Shorewall 4.0.6 Dump at fire - Qui Out  2 14:00:00 BRT 2008

   Shorewall-shell 4.0.6

Counters reset Qui Out  2 13:42:16 BRT 2008

Chain INPUT (policy DROP 4 packets, 517 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  280  146K ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
17534   23M ppp0_in    all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
18503 1534K eth0_in    all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    1    78 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 1 packets, 60 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 3489 1086K ppp0_fwd   all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
 3798  248K eth0_fwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    2   120 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    2   120 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    2   120 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  280  146K ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
12669 1018K ppp0_out   all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
18572   23M eth0_out   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    1   106 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    5   568 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain Drop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain Reject (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
  185 14671 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
  185 14671 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
   11  1214 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
   48  2484 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain all2all (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  177 13905 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  151 12497 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:' 
  151 12497 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   21   840 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (4 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  460 26037 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 3796  248K loc2net    all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           

Chain eth0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 2027  295K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
18503 1534K loc2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
18572   23M fw2loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
18560   23M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    1    48 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
   11  2536 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
12183  985K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  227 16995 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
  257 15420 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    2   120 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2net:ACCEPT:' 
    2   120 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
16476 1239K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    3   126 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
 1754  280K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    1    60 ACCEPT     tcp  --  *      *       192.168.100.10       0.0.0.0/0           tcp dpt:1863 
    1    60 ACCEPT     tcp  --  *      *       192.168.100.10       0.0.0.0/0           tcp dpts:25000:30000 
    2   120 ACCEPT     tcp  --  *      *       192.168.100.3        0.0.0.0/0           tcp dpt:3128 
    1    48 ACCEPT     tcp  --  *      *       192.168.100.4        0.0.0.0/0           tcp dpt:3128 
    0     0 ACCEPT     tcp  --  *      *       192.168.100.8        0.0.0.0/0           tcp dpt:3128 
    0     0 ACCEPT     tcp  --  *      *       192.168.100.9        0.0.0.0/0           tcp dpt:3128 
    1    48 ACCEPT     tcp  --  *      *       192.168.100.14       0.0.0.0/0           tcp dpt:3128 
  264 14732 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3128 
    0     0 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 3338  222K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   55  2613 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           source IP range 192.168.100.100-192.168.100.200 
    1    57 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:72:28 
  107  7071 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:5D:CB:26 
    9   540 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:1863 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 udp dpt:1863 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:443 
    4   296 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:25 
    2   120 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:4A:9A:64 tcp dpt:110 
    1    70 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:E0:7D:FE:CE:BE udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:E0:7D:FE:CE:BE tcp dpt:53 
    2   120 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:05:04:B2 
    3   168 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:89:C5:B6 
   41  2010 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:16:CF:3A:70:E4 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:1863 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F udp dpt:1863 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:443 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:25 
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:70:E1:69:5F tcp dpt:110 
    1    45 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:1863 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 udp dpt:1863 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:443 
    4   268 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:25 
   18   864 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0A:E6:FE:C3:B3 tcp dpt:110 
   23  1214 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:11:5B:78:98:08 
    6   360 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:19:21:18:6C:6C 
    9   563 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:16:EC:1E:D9:83 
    2    96 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:1863 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E udp dpt:1863 
    3   173 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:443 
    7   336 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:25 
    1    67 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:87:DE:EE:7E tcp dpt:53 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:83:08:01:85:A9 
    1    64 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:02:A5:A0:18:DC udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:02:A5:A0:18:DC tcp dpt:53 
    2    96 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:02:A5:A0:18:DC tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:02:A5:A0:18:DC tcp dpt:25 
  155  8658 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logdrop:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logreject:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
17402   23M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  121  3454 reject     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:25000:30000 
   11  2711 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 3489 1086K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.10      tcp dpt:5900 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.10      tcp dpt:46010 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.100.10      udp dpt:46010 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.10      tcp dpt:5001 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.6       tcp dpt:5900 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.12      tcp dpt:38920 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.100.12      udp dpt:23169 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.100.16      tcp dpt:5900 
    0     0 all2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ppp0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 3489 1086K net2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain ppp0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  132  6165 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
17534   23M net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ppp0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
12669 1018K fw2net     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain reject (12 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
   48  2484 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
   35  6487 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
  202  8314 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       192.168.100.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       192.168.100.255      0.0.0.0/0           
    0     0 LOG        all  --  *      *       255.255.255.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 LOG        all  --  *      *       224.0.0.0/4          0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           

Log (/var/log/messages)

Oct  2 13:57:05 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.14 DST=209.62.112.162 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=523 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=4352 
Oct  2 13:57:27 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.16 DST=75.126.203.71 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=325 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=6144 
Oct  2 13:57:37 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.9 DST=74.55.53.66 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=54688 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=1026 
Oct  2 13:57:42 all2all:REJECT:IN=ppp0 OUT= SRC=202.97.238.231 DST=200.175.82.183 LEN=428 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=56645 DPT=1027 LEN=408 
Oct  2 13:57:45 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.14 DST=209.62.112.114 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=531 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=4608 
Oct  2 13:58:07 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.16 DST=75.126.203.72 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=338 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=6400 
Oct  2 13:58:17 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.9 DST=74.55.74.110 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=55209 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=1282 
Oct  2 13:58:25 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.14 DST=209.62.112.146 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=541 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=4864 
Oct  2 13:58:47 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.16 DST=75.126.53.167 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=341 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=6656 
Oct  2 13:58:57 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.9 DST=74.55.28.194 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=55718 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=1538 
Oct  2 13:59:05 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.14 DST=75.126.203.73 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=583 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=5120 
Oct  2 13:59:21 all2all:REJECT:IN= OUT=eth0 SRC=192.168.100.1 DST=192.168.100.5 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=67 DPT=68 LEN=308 
Oct  2 13:59:24 all2all:REJECT:IN= OUT=eth0 SRC=192.168.100.1 DST=192.168.100.5 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=67 DPT=68 LEN=308 
Oct  2 13:59:27 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.16 DST=75.126.53.169 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=359 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=6912 
Oct  2 13:59:32 FORWARD:REJECT:IN=eth0 OUT=eth2 SRC=192.168.100.5 DST=200.175.89.139 LEN=50 TOS=0x00 PREC=0x00 TTL=127 ID=31 PROTO=UDP SPT=1031 DPT=53 LEN=30 
Oct  2 13:59:35 FORWARD:REJECT:IN=eth0 OUT=eth2 SRC=192.168.100.5 DST=200.175.89.139 LEN=70 TOS=0x00 PREC=0x00 TTL=127 ID=36 PROTO=UDP SPT=1031 DPT=53 LEN=50 
Oct  2 13:59:37 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.9 DST=74.55.53.82 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=56241 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=1794 
Oct  2 13:59:45 all2all:REJECT:IN=eth0 OUT=ppp0 SRC=192.168.100.14 DST=209.62.112.210 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=608 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=5376 
Oct  2 13:59:58 fw2net:ACCEPT:IN= OUT=ppp0 SRC=201.22.214.248 DST=65.54.239.140 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=9057 DF PROTO=TCP SPT=38630 DPT=1863 WINDOW=5808 RES=0x00 SYN URGP=0 
Oct  2 14:00:00 fw2net:ACCEPT:IN= OUT=ppp0 SRC=201.22.214.248 DST=207.46.111.42 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=62877 DF PROTO=TCP SPT=39201 DPT=1863 WINDOW=5808 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 758 packets, 73094 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  129  6045 net_dnat   all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
  895 81690 loc_dnat   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 551 packets, 35736 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  751 48238 ppp0_masq  all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 519 packets, 36920 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain loc_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    60 REDIRECT   tcp  --  *      *       192.168.100.10       0.0.0.0/0           tcp dpt:1863 redir ports 1863 
    2   120 REDIRECT   tcp  --  *      *       192.168.100.3        0.0.0.0/0           tcp dpt:80 redir ports 3128 
    1    48 REDIRECT   tcp  --  *      *       192.168.100.4        0.0.0.0/0           tcp dpt:80 redir ports 3128 
    0     0 REDIRECT   tcp  --  *      *       192.168.100.8        0.0.0.0/0           tcp dpt:80 redir ports 3128 
    0     0 REDIRECT   tcp  --  *      *       192.168.100.9        0.0.0.0/0           tcp dpt:80 redir ports 3128 
    1    48 REDIRECT   tcp  --  *      *       192.168.100.14       0.0.0.0/0           tcp dpt:80 redir ports 3128 
  264 14732 REDIRECT   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 redir ports 3128 

Chain net_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5900 to:192.168.100.10:5900 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:46010 to:192.168.100.10:46010 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:46010 to:192.168.100.10:46010 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5001 to:192.168.100.10:5001 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5901 to:192.168.100.6:5900 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:38920 to:192.168.100.12:38920 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:23169 to:192.168.100.12:23169 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:5902 to:192.168.100.16:5900 

Chain ppp0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  265 15703 MASQUERADE  all  --  *      *       192.168.100.0/24     0.0.0.0/0           

Mangle Table

Chain PREROUTING (policy ACCEPT 43695 packets, 26M bytes)
 pkts bytes target     prot opt in     out     source               destination         
43607   26M tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 36394 packets, 25M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 7301 packets, 1336K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    2    96 TCPMSS     tcp  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 tcpmss match 1400:1536 TCPMSS clamp to PMTU 
 7289 1334K tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 3808K packets, 3147M bytes)
 pkts bytes target     prot opt in     out     source               destination         
31528   24M tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 38709 packets, 26M bytes)
 pkts bytes target     prot opt in     out     source               destination         
38644   26M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table

tcp      6 431970 ESTABLISHED src=200.175.82.183 dst=87.117.229.125 sport=41412 dport=80 packets=1054 bytes=56696 src=87.117.229.125 dst=200.175.82.183 sport=80 dport=41412 packets=1474 bytes=2128168 [ASSURED] mark=0 secmark=0 use=1
tcp      6 12 TIME_WAIT src=200.175.82.183 dst=209.85.133.83 sport=45008 dport=80 packets=7 bytes=2099 src=209.85.133.83 dst=200.175.82.183 sport=80 dport=45008 packets=7 bytes=651 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=201.22.214.248 dst=207.46.111.42 sport=39201 dport=1863 packets=6 bytes=472 src=207.46.111.42 dst=201.22.214.248 sport=1863 dport=39201 packets=4 bytes=603 [ASSURED] mark=0 secmark=0 use=1
tcp      6 38 TIME_WAIT src=200.175.82.183 dst=209.85.133.18 sport=46817 dport=80 packets=6 bytes=1986 src=209.85.133.18 dst=200.175.82.183 sport=80 dport=46817 packets=6 bytes=1710 [ASSURED] mark=0 secmark=0 use=1
tcp      6 114 TIME_WAIT src=192.168.100.10 dst=192.168.100.1 sport=46999 dport=27115 packets=1298 bytes=71389 src=192.168.100.1 dst=192.168.100.10 sport=27115 dport=46999 packets=1297 bytes=123174 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431924 ESTABLISHED src=192.168.100.10 dst=192.168.100.1 sport=45055 dport=80 packets=6 bytes=924 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=45055 packets=5 bytes=3507 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431964 ESTABLISHED src=200.175.82.183 dst=207.46.109.108 sport=58194 dport=1863 packets=1290 bytes=71326 src=207.46.109.108 dst=200.175.82.183 sport=1863 dport=58194 packets=759 bytes=96026 [ASSURED] mark=0 secmark=0 use=1
udp      17 26 src=192.168.100.2 dst=192.168.100.255 sport=138 dport=138 packets=8 bytes=1778 [UNREPLIED] src=192.168.100.255 dst=192.168.100.2 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 71 TIME_WAIT src=192.168.100.10 dst=209.85.133.19 sport=44220 dport=80 packets=6 bytes=1969 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=44220 packets=6 bytes=717 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431970 ESTABLISHED src=192.168.100.10 dst=87.117.229.125 sport=48363 dport=80 packets=1379 bytes=71970 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=48363 packets=1482 bytes=2127281 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=192.168.100.10 dst=192.168.100.1 sport=58355 dport=22 packets=5007 bytes=359916 src=192.168.100.1 dst=192.168.100.10 sport=22 dport=58355 packets=3476 bytes=787398 [ASSURED] mark=0 secmark=0 use=1
udp      17 15 src=192.168.100.12 dst=192.168.100.255 sport=138 dport=138 packets=5 bytes=1145 [UNREPLIED] src=192.168.100.255 dst=192.168.100.12 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 12 src=200.175.82.183 dst=200.175.89.139 sport=33989 dport=53 packets=75 bytes=4939 src=200.175.89.139 dst=200.175.82.183 sport=53 dport=33989 packets=75 bytes=8228 [ASSURED] mark=0 secmark=0 use=1
udp      17 28 src=192.168.100.5 dst=192.168.100.255 sport=138 dport=138 packets=7 bytes=1511 [UNREPLIED] src=192.168.100.255 dst=192.168.100.5 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 59 TIME_WAIT src=192.168.100.1 dst=192.168.100.1 sport=34210 dport=80 packets=8 bytes=2393 src=192.168.100.1 dst=192.168.100.1 sport=80 dport=34210 packets=7 bytes=7076 [ASSURED] mark=0 secmark=0 use=1
udp      17 8 src=201.22.214.248 dst=200.175.89.139 sport=33989 dport=53 packets=1 bytes=70 src=200.175.89.139 dst=201.22.214.248 sport=53 dport=33989 packets=1 bytes=134 mark=0 secmark=0 use=1
tcp      6 431924 ESTABLISHED src=192.168.100.10 dst=192.168.100.1 sport=45056 dport=80 packets=4 bytes=808 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=45056 packets=3 bytes=474 [ASSURED] mark=0 secmark=0 use=1
udp      17 27 src=192.168.100.10 dst=200.175.89.139 sport=39552 dport=53 packets=1 bytes=67 src=200.175.89.139 dst=201.22.214.248 sport=53 dport=39552 packets=1 bytes=176 mark=0 secmark=0 use=1
tcp      6 102 TIME_WAIT src=192.168.100.7 dst=200.143.88.59 sport=1931 dport=110 packets=8 bytes=392 src=200.143.88.59 dst=201.22.214.248 sport=110 dport=1931 packets=8 bytes=387 [ASSURED] mark=0 secmark=0 use=1
tcp      6 119 TIME_WAIT src=192.168.100.10 dst=65.54.239.140 sport=49245 dport=1863 packets=7 bytes=524 src=192.168.100.1 dst=192.168.100.10 sport=1863 dport=49245 packets=9 bytes=718 [ASSURED] mark=0 secmark=0 use=1
tcp      6 59 TIME_WAIT src=192.168.100.1 dst=192.168.100.1 sport=49025 dport=80 packets=5 bytes=922 src=192.168.100.1 dst=192.168.100.1 sport=80 dport=49025 packets=5 bytes=493 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431978 ESTABLISHED src=201.22.214.248 dst=65.55.192.93 sport=42058 dport=80 packets=5 bytes=1838 src=65.55.192.93 dst=201.22.214.248 sport=80 dport=42058 packets=3 bytes=979 [ASSURED] mark=0 secmark=0 use=1
tcp      6 99 TIME_WAIT src=192.168.100.5 dst=65.55.192.93 sport=1034 dport=80 packets=6 bytes=1709 src=192.168.100.1 dst=192.168.100.5 sport=3128 dport=1034 packets=6 bytes=1132 [ASSURED] mark=0 secmark=0 use=1
tcp      6 71 TIME_WAIT src=200.175.82.183 dst=209.85.133.83 sport=47278 dport=80 packets=7 bytes=2099 src=209.85.133.83 dst=200.175.82.183 sport=80 dport=47278 packets=7 bytes=651 [ASSURED] mark=0 secmark=0 use=1
udp      17 158 src=192.168.100.5 dst=200.175.89.139 sport=1031 dport=53 packets=2 bytes=120 src=200.175.89.139 dst=201.22.214.248 sport=53 dport=1031 packets=2 bytes=259 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431924 ESTABLISHED src=192.168.100.10 dst=192.168.100.1 sport=45054 dport=80 packets=8 bytes=2195 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=45054 packets=7 bytes=4404 [ASSURED] mark=0 secmark=0 use=1
udp      17 28 src=192.168.100.52 dst=192.168.100.255 sport=137 dport=137 packets=421 bytes=40272 [UNREPLIED] src=192.168.100.255 dst=192.168.100.52 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 18 src=192.168.100.14 dst=192.168.100.255 sport=138 dport=138 packets=49 bytes=11118 [UNREPLIED] src=192.168.100.255 dst=192.168.100.14 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 119 TIME_WAIT src=201.22.214.248 dst=65.54.239.140 sport=38630 dport=1863 packets=8 bytes=576 src=65.54.239.140 dst=201.22.214.248 sport=1863 dport=38630 packets=6 bytes=565 [ASSURED] mark=0 secmark=0 use=1
udp      17 7 src=192.168.100.5 dst=192.168.100.255 sport=137 dport=137 packets=10 bytes=852 [UNREPLIED] src=192.168.100.255 dst=192.168.100.5 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431950 ESTABLISHED src=200.175.82.183 dst=209.85.133.19 sport=36504 dport=80 packets=6 bytes=1899 src=209.85.133.19 dst=200.175.82.183 sport=80 dport=36504 packets=5 bytes=534 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431924 ESTABLISHED src=192.168.100.10 dst=192.168.100.1 sport=45057 dport=80 packets=4 bytes=808 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=45057 packets=3 bytes=474 [ASSURED] mark=0 secmark=0 use=1
tcp      6 11 TIME_WAIT src=192.168.100.10 dst=209.85.133.19 sport=44213 dport=80 packets=6 bytes=1969 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=44213 packets=6 bytes=717 [ASSURED] mark=0 secmark=0 use=1
udp      17 164 src=192.168.100.14 dst=192.168.100.1 sport=1025 dport=53 packets=31 bytes=2088 src=192.168.100.1 dst=192.168.100.14 sport=53 dport=1025 packets=30 bytes=5699 [ASSURED] mark=0 secmark=0 use=1
udp      17 28 src=201.22.214.248 dst=200.175.89.139 sport=32851 dport=53 packets=1 bytes=67 src=200.175.89.139 dst=201.22.214.248 sport=53 dport=32851 packets=1 bytes=176 mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=192.168.100.10 dst=192.168.100.1 sport=56448 dport=25096 packets=6 bytes=472 src=192.168.100.1 dst=192.168.100.10 sport=25096 dport=56448 packets=7 bytes=755 [ASSURED] mark=0 secmark=0 use=1
tcp      6 55 CLOSE_WAIT src=192.168.100.10 dst=209.85.133.19 sport=44214 dport=80 packets=11 bytes=3654 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=44214 packets=10 bytes=2420 [ASSURED] mark=0 secmark=0 use=1
udp      17 24 src=192.168.100.15 dst=192.168.100.255 sport=138 dport=138 packets=8 bytes=1832 [UNREPLIED] src=192.168.100.255 dst=192.168.100.15 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 28 src=192.168.100.52 dst=192.168.100.255 sport=138 dport=138 packets=360 bytes=82169 [UNREPLIED] src=192.168.100.255 dst=192.168.100.52 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 40 TIME_WAIT src=200.175.82.183 dst=72.14.247.18 sport=36245 dport=80 packets=14 bytes=2314 src=72.14.247.18 dst=200.175.82.183 sport=80 dport=36245 packets=14 bytes=1149 [ASSURED] mark=0 secmark=0 use=1
udp      17 19 src=192.168.100.11 dst=192.168.100.255 sport=138 dport=138 packets=7 bytes=1603 [UNREPLIED] src=192.168.100.255 dst=192.168.100.11 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 18 src=192.168.100.199 dst=192.168.100.255 sport=138 dport=138 packets=64 bytes=14425 [UNREPLIED] src=192.168.100.255 dst=192.168.100.199 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 40 TIME_WAIT src=192.168.100.10 dst=72.14.247.18 sport=51518 dport=80 packets=18 bytes=4017 src=192.168.100.1 dst=192.168.100.10 sport=3128 dport=51518 packets=18 bytes=2985 [ASSURED] mark=0 secmark=0 use=1
tcp      6 60 TIME_WAIT src=192.168.100.1 dst=192.168.100.1 sport=52454 dport=80 packets=7 bytes=1680 src=192.168.100.1 dst=192.168.100.1 sport=80 dport=52454 packets=6 bytes=769 [ASSURED] mark=0 secmark=0 use=1
udp      17 172 src=127.0.0.1 dst=127.0.0.1 sport=38166 dport=38166 packets=1 bytes=29 src=127.0.0.1 dst=127.0.0.1 sport=38166 dport=38166 packets=8063 bytes=3959800 [ASSURED] mark=0 secmark=0 use=1
udp      17 26 src=192.168.100.9 dst=192.168.100.255 sport=138 dport=138 packets=1 bytes=229 [UNREPLIED] src=192.168.100.255 dst=192.168.100.9 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 103 TIME_WAIT src=192.168.100.7 dst=200.143.88.59 sport=1933 dport=110 packets=8 bytes=392 src=200.143.88.59 dst=201.22.214.248 sport=110 dport=1933 packets=8 bytes=387 [ASSURED] mark=0 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:02:b3:91:d1:fd brd ff:ff:ff:ff:ff:ff
    inet 192.168.100.1/24 brd 192.168.100.255 scope global eth0
    inet6 fe80::202:b3ff:fe91:d1fd/64 scope link 
       valid_lft forever preferred_lft forever
3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:19:5b:2f:68:4e brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.3/24 brd 192.168.1.255 scope global eth2
    inet6 fe80::219:5bff:fe2f:684e/64 scope link 
       valid_lft forever preferred_lft forever
6: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc pfifo_fast qlen 3
    link/ppp 
    inet 201.22.214.248 peer 200.175.64.1/32 scope global ppp0

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    9120693    23199    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    9120693    23199    0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:02:b3:91:d1:fd brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    235039172  1966550  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    3242268544 2679929  0       0       0       0      
3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:19:5b:2f:68:4e brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    3164724195 2496845  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    209066305  1804421  0       0       0       0      
6: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc pfifo_fast qlen 3
    link/ppp 
    RX: bytes  packets  errors  dropped overrun mcast   
    3800       39       0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    4170       45       0       0       0       0      

/proc

   /proc/version = Linux version 2.6.24-16-server (buildd@palmer) (gcc version 4.2.3 (Ubuntu 4.2.3-2ubuntu7)) #1 SMP Thu Apr 10 13:58:00 UTC 2008
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/log_martians = 0
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0
   /proc/sys/net/ipv4/conf/ppp0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/ppp0/rp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/log_martians = 0

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

broadcast 192.168.100.0 dev eth0  proto kernel  scope link  src 192.168.100.1 
local 201.22.214.248 dev ppp0  proto kernel  scope host  src 201.22.214.248 
broadcast 192.168.1.0 dev eth2  proto kernel  scope link  src 192.168.1.3 
local 192.168.100.1 dev eth0  proto kernel  scope host  src 192.168.100.1 
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
local 192.168.1.3 dev eth2  proto kernel  scope host  src 192.168.1.3 
broadcast 192.168.100.255 dev eth0  proto kernel  scope link  src 192.168.100.1 
broadcast 192.168.1.255 dev eth2  proto kernel  scope link  src 192.168.1.3 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

200.175.64.1 dev ppp0  proto kernel  scope link  src 201.22.214.248 
192.168.100.0/24 dev eth0  proto kernel  scope link  src 192.168.100.1 
192.168.1.0/24 dev eth2  proto kernel  scope link  src 192.168.1.3 
default dev ppp0  scope link 

ARP

? (192.168.100.3) at 00:11:5B:4A:9A:64 [ether] on eth0
? (192.168.100.10) at 00:0A:E6:5D:CB:26 [ether] on eth0
? (192.168.100.16) at 00:02:A5:A0:18:DC [ether] on eth0
? (192.168.100.5) at 00:11:5B:05:04:B2 [ether] on eth0
? (192.168.100.14) at 00:0D:87:DE:EE:7E [ether] on eth0
? (192.168.100.9) at 00:0A:E6:FE:C3:B3 [ether] on eth0
? (192.168.100.7) at 00:16:CF:3A:70:E4 [ether] on eth0
? (192.168.100.12) at 00:19:21:18:6C:6C [ether] on eth0
? (192.168.100.2) at 00:50:70:E1:72:28 [ether] on eth0

Modules

iptable_filter          3840  1 
iptable_mangle          3712  1 
iptable_nat             8324  1 
iptable_raw             3328  0 
ip_tables              14820  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_addrtype            2816  0 
ipt_ah                  2816  0 
ipt_CLUSTERIP           9604  0 
ipt_ecn                 3200  0 
ipt_ECN                 3840  0 
ipt_iprange             2688  1 
ipt_LOG                 7296  10 
ipt_MASQUERADE          4608  1 
ipt_NETMAP              2944  0 
ipt_owner               2944  0 
ipt_recent             10264  0 
ipt_REDIRECT            2944  7 
ipt_REJECT              5632  4 
ipt_SAME                3200  0 
ipt_tos                 2560  0 
ipt_TOS                 3200  0 
ipt_ttl                 2816  0 
ipt_TTL                 3200  0 
ipt_ULOG               10116  0 
nf_conntrack           66752  29 ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda     5888  1 nf_nat_amanda
nf_conntrack_ftp       10144  1 nf_nat_ftp
nf_conntrack_h323      51164  1 nf_nat_h323
nf_conntrack_ipv4      19080  17 iptable_nat
nf_conntrack_irc        7576  1 nf_nat_irc
nf_conntrack_netbios_ns     3840  0 
nf_conntrack_netlink    28800  0 
nf_conntrack_pptp       8064  1 nf_nat_pptp
nf_conntrack_proto_gre     7040  1 nf_conntrack_pptp
nf_conntrack_proto_sctp     9864  0 
nf_conntrack_sip       10132  1 nf_nat_sip
nf_conntrack_tftp       6036  1 nf_nat_tftp
nf_nat                 20268  14 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_netlink,iptable_nat
nf_nat_amanda           3328  0 
nf_nat_ftp              4352  0 
nf_nat_h323             8576  0 
nf_nat_irc              3712  0 
nf_nat_pptp             4608  0 
nf_nat_proto_gre        3716  1 nf_nat_pptp
nf_nat_sip              5760  0 
nf_nat_snmp_basic      11012  0 
nf_nat_tftp             2816  0 
xt_CLASSIFY             2688  0 
xt_comment              2688  0 
xt_connmark             3200  0 
xt_CONNMARK             4224  0 
xt_conntrack            3712  0 
xt_dccp                 4356  0 
xt_hashlimit           11276  0 
xt_helper               3584  0 
xt_length               2816  0 
xt_limit                3584  0 
xt_mac                  2816  43 
xt_mark                 2816  0 
xt_MARK                 3200  0 
xt_multiport            4224  4 
xt_NFLOG                2944  0 
xt_NFQUEUE              2816  0 
xt_physdev              3600  0 
xt_pkttype              2816  4 
xt_policy               4736  0 
xt_state                3328  15 
xt_tcpmss               3200  1 
xt_TCPMSS               5504  1 
xt_tcpudp               4096  85 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   Ipset Match: Not available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Available
   MARK Target: Available
   Extended MARK Target: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available

Traffic Control

Device eth0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 3242272613 bytes 2679939 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth2:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 209067972 bytes 1804437 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device ppp0:
qdisc pfifo_fast 0: root bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 5483 bytes 59 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


TC Filters

Device eth0:

Device eth2:

Device ppp0:

