Shorewall 4.6.4.3 Dump at morannon - Sun Jan 15 15:37:29 CET 2017

Shorewall is stopped
State:Cleared (Sun Jan 15 15:37:05 CET 2017) (/var/lib/shorewall/firewall compiled by Shorewall version 4.6.4.3)

Counters reset Sun Jan 15 15:28:49 CET 2017

Chain INPUT (policy ACCEPT 17 packets, 976 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 15 packets, 4102 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 9 packets, 996 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Log (/var/log/messages)

Jan 15 14:36:37 net-fw:DROP:IN=eth0 OUT= SRC=17.133.234.33 DST=192.168.2.100 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=32172 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 
Jan 15 14:36:41 net-fw:DROP:IN=eth0 OUT= SRC=17.133.234.33 DST=192.168.2.100 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=13737 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 
Jan 15 14:36:46 net-fw:DROP:IN=eth0 OUT= SRC=17.133.234.33 DST=192.168.2.100 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=16315 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 
Jan 15 14:36:56 net-fw:DROP:IN=eth0 OUT= SRC=17.133.234.33 DST=192.168.2.100 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=21490 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 
Jan 15 14:45:27 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=62.157.140.133 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=8937 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 14:45:27 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=67.215.246.10 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=38167 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 14:45:27 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=82.221.103.244 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=31792 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 14:45:27 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=80.156.86.78 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=40208 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:00:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=67.215.246.10 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=38168 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:00:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=80.156.86.78 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=40209 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:00:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=82.221.103.244 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=31793 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:00:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=62.157.140.133 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=8938 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:15:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=80.156.86.78 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=40210 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:15:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=82.221.103.244 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=31794 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:15:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=67.215.246.10 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=38169 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:15:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=62.157.140.133 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=8939 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:30:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=67.215.246.10 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=38170 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:30:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=62.157.140.133 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=8940 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:30:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=80.156.86.78 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=40211 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 
Jan 15 15:30:28 strg-net:REJECT:IN=eth2 OUT=eth0 SRC=10.10.4.3 DST=82.221.103.244 LEN=129 TOS=0x00 PREC=0x00 TTL=63 ID=31795 DF PROTO=UDP SPT=6889 DPT=6881 LEN=109 

NAT Table

Chain PREROUTING (policy ACCEPT 1 packets, 36 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 1 packets, 36 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Mangle Table

Chain PREROUTING (policy ACCEPT 33 packets, 5118 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 18 packets, 1016 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 15 packets, 4102 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 10 packets, 1096 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 25 packets, 5198 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 32 packets, 5078 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 9 packets, 996 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table (25 out of 65536)

unknown  2 595 src=192.168.2.1 dst=224.0.0.1 [UNREPLIED] src=224.0.0.1 dst=192.168.2.1 mark=0 use=2
tcp      6 431954 ESTABLISHED src=10.10.1.5 dst=172.217.22.36 sport=55304 dport=443 src=172.217.22.36 dst=192.168.2.100 sport=443 dport=55304 [ASSURED] mark=0 use=2
tcp      6 79 TIME_WAIT src=10.10.1.100 dst=95.128.36.8 sport=35317 dport=143 src=95.128.36.8 dst=192.168.2.100 sport=143 dport=35317 [ASSURED] mark=0 use=2
tcp      6 429180 ESTABLISHED src=10.10.1.5 dst=10.10.1.1 sport=50878 dport=22 src=10.10.1.1 dst=10.10.1.5 sport=22 dport=50878 [ASSURED] mark=0 use=2
udp      17 146 src=10.10.1.5 dst=8.8.4.4 sport=50970 dport=53 src=8.8.4.4 dst=192.168.2.100 sport=53 dport=50970 [ASSURED] mark=0 use=2
tcp      6 431990 ESTABLISHED src=10.10.1.5 dst=104.25.59.112 sport=56696 dport=80 src=104.25.59.112 dst=192.168.2.100 sport=80 dport=56696 [ASSURED] mark=0 use=2
tcp      6 431779 ESTABLISHED src=10.10.1.100 dst=95.128.36.8 sport=35318 dport=143 src=95.128.36.8 dst=192.168.2.100 sport=143 dport=35318 [ASSURED] mark=0 use=2
tcp      6 91 TIME_WAIT src=10.10.1.5 dst=70.90.191.125 sport=60460 dport=80 src=70.90.191.125 dst=192.168.2.100 sport=80 dport=60460 [ASSURED] mark=0 use=2
tcp      6 431955 ESTABLISHED src=10.10.1.5 dst=172.217.22.35 sport=43734 dport=443 src=172.217.22.35 dst=192.168.2.100 sport=443 dport=43734 [ASSURED] mark=0 use=2
tcp      6 87 TIME_WAIT src=10.10.1.5 dst=8.8.4.4 sport=39690 dport=53 src=8.8.4.4 dst=192.168.2.100 sport=53 dport=39690 [ASSURED] mark=0 use=2
tcp      6 431999 ESTABLISHED src=10.10.1.5 dst=10.10.1.1 sport=49918 dport=22 src=10.10.1.1 dst=10.10.1.5 sport=22 dport=49918 [ASSURED] mark=0 use=2
udp      17 147 src=10.10.1.5 dst=8.8.4.4 sport=40094 dport=53 src=8.8.4.4 dst=192.168.2.100 sport=53 dport=40094 [ASSURED] mark=0 use=2
tcp      6 431948 ESTABLISHED src=10.10.1.5 dst=216.58.214.34 sport=60118 dport=443 src=216.58.214.34 dst=192.168.2.100 sport=443 dport=60118 [ASSURED] mark=0 use=2
tcp      6 431955 ESTABLISHED src=10.10.1.5 dst=172.217.22.46 sport=47636 dport=443 src=172.217.22.46 dst=192.168.2.100 sport=443 dport=47636 [ASSURED] mark=0 use=2
tcp      6 430542 ESTABLISHED src=10.10.1.5 dst=95.128.36.8 sport=38210 dport=4190 src=95.128.36.8 dst=192.168.2.100 sport=4190 dport=38210 [ASSURED] mark=0 use=2
tcp      6 91 TIME_WAIT src=10.10.1.5 dst=70.90.191.125 sport=60458 dport=80 src=70.90.191.125 dst=192.168.2.100 sport=80 dport=60458 [ASSURED] mark=0 use=2
tcp      6 79 TIME_WAIT src=10.10.1.100 dst=52.45.96.109 sport=58194 dport=443 src=52.45.96.109 dst=192.168.2.100 sport=443 dport=58194 [ASSURED] mark=0 use=2
tcp      6 431954 ESTABLISHED src=10.10.1.5 dst=216.58.214.98 sport=59576 dport=443 src=216.58.214.98 dst=192.168.2.100 sport=443 dport=59576 [ASSURED] mark=0 use=2
tcp      6 430542 ESTABLISHED src=10.10.1.5 dst=95.128.36.8 sport=38204 dport=4190 src=95.128.36.8 dst=192.168.2.100 sport=4190 dport=38204 [ASSURED] mark=0 use=2
tcp      6 430964 ESTABLISHED src=10.10.1.101 dst=17.252.28.27 sport=50773 dport=5223 src=17.252.28.27 dst=192.168.2.100 sport=5223 dport=50773 [ASSURED] mark=0 use=2
tcp      6 84 TIME_WAIT src=10.10.1.5 dst=104.25.60.112 sport=56106 dport=80 src=104.25.60.112 dst=192.168.2.100 sport=80 dport=56106 [ASSURED] mark=0 use=2
tcp      6 430542 ESTABLISHED src=10.10.1.5 dst=95.128.36.8 sport=38206 dport=4190 src=95.128.36.8 dst=192.168.2.100 sport=4190 dport=38206 [ASSURED] mark=0 use=2
tcp      6 431965 ESTABLISHED src=10.10.1.5 dst=172.217.22.35 sport=43728 dport=443 src=172.217.22.35 dst=192.168.2.100 sport=443 dport=43728 [ASSURED] mark=0 use=2
tcp      6 431959 ESTABLISHED src=10.10.1.100 dst=52.45.96.109 sport=58195 dport=443 src=52.45.96.109 dst=192.168.2.100 sport=443 dport=58195 [ASSURED] mark=0 use=2
tcp      6 87 TIME_WAIT src=10.10.1.5 dst=8.8.4.4 sport=39688 dport=53 src=8.8.4.4 dst=192.168.2.100 sport=53 dport=39688 [ASSURED] mark=0 use=2

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default 
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 192.168.2.100/24 brd 192.168.2.255 scope global eth0
       valid_lft forever preferred_lft forever
4: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 10.10.1.1/24 brd 10.10.1.255 scope global eth1
       valid_lft forever preferred_lft forever
5: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 10.10.4.1/24 brd 10.10.4.255 scope global eth2
       valid_lft forever preferred_lft forever
6: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 10.10.5.1/24 brd 10.10.5.255 scope global eth3
       valid_lft forever preferred_lft forever

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    1093       10       0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    1093       10       0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:00:24:d0:62:dc brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    2366548669 1709087  0       0       0       14517  
    TX: bytes  packets  errors  dropped carrier collsns 
    101494111  1139757  0       0       0       0      
3: can0: <NOARP,ECHO> mtu 16 qdisc noop state DOWN mode DEFAULT group default qlen 10
    link/can 
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
4: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:00:24:d0:62:dd brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    99371240   1115593  0       16      0       4      
    TX: bytes  packets  errors  dropped carrier collsns 
    2281877667 1642103  0       0       0       0      
5: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:00:24:d0:62:de brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    171899     991      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    101379     677      0       0       0       0      
6: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:00:24:d0:62:df brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    48900      299      0       0       0       2      
    TX: bytes  packets  errors  dropped carrier collsns 
    270        3        0       0       0       0      

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

local 192.168.2.100 dev eth0 proto kernel scope host src 192.168.2.100
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
local 10.10.5.1 dev eth3 proto kernel scope host src 10.10.5.1
local 10.10.4.1 dev eth2 proto kernel scope host src 10.10.4.1
local 10.10.1.1 dev eth1 proto kernel scope host src 10.10.1.1
broadcast 192.168.2.255 dev eth0 proto kernel scope link src 192.168.2.100
broadcast 192.168.2.0 dev eth0 proto kernel scope link src 192.168.2.100
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
broadcast 10.10.5.255 dev eth3 proto kernel scope link src 10.10.5.1
broadcast 10.10.5.0 dev eth3 proto kernel scope link src 10.10.5.1
broadcast 10.10.4.255 dev eth2 proto kernel scope link src 10.10.4.1
broadcast 10.10.4.0 dev eth2 proto kernel scope link src 10.10.4.1
broadcast 10.10.1.255 dev eth1 proto kernel scope link src 10.10.1.1
broadcast 10.10.1.0 dev eth1 proto kernel scope link src 10.10.1.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1

Table main:

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.100
10.10.5.0/24 via 10.10.5.1 dev eth3 scope link
10.10.5.0/24 dev eth3 proto kernel scope link src 10.10.5.1
10.10.4.0/24 via 10.10.4.1 dev eth2 scope link
10.10.4.0/24 dev eth2 proto kernel scope link src 10.10.4.1
10.10.1.0/24 via 10.10.1.1 dev eth1 scope link
10.10.1.0/24 dev eth1 proto kernel scope link src 10.10.1.1
default via 192.168.2.1 dev eth0

Per-IP Counters

   iptaccount is not installed

NF Accounting

No NF Accounting defined (nfacct not found)

Events


/proc

   /proc/version = Linux version 3.16.0-4-586 (debian-kernel@lists.debian.org) (gcc version 4.8.4 (Debian 4.8.4-1) ) #1 Debian 3.16.36-1+deb8u2 (2016-10-19)
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/can0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/can0/arp_filter = 0
   /proc/sys/net/ipv4/conf/can0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/can0/rp_filter = 1
   /proc/sys/net/ipv4/conf/can0/log_martians = 1
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 1
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth2/log_martians = 1
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth3/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 1
   /proc/sys/net/ipv4/conf/lo/log_martians = 1

ARP

? (10.10.1.100) at 50:56:a8:01:2d:6b [ether] on eth1
? (10.10.1.200) at 78:a5:04:f1:96:a4 [ether] on eth1
? (10.10.1.202) at 98:f1:70:59:1b:1d [ether] on eth1
? (10.10.1.5) at f0:d5:bf:d7:97:22 [ether] on eth1
? (10.10.1.101) at ac:3c:0b:72:57:c5 [ether] on eth1
? (192.168.2.1) at f4:e3:fb:c2:b9:8f [ether] on eth0
? (10.10.1.201) at 00:19:88:22:e6:07 [ether] on eth1
? (10.10.1.204) at 00:19:88:22:7b:a3 [ether] on eth1
? (10.10.1.203) at 98:f1:70:3e:2a:88 [ether] on eth1
? (10.10.4.3) at 00:08:9b:ff:eb:e5 [ether] on eth2

Modules

iptable_filter         12488  0 
iptable_mangle         12488  0 
iptable_nat            12574  0 
iptable_raw            12476  0 
ip_tables              16974  4 iptable_filter,iptable_mangle,iptable_nat,iptable_raw
ipt_MASQUERADE         12530  0 
ipt_REJECT             12425  0 
ipt_rpfilter           12428  0 
ipt_ULOG               12627  0 
nf_conntrack           73432  33 nf_nat_ftp,nf_nat_irc,nf_nat_sip,nf_nat_amanda,xt_CT,nf_nat_snmp_basic,nf_conntrack_netbios_ns,nf_conntrack_proto_gre,xt_helper,ipt_MASQUERADE,nf_conntrack_proto_udplite,nf_nat,xt_connlimit,nf_nat_h323,nf_nat_ipv4,nf_nat_pptp,nf_nat_tftp,xt_conntrack,nf_conntrack_amanda,nf_conntrack_proto_sctp,nf_conntrack_netlink,nf_conntrack_broadcast,xt_connmark,nf_conntrack_ftp,nf_conntrack_irc,nf_conntrack_sip,iptable_nat,nf_conntrack_h323,nf_conntrack_ipv4,nf_conntrack_pptp,nf_conntrack_sane,nf_conntrack_snmp,nf_conntrack_tftp
nf_conntrack_amanda    12405  1 nf_nat_amanda
nf_conntrack_broadcast    12349  2 nf_conntrack_netbios_ns,nf_conntrack_snmp
nf_conntrack_ftp       12599  1 nf_nat_ftp
nf_conntrack_h323      50163  1 nf_nat_h323
nf_conntrack_ipv4      18040  1 
nf_conntrack_irc       12395  1 nf_nat_irc
nf_conntrack_netbios_ns    12413  0 
nf_conntrack_netlink    30797  0 
nf_conntrack_pptp      12555  1 nf_nat_pptp
nf_conntrack_proto_gre    12880  1 nf_conntrack_pptp
nf_conntrack_proto_sctp    17100  0 
nf_conntrack_proto_udplite    12811  0 
nf_conntrack_sane      12396  0 
nf_conntrack_sip       21677  1 nf_nat_sip
nf_conntrack_snmp      12411  1 nf_nat_snmp_basic
nf_conntrack_tftp      12401  1 nf_nat_tftp
nf_defrag_ipv4         12443  2 xt_TPROXY,nf_conntrack_ipv4
nf_defrag_ipv6         20950  1 xt_TPROXY
nf_nat                 17864  12 nf_nat_ftp,nf_nat_irc,nf_nat_sip,nf_nat_amanda,ipt_MASQUERADE,nf_nat_proto_gre,nf_nat_h323,nf_nat_ipv4,nf_nat_pptp,nf_nat_tftp,xt_nat,iptable_nat
nf_nat_amanda          12392  0 
nf_nat_ftp             12420  0 
nf_nat_h323            16815  0 
nf_nat_ipv4            12800  1 iptable_nat
nf_nat_irc             12414  0 
nf_nat_pptp            12506  0 
nf_nat_proto_gre       12469  1 nf_nat_pptp
nf_nat_sip             16917  0 
nf_nat_snmp_basic      16856  0 
nf_nat_tftp            12390  0 
xt_addrtype            12501  0 
xt_AUDIT               12531  0 
xt_CHECKSUM            12431  0 
xt_CLASSIFY            12397  0 
xt_comment             12395  0 
xt_connlimit           12587  0 
xt_connmark            12565  0 
xt_conntrack           12601  0 
xt_CT                  12730  0 
xt_dscp                12467  0 
xt_DSCP                12491  0 
xt_hashlimit           17070  0 
xt_helper              12459  0 
xt_iprange             12424  0 
xt_length              12420  0 
xt_LOG                 17003  0 
xt_mark                12413  0 
xt_multiport           12470  0 
xt_nat                 12537  0 
xt_NFLOG               12422  0 
xt_NFQUEUE             12518  0 
xt_owner               12419  0 
xt_physdev             12428  0 
xt_pkttype             12395  0 
xt_policy              12458  0 
xt_realm               12391  0 
xt_recent              17078  0 
xt_statistic           12471  0 
xt_tcpmss              12393  0 
xt_tcpudp              12471  0 
xt_time                12419  0 
xt_TPROXY              16687  0 

Shorewall has detected the following iptables/netfilter capabilities:
   ACCOUNT Target (ACCOUNT_TARGET): Not available
   Address Type Match (ADDRTYPE): Available
   Amanda Helper: Available
   Arptables JF: Not available
   AUDIT Target (AUDIT_TARGET): Available
   Basic Ematch (BASIC_EMATCH): Available
   Basic Filter (BASIC_FILTER): Available
   Capabilities Version (CAPVERSION): 40600
   Checksum Target: Available
   CLASSIFY Target (CLASSIFY_TARGET): Available
   Comments (COMMENTS): Available
   Condition Match (CONDITION_MATCH): Not available
   Connection Tracking Match (CONNTRACK_MATCH): Available
   Connlimit Match (CONNLIMIT_MATCH): Available
   Connmark Match (CONNMARK_MATCH): Available
   CONNMARK Target (CONNMARK): Available
   CT Target (CT_TARGET): Available
   DSCP Match (DSCP_MATCH): Available
   DSCP Target (DSCP_TARGET): Available
   Enhanced Multi-port Match (EMULIPORT): Available
   Extended Connection Tracking Match Support (NEW_CONNTRACK_MATCH): Available
   Extended Connmark Match (XCONNMARK_MATCH): Available
   Extended CONNMARK Target (XCONNMARK): Available
   Extended MARK Target 2 (EXMARK): Available
   Extended MARK Target (XMARK): Available
   Extended Multi-port Match (XMULIPORT): Available
   Extended REJECT (ENHANCED_REJECT): Available
   FLOW Classifier (FLOW_FILTER): Available
   FTP-0 Helper: Not available
   FTP Helper: Available
   fwmark route mask (FWMARK_RT_MASK): Available
   Geo IP match: Not available
   Goto Support (GOTO_TARGET): Available
   H323 Helper: Available
   Hashlimit Match (HASHLIMIT_MATCH): Available
   Header Match (HEADER_MATCH): Not available
   Helper Match (HELPER_MATCH): Available
   IMQ Target (IMQ_TARGET): Not available
   IPMARK Target (IPMARK_TARGET): Not available
   IPP2P Match (IPP2P_MATCH): Not available
   IP range Match(IPRANGE_MATCH): Available
   ipset V5 (IPSET_V5): Not available
   iptables -S (IPTABLES_S): Available
   IRC-0 Helper: Not available
   IRC Helper: Available
   Kernel Version (KERNELVERSION): 31600
   LOGMARK Target (LOGMARK_TARGET): Not available
   LOG Target (LOG_TARGET): Available
   Mangle FORWARD Chain (MANGLE_FORWARD): Available
   Mark in the filter table (MARK_ANYWHERE): Available
   MARK Target (MARK): Available
   MASQUERADE Target: Available
   Multi-port Match (MULTIPORT): Available
   NAT (NAT_ENABLED): Available
   Netbios_ns Helper: Available
   New tos Match: Available
   NFAcct match: Not available
   NFLOG Target (NFLOG_TARGET): Available
   NFQUEUE Target (NFQUEUE_TARGET): Available
   Owner Match (OWNER_MATCH): Available
   Owner Name Match (OWNER_NAME_MATCH): Available
   Packet length Match (LENGTH_MATCH): Available
   Packet Mangling (MANGLE_ENABLED): Available
   Packet Type Match (USEPKTTYPE): Available
   Persistent SNAT (PERSISTENT_SNAT): Available
   Physdev-is-bridged Support (PHYSDEV_BRIDGE): Available
   Physdev Match (PHYSDEV_MATCH): Available
   Policy Match (POLICY_MATCH): Available
   PPTP Helper: Available
   Rawpost Table (RAWPOST_TABLE): Not available
   Raw Table (RAW_TABLE): Available
   Realm Match (REALM_MATCH): Available
   Recent Match "--reap" option (REAP_OPTION): Available
   Recent Match (RECENT_MATCH): Available
   Repeat match (KLUDGEFREE): Available
   RPFilter match: Available
   SANE-0 Helper: Not available
   SANE Helper: Available
   SIP-0 Helper: Not available
   SIP Helper: Available
   SNMP Helper: Available
   Statistic Match (STATISTIC_MATCH): Available
   TCPMSS Match (TCPMSS_MATCH): Available
   TFTP-0 Helper: Not available
   TFTP Helper: Available
   Time Match (TIME_MATCH): Available
   TPROXY Target (TPROXY_TARGET): Available
   UDPLITE Port Redirection: Not available
   ULOG Target (ULOG_TARGET): Available

Netid  State      Recv-Q Send-Q     Local Address:Port       Peer Address:Port 
udp    UNCONN     0      0                      *:56520                 *:*      users:(("rpc.statd",pid=577,fd=8))
udp    UNCONN     0      0                      *:728                   *:*      users:(("rpcbind",pid=568,fd=7))
udp    UNCONN     0      0              127.0.0.1:753                   *:*      users:(("rpc.statd",pid=577,fd=5))
udp    UNCONN     0      0                      *:53                    *:*      users:(("dnsmasq",pid=29725,fd=6))
udp    UNCONN     0      0                      *:67                    *:*      users:(("dnsmasq",pid=29725,fd=4))
udp    UNCONN     0      0                      *:68                    *:*      users:(("dhclient",pid=29433,fd=6))
udp    UNCONN     0      0                      *:111                   *:*      users:(("rpcbind",pid=568,fd=6))
udp    UNCONN     0      0          192.168.2.100:123                   *:*      users:(("ntpd",pid=918,fd=19))
udp    UNCONN     0      0              10.10.5.1:123                   *:*      users:(("ntpd",pid=918,fd=24))
udp    UNCONN     0      0              10.10.1.1:123                   *:*      users:(("ntpd",pid=918,fd=22))
udp    UNCONN     0      0              10.10.4.1:123                   *:*      users:(("ntpd",pid=918,fd=21))
udp    UNCONN     0      0              127.0.0.1:123                   *:*      users:(("ntpd",pid=918,fd=18))
udp    UNCONN     0      0                      *:123                   *:*      users:(("ntpd",pid=918,fd=16))
udp    UNCONN     0      0                      *:56973                 *:*      users:(("dhclient",pid=29433,fd=20))
tcp    LISTEN     0      5                      *:53                    *:*      users:(("dnsmasq",pid=29725,fd=7))
tcp    LISTEN     0      128            10.10.1.1:22                    *:*      users:(("sshd",pid=28151,fd=3))
tcp    LISTEN     0      100            127.0.0.1:25                    *:*      users:(("master",pid=1133,fd=12))
tcp    LISTEN     0      128                    *:40520                 *:*      users:(("rpc.statd",pid=577,fd=9))
tcp    LISTEN     0      128                    *:111                   *:*      users:(("rpcbind",pid=568,fd=8))
tcp    ESTAB      0      0              10.10.1.1:22            10.10.1.5:49918  users:(("sshd",pid=26616,fd=3),("sshd",pid=26611,fd=3))
tcp    ESTAB      0      0              10.10.1.1:22            10.10.1.5:50878  users:(("sshd",pid=28220,fd=3),("sshd",pid=28218,fd=3))

Traffic Control

Device eth0:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 96395151 bytes 1139757 pkt (dropped 0, overlimits 0 requeues 1) 
 backlog 0b 0p requeues 1 


Device eth1:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 2275057413 bytes 1642104 pkt (dropped 0, overlimits 0 requeues 3) 
 backlog 0b 0p requeues 3 


Device eth2:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 95143 bytes 677 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0 


Device eth3:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 258 bytes 3 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0 



TC Filters

Device eth0:

Device eth1:

Device eth2:

Device eth3:

