Shorewall 4.4.14 Dump at platlnxrtr2.canfor.ca - Fri Nov 12 08:53:44 PST 2010

Counters reset Fri Nov 12 08:51:59 PST 2010

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
26644 8412K PPP-INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
26541 8400K RH-Firewall-1-INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   29  1542 PPP-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    4   240 RH-Firewall-1-INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 186 packets, 14186 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain PPP-FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
   25  1302 ACCEPT     all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           

Chain PPP-INPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   12  1208 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
   66  7950 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
   25  3787 ACCEPT     all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           

Chain RH-Firewall-1-INPUT (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    4   240 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 255 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     ah   --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.251         udp dpt:5353 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:631 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:631 
  128 10016 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22 
26412 8389K REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Log (/var/log/messages)

Nov 11 17:04:00 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62276 DF PROTO=TCP SPT=4159 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:04:01 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62279 DF PROTO=TCP SPT=4159 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:04:27 net2fw:DROP:IN=eth0 OUT= SRC=66.131.51.214 DST=209.53.153.50 LEN=61 TOS=0x00 PREC=0x00 TTL=120 ID=31661 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=64466 
Nov 11 17:04:29 net2fw:DROP:IN=eth0 OUT= SRC=66.131.51.214 DST=209.53.153.50 LEN=61 TOS=0x00 PREC=0x00 TTL=120 ID=31895 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=56531 
Nov 11 17:04:30 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62525 DF PROTO=TCP SPT=4359 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:04:30 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62528 DF PROTO=TCP SPT=4359 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:04:31 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=62531 DF PROTO=TCP SPT=4359 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:12:59 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.122 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=640 DF PROTO=TCP SPT=3047 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:12:59 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.239.211.217 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=670 DF PROTO=TCP SPT=3048 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:13:00 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.122 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=706 DF PROTO=TCP SPT=3047 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:13:00 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.239.211.217 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=724 DF PROTO=TCP SPT=3048 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:13:01 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.122 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=727 DF PROTO=TCP SPT=3047 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:13:01 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.239.211.217 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=728 DF PROTO=TCP SPT=3048 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:09 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1475 DF PROTO=TCP SPT=3440 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:10 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1478 DF PROTO=TCP SPT=3440 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:10 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.21 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1481 DF PROTO=TCP SPT=3440 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:30 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1613 DF PROTO=TCP SPT=3548 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:30 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1616 DF PROTO=TCP SPT=3548 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:14:31 vpn2net:REJECT:IN=ppp0 OUT=eth0 SRC=10.1.19.248 DST=204.244.116.27 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=1619 DF PROTO=TCP SPT=3548 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Nov 11 17:16:18 net2fw:DROP:IN=eth0 OUT= SRC=124.237.78.187 DST=209.53.153.50 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=1080 WINDOW=16384 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Mangle Table

Chain PREROUTING (policy ACCEPT 9 packets, 2871 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 9 packets, 2871 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table ( out of )

udp      17 29 src=10.1.16.2 dst=255.255.255.255 sport=67 dport=68 packets=7583 bytes=2510426 [UNREPLIED] src=255.255.255.255 dst=10.1.16.2 sport=68 dport=67 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431956 ESTABLISHED src=10.1.16.22 dst=10.1.16.2 sport=50761 dport=49155 packets=2 bytes=248 src=10.1.16.2 dst=10.1.16.22 sport=49155 dport=50761 packets=1 bytes=300 [ASSURED] mark=0 secmark=0 use=1
udp      17 29 src=10.1.16.1 dst=255.255.255.255 sport=67 dport=68 packets=7583 bytes=2510426 [UNREPLIED] src=255.255.255.255 dst=10.1.16.1 sport=68 dport=67 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 2 src=10.1.19.248 dst=255.255.255.255 sport=138 dport=138 packets=7 bytes=1595 [UNREPLIED] src=255.255.255.255 dst=10.1.19.248 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431956 ESTABLISHED src=10.1.16.22 dst=10.1.16.2 sport=43439 dport=445 packets=3 bytes=610 src=10.1.16.2 dst=10.1.16.22 sport=445 dport=43439 packets=2 bytes=1692 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=209.53.153.50 dst=65.38.34.15 sport=22 dport=3987 packets=92 bytes=8624 src=65.38.34.15 dst=209.53.153.50 sport=3987 dport=22 packets=120 bytes=7680 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431997 ESTABLISHED src=192.168.1.33 dst=204.244.116.122 sport=1505 dport=993 packets=21 bytes=1062 [UNREPLIED] src=204.244.116.122 dst=192.168.1.33 sport=993 dport=1505 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 29 src=0.0.0.0 dst=255.255.255.255 sport=68 dport=67 packets=10253 bytes=3080072 [UNREPLIED] src=255.255.255.255 dst=0.0.0.0 sport=67 dport=68 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431956 ESTABLISHED src=65.38.34.15 dst=209.53.153.50 sport=1521 dport=1723 packets=5 bytes=580 src=209.53.153.50 dst=65.38.34.15 sport=1723 dport=1521 packets=6 bytes=436 [ASSURED] mark=0 secmark=0 use=1
unknown  47 597 src=209.53.153.50 dst=65.38.34.15 packets=59 bytes=2674 src=65.38.34.15 dst=209.53.153.50 packets=66 bytes=7950 mark=0 secmark=0 use=1
tcp      6 72 TIME_WAIT src=65.38.34.15 dst=209.53.153.50 sport=1392 dport=1723 packets=7 bytes=628 src=209.53.153.50 dst=65.38.34.15 sport=1723 dport=1392 packets=8 bytes=564 [ASSURED] mark=0 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 209.53.153.50/24 brd 209.53.153.255 scope global eth0
5: eth1.2@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    inet 10.1.16.22/24 brd 10.1.16.255 scope global eth1.2
6: eth1.3@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    inet 10.1.17.1/24 brd 10.1.17.255 scope global eth1.3
7: eth1.4@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    inet 10.1.19.1/24 brd 10.1.19.255 scope global eth1.4
8: eth1.5@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    inet 10.1.20.1/24 brd 10.1.20.255 scope global eth1.5
11: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1396 qdisc pfifo_fast qlen 3
    inet 10.1.19.1 peer 10.1.19.248/32 scope global ppp0

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    4491972    2121     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    4491972    2121     0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:50:ba:40:29:1e brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    151753     2126     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    103702     708      0       0       0       0      
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    42041797   124861   0       0       0       106    
    TX: bytes  packets  errors  dropped carrier collsns 
    75993      428      0       0       0       0      
4: sit0: <NOARP> mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
5: eth1.2@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    35271095   111423   0       0       0       2      
    TX: bytes  packets  errors  dropped carrier collsns 
    46026      240      0       0       0       0      
6: eth1.3@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    3949151    12412    0       0       0       26     
    TX: bytes  packets  errors  dropped carrier collsns 
    7198       52       0       0       0       0      
7: eth1.4@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    57149      351      0       0       0       13     
    TX: bytes  packets  errors  dropped carrier collsns 
    7578       58       0       0       0       0      
8: eth1.5@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:19:b9:33:2f:18 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    66168      791      0       0       0       21     
    TX: bytes  packets  errors  dropped carrier collsns 
    7198       52       0       0       0       0      
11: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1396 qdisc pfifo_fast qlen 3
    link/ppp 
    RX: bytes  packets  errors  dropped overrun mcast   
    5321       60       0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    344        12       0       0       0       0      

PFKEY SPD

No SPD entries.

PFKEY SAD

No SAD entries.

/proc

   /proc/version = Linux version 2.6.18-194.17.4.el5 (mockbuild@builder10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Mon Oct 25 15:51:07 EDT 2010
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1.2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1.2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1.2/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.2/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1.3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1.3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1.3/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.3/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1.4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1.4/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1.4/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.4/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1.5/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1.5/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.5/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1.5/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1.5/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 1
   /proc/sys/net/ipv4/conf/ppp0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/ppp0/rp_filter = 0
   /proc/sys/net/ipv4/conf/ppp0/log_martians = 1

Routing Rules

0:	from all lookup 255 
32766:	from all lookup main 
32767:	from all lookup default 

Table 255:

broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 10.1.20.0 dev eth1.5  proto kernel  scope link  src 10.1.20.1 
local 10.1.20.1 dev eth1.5  proto kernel  scope host  src 10.1.20.1 
broadcast 10.1.19.255 dev eth1.4  proto kernel  scope link  src 10.1.19.1 
broadcast 10.1.17.255 dev eth1.3  proto kernel  scope link  src 10.1.17.1 
broadcast 10.1.16.0 dev eth1.2  proto kernel  scope link  src 10.1.16.22 
local 10.1.16.22 dev eth1.2  proto kernel  scope host  src 10.1.16.22 
broadcast 209.53.153.255 dev eth0  proto kernel  scope link  src 209.53.153.50 
broadcast 10.1.20.255 dev eth1.5  proto kernel  scope link  src 10.1.20.1 
local 10.1.19.1 dev eth1.4  proto kernel  scope host  src 10.1.19.1 
local 10.1.19.1 dev ppp0  proto kernel  scope host  src 10.1.19.1 
local 10.1.17.1 dev eth1.3  proto kernel  scope host  src 10.1.17.1 
broadcast 10.1.19.0 dev eth1.4  proto kernel  scope link  src 10.1.19.1 
broadcast 10.1.17.0 dev eth1.3  proto kernel  scope link  src 10.1.17.1 
broadcast 10.1.16.255 dev eth1.2  proto kernel  scope link  src 10.1.16.22 
broadcast 209.53.153.0 dev eth0  proto kernel  scope link  src 209.53.153.50 
local 209.53.153.50 dev eth0  proto kernel  scope host  src 209.53.153.50 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table default:


Table main:

10.1.19.248 dev ppp0  proto kernel  scope link  src 10.1.19.1 
209.53.153.0/24 dev eth0  proto kernel  scope link  src 209.53.153.50 
10.1.20.0/24 dev eth1.5  proto kernel  scope link  src 10.1.20.1 
192.40.217.0/24 via 10.1.16.254 dev eth1.2 
10.1.16.0/24 dev eth1.2  proto kernel  scope link  src 10.1.16.22 
10.1.17.0/24 dev eth1.3  proto kernel  scope link  src 10.1.17.1 
10.1.19.0/24 dev eth1.4  proto kernel  scope link  src 10.1.19.1 
199.60.192.0/20 via 10.1.16.254 dev eth1.2 
198.162.160.0/19 via 10.1.16.254 dev eth1.2 
169.254.0.0/16 dev eth1.5  scope link 
192.168.0.0/16 via 10.1.16.254 dev eth1.2 
172.16.0.0/12 via 10.1.16.254 dev eth1.2 
10.0.0.0/8 via 10.1.16.254 dev eth1.2 
default via 209.53.153.254 dev eth0 

ARP

? (209.53.153.254) at 00:10:18:90:20:DB [ether] on eth0
? (10.1.16.2) at 00:26:B9:8D:8A:F1 [ether] on eth1.2
? (10.1.19.4) at 00:0E:0C:AF:86:3B [ether] on eth1.4
? (10.1.19.248) at * PERM PUP on eth1.4

Modules

ip_conntrack           53281  4 iptable_nat,ip_nat,ip_conntrack_netbios_ns,xt_state
ip_conntrack_netbios_ns     6977  0 
ip_nat                 21101  1 iptable_nat
iptable_filter          7105  1 
iptable_mangle          6849  0 
iptable_nat            11077  0 
iptable_raw             6209  0 
ip_tables              17029  4 iptable_raw,iptable_mangle,iptable_nat,iptable_filter
ipt_addrtype            5953  0 
ipt_ah                  5953  0 
ipt_CLUSTERIP          12357  0 
ipt_dscp                5825  0 
ipt_DSCP                6337  0 
ipt_ecn                 6337  0 
ipt_ECN                 7105  0 
ipt_hashlimit          12617  0 
ipt_iprange             5953  0 
ipt_LOG                10049  0 
ipt_owner               6081  0 
ipt_recent             12497  0 
ipt_REJECT              9665  1 
ipt_TCPMSS              8001  0 
ipt_tos                 5825  0 
ipt_TOS                 6337  0 
ipt_ttl                 5953  0 
ipt_TTL                 6337  0 
ipt_ULOG               11717  0 
xt_CLASSIFY             5953  0 
xt_comment              5953  0 
xt_dccp                 7365  0 
xt_DSCP                 6465  0 
xt_length               6081  0 
xt_limit                6721  0 
xt_mac                  6081  0 
xt_mark                 5953  0 
xt_MARK                 6465  0 
xt_multiport            7233  0 
xt_NFQUEUE              6209  0 
xt_physdev              6993  0 
xt_pkttype              6081  0 
xt_policy               7617  0 
xt_realm                5825  0 
xt_state                6209  2 
xt_tcpmss               6337  0 
xt_tcpudp               7105  6 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Not available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Not available
   MARK Target: Available
   Extended MARK Target: Available
   Extended MARK Target 2: Not available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   Old Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Not available
   Goto Support: Available
   LOGMARK Target: Not available
   IPMARK Target: Not available
   LOG Target: Available
   Persistent SNAT: Not available
   TPROXY Target: Not available
   FLOW Classifier: Not available
   fwmark route mask: Not available
   Mark in any table: Not available

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      2859/portmap        
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      3158/cupsd          
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      3203/sendmail: acce 
tcp        0      0 0.0.0.0:1723                0.0.0.0:*                   LISTEN      5151/pptpd          
tcp        0      0 0.0.0.0:956                 0.0.0.0:*                   LISTEN      2894/rpc.statd      
tcp        0      0 10.1.16.22:43439            10.1.16.2:445               ESTABLISHED 3123/winbindd       
tcp        0      0 10.1.16.22:43441            10.1.16.2:445               ESTABLISHED 3107/winbindd       
tcp        0      0 10.1.16.22:47165            10.1.16.2:389               ESTABLISHED 3123/winbindd       
tcp        0      0 209.53.153.50:1723          65.38.34.15:1521            ESTABLISHED 5168/pptpd [65.38.3 
tcp        0      0 10.1.16.22:50761            10.1.16.2:49155             ESTABLISHED 3123/winbindd       
tcp        0      0 209.53.153.50:1723          65.38.34.15:1392            TIME_WAIT   -                   
tcp        0      0 :::22                       :::*                        LISTEN      3149/sshd           
tcp        0      0 ::ffff:209.53.153.50:22     ::ffff:65.38.34.15:3987     ESTABLISHED 3539/1              
udp        0      0 0.0.0.0:950                 0.0.0.0:*                               2894/rpc.statd      
udp        0      0 0.0.0.0:953                 0.0.0.0:*                               2894/rpc.statd      
udp        0      0 0.0.0.0:5353                0.0.0.0:*                               3313/avahi-daemon:  
udp        0      0 0.0.0.0:111                 0.0.0.0:*                               2859/portmap        
udp        0      0 0.0.0.0:631                 0.0.0.0:*                               3158/cupsd          
udp        0      0 10.1.20.1:123               0.0.0.0:*                               3174/ntpd           
udp        0      0 10.1.19.1:123               0.0.0.0:*                               3174/ntpd           
udp        0      0 10.1.17.1:123               0.0.0.0:*                               3174/ntpd           
udp        0      0 10.1.16.22:123              0.0.0.0:*                               3174/ntpd           
udp        0      0 209.53.153.50:123           0.0.0.0:*                               3174/ntpd           
udp        0      0 127.0.0.1:123               0.0.0.0:*                               3174/ntpd           
udp        0      0 0.0.0.0:123                 0.0.0.0:*                               3174/ntpd           
udp        0      0 0.0.0.0:45183               0.0.0.0:*                               3313/avahi-daemon:  
udp        0      0 :::37723                    :::*                                    3313/avahi-daemon:  
udp        0      0 :::5353                     :::*                                    3313/avahi-daemon:  
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::219:b9ff:fe33:123     :::*                                    3174/ntpd           
udp        0      0 fe80::250:baff:fe40:123     :::*                                    3174/ntpd           
udp        0      0 ::1:123                     :::*                                    3174/ntpd           
udp        0      0 :::123                      :::*                                    3174/ntpd           

Traffic Control

Device eth0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 101458 bytes 709 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth1:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 72121 bytes 428 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device ppp0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 240 bytes 4 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 



TC Filters

Device eth0:

Device eth1:

Device ppp0:

