Shorewall 4.4.14 Dump at platlnxrtr2.canfor.ca - Fri Nov 12 08:55:55 PST 2010

Counters reset Fri Nov 12 08:54:17 PST 2010

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
28983 9162K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
  191 15279 net2fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
   48 11507 eth1.4_in  all  --  eth1.4 *       0.0.0.0/0            0.0.0.0/0           
  178 14842 eth1.5_in  all  --  eth1.5 *       0.0.0.0/0            0.0.0.0/0           
25167 7984K eth1.2_in  all  --  eth1.2 *       0.0.0.0/0            0.0.0.0/0           
 3554 1148K eth1.3_in  all  --  eth1.3 *       0.0.0.0/0            0.0.0.0/0           
   25  3787 vpn2fw     all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    4   240 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 net_frwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1.4_fwd  all  --  eth1.4 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1.5_fwd  all  --  eth1.5 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1.2_fwd  all  --  eth1.2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1.3_fwd  all  --  eth1.3 *       0.0.0.0/0            0.0.0.0/0           
    4   240 vpn_frwd   all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  173 15288 fw2net     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 fw2proc    all  --  *      eth1.4  0.0.0.0/0            0.0.0.0/0           
    0     0 fw2proc    all  --  *      eth1.5  0.0.0.0/0            0.0.0.0/0           
    4   674 fw2corp    all  --  *      eth1.2  0.0.0.0/0            0.0.0.0/0           
    0     0 fw2corp    all  --  *      eth1.3  0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vpn     all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain Drop (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    1   118            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
    1   118 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain Reject (10 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain corp2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    3  1733 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 /* SSH */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
  108 11065 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain corp2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:corp2net:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain corp2proc (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:corp2proc:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain corp2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:corp2vpn:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain corp_frwd (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 corp2net   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 corp2proc  all  --  *      eth1.4  0.0.0.0/0            0.0.0.0/0           
    0     0 corp2proc  all  --  *      eth1.5  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth1.2  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth1.3  0.0.0.0/0            0.0.0.0/0           
    0     0 corp2vpn   all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    1   118 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth1.2_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 corp_frwd  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1.2_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
25131 7978K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    4  1773 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   36  5753 corp2fw    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1.3_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 corp_frwd  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1.3_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 3479 1141K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   75  7045 corp2fw    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1.4_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 proc_frwd  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1.4_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   48 11507 proc2fw    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1.5_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 proc_frwd  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1.5_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  178 14842 proc2fw    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2corp (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    4   674 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  169 14984 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
    4   304 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2proc (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2corp (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2corp:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   14   906 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
  126  7848 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  177 14373 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       199.60.230.0/27      0.0.0.0/0           tcp dpt:22 /* SSH */ 
    0     0 ACCEPT     tcp  --  *      *       204.244.116.0/24     0.0.0.0/0           tcp dpt:22 /* SSH */ 
    0     0 ACCEPT     tcp  --  *      *       204.244.152.0/24     0.0.0.0/0           tcp dpt:22 /* SSH */ 
    0     0 ACCEPT     tcp  --  *      *       65.38.34.0/24        0.0.0.0/0           tcp dpt:22 /* SSH */ 
    0     0 ACCEPT     tcp  --  *      *       209.53.153.0/24      0.0.0.0/0           tcp dpt:22 /* SSH */ 
    0     0 ACCEPT     icmp --  *      *       199.60.230.0/27      0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     icmp --  *      *       204.244.116.0/24     0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     icmp --  *      *       204.244.152.0/24     0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     icmp --  *      *       65.38.34.0/24        0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     icmp --  *      *       209.53.153.0/24      0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     tcp  --  *      *       65.38.34.0/24        0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       204.244.116.0/24     0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       204.244.81.0/24      0.0.0.0/0           tcp dpt:1723 
    1    48 ACCEPT     tcp  --  *      *       204.244.152.0/24     0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       204.92.63.203        0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       209.5.119.80/28      0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       209.52.125.67        0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       24.71.52.24          0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       24.71.81.38          0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       70.68.160.201        0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       70.68.175.1          0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       69.70.66.195         0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       24.207.7.24/29       0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       75.155.216.223       0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       142.179.111.69       0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       75.155.119.101       0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       24.67.32.60          0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       209.121.50.104       0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       75.155.114.0/24      0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       209.52.125.0/24      0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       206.16.98.110        0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       70.78.213.35         0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       64.253.156.46        0.0.0.0/0           tcp dpt:1723 
   12   740 ACCEPT     47   --  *      *       65.38.34.0/24        0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       204.244.116.0/24     0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       204.244.81.0/24      0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       204.244.152.0/24     0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       204.92.63.203        0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       209.5.119.80/28      0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       209.52.125.67        0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       24.71.52.24          0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       24.71.81.38          0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       70.68.160.201        0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       70.68.175.1          0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       69.70.66.195         0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       24.207.7.24/29       0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       75.155.216.223       0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       142.179.111.69       0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       75.155.119.101       0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       24.67.32.60          0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       209.121.50.104       0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       75.155.114.0/24      0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       209.52.125.0/24      0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       206.16.98.110        0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       70.78.213.35         0.0.0.0/0           
    0     0 ACCEPT     47   --  *      *       64.253.156.46        0.0.0.0/0           
    1   118 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2fw:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2proc (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2proc:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2vpn:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 net2proc   all  --  *      eth1.4  0.0.0.0/0            0.0.0.0/0           
    0     0 net2proc   all  --  *      eth1.5  0.0.0.0/0            0.0.0.0/0           
    0     0 net2corp   all  --  *      eth1.2  0.0.0.0/0            0.0.0.0/0           
    0     0 net2corp   all  --  *      eth1.3  0.0.0.0/0            0.0.0.0/0           
    0     0 net2vpn    all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain proc2corp (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:proc2corp:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain proc2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
  226 26349 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain proc2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:proc2net:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain proc2vpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain proc_frwd (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 proc2net   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth1.4  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth1.5  0.0.0.0/0            0.0.0.0/0           
    0     0 proc2corp  all  --  *      eth1.2  0.0.0.0/0            0.0.0.0/0           
    0     0 proc2corp  all  --  *      eth1.3  0.0.0.0/0            0.0.0.0/0           
    0     0 proc2vpn   all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           

Chain reject (17 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurflog (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain smurfs (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 smurflog   all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] ADDRTYPE match src-type BROADCAST 
    0     0 smurflog   all  --  *      *       224.0.0.0/4          0.0.0.0/0           [goto] 

Chain tcpflags (10 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp spt:0 flags:0x17/0x02 

Chain vpn2corp (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2corp:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain vpn2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
   25  3787 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2net:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain vpn2proc (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    4   240 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 vpn2net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    4   240 vpn2proc   all  --  *      eth1.4  0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2proc   all  --  *      eth1.5  0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2corp   all  --  *      eth1.2  0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2corp   all  --  *      eth1.3  0.0.0.0/0            0.0.0.0/0           

Log (/var/log/messages)

Nov 11 17:04:00 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62276 DF PROTO=TCP SPT=4159 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:04:01 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62279 DF PROTO=TCP SPT=4159 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:04:27 net2fw:DROP:IN=eth0 OUT= SRC=66.131.51.214 DST=209.53.153.50 LEN=61 TOS=0x00 PREC=0x00 TTL=120 ID=31661 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=64466 
Nov 11 17:04:29 net2fw:DROP:IN=eth0 OUT= SRC=66.131.51.214 DST=209.53.153.50 LEN=61 TOS=0x00 PREC=0x00 TTL=120 ID=31895 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=56531 
Nov 11 17:04:30 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62525 DF PROTO=TCP SPT=4359 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:04:30 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62528 DF PROTO=TCP SPT=4359 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:04:31 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62531 DF PROTO=TCP SPT=4359 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:12:59 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.122 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=640 DF PROTO=TCP SPT=3047 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:12:59 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.239.211.217 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=670 DF PROTO=TCP SPT=3048 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:13:00 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.122 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=706 DF PROTO=TCP SPT=3047 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:13:00 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.239.211.217 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=724 DF PROTO=TCP SPT=3048 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:13:01 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.122 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=727 DF PROTO=TCP SPT=3047 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:13:01 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.239.211.217 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=728 DF PROTO=TCP SPT=3048 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:09 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1475 DF PROTO=TCP SPT=3440 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:10 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1478 DF PROTO=TCP SPT=3440 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:10 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1481 DF PROTO=TCP SPT=3440 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:30 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1613 DF PROTO=TCP SPT=3548 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:30 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1616 DF PROTO=TCP SPT=3548 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:31 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1619 DF PROTO=TCP SPT=3548 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:16:18 net2fw:DROP:IN=eth0 OUT= SRC=124.237.78.187 DST=209.53.153.50 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=1080 WINDOW=16384 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 94 packets, 17926 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 5 packets, 364 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 4 packets, 304 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Mangle Table

Chain PREROUTING (policy ACCEPT 29200 packets, 9188K bytes)
 pkts bytes target     prot opt in     out     source               destination         
27967 8863K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
   18  3536 routemark  all  --  eth1.2 *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
    9   632 routemark  all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
25176 7987K tcpre      all  --  eth1.2 *       0.0.0.0/0            0.0.0.0/0           
  191 15279 tcpre      all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
 1206  320K tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain INPUT (policy ACCEPT 29172 packets, 9181K bytes)
 pkts bytes target     prot opt in     out     source               destination         
29172 9181K tcin       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 4 packets, 240 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    4   240 MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK set 0x0 
    4   240 tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 177 packets, 15962 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  170 15394 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
    7   568 tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain POSTROUTING (policy ACCEPT 181 packets, 16202 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  181 16202 tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain routemark (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   18  3536 MARK       all  --  eth1.2 *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 
    9   632 MARK       all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
   27  4168 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match !0x0/0xff CONNMARK save mask 0xff 

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (3 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 29200 packets, 9188K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 177 packets, 15962 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table ( out of )

udp      17 9 src=10.1.19.52 dst=10.1.19.255 sport=138 dport=138 packets=1 bytes=250 [UNREPLIED] src=10.1.19.255 dst=10.1.19.52 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 27 src=10.1.20.139 dst=10.1.20.255 sport=138 dport=138 packets=1 bytes=240 [UNREPLIED] src=10.1.20.255 dst=10.1.20.139 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 6 src=10.1.16.103 dst=10.1.16.255 sport=138 dport=138 packets=1 bytes=229 [UNREPLIED] src=10.1.16.255 dst=10.1.16.103 sport=138 dport=138 packets=0 bytes=0 mark=1 secmark=0 use=1
udp      17 29 src=10.1.16.2 dst=255.255.255.255 sport=67 dport=68 packets=18736 bytes=6202714 [UNREPLIED] src=255.255.255.255 dst=10.1.16.2 sport=68 dport=67 packets=0 bytes=0 mark=1 secmark=0 use=1
tcp      6 431982 ESTABLISHED src=204.244.152.130 dst=209.53.153.50 sport=2035 dport=1723 packets=7 bytes=676 src=209.53.153.50 dst=204.244.152.130 sport=1723 dport=2035 packets=8 bytes=536 [ASSURED] mark=2 secmark=0 use=2
udp      17 28 src=10.1.17.120 dst=10.1.17.255 sport=137 dport=137 packets=51 bytes=3978 [UNREPLIED] src=10.1.17.255 dst=10.1.17.120 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 8 SYN_SENT src=10.1.19.248 dst=204.244.116.21 sport=1835 dport=993 packets=2 bytes=96 [UNREPLIED] src=204.244.116.21 dst=10.1.19.248 sport=993 dport=1835 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431825 ESTABLISHED src=10.1.16.22 dst=10.1.16.2 sport=50761 dport=49155 packets=2 bytes=248 src=10.1.16.2 dst=10.1.16.22 sport=49155 dport=50761 packets=1 bytes=300 [ASSURED] mark=0 secmark=0 use=1
udp      17 18 src=10.1.19.210 dst=10.1.19.255 sport=138 dport=138 packets=1 bytes=229 [UNREPLIED] src=10.1.19.255 dst=10.1.19.210 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 23 src=10.1.20.138 dst=10.1.20.255 sport=137 dport=137 packets=56 bytes=4368 [UNREPLIED] src=10.1.20.255 dst=10.1.20.138 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 29 src=10.1.16.1 dst=255.255.255.255 sport=67 dport=68 packets=18736 bytes=6202714 [UNREPLIED] src=255.255.255.255 dst=10.1.16.1 sport=68 dport=67 packets=0 bytes=0 mark=1 secmark=0 use=1
udp      17 16 src=10.1.17.175 dst=10.1.17.255 sport=137 dport=137 packets=1 bytes=78 [UNREPLIED] src=10.1.17.255 dst=10.1.17.175 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 28 src=10.1.19.71 dst=10.1.19.255 sport=137 dport=137 packets=1 bytes=78 [UNREPLIED] src=10.1.19.255 dst=10.1.19.71 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 28 src=10.1.19.4 dst=10.1.19.255 sport=137 dport=137 packets=1 bytes=78 [UNREPLIED] src=10.1.19.255 dst=10.1.19.4 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 10 src=10.1.16.21 dst=10.1.16.255 sport=138 dport=138 packets=1 bytes=270 [UNREPLIED] src=10.1.16.255 dst=10.1.16.21 sport=138 dport=138 packets=0 bytes=0 mark=1 secmark=0 use=1
udp      17 23 src=10.1.20.139 dst=10.1.20.255 sport=137 dport=137 packets=56 bytes=4368 [UNREPLIED] src=10.1.20.255 dst=10.1.20.139 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 28 src=10.1.20.171 dst=10.1.20.255 sport=137 dport=137 packets=3 bytes=234 [UNREPLIED] src=10.1.20.255 dst=10.1.20.171 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431946 ESTABLISHED src=10.1.16.22 dst=10.1.16.2 sport=43439 dport=445 packets=7 bytes=1284 src=10.1.16.2 dst=10.1.16.22 sport=445 dport=43439 packets=5 bytes=3425 [ASSURED] mark=1 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=209.53.153.50 dst=65.38.34.15 sport=22 dport=3987 packets=213 bytes=21772 src=65.38.34.15 dst=209.53.153.50 sport=3987 dport=22 packets=264 bytes=16372 [ASSURED] mark=2 secmark=0 use=1
udp      17 24 src=10.1.16.109 dst=10.1.16.255 sport=138 dport=138 packets=1 bytes=262 [UNREPLIED] src=10.1.16.255 dst=10.1.16.109 sport=138 dport=138 packets=0 bytes=0 mark=1 secmark=0 use=1
udp      17 27 src=10.1.16.117 dst=10.1.16.255 sport=138 dport=138 packets=1 bytes=271 [UNREPLIED] src=10.1.16.255 dst=10.1.16.117 sport=138 dport=138 packets=0 bytes=0 mark=1 secmark=0 use=1
icmp     1 9 src=10.1.19.248 dst=10.1.19.4 type=8 code=0 id=1280 packets=4 bytes=240 [UNREPLIED] src=10.1.19.4 dst=10.1.19.248 type=0 code=0 id=1280 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431866 ESTABLISHED src=192.168.1.33 dst=204.244.116.122 sport=1505 dport=993 packets=21 bytes=1062 [UNREPLIED] src=204.244.116.122 dst=192.168.1.33 sport=993 dport=1505 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 10 src=10.1.19.252 dst=10.1.19.255 sport=138 dport=138 packets=1 bytes=270 [UNREPLIED] src=10.1.19.255 dst=10.1.19.252 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 10 src=10.1.20.252 dst=10.1.20.255 sport=138 dport=138 packets=1 bytes=270 [UNREPLIED] src=10.1.20.255 dst=10.1.20.252 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 9 src=10.1.17.136 dst=10.1.17.255 sport=138 dport=138 packets=1 bytes=272 [UNREPLIED] src=10.1.17.255 dst=10.1.17.136 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 30 src=0.0.0.0 dst=255.255.255.255 sport=68 dport=67 packets=25002 bytes=7501634 [UNREPLIED] src=255.255.255.255 dst=0.0.0.0 sport=67 dport=68 packets=0 bytes=0 mark=1 secmark=0 use=1
udp      17 25 src=10.1.19.187 dst=10.1.19.255 sport=138 dport=138 packets=1 bytes=229 [UNREPLIED] src=10.1.19.255 dst=10.1.19.187 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 18 src=10.1.16.113 dst=10.1.16.255 sport=138 dport=138 packets=1 bytes=271 [UNREPLIED] src=10.1.16.255 dst=10.1.16.113 sport=138 dport=138 packets=0 bytes=0 mark=1 secmark=0 use=1
tcp      6 9 TIME_WAIT src=65.38.34.15 dst=209.53.153.50 sport=1521 dport=1723 packets=10 bytes=836 src=209.53.153.50 dst=65.38.34.15 sport=1723 dport=1521 packets=12 bytes=696 [ASSURED] mark=0 secmark=0 use=1
gre      47 17979 timeout=600, stream_timeout=18000 src=209.53.153.50 dst=204.244.152.130 srckey=0x0 dstkey=0x7f3 packets=47 bytes=2059 src=204.244.152.130 dst=209.53.153.50 srckey=0x7f3 dstkey=0x0 packets=47 bytes=6212 [ASSURED] mark=2 secmark=0 use=1
udp      17 27 src=10.1.20.54 dst=10.1.20.255 sport=137 dport=137 packets=1 bytes=78 [UNREPLIED] src=10.1.20.255 dst=10.1.20.54 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 15 src=10.1.19.212 dst=10.1.19.255 sport=138 dport=138 packets=1 bytes=229 [UNREPLIED] src=10.1.19.255 dst=10.1.19.212 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 27 src=10.1.17.2 dst=255.255.255.255 sport=67 dport=68 packets=864 bytes=283392 [UNREPLIED] src=255.255.255.255 dst=10.1.17.2 sport=68 dport=67 packets=0 bytes=0 mark=0 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 209.53.153.50/24 brd 209.53.153.255 scope global eth0
5: eth1.2@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    inet 10.1.16.22/24 brd 10.1.16.255 scope global eth1.2
6: eth1.3@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    inet 10.1.17.1/24 brd 10.1.17.255 scope global eth1.3
7: eth1.4@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    inet 10.1.19.1/24 brd 10.1.19.255 scope global eth1.4
8: eth1.5@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    inet 10.1.20.1/24 brd 10.1.20.255 scope global eth1.5
12: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1396 qdisc pfifo_fast qlen 3
    inet 10.1.19.1 peer 10.1.19.248/32 scope global ppp0

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    4491972    2121     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    4491972    2121     0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:50:ba:40:29:1e brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    197710     2766     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    125322     920      0       0       0       0      
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    55170224   163867   0       0       0       146    
    TX: bytes  packets  errors  dropped carrier collsns 
    77211      438      0       0       0       0      
4: sit0: <NOARP> mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
5: eth1.2@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    45904140   145004   0       0       0       2      
    TX: bytes  packets  errors  dropped carrier collsns 
    46798      245      0       0       0       0      
6: eth1.3@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    5529840    17341    0       0       0       49     
    TX: bytes  packets  errors  dropped carrier collsns 
    7198       52       0       0       0       0      
7: eth1.4@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    75733      492      0       0       0       15     
    TX: bytes  packets  errors  dropped carrier collsns 
    7916       63       0       0       0       0      
8: eth1.5@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    86338      1077     0       0       0       21     
    TX: bytes  packets  errors  dropped carrier collsns 
    7198       52       0       0       0       0      
12: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1396 qdisc pfifo_fast qlen 3
    link/ppp 
    RX: bytes  packets  errors  dropped overrun mcast   
    4269       40       0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    114        9        0       0       0       0      

PFKEY SPD

No SPD entries.

PFKEY SAD

No SAD entries.

/proc

   /proc/version = Linux version 2.6.18-194.17.4.el5 (mockbuild@builder10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Mon Oct 25 15:51:07 EDT 2010
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1.2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1.2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1.2/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.2/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1.3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1.3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1.3/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.3/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1.4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1.4/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1.4/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.4/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1.5/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1.5/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.5/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1.5/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.5/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 1
   /proc/sys/net/ipv4/conf/ppp0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/ppp0/rp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/log_martians = 1

Routing Rules

0:	from all lookup 255 
1000:	from all iif eth1.2 lookup CORP 
1000:	from all iif eth1.3 lookup CORP 
1000:	from all iif eth1.4 lookup WRLS 
1000:	from all iif eth1.5 lookup WRLS 
10000:	from all fwmark 0x1 lookup CORP 
10001:	from all fwmark 0x2 lookup WRLS 
20000:	from 10.1.16.22 lookup CORP 
20256:	from 209.53.153.50 lookup WRLS 
32766:	from all lookup main 
32767:	from all lookup default 

Table 255:

broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 10.1.20.0 dev eth1.5  proto kernel  scope link  src 10.1.20.1 
local 10.1.20.1 dev eth1.5  proto kernel  scope host  src 10.1.20.1 
broadcast 10.1.19.255 dev eth1.4  proto kernel  scope link  src 10.1.19.1 
broadcast 10.1.17.255 dev eth1.3  proto kernel  scope link  src 10.1.17.1 
broadcast 10.1.16.0 dev eth1.2  proto kernel  scope link  src 10.1.16.22 
local 10.1.16.22 dev eth1.2  proto kernel  scope host  src 10.1.16.22 
broadcast 209.53.153.255 dev eth0  proto kernel  scope link  src 209.53.153.50 
broadcast 10.1.20.255 dev eth1.5  proto kernel  scope link  src 10.1.20.1 
local 10.1.19.1 dev eth1.4  proto kernel  scope host  src 10.1.19.1 
local 10.1.19.1 dev ppp0  proto kernel  scope host  src 10.1.19.1 
local 10.1.17.1 dev eth1.3  proto kernel  scope host  src 10.1.17.1 
broadcast 10.1.19.0 dev eth1.4  proto kernel  scope link  src 10.1.19.1 
broadcast 10.1.17.0 dev eth1.3  proto kernel  scope link  src 10.1.17.1 
broadcast 10.1.16.255 dev eth1.2  proto kernel  scope link  src 10.1.16.22 
broadcast 209.53.153.0 dev eth0  proto kernel  scope link  src 209.53.153.50 
local 209.53.153.50 dev eth0  proto kernel  scope host  src 209.53.153.50 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table CORP:

10.1.16.254 dev eth1.2  scope link  src 10.1.16.22 
192.40.217.0/24 via 10.1.16.254 dev eth1.2 
10.1.16.0/24 dev eth1.2  proto kernel  scope link  src 10.1.16.22 
10.1.17.0/24 dev eth1.3  proto kernel  scope link  src 10.1.17.1 
199.60.192.0/20 via 10.1.16.254 dev eth1.2 
198.162.160.0/19 via 10.1.16.254 dev eth1.2 
192.168.0.0/16 via 10.1.16.254 dev eth1.2 
172.16.0.0/12 via 10.1.16.254 dev eth1.2 
10.0.0.0/8 via 10.1.16.254 dev eth1.2 
default via 10.1.16.254 dev eth1.2  src 10.1.16.22 

Table default:


Table main:

10.1.19.248 dev ppp0  proto kernel  scope link  src 10.1.19.1 
209.53.153.0/24 dev eth0  proto kernel  scope link  src 209.53.153.50 
10.1.20.0/24 dev eth1.5  proto kernel  scope link  src 10.1.20.1 
192.40.217.0/24 via 10.1.16.254 dev eth1.2 
10.1.16.0/24 dev eth1.2  proto kernel  scope link  src 10.1.16.22 
10.1.17.0/24 dev eth1.3  proto kernel  scope link  src 10.1.17.1 
10.1.19.0/24 dev eth1.4  proto kernel  scope link  src 10.1.19.1 
199.60.192.0/20 via 10.1.16.254 dev eth1.2 
198.162.160.0/19 via 10.1.16.254 dev eth1.2 
169.254.0.0/16 dev eth1.5  scope link 
192.168.0.0/16 via 10.1.16.254 dev eth1.2 
172.16.0.0/12 via 10.1.16.254 dev eth1.2 
10.0.0.0/8 via 10.1.16.254 dev eth1.2 
default via 209.53.153.254 dev eth0 

Table WRLS:

209.53.153.254 dev eth0  scope link  src 209.53.153.50 
209.53.153.0/24 dev eth0  proto kernel  scope link  src 209.53.153.50 
10.1.20.0/24 dev eth1.5  proto kernel  scope link  src 10.1.20.1 
10.1.19.0/24 dev eth1.4  proto kernel  scope link  src 10.1.19.1 
169.254.0.0/16 dev eth1.5  scope link 
default via 209.53.153.254 dev eth0  src 209.53.153.50 

ARP

? (209.53.153.254) at 00:10:18:90:20:DB [ether] on eth0
? (10.1.16.2) at 00:26:B9:8D:8A:F1 [ether] on eth1.2
? (10.1.19.4) at 00:0E:0C:AF:86:3B [ether] on eth1.4
? (10.1.19.248) at * PERM PUP on eth1.4

Modules

ip_conntrack           53281  25 ipt_MASQUERADE,ip_nat_tftp,ip_nat_snmp_basic,ip_nat_sip,ip_nat_pptp,ip_nat_irc,ip_nat_h323,ip_nat_ftp,ip_nat_amanda,ip_conntrack_tftp,ip_conntrack_sip,ip_conntrack_pptp,ip_conntrack_irc,ip_conntrack_h323,ip_conntrack_ftp,ip_conntrack_amanda,xt_connlimit,xt_helper,xt_CONNMARK,xt_connmark,xt_conntrack,iptable_nat,ip_nat,ip_conntrack_netbios_ns,xt_state
ip_conntrack_amanda     8901  1 ip_nat_amanda
ip_conntrack_ftp       11569  1 ip_nat_ftp
ip_conntrack_h323      51421  1 ip_nat_h323
ip_conntrack_irc       10545  1 ip_nat_irc
ip_conntrack_netbios_ns     6977  0 
ip_conntrack_pptp      15441  1 ip_nat_pptp
ip_conntrack_sip       11313  1 ip_nat_sip
ip_conntrack_tftp       8249  1 ip_nat_tftp
ip_nat                 21101  12 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ip_nat_tftp,ip_nat_sip,ip_nat_pptp,ip_nat_irc,ip_nat_h323,ip_nat_ftp,ip_nat_amanda,iptable_nat
ip_nat_amanda           6465  0 
ip_nat_ftp              7361  0 
ip_nat_h323            11073  0 
ip_nat_irc              6721  0 
ip_nat_pptp             9797  0 
ip_nat_sip              8129  0 
ip_nat_snmp_basic      13253  0 
ip_nat_tftp             5953  0 
iptable_filter          7105  1 
iptable_mangle          6849  1 
iptable_nat            11077  0 
iptable_raw             6209  0 
ip_tables              17029  4 iptable_raw,iptable_mangle,iptable_nat,iptable_filter
ipt_addrtype            5953  3 
ipt_ah                  5953  0 
ipt_CLUSTERIP          12357  0 
ipt_dscp                5825  0 
ipt_DSCP                6337  0 
ipt_ecn                 6337  0 
ipt_ECN                 7105  0 
ipt_hashlimit          12617  0 
ipt_iprange             5953  0 
ipt_LOG                10049  16 
ipt_MASQUERADE          7617  0 
ipt_NETMAP              6081  0 
ipt_owner               6081  0 
ipt_recent             12497  0 
ipt_REDIRECT            6081  0 
ipt_REJECT              9665  4 
ipt_SAME                6465  0 
ipt_TCPMSS              8001  0 
ipt_tos                 5825  0 
ipt_TOS                 6337  0 
ipt_ttl                 5953  0 
ipt_TTL                 6337  0 
ipt_ULOG               11717  0 
xt_CLASSIFY             5953  0 
xt_comment              5953  33 
xt_connlimit            8265  0 
xt_connmark             6209  2 
xt_CONNMARK             6465  3 
xt_conntrack            6593  28 
xt_dccp                 7365  0 
xt_DSCP                 6465  0 
xt_helper               6593  0 
xt_length               6081  0 
xt_limit                6721  0 
xt_mac                  6081  0 
xt_mark                 5953  5 
xt_MARK                 6465  3 
xt_multiport            7233  4 
xt_NFQUEUE              6209  0 
xt_physdev              6993  0 
xt_pkttype              6081  0 
xt_policy               7617  0 
xt_realm                5825  0 
xt_state                6209  0 
xt_tcpmss               6337  0 
xt_tcpudp               7105  50 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Not available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Not available
   MARK Target: Available
   Extended MARK Target: Available
   Extended MARK Target 2: Not available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   Old Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Not available
   Goto Support: Available
   LOGMARK Target: Not available
   IPMARK Target: Not available
   LOG Target: Available
   Persistent SNAT: Not available
   TPROXY Target: Not available
   FLOW Classifier: Not available
   fwmark route mask: Not available
   Mark in any table: Not available

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      2859/portmap        
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      3158/cupsd          
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      3203/sendmail: acce 
tcp        0      0 0.0.0.0:1723                0.0.0.0:*                   LISTEN      5941/pptpd          
tcp        0      0 0.0.0.0:956                 0.0.0.0:*                   LISTEN      2894/rpc.statd      
tcp        0      0 10.1.16.22:43439            10.1.16.2:445               ESTABLISHED 3123/winbindd       
tcp        0      0 10.1.16.22:43441            10.1.16.2:445               ESTABLISHED 3107/winbindd       
tcp        0      0 10.1.16.22:47165            10.1.16.2:389               ESTABLISHED 3123/winbindd       
tcp        0      0 209.53.153.50:1723          204.244.152.130:2035        ESTABLISHED 5943/pptpd [204.244 
tcp        0      0 10.1.16.22:50761            10.1.16.2:49155             ESTABLISHED 3123/winbindd       
tcp        0      0 :::22                       :::*                        LISTEN      3149/sshd           
tcp        0      0 ::ffff:209.53.153.50:22     ::ffff:65.38.34.15:3987     ESTABLISHED 3539/1              
udp        0      0 0.0.0.0:950                 0.0.0.0:*                               2894/rpc.statd      
udp        0      0 0.0.0.0:953                 0.0.0.0:*                               2894/rpc.statd      
udp        0      0 0.0.0.0:5353                0.0.0.0:*                               3313/avahi-daemon:  
udp        0      0 0.0.0.0:111                 0.0.0.0:*                               2859/portmap        
udp        0      0 0.0.0.0:631                 0.0.0.0:*                               3158/cupsd          
udp        0      0 10.1.20.1:123               0.0.0.0:*                               3174/ntpd           
udp        0      0 10.1.19.1:123               0.0.0.0:*                               3174/ntpd           
udp        0      0 10.1.17.1:123               0.0.0.0:*                               3174/ntpd           
udp        0      0 10.1.16.22:123              0.0.0.0:*                               3174/ntpd           
udp        0      0 209.53.153.50:123           0.0.0.0:*                               3174/ntpd           
udp        0      0 127.0.0.1:123               0.0.0.0:*                               3174/ntpd           
udp        0      0 0.0.0.0:123                 0.0.0.0:*                               3174/ntpd           
udp        0      0 0.0.0.0:45183               0.0.0.0:*                               3313/avahi-daemon:  
udp        0      0 :::37723                    :::*                                    3313/avahi-daemon:  
udp        0      0 :::5353                     :::*                                    3313/avahi-daemon:  
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::250:baff:fe40:123     :::*                                    3174/ntpd           
udp        0      0 ::1:123                     :::*                                    3174/ntpd           
udp        0      0 :::123                      :::*                                    3174/ntpd           

Traffic Control

Device eth0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 122554 bytes 921 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth1:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 73231 bytes 438 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device ppp0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 



TC Filters

Device eth0:

Device eth1:

Device ppp0:

