tftp
nf_defrag_ipv4           779  2 xt_TPROXY,nf_conntrack_ipv4
nf_nat                 10468  12 ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,iptable_nat
nf_nat_amanda            796  0 
nf_nat_ftp              1483  0 
nf_nat_h323             4359  0 
nf_nat_irc               970  0 
nf_nat_pptp             1666  0 
nf_nat_proto_gre         869  1 nf_nat_pptp
nf_nat_sip              4408  0 
nf_nat_snmp_basic       6381  0 
nf_nat_tftp              666  0 
nf_tproxy_core          1189  1 xt_TPROXY,[permanent]
xt_CLASSIFY              617  0 
xt_comment               599  25 
xt_connlimit            2323  0 
xt_connmark              799  0 
xt_CONNMARK              943  0 
xt_conntrack            1955  17 
xt_dccp                 1507  0 
xt_dscp                 1123  0 
xt_DSCP                 1451  0 
xt_hashlimit            6125  3 
xt_helper                879  0 
xt_iprange              1049  0 
xt_length                796  0 
xt_limit                1088  0 
xt_mac                   675  0 
xt_mark                  613  0 
xt_MARK                  617  1 
xt_multiport            1775  6 
xt_NFLOG                 718  0 
xt_NFQUEUE              1565  0 
xt_owner                 747  0 
xt_physdev              1228  0 
xt_pkttype               683  0 
xt_policy               1794  0 
xt_realm                 615  0 
xt_recent               4849  0 
xt_state                 927  0 
xt_statistic             959  0 
xt_tcpmss               1017  0 
xt_tcpudp               1743  31 
xt_time                 1391  0 
xt_TPROXY                977  0 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   Rawpost Table: Not available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Available
   MARK Target: Available
   Extended MARK Target: Available
   Extended MARK Target 2: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Available
   Goto Support: Available
   LOGMARK Target: Not available
   IPMARK Target: Not available
   LOG Target: Available
   ULOG Target: Available
   NFLOG Target: Available
   Persistent SNAT: Available
   TPROXY Target: Available
   FLOW Classifier: Available
   fwmark route mask: Available
   Mark in any table: Available
   Header Match: Not available
   ACCOUNT Target: Not available
   AUDIT Target: Not available
   ipset V5: Not available
   Condition Match: Not available
   Statistic Match: Available
   IMQ Target: Not available
   iptables -S: Available
   Basic Filter: Available
   CT Target: Not available

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      887/portmap     
tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTEN      1812/perl       
tcp        0      0 0.0.0.0:32945           0.0.0.0:*               LISTEN      1428/rpc.mountd 
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1800/sshd       
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      1745/exim4      
tcp        0      0 0.0.0.0:59520           0.0.0.0:*               LISTEN      900/rpc.statd   
tcp        0      0 0.0.0.0:2049            0.0.0.0:*               LISTEN      -               
tcp        0      0 0.0.0.0:901             0.0.0.0:*               LISTEN      1786/inetd      
tcp        0      0 0.0.0.0:44007           0.0.0.0:*               LISTEN      -               
tcp        0      0 192.168.2.1:22          192.168.2.6:49248       ESTABLISHED 28235/0         
udp        0      0 0.0.0.0:54844           0.0.0.0:*                           -               
udp        0      0 0.0.0.0:67              0.0.0.0:*                           1758/dhcpd      
udp        0      0 0.0.0.0:68              0.0.0.0:*                           870/dhclient    
udp        0      0 0.0.0.0:54637           0.0.0.0:*                           1428/rpc.mountd 
udp        0      0 0.0.0.0:111             0.0.0.0:*                           887/portmap     
udp        0      0 0.0.0.0:57330           0.0.0.0:*                           900/rpc.statd   
udp        0      0 0.0.0.0:2049            0.0.0.0:*                           -               
udp        0      0 192.168.1.255:137       0.0.0.0:*                           1394/nmbd       
udp        0      0 192.168.1.135:137       0.0.0.0:*                           1394/nmbd       
udp        0      0 192.168.2.255:137       0.0.0.0:*                           1394/nmbd       
udp        0      0 192.168.2.1:137         0.0.0.0:*                           1394/nmbd       
udp        0      0 0.0.0.0:137             0.0.0.0:*                           1394/nmbd       
udp        0      0 192.168.1.255:138       0.0.0.0:*                           1394/nmbd       
udp        0      0 192.168.1.135:138       0.0.0.0:*                           1394/nmbd       
udp        0      0 192.168.2.255:138       0.0.0.0:*                           1394/nmbd       
udp        0      0 192.168.2.1:138         0.0.0.0:*                           1394/nmbd       
udp        0      0 0.0.0.0:138             0.0.0.0:*                           1394/nmbd       
udp        0      0 0.0.0.0:652             0.0.0.0:*                           900/rpc.statd   
udp        0      0 0.0.0.0:10000           0.0.0.0:*                           1812/perl       

Traffic Control

Device eth0:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 821111654 bytes 665988 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth1:
qdisc mq 0: root 
 Sent 35241704 bytes 394852 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

class mq :1 root 
 Sent 35241704 bytes 394852 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0 
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0 
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0 
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0 
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0 


TC Filters

Device eth0:

Device eth1:

