Shorewall 4.0.6 Dump at fire - Qua Out  1 08:31:37 BRT 2008

   Shorewall-shell 4.0.6

Counters reset Wed Oct  1 06:04:36 BRT 2008

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  765  330K ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
  968  100K ppp0_in    all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
 1292  188K eth0_in    all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   10   780 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 3073  218K ppp0_fwd   all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
 3236  307K eth0_fwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  765  330K ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
  971 61366 ppp0_out   all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
  461  119K eth0_out   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
   10  1060 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  159 14446 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  107  7096 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
  107  7096 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain Drop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain Reject (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
 1101  125K dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
 1101  125K dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
  114 15480 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
  706 69029 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    1    93 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain all2all (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  932  110K Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  849 62925 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:' 
  849 62925 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    6  4614 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   24 35269 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (4 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  491 25640 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 3236  307K loc2net    all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           

Chain eth0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  979  151K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 1292  188K loc2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  461  119K fw2loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  367 67808 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
   94 51169 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  803 49024 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  167 12282 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    1    60 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2net:ACCEPT:' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  313 36911 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    1    60 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
  944  150K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       192.168.100.10       0.0.0.0/0           tcp dpt:1863 
    0     0 ACCEPT     tcp  --  *      *       192.168.100.10       0.0.0.0/0           tcp dpts:25000:30000 
    1    60 ACCEPT     tcp  --  *      *       192.168.100.3        0.0.0.0/0           tcp dpt:3128 
    2    96 ACCEPT     tcp  --  *      *       192.168.100.4        0.0.0.0/0           tcp dpt:3128 
    4   192 ACCEPT     tcp  --  *      *       192.168.100.8        0.0.0.0/0           tcp dpt:3128 
    0     0 ACCEPT     tcp  --  *      *       192.168.100.9        0.0.0.0/0           tcp dpt:3128 
    7   336 ACCEPT     tcp  --  *      *       192.168.100.14       0.0.0.0/0           tcp dpt:3128 
   20   972 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3128 
    0     0 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 2745  281K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    2   152 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           source IP range 192.168.100.100-192.168.100.200 
    0     0 ACCEPT     tcp  --  *      *       192.168.100.52       0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       192.168.100.52       0.0.0.0/0           tcp dpt:21 
    6   385 ACCEPT     udp  --  *      *       192.168.100.52       0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       192.168.100.52       0.0.0.0/0           tcp dpt:53 
   39  2147 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:72:28 
    3   198 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:5D:CB:26 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:1863 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 udp dpt:1863 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:443 
    2   124 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:25 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:110 
    5   320 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:E0:7D:FE:CE:BE udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:E0:7D:FE:CE:BE tcp dpt:53 
    1    70 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:05:04:B2 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:89:C5:B6 
  363 17911 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:16:CF:3A:70:E4 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:1863 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F udp dpt:1863 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:443 
    4   250 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:25 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:1863 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 udp dpt:1863 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:443 
   10   665 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:25 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:110 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:78:98:08 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:19:21:18:6C:6C 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:16:EC:1E:D9:83 
    2    96 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:1863 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E udp dpt:1863 
    3   144 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:443 
    3   144 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:25 
    2   126 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:53 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:83:08:01:85:A9 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:02:A5:A0:18:DC udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:02:A5:A0:18:DC tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:02:A5:A0:18:DC tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:02:A5:A0:18:DC tcp dpt:25 
   46  2908 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logdrop:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logreject:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  171 43728 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    5   308 reject     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:25000:30000 
  792 56174 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 3072  218K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.52      tcp dpt:21 
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.52      tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.52      tcp dpt:3050 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.52      tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.10      tcp dpt:5900 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.10      tcp dpt:46010 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.100.10      udp dpt:46010 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.10      tcp dpt:5001 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.6       tcp dpt:5900 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.12      tcp dpt:38920 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.100.12      udp dpt:23169 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.16      tcp dpt:5900 
    0     0 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ppp0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    48 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 3073  218K net2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain ppp0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  797 56482 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  968  100K net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ppp0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  971 61366 fw2net     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain reject (12 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
  682 33760 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
  366 50325 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
   27  1724 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       192.168.100.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       192.168.100.255      0.0.0.0/0           
    0     0 LOG        all  --  *      *       255.255.255.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 LOG        all  --  *      *       224.0.0.0/4          0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           

Log (/var/log/messages)

Oct  1 08:30:46 all2all:REJECT:IN=ppp0 OUT= SRC=72.189.63.218 DST=200.175.76.115 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=15068 DF PROTO=TCP SPT=58510 DPT=49155 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct  1 08:30:47 all2all:REJECT:IN=ppp0 OUT= SRC=72.189.63.218 DST=200.175.76.115 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=15338 DF PROTO=TCP SPT=58510 DPT=49155 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct  1 08:30:48 all2all:REJECT:IN=ppp0 OUT= SRC=72.189.63.218 DST=200.175.76.115 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=15593 DF PROTO=TCP SPT=58510 DPT=49155 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct  1 08:30:48 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.9 DST=75.126.203.68 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=109 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=2048 
Oct  1 08:30:53 all2all:REJECT:IN=ppp0 OUT= SRC=190.83.29.196 DST=200.175.76.115 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=10288 DF PROTO=TCP SPT=58262 DPT=49155 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct  1 08:30:54 all2all:REJECT:IN=ppp0 OUT= SRC=190.83.29.196 DST=200.175.76.115 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=10343 DF PROTO=TCP SPT=58262 DPT=49155 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct  1 08:30:55 all2all:REJECT:IN=ppp0 OUT= SRC=190.83.29.196 DST=200.175.76.115 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=10385 DF PROTO=TCP SPT=58262 DPT=49155 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct  1 08:30:55 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=62 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=42 
Oct  1 08:31:04 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=67 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=47 
Oct  1 08:31:04 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=70 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=50 
Oct  1 08:31:04 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=70 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=50 
Oct  1 08:31:04 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=72 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=52 
Oct  1 08:31:04 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=63 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=43 
Oct  1 08:31:04 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=70 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=50 
Oct  1 08:31:04 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=62 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=42 
Oct  1 08:31:09 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=73 TOS=0x00 PREC=0x00 TTL=64 ID=7365 DF PROTO=UDP SPT=58531 DPT=53 LEN=53 
Oct  1 08:31:09 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=73 TOS=0x00 PREC=0x00 TTL=64 ID=7366 DF PROTO=UDP SPT=52665 DPT=53 LEN=53 
Oct  1 08:31:09 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.14 DST=74.55.74.110 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=468 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=2304 
Oct  1 08:31:23 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=64 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=44 
Oct  1 08:31:29 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.9 DST=75.126.203.69 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=115 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=2304 

NAT Table

Chain PREROUTING (policy ACCEPT 1434 packets, 113K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  798 56530 net_dnat   all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
  660 57118 loc_dnat   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 854 packets, 39819 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1278 61622 ppp0_masq  all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 418 packets, 73492 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain loc_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REDIRECT   tcp  --  *      *       192.168.100.10       0.0.0.0/0           tcp dpt:1863 redir ports 1863 
    1    60 REDIRECT   tcp  --  *      *       192.168.100.3        0.0.0.0/0           tcp dpt:80 redir ports 3128 
    2    96 REDIRECT   tcp  --  *      *       192.168.100.4        0.0.0.0/0           tcp dpt:80 redir ports 3128 
    4   192 REDIRECT   tcp  --  *      *       192.168.100.8        0.0.0.0/0           tcp dpt:80 redir ports 3128 
    0     0 REDIRECT   tcp  --  *      *       192.168.100.9        0.0.0.0/0           tcp dpt:80 redir ports 3128 
    7   336 REDIRECT   tcp  --  *      *       192.168.100.14       0.0.0.0/0           tcp dpt:80 redir ports 3128 
   20   972 REDIRECT   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 redir ports 3128 

Chain net_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 to:192.168.100.52 
    1    48 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 to:192.168.100.52 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3050 to:192.168.100.52:3050 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 to:192.168.100.52:80 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5900 to:192.168.100.10:5900 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:46010 to:192.168.100.10:46010 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:46010 to:192.168.100.10:46010 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5001 to:192.168.100.10:5001 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5901 to:192.168.100.6:5900 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:38920 to:192.168.100.12:38920 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:23169 to:192.168.100.12:23169 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5902 to:192.168.100.16:5900 

Chain ppp0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  442 22560 MASQUERADE  all  --  *      *       192.168.100.0/24     0.0.0.0/0           

Mangle Table

Chain PREROUTING (policy ACCEPT 9357 packets, 1145K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 9356 1145K tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 3036 packets, 619K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 6309 packets, 525K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 6309  525K tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 2375 packets, 526K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 2366  526K tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 8378 packets, 982K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 8376  982K tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table

tcp      6 431868 ESTABLISHED src=192.168.100.2 dst=70.85.98.50 sport=1094 dport=80 packets=3 bytes=280 src=192.168.100.1 dst=192.168.100.2 sport=3128 dport=1094 packets=2 bytes=88 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431941 ESTABLISHED src=192.168.100.14 dst=64.233.161.104 sport=1063 dport=80 packets=3 bytes=559 src=192.168.100.1 dst=192.168.100.14 sport=3128 dport=1063 packets=2 bytes=88 [ASSURED] mark=0 secmark=0 use=1
udp      17 17 src=192.168.100.2 dst=192.168.100.255 sport=138 dport=138 packets=3 bytes=687 [UNREPLIED] src=192.168.100.255 dst=192.168.100.2 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 48 TIME_WAIT src=192.168.100.7 dst=200.143.88.59 sport=4387 dport=110 packets=9 bytes=440 src=200.143.88.59 dst=200.175.76.115 sport=110 dport=4387 packets=8 bytes=387 [ASSURED] mark=0 secmark=0 use=1
tcp      6 7 TIME_WAIT src=192.168.100.5 dst=64.4.21.61 sport=1045 dport=80 packets=6 bytes=1709 src=192.168.100.1 dst=192.168.100.5 sport=3128 dport=1045 packets=7 bytes=1905 [ASSURED] mark=0 secmark=0 use=1
udp      17 108 src=192.168.100.10 dst=91.189.94.4 sport=123 dport=123 packets=4 bytes=304 src=91.189.94.4 dst=200.175.76.115 sport=123 dport=123 packets=4 bytes=304 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431934 ESTABLISHED src=192.168.100.4 dst=200.175.5.233 sport=1043 dport=80 packets=3 bytes=301 src=192.168.100.1 dst=192.168.100.4 sport=3128 dport=1043 packets=2 bytes=88 [ASSURED] mark=0 secmark=0 use=1
tcp      6 109 TIME_WAIT src=192.168.100.7 dst=200.143.88.59 sport=4391 dport=110 packets=8 bytes=392 src=200.143.88.59 dst=200.175.76.115 sport=110 dport=4391 packets=8 bytes=387 [ASSURED] mark=0 secmark=0 use=1
tcp      6 5 CLOSE_WAIT src=192.168.100.5 dst=195.200.84.3 sport=1048 dport=80 packets=4 bytes=356 src=192.168.100.1 dst=192.168.100.5 sport=3128 dport=1048 packets=3 bytes=128 [ASSURED] mark=0 secmark=0 use=1
tcp      6 49 TIME_WAIT src=192.168.100.2 dst=207.46.26.35 sport=1093 dport=1863 packets=10 bytes=522 src=207.46.26.35 dst=200.175.76.115 sport=1863 dport=1093 packets=6 bytes=477 [ASSURED] mark=0 secmark=0 use=1
udp      17 18 src=192.168.100.5 dst=192.168.100.255 sport=138 dport=138 packets=5 bytes=1145 [UNREPLIED] src=192.168.100.255 dst=192.168.100.5 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=192.168.100.10 dst=192.168.100.1 sport=33621 dport=22 packets=159 bytes=12364 src=192.168.100.1 dst=192.168.100.10 sport=22 dport=33621 packets=115 bytes=14770 [ASSURED] mark=0 secmark=0 use=1
udp      17 0 src=192.168.100.70 dst=192.168.100.255 sport=138 dport=138 packets=1 bytes=243 [UNREPLIED] src=192.168.100.255 dst=192.168.100.70 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431929 ESTABLISHED src=192.168.100.8 dst=200.175.5.234 sport=1034 dport=80 packets=3 bytes=301 src=192.168.100.1 dst=192.168.100.8 sport=3128 dport=1034 packets=2 bytes=88 [ASSURED] mark=0 secmark=0 use=1
udp      17 8 src=192.168.100.4 dst=192.168.100.255 sport=137 dport=137 packets=3 bytes=234 [UNREPLIED] src=192.168.100.255 dst=192.168.100.4 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 16 src=192.168.100.3 dst=200.175.89.139 sport=37231 dport=53 packets=1 bytes=64 src=200.175.89.139 dst=200.175.76.115 sport=53 dport=37231 packets=1 bytes=112 mark=0 secmark=0 use=1
udp      17 25 src=192.168.100.4 dst=192.168.100.255 sport=138 dport=138 packets=3 bytes=667 [UNREPLIED] src=192.168.100.255 dst=192.168.100.4 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 21 src=192.168.100.9 dst=200.175.89.139 sport=60363 dport=53 packets=1 bytes=67 src=200.175.89.139 dst=200.175.76.115 sport=53 dport=60363 packets=1 bytes=83 mark=0 secmark=0 use=1
udp      17 125 src=192.168.100.5 dst=200.175.89.139 sport=1025 dport=53 packets=7 bytes=470 src=200.175.89.139 dst=200.175.76.115 sport=53 dport=1024 packets=7 bytes=689 [ASSURED] mark=0 secmark=0 use=1
udp      17 27 src=192.168.100.52 dst=192.168.100.255 sport=137 dport=137 packets=176 bytes=16824 [UNREPLIED] src=192.168.100.255 dst=192.168.100.52 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 41 TIME_WAIT src=192.168.100.14 dst=200.143.88.59 sport=1061 dport=110 packets=8 bytes=393 src=200.143.88.59 dst=200.175.76.115 sport=110 dport=1061 packets=8 bytes=387 [ASSURED] mark=0 secmark=0 use=1
tcp      6 10 TIME_WAIT src=192.168.100.5 dst=64.4.21.61 sport=1051 dport=80 packets=7 bytes=1749 src=192.168.100.1 dst=192.168.100.5 sport=3128 dport=1051 packets=7 bytes=1905 [ASSURED] mark=0 secmark=0 use=1
udp      17 2 src=192.168.100.2 dst=192.168.100.1 sport=68 dport=67 packets=1 bytes=328 src=192.168.100.1 dst=192.168.100.2 sport=67 dport=68 packets=1 bytes=328 mark=0 secmark=0 use=1
udp      17 27 src=192.168.100.14 dst=192.168.100.255 sport=138 dport=138 packets=25 bytes=5622 [UNREPLIED] src=192.168.100.255 dst=192.168.100.14 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 46 TIME_WAIT src=192.168.100.7 dst=200.143.88.59 sport=4385 dport=110 packets=10 bytes=472 src=200.143.88.59 dst=200.175.76.115 sport=110 dport=4385 packets=9 bytes=445 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431986 ESTABLISHED src=192.168.100.3 dst=91.189.88.45 sport=44192 dport=80 packets=3 bytes=312 src=192.168.100.1 dst=192.168.100.3 sport=3128 dport=44192 packets=2 bytes=112 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431991 ESTABLISHED src=192.168.100.2 dst=207.46.108.24 sport=1039 dport=1863 packets=73 bytes=7215 src=207.46.108.24 dst=200.175.76.115 sport=1863 dport=1039 packets=68 bytes=19180 [ASSURED] mark=0 secmark=0 use=1
tcp      6 47 TIME_WAIT src=200.175.76.115 dst=69.25.20.193 sport=34938 dport=80 packets=6 bytes=568 src=69.25.20.193 dst=200.175.76.115 sport=80 dport=34938 packets=4 bytes=831 [ASSURED] mark=0 secmark=0 use=1
udp      17 152 src=192.168.100.14 dst=192.168.100.1 sport=1025 dport=53 packets=19 bytes=1266 src=192.168.100.1 dst=192.168.100.14 sport=53 dport=1025 packets=16 bytes=3373 [ASSURED] mark=0 secmark=0 use=1
udp      17 27 src=192.168.100.8 dst=192.168.100.1 sport=68 dport=67 packets=1 bytes=332 src=192.168.100.1 dst=192.168.100.8 sport=67 dport=68 packets=1 bytes=328 mark=0 secmark=0 use=1
udp      17 29 src=192.168.100.52 dst=192.168.100.255 sport=138 dport=138 packets=161 bytes=36892 [UNREPLIED] src=192.168.100.255 dst=192.168.100.52 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 27 src=192.168.100.199 dst=192.168.100.255 sport=138 dport=138 packets=38 bytes=8455 [UNREPLIED] src=192.168.100.255 dst=192.168.100.199 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 48 CLOSE_WAIT src=192.168.100.10 dst=140.90.128.70 sport=40690 dport=80 packets=4 bytes=425 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=40690 packets=3 bytes=164 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431997 ESTABLISHED src=192.168.100.14 dst=69.25.21.201 sport=1046 dport=443 packets=28 bytes=2343 src=69.25.21.201 dst=200.175.76.115 sport=443 dport=1046 packets=16 bytes=2463 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431889 ESTABLISHED src=192.168.100.2 dst=207.46.28.81 sport=1095 dport=80 packets=3 bytes=736 src=192.168.100.1 dst=192.168.100.2 sport=3128 dport=1095 packets=2 bytes=88 [ASSURED] mark=0 secmark=0 use=1
tcp      6 111 TIME_WAIT src=192.168.100.2 dst=207.46.26.51 sport=1109 dport=1863 packets=9 bytes=475 src=207.46.26.51 dst=200.175.76.115 sport=1863 dport=1109 packets=6 bytes=477 [ASSURED] mark=0 secmark=0 use=1
udp      17 135 src=127.0.0.1 dst=127.0.0.1 sport=38166 dport=38166 packets=1 bytes=29 src=127.0.0.1 dst=127.0.0.1 sport=38166 dport=38166 packets=641 bytes=315484 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431945 ESTABLISHED src=192.168.100.5 dst=208.53.158.75 sport=1054 dport=80 packets=3 bytes=316 src=192.168.100.1 dst=192.168.100.5 sport=3128 dport=1054 packets=2 bytes=88 [ASSURED] mark=0 secmark=0 use=1
udp      17 2 src=200.175.76.115 dst=75.125.29.226 sport=38420 dport=53 packets=1 bytes=78 src=75.125.29.226 dst=200.175.76.115 sport=53 dport=38420 packets=1 bytes=206 mark=0 secmark=0 use=1
udp      17 23 src=192.168.100.9 dst=192.168.100.255 sport=138 dport=138 packets=17 bytes=3812 [UNREPLIED] src=192.168.100.255 dst=192.168.100.9 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431993 ESTABLISHED src=192.168.100.2 dst=64.4.37.63 sport=1118 dport=1863 packets=6 bytes=348 src=64.4.37.63 dst=200.175.76.115 sport=1863 dport=1118 packets=4 bytes=396 [ASSURED] mark=0 secmark=0 use=1
tcp      6 109 TIME_WAIT src=192.168.100.7 dst=200.143.88.59 sport=4389 dport=110 packets=8 bytes=392 src=200.143.88.59 dst=200.175.76.115 sport=110 dport=4389 packets=8 bytes=387 [ASSURED] mark=0 secmark=0 use=1
udp      17 2 src=192.168.100.5 dst=192.168.100.1 sport=68 dport=67 packets=1 bytes=328 src=192.168.100.1 dst=192.168.100.5 sport=67 dport=68 packets=1 bytes=328 mark=0 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:02:b3:91:d1:fd brd ff:ff:ff:ff:ff:ff
    inet 192.168.100.1/24 brd 192.168.100.255 scope global eth0
    inet6 fe80::202:b3ff:fe91:d1fd/64 scope link 
       valid_lft forever preferred_lft forever
3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:19:5b:2f:68:4e brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.3/24 brd 192.168.1.255 scope global eth2
    inet6 fe80::219:5bff:fe2f:684e/64 scope link 
       valid_lft forever preferred_lft forever
4: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc pfifo_fast qlen 3
    link/ppp 
    inet 200.175.76.115 peer 200.175.64.1/32 scope global ppp0

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    330077     765      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    330077     765      0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:02:b3:91:d1:fd brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    596994     4899     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    349313     3672     0       0       0       0      
3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:19:5b:2f:68:4e brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    574622     6813     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    496611     5392     0       0       0       0      
4: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc pfifo_fast qlen 3
    link/ppp 
    RX: bytes  packets  errors  dropped overrun mcast   
    318529     4049     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    365467     4167     0       0       0       0      

/proc

   /proc/version = Linux version 2.6.24-16-server (buildd@palmer) (gcc version 4.2.3 (Ubuntu 4.2.3-2ubuntu7)) #1 SMP Thu Apr 10 13:58:00 UTC 2008
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/log_martians = 0
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0
   /proc/sys/net/ipv4/conf/ppp0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/ppp0/rp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/log_martians = 0

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

local 200.175.76.115 dev ppp0  proto kernel  scope host  src 200.175.76.115 
broadcast 192.168.100.0 dev eth0  proto kernel  scope link  src 192.168.100.1 
broadcast 192.168.1.0 dev eth2  proto kernel  scope link  src 192.168.1.3 
local 192.168.100.1 dev eth0  proto kernel  scope host  src 192.168.100.1 
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
local 192.168.1.3 dev eth2  proto kernel  scope host  src 192.168.1.3 
broadcast 192.168.100.255 dev eth0  proto kernel  scope link  src 192.168.100.1 
broadcast 192.168.1.255 dev eth2  proto kernel  scope link  src 192.168.1.3 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

200.175.64.1 dev ppp0  proto kernel  scope link  src 200.175.76.115 
192.168.100.0/24 dev eth0  proto kernel  scope link  src 192.168.100.1 
192.168.1.0/24 dev eth2  proto kernel  scope link  src 192.168.1.3 
default dev ppp0  scope link 

ARP

? (192.168.1.1) at 00:17:D0:10:EB:5D [ether] on eth2
? (192.168.100.8) at 00:50:70:E1:69:5F [ether] on eth0
? (192.168.100.2) at 00:50:70:E1:72:28 [ether] on eth0
? (192.168.100.9) at 00:0A:E6:FE:C3:B3 [ether] on eth0
? (192.168.100.7) at 00:16:CF:3A:70:E4 [ether] on eth0
? (192.168.100.3) at 00:11:5B:4A:9A:64 [ether] on eth0
? (192.168.100.14) at 00:0D:87:DE:EE:7E [ether] on eth0
? (192.168.100.4) at 00:E0:7D:FE:CE:BE [ether] on eth0
? (192.168.100.10) at 00:0A:E6:5D:CB:26 [ether] on eth0
? (192.168.100.5) at 00:11:5B:05:04:B2 [ether] on eth0

Modules

iptable_filter          3840  1 
iptable_mangle          3712  1 
iptable_nat             8324  1 
iptable_raw             3328  0 
ip_tables              14820  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_addrtype            2816  0 
ipt_ah                  2816  0 
ipt_CLUSTERIP           9604  0 
ipt_ecn                 3200  0 
ipt_ECN                 3840  0 
ipt_iprange             2688  1 
ipt_LOG                 7296  10 
ipt_MASQUERADE          4608  1 
ipt_NETMAP              2944  0 
ipt_owner               2944  0 
ipt_recent             10264  0 
ipt_REDIRECT            2944  7 
ipt_REJECT              5632  4 
ipt_SAME                3200  0 
ipt_tos                 2560  0 
ipt_TOS                 3200  0 
ipt_ttl                 2816  0 
ipt_TTL                 3200  0 
ipt_ULOG               10116  0 
nf_conntrack           66752  29 ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda     5888  1 nf_nat_amanda
nf_conntrack_ftp       10144  1 nf_nat_ftp
nf_conntrack_h323      51164  1 nf_nat_h323
nf_conntrack_ipv4      19080  17 iptable_nat
nf_conntrack_irc        7576  1 nf_nat_irc
nf_conntrack_netbios_ns     3840  0 
nf_conntrack_netlink    28800  0 
nf_conntrack_pptp       8064  1 nf_nat_pptp
nf_conntrack_proto_gre     7040  1 nf_conntrack_pptp
nf_conntrack_proto_sctp     9864  0 
nf_conntrack_sip       10132  1 nf_nat_sip
nf_conntrack_tftp       6036  1 nf_nat_tftp
nf_nat                 20268  14 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_netlink,iptable_nat
nf_nat_amanda           3328  0 
nf_nat_ftp              4352  0 
nf_nat_h323             8576  0 
nf_nat_irc              3712  0 
nf_nat_pptp             4608  0 
nf_nat_proto_gre        3716  1 nf_nat_pptp
nf_nat_sip              5760  0 
nf_nat_snmp_basic      11012  0 
nf_nat_tftp             2816  0 
xt_CLASSIFY             2688  0 
xt_comment              2688  0 
xt_connmark             3200  0 
xt_CONNMARK             4224  0 
xt_conntrack            3712  0 
xt_dccp                 4356  0 
xt_hashlimit           11276  0 
xt_helper               3584  0 
xt_length               2816  0 
xt_limit                3584  0 
xt_mac                  2816  43 
xt_mark                 2816  0 
xt_MARK                 3200  0 
xt_multiport            4224  4 
xt_NFLOG                2944  0 
xt_NFQUEUE              2816  0 
xt_physdev              3600  0 
xt_pkttype              2816  4 
xt_policy               4736  0 
xt_state                3328  15 
xt_tcpmss               3200  0 
xt_TCPMSS               5504  0 
xt_tcpudp               4096  96 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   Ipset Match: Not available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Available
   MARK Target: Available
   Extended MARK Target: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available

Traffic Control

Device eth0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 349313 bytes 3672 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth2:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 496611 bytes 5392 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device ppp0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 365413 bytes 4164 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


TC Filters

Device eth0:

Device eth2:

Device ppp0:

