[EMAIL PROTECTED] ipfstat -io
block out log quick on bge1 all head 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > exec to
10.207.6.9/32 port = 22 flags S/FSRPAU keep state group 102
pass out quick on bge1 proto icmp from 10.206.6.9/32 to any icmp-type
echo keep state group 102
pass out quick on bge1 proto icmp from 10.206.6.9/32 to any icmp-type
unreach keep state group 102
pass out quick on bge1 proto icmp from 10.206.6.9/32 to any icmp-type
timex keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port > 1023 to
10.206.7.10/32 port = 162 keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port > 1023 to
10.206.7.11/32 port = 162 keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port > 1023 to
10.206.9.3/32 port = 162 keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port > 1023 to
10.207.9.3/32 port = 162 keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port > 1023 to
10.206.9.4/32 port = syslog keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port > 1023 to
10.207.9.3/32 port = syslog keep state group 102
pass out log first quick on bge1 proto tcp from 10.206.6.9/32 port >
1023 to 10.206.6.6/32 port = smtp flags S/FSRPAU keep state group 102
pass out log first quick on bge1 proto tcp from 10.206.6.9/32 port >
1023 to 10.207.6.6/32 port = smtp flags S/FSRPAU keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port = ntp to
10.206.6.6/32 port = ntp keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port = ntp to
10.207.6.6/32 port = ntp keep state group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > 1023 to
10.206.6.11/32 port = domain flags S/FSRPAU keep state group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > 1023 to
10.206.6.11/32 port = domain keep state group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > 1023 to
10.207.6.11/32 port = domain flags S/FSRPAU keep state group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 port > 1023 to
10.207.6.11/32 port = domain keep state group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.206.6.5/32
port = sunrpc flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.5/32
port = sunrpc keep state keep frags group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.206.6.5/32
port = nfsd flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.5/32
port = nfsd keep state keep frags group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.206.6.5/32
port 4044 >< 4048 flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.5/32
port 4044 >< 4048 keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.5/32
port = 4049 keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.5/32
with frag group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.206.6.80/32
port = sunrpc flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.80/32
port = sunrpc keep state keep frags group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.206.6.80/32
port = nfsd flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.80/32
port = nfsd keep state keep frags group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.206.6.80/32
port 4044 >< 4048 flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.80/32
port 4044 >< 4048 keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.80/32
port = 4049 keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.206.6.80/32
with frag group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.207.6.5/32
port = sunrpc flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.207.6.5/32
port = sunrpc keep state keep frags group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.207.6.5/32
port = nfsd flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.207.6.5/32
port = nfsd keep state keep frags group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 to 10.207.6.5/32
port 4044 >< 4048 flags S/FSRPAU keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.207.6.5/32
port 4044 >< 4048 keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.207.6.5/32
port = 4049 keep state keep frags group 102
pass out quick on bge1 proto udp from 10.206.6.9/32 to 10.207.6.5/32
with frag group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > 1023 to
10.207.6.9/32 port = 3306 flags S/FSRPAU keep state group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > 1023 to
10.206.10.20/32 port = 3306 flags S/FSRPAU keep state group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > 1023 to
10.207.10.20/32 port = 3306 flags S/FSRPAU keep state group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > 1023 to
10.206.9.3/32 port = 3306 flags S/FSRPAU keep state group 102
pass out quick on bge1 proto tcp from 10.206.6.9/32 port > 1023 to
10.207.9.3/32 port = 3306 flags S/FSRPAU keep state group 102
block out log first quick on bge1 all group 102
block out log quick on bge0 all head 202
pass out quick on bge0 proto icmp from AAA.BBB.CCC.9/32 to any icmp-type
echo keep state group 202
pass out quick on bge0 proto icmp from AAA.BBB.CCC.9/32 to any icmp-type
maskreq keep state group 202
pass out quick on bge0 proto icmp from AAA.BBB.CCC.9/32 to any icmp-type
unreach keep state group 202
block out log first quick on bge0 all group 202
block in log quick on bge1 all head 101
block in quick on bge1 from any to 10.206.6.255/32 group 101
block in quick on bge1 from any to 169.254.255.255/32 group 101
block in quick on bge1 from any to 255.255.255.255/32 group 101
pass in quick on bge1 proto tcp from 10.206.31.6/32 port > exec to
10.206.6.9/32 port = 22 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.207.31.6/32 port > exec to
10.206.6.9/32 port = 22 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.207.6.9/32 port > exec to
10.206.6.9/32 port = 22 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto icmp from any to 10.206.6.9/32 icmp-type
echo keep state group 101
pass in quick on bge1 proto icmp from any to 10.206.6.9/32 icmp-type
timex keep state group 101
pass in quick on bge1 proto icmp from any to 10.206.6.9/32 icmp-type
unreach keep state group 101
pass in quick on bge1 proto udp from 10.206.9.3/32 port > 1023 to
10.206.6.9/32 port = 161 keep state group 101
pass in quick on bge1 proto udp from 10.207.9.3/32 port > 1023 to
10.206.6.9/32 port = 161 keep state group 101
pass in quick on bge1 proto tcp from 10.206.6.5/32 to 10.206.6.9/32 port
= sunrpc flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.5/32 to 10.206.6.9/32 port
= sunrpc keep state keep frags group 101
pass in quick on bge1 proto tcp from 10.206.6.5/32 to 10.206.6.9/32 port
= nfsd flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.5/32 to 10.206.6.9/32 port
= nfsd keep state keep frags group 101
pass in quick on bge1 proto tcp from 10.206.6.5/32 to 10.206.6.9/32 port
4044 >< 4048 flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.5/32 to 10.206.6.9/32 port
4044 >< 4048 keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.5/32 to 10.206.6.9/32 port
= 4049 keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.5/32 to 10.206.6.9/32 with
frag group 101
pass in quick on bge1 proto tcp from 10.206.6.80/32 to 10.206.6.9/32
port = sunrpc flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.80/32 to 10.206.6.9/32
port = sunrpc keep state keep frags group 101
pass in quick on bge1 proto tcp from 10.206.6.80/32 to 10.206.6.9/32
port = nfsd flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.80/32 to 10.206.6.9/32
port = nfsd keep state keep frags group 101
pass in quick on bge1 proto tcp from 10.206.6.80/32 to 10.206.6.9/32
port 4044 >< 4048 flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.80/32 to 10.206.6.9/32
port 4044 >< 4048 keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.80/32 to 10.206.6.9/32
port = 4049 keep state keep frags group 101
pass in quick on bge1 proto udp from 10.206.6.80/32 to 10.206.6.9/32
with frag group 101
pass in quick on bge1 proto tcp from 10.207.6.5/32 to 10.206.6.9/32 port
= sunrpc flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.207.6.5/32 to 10.206.6.9/32 port
= sunrpc keep state keep frags group 101
pass in quick on bge1 proto tcp from 10.207.6.5/32 to 10.206.6.9/32 port
= nfsd flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.207.6.5/32 to 10.206.6.9/32 port
= nfsd keep state keep frags group 101
pass in quick on bge1 proto tcp from 10.207.6.5/32 to 10.206.6.9/32 port
4044 >< 4048 flags S/FSRPAU keep state keep frags group 101
pass in quick on bge1 proto udp from 10.207.6.5/32 to 10.206.6.9/32 port
4044 >< 4048 keep state keep frags group 101
pass in quick on bge1 proto udp from 10.207.6.5/32 to 10.206.6.9/32 port
= 4049 keep state keep frags group 101
pass in quick on bge1 proto udp from 10.207.6.5/32 to 10.206.6.9/32 with
frag group 101
pass in quick on bge1 proto tcp from 10.1.7.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.8.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.9.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.10.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.184.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.185.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 159.18.15.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 159.18.18.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 159.18.19.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 159.18.135.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.121.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.123.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.147.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.201.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.18.64.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.60.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.169.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.193.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.20.30.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.111.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.112.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.1.248.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.207.3.128/27 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 192.168.250.0/24 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.206.9.3/32 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.207.9.3/32 port > 1023 to
10.206.6.9/32 port = 80 flags S/FSRPAU keep state group 101
pass in log first quick on bge1 proto udp from any port > 1023 to
10.206.6.9/32 port = syslog keep state group 101
pass in quick on bge1 proto tcp from 10.207.6.9/32 port > 1023 to
10.206.6.9/32 port = 3306 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.206.10.20/32 port > 1023 to
10.206.6.9/32 port = 3306 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.207.10.20/32 port > 1023 to
10.206.6.9/32 port = 3306 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.206.9.3/32 port > 1023 to
10.206.6.9/32 port = 3306 flags S/FSRPAU keep state group 101
pass in quick on bge1 proto tcp from 10.207.9.3/32 port > 1023 to
10.206.6.9/32 port = 3306 flags S/FSRPAU keep state group 101
block in log first quick on bge1 all group 101
block in log quick on bge0 all head 201
block in quick on bge0 from any to 169.254.255.255/32 group 201
block in quick on bge0 from any to AAA.BBB.CCC.127/32 group 201
block in quick on bge0 from any to AAA.BBB.CCC.255/32 group 201
block in quick on bge0 from any to 255.255.255.255/32 group 201
pass in quick on bge0 proto icmp from any to AAA.BBB.CCC.9/32 icmp-type
timex keep state group 201
pass in quick on bge0 proto icmp from any to AAA.BBB.CCC.9/32 icmp-type
unreach keep state group 201
pass in quick on bge0 proto udp from AAA.BBB.XXX.25/32 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from AAA.BBB.YYY.29/32 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from EEE.FFF.0.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from EEE.FFF.1.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from EEE.FFF.2.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from EEE.FFF.32.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from EEE.FFF.64.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from EEE.FFF.66.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from EEE.FFF.67.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from EEE.FFF.96.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from HHH.III.80.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from HHH.III.115.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from BBB.CCC.65.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from BBB.CCC.98.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from VVV.WWW.14.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from RRR.SSS.120.0/22 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from RRR.SSS.124.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from RRR.SSS.125.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from RRR.SSS.126.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from LLL.MMM.63.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from AAA.BBB.XXX.0/22 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from LLL.MMM.202.0/23 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from LLL.MMM.223.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from PPP.QQQ.54.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from PPP.QQQ.158.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from PPP.QQQ.174.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from TTT.UUU.0.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.32.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.48.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.64.0/22 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.75.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.96.0/22 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.101.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.128.0/23 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.189.0/24 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
pass in quick on bge0 proto udp from NNN.OOO.224.0/23 port > 1023 to
AAA.BBB.CCC.9/32 port = syslog keep state group 201
block in log first quick on bge0 all group 201
[EMAIL PROTECTED] ipnat -slv
mapped  in      0       out     0
added   0       expired 0
no memory       0       bad nat 0
inuse   0
rules   0
wilds   0
table ffffffff7ffff9c8 list 0
List of active MAP/Redirect filters:

List of active sessions:

List of active host mappings:
[EMAIL PROTECTED] 


Reply via email to