Shorewall 4.0.13 Dump at myrouter - Sat Aug 23 15:16:32 UTC 2008

   Shorewall-shell 4.0.13

Counters reset Sat Aug 23 15:14:07 UTC 2008

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  lo     *       0.0.0.0/0            0.0.0.0/0           
    2   196 ppp0_in    0    --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth3_in    0    --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth0_in    0    --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_in    0    --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_in    0    --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 tun0_in    0    --  tun0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
    0     0 ppp0_fwd   0    --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth3_fwd   0    --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth0_fwd   0    --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fwd   0    --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fwd   0    --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 tun0_fwd   0    --  tun0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      lo      0.0.0.0/0            0.0.0.0/0           
    1    60 ppp0_out   0    --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
    7   588 eth3_out   0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 eth0_out   0    --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_out   0    --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_out   0    --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 tun0_out   0    --  *      tun0    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain Drop (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
    1    64 dropBcast  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    1    64 dropInvalid  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    1    64 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain Reject (11 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
    0     0 dropBcast  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    0     0 dropInvalid  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain all2all (12 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2all (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:dmz2all:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:dmz2fw:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:dmz2loc:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (12 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc2net    0    --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2net    0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2dmz    0    --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2all    0    --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2all    0    --  *      tun0    0.0.0.0/0            0.0.0.0/0           

Chain eth0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc2fw     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 fw2loc     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 dmz2net    0    --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2net    0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2loc    0    --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2all    0    --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2all    0    --  *      tun0    0.0.0.0/0            0.0.0.0/0           

Chain eth1_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 dmz2fw     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 fw2dmz     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 net2net    0    --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
    0     0 net2loc    0    --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 net2dmz    0    --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 net2all    0    --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 net2all    0    --  *      tun0    0.0.0.0/0            0.0.0.0/0           

Chain eth3_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 net2fw     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    7   588 fw2net     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 all2all    0    --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
    0     0 all2all    0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 all2all    0    --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 all2all    0    --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 all2all    0    --  *      tun0    0.0.0.0/0            0.0.0.0/0           

Chain eth4_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 all2all    0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw2iscsi   0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2all (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2all:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2dmz:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2iscsi (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    1    60 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    7   588 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2all (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:loc2all:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 Reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:loc2dmz:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logdrop:DROP:' 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logflags:DROP:' 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logreject:REJECT:' 
    0     0 reject     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2all (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2all:DROP:' 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2dmz (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2dmz:DROP:' 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    1   132 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 DROP       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    1    64 Drop       0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    1    64 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2fw:DROP:' 
    1    64 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2loc:DROP:' 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2net:DROP:' 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ppp0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 net2net    0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 net2loc    0    --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 net2dmz    0    --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 net2all    0    --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 net2all    0    --  *      tun0    0.0.0.0/0            0.0.0.0/0           

Chain ppp0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    64 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    1    64 smurfs     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    1    64 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    2   196 net2fw     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ppp0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    1    60 fw2net     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain reject (18 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 
    0     0 DROP       0    --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 DROP       0    --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  *      *       83.111.196.63        0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       0    --  *      *       83.111.196.63        0.0.0.0/0           
    0     0 LOG        0    --  *      *       10.0.0.255           0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       0    --  *      *       10.0.0.255           0.0.0.0/0           
    0     0 LOG        0    --  *      *       172.16.1.255         0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       0    --  *      *       172.16.1.255         0.0.0.0/0           
    0     0 LOG        0    --  *      *       255.255.255.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       0    --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 LOG        0    --  *      *       224.0.0.0/4          0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       0    --  *      *       224.0.0.0/4          0.0.0.0/0           

Chain tcpflags (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:0 flags:0x17/0x02 

Chain tun0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 all2all    0    --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
    0     0 all2all    0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 all2all    0    --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 all2all    0    --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 all2all    0    --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      tun0    0.0.0.0/0            0.0.0.0/0           

Chain tun0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    0    --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 all2all    0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tun0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw2all     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Log (/var/log/messages)

Aug 23 15:15:58 net2fw:DROP:IN=ppp0 OUT= SRC=80.102.140.211 DST=86.98.49.94 LEN=64 TOS=0x00 PREC=0x00 TTL=36 ID=32334 DF PROTO=TCP SPT=4952 DPT=4899 WINDOW=53760 RES=0x00 SYN URGP=0 MARK=0x1 

NAT Table

Chain PREROUTING (policy ACCEPT 1 packets, 64 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 2 packets, 144 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    2   144 ppp0_masq  0    --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
    0     0 eth3_masq  0    --  *      eth3    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 2 packets, 144 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth3_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 SNAT       0    --  *      *       10.0.0.0/24          0.0.0.0/0           to:83.111.196.58 
    0     0 SNAT       0    --  *      *       192.168.0.0/16       0.0.0.0/0           to:83.111.196.58 
    0     0 SNAT       0    --  *      *       172.16.1.0/24        0.0.0.0/0           to:83.111.196.58 

Chain ppp0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  0    --  *      *       10.0.0.0/24          0.0.0.0/0           
    0     0 MASQUERADE  0    --  *      *       192.168.0.0/16       0.0.0.0/0           
    0     0 MASQUERADE  0    --  *      *       172.16.1.0/24        0.0.0.0/0           

Mangle Table

Chain PREROUTING (policy ACCEPT 2 packets, 196 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CONNMARK   0    --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
    2   196 routemark  0    --  ppp0   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
    0     0 routemark  0    --  eth3   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
    2   196 tcpre      0    --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 tcpre      0    --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 tcpre      0    --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain INPUT (policy ACCEPT 2 packets, 196 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tcfor      0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 8 packets, 648 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CONNMARK   0    --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
    8   648 tcout      0    --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain POSTROUTING (policy ACCEPT 8 packets, 648 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    8   648 tcpost     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain routemark (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    2   196 MARK       0    --  ppp0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 
    0     0 MARK       0    --  eth3   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
    2   196 CONNMARK   0    --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match !0x0/0xff CONNMARK save mask 0xff 

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    8   648 MARK       0    --  *      *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    2   196 MARK       0    --  *      *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 

Conntrack Table

udp      17 10 src=86.98.49.94 dst=208.67.222.222 sport=57385 dport=53 packets=1 bytes=60 src=208.67.222.222 dst=86.98.49.94 sport=53 dport=57385 packets=1 bytes=132 mark=1 use=1
icmp     1 17 src=83.111.196.58 dst=208.67.216.231 type=8 code=0 id=50709 packets=7 bytes=588 [UNREPLIED] src=208.67.216.231 dst=83.111.196.58 type=0 code=0 id=50709 packets=0 bytes=0 mark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:08:85:fa brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.1/24 brd 10.0.0.255 scope global eth0
    inet6 fe80::204:a7ff:fe08:85fa/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:08:85:f9 brd ff:ff:ff:ff:ff:ff
    inet 172.16.1.1/24 brd 172.16.1.255 scope global eth1
4: eth2: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:08:85:f8 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::204:a7ff:fe08:85f8/64 scope link 
       valid_lft forever preferred_lft forever
5: eth3: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:08:85:f7 brd ff:ff:ff:ff:ff:ff
    inet 83.111.196.58/29 brd 83.111.196.63 scope global eth3
    inet6 fe80::204:a7ff:fe08:85f7/64 scope link 
       valid_lft forever preferred_lft forever
6: eth4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:05:d9:f6 brd ff:ff:ff:ff:ff:ff
7: eth5: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:05:d9:f7 brd ff:ff:ff:ff:ff:ff
8: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,10000> mtu 1454 qdisc pfifo_fast qlen 3
    link/ppp 
    inet 86.98.49.94 peer 213.42.8.55/32 scope global ppp0

IP Stats

1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:08:85:fa brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    60         1        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    528        7        0       0       0       0      
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:08:85:f9 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
4: eth2: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:08:85:f8 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    1380       21       0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2432       33       0       0       0       0      
5: eth3: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:08:85:f7 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    468        6        0       0       0       0      
6: eth4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:05:d9:f6 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
7: eth5: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:04:a7:05:d9:f7 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
8: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,10000> mtu 1454 qdisc pfifo_fast qlen 3
    link/ppp 
    RX: bytes  packets  errors  dropped overrun mcast   
    226        5        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    678        11       0       0       0       0      

/proc

   /proc/version = Linux version 2.6.26-router (root@debian40server) (gcc version 4.1.2 20061115 (prerelease) (Debian 4.1.1-21)) #28 Sun Aug 3 07:08:56 EDT 2008
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 1
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/log_martians = 0
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/log_martians = 0
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth2/log_martians = 0
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth3/log_martians = 1
   /proc/sys/net/ipv4/conf/eth4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth4/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth4/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/log_martians = 0
   /proc/sys/net/ipv4/conf/eth5/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth5/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth5/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth5/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth5/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0
   /proc/sys/net/ipv4/conf/ppp0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/ppp0/rp_filter = 1
   /proc/sys/net/ipv4/conf/ppp0/log_martians = 1

Routing Rules

0:	from all lookup 255 
1000:	from all to 10.8.0.0/24 lookup main 
1000:	from all to 192.168.0.0/16 lookup main 
10001:	from all fwmark 0x1 lookup BusinessOne 
10002:	from all fwmark 0x2 lookup LeasedLine 
20000:	from 86.98.49.94 lookup BusinessOne 
20256:	from 83.111.196.58 lookup LeasedLine 
32766:	from all lookup main 
32767:	from all lookup default 

Table 255:

local 86.98.49.94 dev ppp0  proto kernel  scope host  src 86.98.49.94 
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
local 10.0.0.1 dev eth0  proto kernel  scope host  src 10.0.0.1 
broadcast 172.16.1.255 dev eth1  proto kernel  scope link  src 172.16.1.1 
broadcast 10.0.0.0 dev eth0  proto kernel  scope link  src 10.0.0.1 
broadcast 83.111.196.56 dev eth3  proto kernel  scope link  src 83.111.196.58 
local 83.111.196.58 dev eth3  proto kernel  scope host  src 83.111.196.58 
local 172.16.1.1 dev eth1  proto kernel  scope host  src 172.16.1.1 
broadcast 172.16.1.0 dev eth1  proto kernel  scope link  src 172.16.1.1 
broadcast 10.0.0.255 dev eth0  proto kernel  scope link  src 10.0.0.1 
broadcast 83.111.196.63 dev eth3  proto kernel  scope link  src 83.111.196.58 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table BusinessOne:

213.42.8.55 dev ppp0  proto kernel  scope link  src 86.98.49.94 
10.0.0.0/24 dev eth0  proto kernel  scope link  src 10.0.0.1 
172.16.1.0/24 dev eth1  proto kernel  scope link  src 172.16.1.1 
192.168.0.0/16 via 10.0.0.2 dev eth0 
default dev ppp0  scope link 

Table LeasedLine:

83.111.196.57 dev eth3  scope link  src 83.111.196.58 
83.111.196.56/29 dev eth3  proto kernel  scope link  src 83.111.196.58 
10.0.0.0/24 dev eth0  proto kernel  scope link  src 10.0.0.1 
172.16.1.0/24 dev eth1  proto kernel  scope link  src 172.16.1.1 
192.168.0.0/16 via 10.0.0.2 dev eth0 
default via 83.111.196.57 dev eth3 

Table default:


Table main:

213.42.8.55 dev ppp0  proto kernel  scope link  src 86.98.49.94 
83.111.196.56/29 dev eth3  proto kernel  scope link  src 83.111.196.58 
10.0.0.0/24 dev eth0  proto kernel  scope link  src 10.0.0.1 
172.16.1.0/24 dev eth1  proto kernel  scope link  src 172.16.1.1 
192.168.0.0/16 via 10.0.0.2 dev eth0 
default 
	nexthop dev ppp0 weight 1
	nexthop via 83.111.196.57  dev eth3 weight 1

ARP


Modules

ipt_ECN                 1408  0 
ipt_LOG                 3712  24 
ipt_MASQUERADE          1024  3 
ipt_NETMAP               896  0 
ipt_REDIRECT             896  0 
ipt_REJECT              1536  4 
ipt_TTL                 1024  0 
ipt_ULOG                3460  0 
ipt_addrtype            1280  0 
ipt_ah                   768  0 
ipt_ecn                 1024  0 
ipt_recent              3352  0 
ipt_ttl                  768  0 
iptable_nat             2568  1 
iptable_raw              896  0 
nf_conntrack           24980  26 ipt_MASQUERADE,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda     1664  1 nf_nat_amanda
nf_conntrack_ftp        4128  1 nf_nat_ftp
nf_conntrack_h323      31016  1 nf_nat_h323
nf_conntrack_ipv4       5772  49 iptable_nat,nf_nat
nf_conntrack_irc        2464  1 nf_nat_irc
nf_conntrack_netbios_ns     1024  0 
nf_conntrack_pptp       2688  1 nf_nat_pptp
nf_conntrack_proto_gre     1792  1 nf_conntrack_pptp
nf_conntrack_sip        9756  1 nf_nat_sip
nf_conntrack_tftp       2452  1 nf_nat_tftp
nf_nat                  8208  12 ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,iptable_nat
nf_nat_amanda            768  0 
nf_nat_ftp              1280  0 
nf_nat_h323             3840  0 
nf_nat_irc               896  0 
nf_nat_pptp             1536  0 
nf_nat_proto_gre         900  1 nf_nat_pptp
nf_nat_sip              3456  0 
nf_nat_snmp_basic       6404  0 
nf_nat_tftp              640  0 
xt_CLASSIFY              768  0 
xt_CONNMARK             1536  3 
xt_DSCP                 1920  0 
xt_MARK                 1280  4 
xt_NFLOG                 896  0 
xt_NFQUEUE               896  0 
xt_TCPMSS               2304  1 
xt_comment               768  0 
xt_connmark             1280  2 
xt_conntrack            2304  0 
xt_dccp                 1540  0 
xt_dscp                 1280  0 
xt_hashlimit            6412  0 
xt_helper               1024  0 
xt_length                896  0 
xt_limit                1024  0 
xt_mac                   896  0 
xt_mark                 1024  5 
xt_multiport            1792  4 
xt_pkttype               896  4 
xt_policy               1920  0 
xt_state                 896  41 
xt_tcpmss               1024  0 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Not available
   Physdev-is-bridged Support: Not available
   Packet length Match: Available
   IP range Match: Not available
   Recent Match: Available
   Owner Match: Not available
   Ipset Match: Not available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Not available
   MARK Target: Available
   Extended MARK Target: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available

Traffic Control

Device eth0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 510 bytes 7 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth1:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth2:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1922 bytes 33 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth3:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 468 bytes 6 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth4:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth5:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device ppp0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 648 bytes 8 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


TC Filters

Device eth0:

Device eth1:

Device eth2:

Device eth3:

Device eth4:

Device eth5:

Device ppp0:

