Shorewall 4.4.21 Dump at sage - Thu Jan 12 22:40:50 PST 2012

Counters reset Thu Jan 12 22:40:22 PST 2012

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   37  3468 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 1049 1498K net2fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
  912 62217 loc2fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    6  1434 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    6   312 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
   31  3421 net2loc    all  --  eth0   eth1    0.0.0.0/0            0.0.0.0/0           
   42 10264 loc_frwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  705 53910 fw2net     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
  984 1467K fw2loc     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    6  1434 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain Drop (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   10  1199            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
   10  1199 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain Reject (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   10  1199 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (5 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  984 1467K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:161 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:23 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:953 /* RNDC */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:33 /* SSH_33 */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 /* HTTP */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 /* HTTPS */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2loc:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain fw2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
  700 53610 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:161 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:953 /* RNDC */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:33 /* SSH_33 */ 
    5   300 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 /* HTTP */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 /* HTTPS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 /* SMTP */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   27  2269 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
  885 59948 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    3   180 ~excl0     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3128 ctorigdstport 80 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:161 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:69 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    9   615 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:953 /* RNDC */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:33 /* SSH_33 */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 /* HTTP */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 /* HTTPS */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 /* SMTP */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3128 
   15  1474 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:loc2fw:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   32  9086 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:953 /* RNDC */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:33 /* SSH_33 */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 /* HTTP */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 /* HTTPS */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 /* SMTP */ 
   10  1178 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10  1178 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   42 10264 loc2net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10  1199 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   10  1199 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 1039 1497K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:33 /* SSH_33 */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 /* HTTP */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 /* HTTPS */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:161 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 /* SMTP */ 
   10  1199 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2fw:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   31  3421 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2loc:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain reject (14 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain sfilter (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:sfilter:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurflog (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain smurfs (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 smurflog   all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] ADDRTYPE match src-type BROADCAST 
    0     0 smurflog   all  --  *      *       224.0.0.0/4          0.0.0.0/0           [goto] 

Chain ~excl0 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 10.0.0.1 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 50.100.200.144 
    3   180 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Log (/var/log/syslog)

Jan 12 22:24:38 net2fw:DROP:IN=eth0 OUT= SRC=186.12.255.230 DST=50.100.200.144 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=9783 DF PROTO=TCP SPT=55499 DPT=32389 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:24:41 net2fw:DROP:IN=eth0 OUT= SRC=186.12.255.230 DST=50.100.200.144 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=9915 DF PROTO=TCP SPT=55499 DPT=32389 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:24:47 net2fw:DROP:IN=eth0 OUT= SRC=186.12.255.230 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=10188 DF PROTO=TCP SPT=55499 DPT=32389 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:25:43 net2fw:DROP:IN=eth0 OUT= SRC=189.252.11.169 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=8358 DF PROTO=TCP SPT=16424 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:26:00 net2fw:DROP:IN=eth0 OUT= SRC=74.226.121.248 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=102 ID=22444 DF PROTO=TCP SPT=61710 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:26:03 net2fw:DROP:IN=eth0 OUT= SRC=74.226.121.248 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=102 ID=22706 DF PROTO=TCP SPT=61710 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:26:09 net2fw:DROP:IN=eth0 OUT= SRC=74.226.121.248 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=102 ID=23140 DF PROTO=TCP SPT=61710 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:31:23 net2fw:DROP:IN=eth0 OUT= SRC=67.168.20.45 DST=50.100.200.144 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=20497 DF PROTO=TCP SPT=49613 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:31:26 net2fw:DROP:IN=eth0 OUT= SRC=67.168.20.45 DST=50.100.200.144 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=20905 DF PROTO=TCP SPT=49613 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:31:32 net2fw:DROP:IN=eth0 OUT= SRC=67.168.20.45 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=21830 DF PROTO=TCP SPT=49613 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:32:55 net2fw:DROP:IN=eth0 OUT= SRC=98.97.111.6 DST=50.100.200.144 LEN=93 TOS=0x00 PREC=0x00 TTL=117 ID=11020 PROTO=UDP SPT=47322 DPT=28369 LEN=73 
Jan 12 22:33:20 net2fw:DROP:IN=eth0 OUT= SRC=109.125.127.27 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=9264 DF PROTO=TCP SPT=1750 DPT=32389 WINDOW=65535 RES=0x00 SYN URGP=0 
Jan 12 22:33:23 net2fw:DROP:IN=eth0 OUT= SRC=76.88.141.150 DST=50.100.200.144 LEN=95 TOS=0x00 PREC=0x00 TTL=46 ID=20771 PROTO=UDP SPT=38973 DPT=28369 LEN=75 
Jan 12 22:33:23 net2fw:DROP:IN=eth0 OUT= SRC=109.125.127.27 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=9301 DF PROTO=TCP SPT=1750 DPT=32389 WINDOW=65535 RES=0x00 SYN URGP=0 
Jan 12 22:33:29 net2fw:DROP:IN=eth0 OUT= SRC=109.125.127.27 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=9421 DF PROTO=TCP SPT=1750 DPT=32389 WINDOW=65535 RES=0x00 SYN URGP=0 
Jan 12 22:33:32 net2fw:DROP:IN=eth0 OUT= SRC=64.25.164.161 DST=50.100.200.144 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=7010 DF PROTO=TCP SPT=34143 DPT=28369 WINDOW=11680 RES=0x00 SYN URGP=0 
Jan 12 22:33:38 net2fw:DROP:IN=eth0 OUT= SRC=64.25.164.161 DST=50.100.200.144 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=7011 DF PROTO=TCP SPT=34143 DPT=28369 WINDOW=11680 RES=0x00 SYN URGP=0 
Jan 12 22:34:48 net2fw:DROP:IN=eth0 OUT= SRC=67.3.174.194 DST=50.100.200.144 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=20230 DF PROTO=TCP SPT=58900 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:34:51 net2fw:DROP:IN=eth0 OUT= SRC=67.3.174.194 DST=50.100.200.144 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=20370 DF PROTO=TCP SPT=58900 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 
Jan 12 22:34:57 net2fw:DROP:IN=eth0 OUT= SRC=67.3.174.194 DST=50.100.200.144 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=20622 DF PROTO=TCP SPT=58900 DPT=28369 WINDOW=8192 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 26 packets, 2074 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   67  5532 dnat       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 7 packets, 481 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 4 packets, 240 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 4 packets, 240 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   12   995 eth0_masq  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_masq  all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           

Chain dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   49  3996 loc_dnat   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           

Chain eth0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 SNAT       tcp  --  *      *       10.0.0.0/24          50.100.200.144        multiport dports 80,443,3128 to:50.100.200.144 
    7   695 MASQUERADE  all  --  *      *       10.0.0.0/24          0.0.0.0/0           

Chain eth1_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 SNAT       tcp  --  *      *       10.0.0.0/24          10.0.0.1            multiport dports 80,443,3128 to:50.100.200.144 

Chain loc_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    3   180 ~excl0     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 

Chain ~excl0 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0/0            10.0.0.1            
    0     0 RETURN     all  --  *      *       0.0.0.0/0            50.100.200.144        
    3   180 REDIRECT   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           redir ports 3128 

Mangle Table

Chain PREROUTING (policy ACCEPT 909 packets, 650K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 2086 1589K tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 866 packets, 644K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1976 1573K tcin       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 28 packets, 5101 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   73 13685 MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK and 0xffffff00 
   73 13685 tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 697 packets, 600K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1703 1525K tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 725 packets, 605K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1776 1539K tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 2090 packets, 1593K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 1705 packets, 1527K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table (133 out of 65536)

tcp      6 28 TIME_WAIT src=50.100.200.144 dst=96.17.15.9 sport=48060 dport=80 src=96.17.15.9 dst=50.100.200.144 sport=80 dport=48060 [ASSURED] mark=0 use=2
tcp      6 429284 ESTABLISHED src=10.0.0.158 dst=63.111.11.178 sport=49221 dport=5222 src=63.111.11.178 dst=50.100.200.144 sport=5222 dport=49221 [ASSURED] mark=0 use=2
tcp      6 431946 ESTABLISHED src=10.0.0.166 dst=23.3.105.74 sport=54555 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54555 [ASSURED] mark=0 use=2
tcp      6 431947 ESTABLISHED src=50.100.200.144 dst=23.3.105.115 sport=54645 dport=80 src=23.3.105.115 dst=50.100.200.144 sport=80 dport=54645 [ASSURED] mark=0 use=2
tcp      6 122297 ESTABLISHED src=10.0.0.156 dst=65.55.205.125 sport=50510 dport=443 src=65.55.205.125 dst=50.100.200.144 sport=443 dport=50510 [ASSURED] mark=0 use=2
tcp      6 431960 ESTABLISHED src=50.100.200.144 dst=173.223.52.209 sport=33018 dport=80 src=173.223.52.209 dst=50.100.200.144 sport=80 dport=33018 [ASSURED] mark=0 use=2
tcp      6 431968 ESTABLISHED src=10.0.0.166 dst=173.223.52.210 sport=54557 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54557 [ASSURED] mark=0 use=2
udp      17 24 src=10.0.0.212 dst=10.0.0.1 sport=59342 dport=53 src=10.0.0.1 dst=10.0.0.212 sport=53 dport=59342 mark=0 use=2
tcp      6 0 TIME_WAIT src=50.100.200.144 dst=64.4.34.145 sport=42274 dport=80 src=64.4.34.145 dst=50.100.200.144 sport=80 dport=42274 [ASSURED] mark=0 use=2
tcp      6 431992 ESTABLISHED src=10.0.0.27 dst=68.37.166.200 sport=63821 dport=17071 src=68.37.166.200 dst=50.100.200.144 sport=17071 dport=63821 [ASSURED] mark=0 use=2
tcp      6 431973 ESTABLISHED src=50.100.200.144 dst=96.17.15.81 sport=46322 dport=80 src=96.17.15.81 dst=50.100.200.144 sport=80 dport=46322 [ASSURED] mark=0 use=2
tcp      6 431942 ESTABLISHED src=10.0.0.166 dst=64.4.34.145 sport=54549 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54549 [ASSURED] mark=0 use=2
udp      17 71 src=50.100.200.144 dst=64.185.96.69 sport=53 dport=53 src=64.185.96.69 dst=50.100.200.144 sport=53 dport=53 [ASSURED] mark=0 use=2
tcp      6 299 ESTABLISHED src=10.0.0.27 dst=64.212.42.136 sport=57649 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=57649 [ASSURED] mark=0 use=2
tcp      6 431942 ESTABLISHED src=50.100.200.144 dst=96.17.15.10 sport=59539 dport=80 src=96.17.15.10 dst=50.100.200.144 sport=80 dport=59539 [ASSURED] mark=0 use=2
tcp      6 431985 ESTABLISHED src=10.0.0.166 dst=161.69.92.6 sport=54409 dport=443 src=161.69.92.6 dst=50.100.200.144 sport=443 dport=54409 [ASSURED] mark=0 use=2
tcp      6 11 TIME_WAIT src=66.249.71.107 dst=50.100.200.144 sport=43666 dport=80 src=50.100.200.144 dst=66.249.71.107 sport=80 dport=43666 [ASSURED] mark=0 use=2
tcp      6 20 TIME_WAIT src=10.0.0.141 dst=107.22.187.173 sport=49607 dport=443 src=107.22.187.173 dst=50.100.200.144 sport=443 dport=49607 [ASSURED] mark=0 use=2
udp      17 23 src=10.0.0.166 dst=10.0.0.255 sport=137 dport=137 [UNREPLIED] src=10.0.0.255 dst=10.0.0.166 sport=137 dport=137 mark=0 use=2
tcp      6 62 TIME_WAIT src=10.0.0.166 dst=64.4.34.145 sport=54550 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54550 [ASSURED] mark=0 use=2
tcp      6 77 TIME_WAIT src=10.0.0.212 dst=64.212.42.136 sport=49848 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=49848 [ASSURED] mark=0 use=2
tcp      6 116 TIME_WAIT src=50.100.200.144 dst=184.73.172.30 sport=38401 dport=80 src=184.73.172.30 dst=50.100.200.144 sport=80 dport=38401 [ASSURED] mark=0 use=2
tcp      6 4 TIME_WAIT src=50.100.200.144 dst=74.125.127.132 sport=46961 dport=80 src=74.125.127.132 dst=50.100.200.144 sport=80 dport=46961 [ASSURED] mark=0 use=2
tcp      6 431913 ESTABLISHED src=10.0.0.166 dst=161.69.169.7 sport=54551 dport=443 src=161.69.169.7 dst=50.100.200.144 sport=443 dport=54551 [ASSURED] mark=0 use=2
tcp      6 90 TIME_WAIT src=50.100.200.144 dst=66.220.145.41 sport=46253 dport=80 src=66.220.145.41 dst=50.100.200.144 sport=80 dport=46253 [ASSURED] mark=0 use=2
tcp      6 111 TIME_WAIT src=50.100.200.144 dst=69.171.224.12 sport=54786 dport=80 src=69.171.224.12 dst=50.100.200.144 sport=80 dport=54786 [ASSURED] mark=0 use=2
tcp      6 114 TIME_WAIT src=50.100.200.144 dst=204.236.238.16 sport=48323 dport=80 src=204.236.238.16 dst=50.100.200.144 sport=80 dport=48323 [ASSURED] mark=0 use=2
tcp      6 431960 ESTABLISHED src=50.100.200.144 dst=173.223.52.202 sport=54036 dport=80 src=173.223.52.202 dst=50.100.200.144 sport=80 dport=54036 [ASSURED] mark=0 use=2
udp      17 26 src=10.0.0.212 dst=10.0.0.1 sport=65224 dport=53 src=10.0.0.1 dst=10.0.0.212 sport=53 dport=65224 mark=0 use=2
tcp      6 431945 ESTABLISHED src=10.0.0.212 dst=193.120.199.13 sport=49576 dport=443 src=193.120.199.13 dst=50.100.200.144 sport=443 dport=49576 [ASSURED] mark=0 use=2
udp      17 23 src=10.0.0.212 dst=10.0.0.1 sport=61034 dport=53 src=10.0.0.1 dst=10.0.0.212 sport=53 dport=61034 mark=0 use=2
udp      17 7 src=10.0.0.166 dst=10.0.0.1 sport=50077 dport=53 src=10.0.0.1 dst=10.0.0.166 sport=53 dport=50077 mark=0 use=2
udp      17 13 src=10.0.0.166 dst=10.0.0.1 sport=62847 dport=53 src=10.0.0.1 dst=10.0.0.166 sport=53 dport=62847 mark=0 use=2
tcp      6 431942 ESTABLISHED src=10.0.0.166 dst=96.17.15.50 sport=54537 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54537 [ASSURED] mark=0 use=2
tcp      6 4 TIME_WAIT src=50.100.200.144 dst=173.194.33.4 sport=54517 dport=80 src=173.194.33.4 dst=50.100.200.144 sport=80 dport=54517 [ASSURED] mark=0 use=2
udp      17 26 src=10.0.0.212 dst=10.0.0.1 sport=49752 dport=53 src=10.0.0.1 dst=10.0.0.212 sport=53 dport=49752 mark=0 use=2
tcp      6 431967 ESTABLISHED src=10.0.0.166 dst=173.223.52.210 sport=54561 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54561 [ASSURED] mark=0 use=2
tcp      6 431973 ESTABLISHED src=10.0.0.166 dst=96.17.15.25 sport=54520 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54520 [ASSURED] mark=0 use=2
tcp      6 431969 ESTABLISHED src=10.0.0.166 dst=173.223.52.210 sport=54558 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54558 [ASSURED] mark=0 use=2
tcp      6 170678 ESTABLISHED src=10.0.0.156 dst=65.55.205.125 sport=51992 dport=443 src=65.55.205.125 dst=50.100.200.144 sport=443 dport=51992 [ASSURED] mark=0 use=2
tcp      6 431971 ESTABLISHED src=50.100.200.144 dst=66.220.145.41 sport=46353 dport=80 src=66.220.145.41 dst=50.100.200.144 sport=80 dport=46353 [ASSURED] mark=0 use=2
tcp      6 431994 ESTABLISHED src=50.100.200.144 dst=69.171.224.12 sport=55951 dport=80 src=69.171.224.12 dst=50.100.200.144 sport=80 dport=55951 [ASSURED] mark=0 use=2
udp      17 19 src=10.0.0.212 dst=70.126.29.213 sport=33604 dport=49775 [UNREPLIED] src=70.126.29.213 dst=50.100.200.144 sport=49775 dport=33604 mark=0 use=2
tcp      6 94 TIME_WAIT src=10.0.0.27 dst=64.212.42.136 sport=57647 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=57647 [ASSURED] mark=0 use=2
tcp      6 431977 ESTABLISHED src=10.0.0.166 dst=128.241.90.115 sport=54544 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54544 [ASSURED] mark=0 use=2
tcp      6 431977 ESTABLISHED src=50.100.200.144 dst=128.241.90.107 sport=38330 dport=80 src=128.241.90.107 dst=50.100.200.144 sport=80 dport=38330 [ASSURED] mark=0 use=2
tcp      6 431967 ESTABLISHED src=10.0.0.166 dst=173.223.52.210 sport=54556 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54556 [ASSURED] mark=0 use=2
tcp      6 299 ESTABLISHED src=10.0.0.27 dst=10.0.0.1 sport=55479 dport=33 src=10.0.0.1 dst=10.0.0.27 sport=33 dport=55479 [ASSURED] mark=0 use=2
tcp      6 431942 ESTABLISHED src=50.100.200.144 dst=64.4.34.145 sport=59594 dport=80 src=64.4.34.145 dst=50.100.200.144 sport=80 dport=59594 [ASSURED] mark=0 use=2
tcp      6 21 TIME_WAIT src=50.100.200.144 dst=96.17.15.51 sport=37231 dport=80 src=96.17.15.51 dst=50.100.200.144 sport=80 dport=37231 [ASSURED] mark=0 use=2
tcp      6 80158 ESTABLISHED src=10.0.0.156 dst=65.55.205.125 sport=49848 dport=443 src=65.55.205.125 dst=50.100.200.144 sport=443 dport=49848 [ASSURED] mark=0 use=2
tcp      6 61 TIME_WAIT src=10.0.0.166 dst=128.241.90.128 sport=54548 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54548 [ASSURED] mark=0 use=2
tcp      6 431974 ESTABLISHED src=10.0.0.166 dst=96.17.15.25 sport=54562 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54562 [ASSURED] mark=0 use=2
tcp      6 2 TIME_WAIT src=10.0.0.27 dst=64.212.42.136 sport=57644 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=57644 [ASSURED] mark=0 use=2
udp      17 26 src=10.0.0.212 dst=255.255.255.255 sport=17500 dport=17500 [UNREPLIED] src=255.255.255.255 dst=10.0.0.212 sport=17500 dport=17500 mark=0 use=2
udp      17 130 src=127.0.0.1 dst=127.0.0.1 sport=58539 dport=161 src=127.0.0.1 dst=127.0.0.1 sport=161 dport=58539 [ASSURED] mark=0 use=2
tcp      6 63 TIME_WAIT src=50.100.200.144 dst=66.220.154.13 sport=44629 dport=80 src=66.220.154.13 dst=50.100.200.144 sport=80 dport=44629 [ASSURED] mark=0 use=2
tcp      6 431968 ESTABLISHED src=10.0.0.166 dst=173.223.52.210 sport=54560 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54560 [ASSURED] mark=0 use=2
udp      17 173 src=50.100.200.144 dst=64.185.96.4 sport=53 dport=53 src=64.185.96.4 dst=50.100.200.144 sport=53 dport=53 [ASSURED] mark=0 use=2
tcp      6 55 TIME_WAIT src=10.0.0.166 dst=23.3.105.74 sport=54546 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54546 [ASSURED] mark=0 use=2
tcp      6 431995 ESTABLISHED src=50.100.200.144 dst=173.223.52.210 sport=54172 dport=80 src=173.223.52.210 dst=50.100.200.144 sport=80 dport=54172 [ASSURED] mark=0 use=2
tcp      6 431947 ESTABLISHED src=10.0.0.166 dst=23.3.105.74 sport=54554 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54554 [ASSURED] mark=0 use=2
udp      17 2 src=10.0.0.27 dst=61.216.111.171 sport=16701 dport=50771 [UNREPLIED] src=61.216.111.171 dst=50.100.200.144 sport=50771 dport=16701 mark=0 use=2
tcp      6 5 TIME_WAIT src=50.100.200.144 dst=173.194.33.32 sport=53912 dport=80 src=173.194.33.32 dst=50.100.200.144 sport=80 dport=53912 [ASSURED] mark=0 use=2
tcp      6 91 TIME_WAIT src=50.100.200.144 dst=69.171.229.11 sport=49661 dport=80 src=69.171.229.11 dst=50.100.200.144 sport=80 dport=49661 [ASSURED] mark=0 use=2
udp      17 4 src=10.0.0.156 dst=10.0.0.255 sport=138 dport=138 [UNREPLIED] src=10.0.0.255 dst=10.0.0.156 sport=138 dport=138 mark=0 use=2
tcp      6 63 TIME_WAIT src=10.0.0.27 dst=64.212.42.136 sport=57646 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=57646 [ASSURED] mark=0 use=2
tcp      6 431982 ESTABLISHED src=10.0.0.212 dst=199.47.216.149 sport=64266 dport=80 src=10.0.0.1 dst=10.0.0.212 sport=3128 dport=64266 [ASSURED] mark=0 use=2
tcp      6 33 TIME_WAIT src=10.0.0.166 dst=96.17.15.80 sport=54541 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54541 [ASSURED] mark=0 use=2
tcp      6 431960 ESTABLISHED src=10.0.0.141 dst=107.22.187.173 sport=49609 dport=443 src=107.22.187.173 dst=50.100.200.144 sport=443 dport=49609 [ASSURED] mark=0 use=2
tcp      6 431971 ESTABLISHED src=10.0.0.166 dst=66.220.145.41 sport=54362 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54362 [ASSURED] mark=0 use=2
udp      17 26 src=10.0.0.212 dst=10.0.0.255 sport=17500 dport=17500 [UNREPLIED] src=10.0.0.255 dst=10.0.0.212 sport=17500 dport=17500 mark=0 use=2
tcp      6 116 TIME_WAIT src=10.0.0.212 dst=50.16.215.193 sport=49854 dport=80 src=10.0.0.1 dst=10.0.0.212 sport=3128 dport=49854 [ASSURED] mark=0 use=2
udp      17 2 src=10.0.0.166 dst=10.0.0.1 sport=52999 dport=53 src=10.0.0.1 dst=10.0.0.166 sport=53 dport=52999 mark=0 use=2
tcp      6 431967 ESTABLISHED src=50.100.200.144 dst=173.223.52.186 sport=47779 dport=80 src=173.223.52.186 dst=50.100.200.144 sport=80 dport=47779 [ASSURED] mark=0 use=2
unknown  2 474 src=10.0.0.2 dst=224.0.0.1 [UNREPLIED] src=224.0.0.1 dst=10.0.0.2 mark=0 use=2
tcp      6 114 TIME_WAIT src=50.100.200.144 dst=69.171.224.12 sport=51336 dport=80 src=69.171.224.12 dst=50.100.200.144 sport=80 dport=51336 [ASSURED] mark=0 use=2
tcp      6 430913 ESTABLISHED src=10.0.0.141 dst=17.149.36.174 sport=49392 dport=5223 src=17.149.36.174 dst=50.100.200.144 sport=5223 dport=49392 [ASSURED] mark=0 use=2
tcp      6 431965 ESTABLISHED src=50.100.200.144 dst=173.223.52.217 sport=55370 dport=80 src=173.223.52.217 dst=50.100.200.144 sport=80 dport=55370 [ASSURED] mark=0 use=2
unknown  2 544 src=10.0.0.5 dst=224.0.0.1 [UNREPLIED] src=224.0.0.1 dst=10.0.0.5 mark=0 use=2
tcp      6 431973 ESTABLISHED src=50.100.200.144 dst=96.17.15.81 sport=49908 dport=80 src=96.17.15.81 dst=50.100.200.144 sport=80 dport=49908 [ASSURED] mark=0 use=2
tcp      6 425953 ESTABLISHED src=10.0.0.212 dst=10.0.0.1 sport=63737 dport=33 src=10.0.0.1 dst=10.0.0.212 sport=33 dport=63737 [ASSURED] mark=0 use=2
udp      17 3 src=10.0.0.166 dst=10.0.0.1 sport=55121 dport=53 src=10.0.0.1 dst=10.0.0.166 sport=53 dport=55121 mark=0 use=2
tcp      6 97 TIME_WAIT src=10.0.0.166 dst=66.220.154.13 sport=54553 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54553 [ASSURED] mark=0 use=2
tcp      6 54 TIME_WAIT src=50.100.200.144 dst=128.241.90.129 sport=35777 dport=80 src=128.241.90.129 dst=50.100.200.144 sport=80 dport=35777 [ASSURED] mark=0 use=2
tcp      6 431995 ESTABLISHED src=10.0.0.166 dst=157.56.1.52 sport=54487 dport=443 src=157.56.1.52 dst=50.100.200.144 sport=443 dport=54487 [ASSURED] mark=0 use=2
tcp      6 431964 ESTABLISHED src=50.100.200.144 dst=173.223.52.186 sport=43073 dport=80 src=173.223.52.186 dst=50.100.200.144 sport=80 dport=43073 [ASSURED] mark=0 use=2
tcp      6 431975 ESTABLISHED src=10.0.0.212 dst=64.212.42.136 sport=61710 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=61710 [ASSURED] mark=0 use=2
udp      17 13 src=10.0.0.27 dst=58.11.131.152 sport=16701 dport=56922 src=58.11.131.152 dst=50.100.200.144 sport=56922 dport=16701 mark=0 use=2
tcp      6 158448 ESTABLISHED src=10.0.0.141 dst=96.17.15.115 sport=49469 dport=80 [UNREPLIED] src=10.0.0.1 dst=10.0.0.141 sport=3128 dport=49469 mark=0 use=2
tcp      6 231865 ESTABLISHED src=10.0.0.156 dst=65.55.205.125 sport=52544 dport=443 src=65.55.205.125 dst=50.100.200.144 sport=443 dport=52544 [ASSURED] mark=0 use=2
tcp      6 7 TIME_WAIT src=50.100.200.144 dst=66.220.145.41 sport=59130 dport=80 src=66.220.145.41 dst=50.100.200.144 sport=80 dport=59130 [ASSURED] mark=0 use=2
tcp      6 62 TIME_WAIT src=50.100.200.144 dst=64.4.34.145 sport=42385 dport=80 src=64.4.34.145 dst=50.100.200.144 sport=80 dport=42385 [ASSURED] mark=0 use=2
tcp      6 73338 ESTABLISHED src=10.0.0.212 dst=96.17.15.175 sport=62648 dport=1935 src=96.17.15.175 dst=50.100.200.144 sport=1935 dport=62648 [ASSURED] mark=0 use=2
tcp      6 82 TIME_WAIT src=50.100.200.144 dst=66.220.145.41 sport=39475 dport=80 src=66.220.145.41 dst=50.100.200.144 sport=80 dport=39475 [ASSURED] mark=0 use=2
tcp      6 431961 ESTABLISHED src=10.0.0.141 dst=107.22.187.173 sport=49610 dport=443 src=107.22.187.173 dst=50.100.200.144 sport=443 dport=49610 [ASSURED] mark=0 use=2
udp      17 130 src=127.0.0.1 dst=127.0.0.1 sport=43218 dport=161 src=127.0.0.1 dst=127.0.0.1 sport=161 dport=43218 [ASSURED] mark=0 use=2
udp      17 176 src=127.0.0.1 dst=127.0.0.1 sport=33809 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=33809 [ASSURED] mark=0 use=2
tcp      6 431983 ESTABLISHED src=50.100.200.144 dst=23.3.105.80 sport=55140 dport=80 src=23.3.105.80 dst=50.100.200.144 sport=80 dport=55140 [ASSURED] mark=0 use=2
tcp      6 27 TIME_WAIT src=10.0.0.166 dst=96.17.15.80 sport=54516 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54516 [ASSURED] mark=0 use=2
tcp      6 419049 ESTABLISHED src=10.0.0.166 dst=209.183.34.207 sport=55256 dport=443 src=209.183.34.207 dst=50.100.200.144 sport=443 dport=55256 [ASSURED] mark=0 use=2
udp      17 23 src=10.0.0.212 dst=10.0.0.1 sport=64182 dport=53 src=10.0.0.1 dst=10.0.0.212 sport=53 dport=64182 mark=0 use=2
udp      17 8 src=10.0.0.212 dst=10.0.0.1 sport=54522 dport=53 src=10.0.0.1 dst=10.0.0.212 sport=53 dport=54522 [ASSURED] mark=0 use=2
tcp      6 89 TIME_WAIT src=50.100.200.144 dst=69.171.229.11 sport=48638 dport=80 src=69.171.229.11 dst=50.100.200.144 sport=80 dport=48638 [ASSURED] mark=0 use=2
tcp      6 431983 ESTABLISHED src=10.0.0.212 dst=72.23.126.230 sport=56782 dport=44345 src=72.23.126.230 dst=50.100.200.144 sport=44345 dport=56782 [ASSURED] mark=0 use=2
udp      17 130 src=127.0.0.1 dst=127.0.0.1 sport=37715 dport=161 src=127.0.0.1 dst=127.0.0.1 sport=161 dport=37715 [ASSURED] mark=0 use=2
udp      17 176 src=50.100.200.144 dst=64.185.96.68 sport=53 dport=53 src=64.185.96.68 dst=50.100.200.144 sport=53 dport=53 [ASSURED] mark=0 use=2
tcp      6 5 TIME_WAIT src=50.100.200.144 dst=74.125.233.31 sport=50556 dport=80 src=74.125.233.31 dst=50.100.200.144 sport=80 dport=50556 [ASSURED] mark=0 use=2
tcp      6 27 TIME_WAIT src=50.100.200.144 dst=69.171.229.14 sport=50171 dport=80 src=69.171.229.14 dst=50.100.200.144 sport=80 dport=50171 [ASSURED] mark=0 use=2
tcp      6 158141 ESTABLISHED src=10.0.0.156 dst=65.55.205.125 sport=50691 dport=443 src=65.55.205.125 dst=50.100.200.144 sport=443 dport=50691 [ASSURED] mark=0 use=2
tcp      6 275144 ESTABLISHED src=10.0.0.156 dst=65.55.205.125 sport=58252 dport=443 src=65.55.205.125 dst=50.100.200.144 sport=443 dport=58252 [ASSURED] mark=0 use=2
udp      17 13 src=10.0.0.212 dst=58.11.131.152 sport=33604 dport=56922 src=58.11.131.152 dst=50.100.200.144 sport=56922 dport=33604 mark=0 use=2
tcp      6 110 TIME_WAIT src=10.0.0.27 dst=64.212.42.136 sport=57648 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=57648 [ASSURED] mark=0 use=2
tcp      6 431983 ESTABLISHED src=10.0.0.166 dst=23.3.105.56 sport=54530 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54530 [ASSURED] mark=0 use=2
tcp      6 299 ESTABLISHED src=50.100.200.144 dst=204.201.160.64 sport=60778 dport=80 src=204.201.160.64 dst=50.100.200.144 sport=80 dport=60778 [ASSURED] mark=0 use=2
tcp      6 35146 ESTABLISHED src=10.0.0.156 dst=65.55.205.125 sport=49741 dport=443 src=65.55.205.125 dst=50.100.200.144 sport=443 dport=49741 [ASSURED] mark=0 use=2
udp      17 6 src=10.0.0.166 dst=65.55.158.118 sport=65092 dport=3544 src=65.55.158.118 dst=50.100.200.144 sport=3544 dport=65092 mark=0 use=2
tcp      6 53 TIME_WAIT src=50.100.200.144 dst=23.3.105.65 sport=56270 dport=80 src=23.3.105.65 dst=50.100.200.144 sport=80 dport=56270 [ASSURED] mark=0 use=2
tcp      6 431982 ESTABLISHED src=50.100.200.144 dst=199.47.216.149 sport=35816 dport=80 src=199.47.216.149 dst=50.100.200.144 sport=80 dport=35816 [ASSURED] mark=0 use=2
tcp      6 431994 ESTABLISHED src=10.0.0.166 dst=66.220.149.18 sport=54403 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54403 [ASSURED] mark=0 use=2
tcp      6 116 TIME_WAIT src=10.0.0.212 dst=204.236.238.3 sport=49853 dport=80 src=10.0.0.1 dst=10.0.0.212 sport=3128 dport=49853 [ASSURED] mark=0 use=2
tcp      6 5 TIME_WAIT src=50.100.200.144 dst=74.125.127.132 sport=33874 dport=80 src=74.125.127.132 dst=50.100.200.144 sport=80 dport=33874 [ASSURED] mark=0 use=2
udp      17 130 src=127.0.0.1 dst=127.0.0.1 sport=57256 dport=161 src=127.0.0.1 dst=127.0.0.1 sport=161 dport=57256 [ASSURED] mark=0 use=2
tcp      6 431991 ESTABLISHED src=10.0.0.166 dst=66.220.149.18 sport=54491 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54491 [ASSURED] mark=0 use=2
tcp      6 81 TIME_WAIT src=10.0.0.141 dst=107.22.187.173 sport=49608 dport=443 src=107.22.187.173 dst=50.100.200.144 sport=443 dport=49608 [ASSURED] mark=0 use=2
tcp      6 33 TIME_WAIT src=10.0.0.27 dst=64.212.42.136 sport=57645 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=57645 [ASSURED] mark=0 use=2
udp      17 73 src=50.100.200.144 dst=64.185.96.5 sport=53 dport=53 src=64.185.96.5 dst=50.100.200.144 sport=53 dport=53 [ASSURED] mark=0 use=2
tcp      6 299 ESTABLISHED src=10.0.0.166 dst=213.146.189.205 sport=53365 dport=12350 src=213.146.189.205 dst=50.100.200.144 sport=12350 dport=53365 [ASSURED] mark=0 use=2
tcp      6 59 CLOSE_WAIT src=10.0.0.212 dst=64.212.42.136 sport=49847 dport=3128 src=64.212.42.136 dst=50.100.200.144 sport=3128 dport=49847 [ASSURED] mark=0 use=2
udp      17 130 src=10.0.0.166 dst=10.0.0.1 sport=68 dport=67 src=10.0.0.1 dst=10.0.0.166 sport=67 dport=68 [ASSURED] mark=0 use=2
tcp      6 431995 ESTABLISHED src=10.0.0.166 dst=173.223.52.210 sport=54559 dport=80 src=10.0.0.1 dst=10.0.0.166 sport=3128 dport=54559 [ASSURED] mark=0 use=2
tcp      6 39 TIME_WAIT src=50.100.200.144 dst=66.220.145.41 sport=39288 dport=80 src=66.220.145.41 dst=50.100.200.144 sport=80 dport=39288 [ASSURED] mark=0 use=2
tcp      6 431999 ESTABLISHED src=10.0.0.141 dst=204.201.160.64 sport=49595 dport=80 src=10.0.0.1 dst=10.0.0.141 sport=3128 dport=49595 [ASSURED] mark=0 use=2

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    inet 50.100.200.144/26 brd 50.100.200.191 scope global eth0
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    inet 10.0.0.1/24 brd 10.0.0.255 scope global eth1
    inet 50.100.200.144/32 scope global eth1

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    1063694965 8313882  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    1063694965 8313882  0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:14:22:23:53:cd brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    2763935641 337073856 0       0       0       4415169
    TX: bytes  packets  errors  dropped carrier collsns 
    1089844796 194700085 0       0       0       0      
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:14:22:23:53:ce brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    1240326413 185540617 0       0       0       254276 
    TX: bytes  packets  errors  dropped carrier collsns 
    3507939655 239608155 0       0       0       0      

Per-IP Counters

   iptaccount is not installed

/proc

   /proc/version = Linux version 2.6.38-8-server (buildd@allspice) (gcc version 4.5.2 (Ubuntu/Linaro 4.5.2-8ubuntu3) ) #42-Ubuntu SMP Mon Apr 11 03:49:04 UTC 2011
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 0
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 1
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 1
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 1

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 50.100.200.128 dev eth0  proto kernel  scope link  src 50.100.200.144 
local 50.100.200.144 dev eth0  proto kernel  scope host  src 50.100.200.144 
local 50.100.200.144 dev eth1  proto kernel  scope host  src 50.100.200.144 
broadcast 50.100.200.191 dev eth0  proto kernel  scope link  src 50.100.200.144 
local 10.0.0.1 dev eth1  proto kernel  scope host  src 10.0.0.1 
broadcast 10.0.0.0 dev eth1  proto kernel  scope link  src 10.0.0.1 
broadcast 10.0.0.255 dev eth1  proto kernel  scope link  src 10.0.0.1 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

50.100.200.128/26 dev eth0  proto kernel  scope link  src 50.100.200.144 
10.0.0.0/24 dev eth1  proto kernel  scope link  src 10.0.0.1 
default via 50.100.200.129 dev eth0  metric 100 

ARP

? (50.100.200.129) at 00:14:22:11:80:7d [ether] on eth0
? (10.0.0.230) at 00:0b:db:73:b5:98 [ether] on eth1
? (10.0.0.166) at b8:70:f4:ef:e3:73 [ether] on eth1
? (10.0.0.156) at 00:27:22:2e:11:07 [ether] on eth1
? (10.0.0.132) at 00:06:5b:c8:d7:e2 [ether] on eth1
? (10.0.0.212) at e8:06:88:cb:a8:83 [ether] on eth1
? (10.0.0.145) at 00:b0:d0:52:7c:8f [ether] on eth1
? (10.0.0.169) at 00:06:5b:cb:b7:94 [ether] on eth1
? (10.0.0.50) at 00:01:e6:78:69:9d [ether] on eth1
? (10.0.0.27) at 00:1e:68:bd:9f:17 [ether] on eth1
? (10.0.0.2) at 00:01:e7:e9:4e:00 [ether] on eth1
? (10.0.0.130) at 00:0b:db:8b:0f:66 [ether] on eth1
? (10.0.0.203) at e4:48:c7:29:eb:90 [ether] on eth1
? (10.0.0.133) at 00:0b:db:53:af:8e [ether] on eth1
? (10.0.0.141) at 00:27:22:2e:11:1e [ether] on eth1
? (10.0.0.51) at 08:00:37:32:95:66 [ether] on eth1
? (10.0.0.202) at 00:27:22:2e:11:1e [ether] on eth1
? (10.0.0.134) at 00:0d:56:08:de:d5 [ether] on eth1

Modules

iptable_filter         12810  1 
iptable_mangle         12734  1 
iptable_nat            13182  1 
iptable_raw            12678  0 
ip_tables              27456  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_addrtype           12599  3 
ipt_ah                 12525  0 
ipt_CLUSTERIP          13312  0 
ipt_ecn                12529  0 
ipt_ECN                12529  0 
ipt_LOG                17016  9 
ipt_MASQUERADE         12759  1 
ipt_NETMAP             12541  0 
ipt_REDIRECT           12549  1 
ipt_REJECT             12576  4 
ipt_ULOG               17439  0 
nf_conntrack           81956  30 xt_connlimit,ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_sane,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda    13041  1 nf_nat_amanda
nf_conntrack_ftp       13359  1 nf_nat_ftp
nf_conntrack_h323      58565  1 nf_nat_h323
nf_conntrack_ipv4      19640  21 iptable_nat,nf_nat
nf_conntrack_irc       13383  1 nf_nat_irc
nf_conntrack_netbios_ns    12654  0 
nf_conntrack_netlink    26527  0 
nf_conntrack_pptp      13839  1 nf_nat_pptp
nf_conntrack_proto_gre    13606  1 nf_conntrack_pptp
nf_conntrack_proto_sctp    13335  0 
nf_conntrack_sane      12856  0 
nf_conntrack_sip       29609  1 nf_nat_sip
nf_conntrack_tftp      12953  1 nf_nat_tftp
nf_defrag_ipv4         12729  2 xt_TPROXY,nf_conntrack_ipv4
nf_defrag_ipv6         13325  1 xt_TPROXY
nf_nat                 25736  12 ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,iptable_nat
nf_nat_amanda          12491  0 
nf_nat_ftp             12649  0 
nf_nat_h323            17002  0 
nf_nat_irc             12643  0 
nf_nat_pptp            12629  0 
nf_nat_proto_gre       12767  1 nf_nat_pptp
nf_nat_sip             17087  0 
nf_nat_snmp_basic      17397  0 
nf_nat_tftp            12489  0 
nf_tproxy_core         12610  1 xt_TPROXY,[permanent]
xt_CLASSIFY            12507  0 
xt_comment             12504  53 
xt_connlimit           12716  0 
xt_connmark            12755  0 
xt_conntrack           12728  18 
xt_dccp                12606  0 
xt_dscp                12597  0 
xt_DSCP                12629  0 
xt_hashlimit           17698  0 
xt_helper              12583  0 
xt_iprange             12541  0 
xt_length              12536  0 
xt_limit               12711  0 
xt_mac                 12492  0 
xt_mark                12563  1 
xt_multiport           12597  6 
xt_NFLOG               12537  0 
xt_NFQUEUE             12699  0 
xt_owner               12498  0 
xt_physdev             12587  0 
xt_pkttype             12504  0 
xt_policy              12582  0 
xt_realm               12498  0 
xt_recent              18393  0 
xt_state               12578  0 
xt_tcpmss              12501  0 
xt_TCPMSS              12715  1 
xt_tcpudp              12603  59 
xt_time                12661  0 
xt_TPROXY              12854  0 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Available
   MARK Target: Available
   Extended MARK Target: Available
   Extended MARK Target 2: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Available
   Goto Support: Available
   LOGMARK Target: Not available
   IPMARK Target: Not available
   LOG Target: Available
   Persistent SNAT: Available
   TPROXY Target: Available
   FLOW Classifier: Available
   fwmark route mask: Available
   Mark in any table: Available
   Header Match: Not available
   ACCOUNT Target: Not available
   AUDIT Target: Not available
   ipset V5: Not available

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      23580/dovecot   
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      2071/apache2    
tcp        0      0 10.0.0.1:53             0.0.0.0:*               LISTEN      23587/named     
tcp        0      0 50.100.200.144:53         0.0.0.0:*               LISTEN      23587/named     
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      23587/named     
tcp        0      0 0.0.0.0:3128            0.0.0.0:*               LISTEN      31960/squid     
tcp        0      0 0.0.0.0:3000            0.0.0.0:*               LISTEN      1010/ntop       
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      23587/named     
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      26077/master    
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      2071/apache2    
tcp        0      0 0.0.0.0:33              0.0.0.0:*               LISTEN      1279/sshd       
tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTEN      23580/dovecot   
tcp        0      0 0.0.0.0:995             0.0.0.0:*               LISTEN      23580/dovecot   
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      778/mysqld      
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN      23580/dovecot   
tcp        0      0 10.0.0.1:3128           10.0.0.166:54491        ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:59539      96.17.15.10:80          ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:60778      204.201.160.64:80       ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:55951      69.171.224.12:80        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54549        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.212:64266        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54562        ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:59594      64.4.34.145:80          ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54558        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54362        ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:54172      173.223.52.210:80       ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:43073      173.223.52.186:80       ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:39475      66.220.145.41:80        TIME_WAIT   -               
tcp        0      0 10.0.0.1:3128           10.0.0.166:54554        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54559        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54560        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54561        ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:49661      69.171.229.11:80        TIME_WAIT   -               
tcp        0      0 50.100.200.144:54786      69.171.224.12:80        TIME_WAIT   -               
tcp        0      0 50.100.200.144:47779      173.223.52.186:80       ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:49908      96.17.15.81:80          ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54530        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54544        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54403        ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:48638      69.171.229.11:80        TIME_WAIT   -               
tcp        0      0 50.100.200.144:33018      173.223.52.209:80       ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:46353      66.220.145.41:80        ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:55140      23.3.105.80:80          ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:54036      173.223.52.202:80       ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:55370      173.223.52.217:80       ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:33             10.0.0.27:55479         ESTABLISHED 30833/sshd: erik [p
tcp        0      0 10.0.0.1:3128           10.0.0.166:54557        ESTABLISHED 31960/squid     
tcp        0   1448 10.0.0.1:3128           10.0.0.141:49595        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54520        ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:38330      128.241.90.107:80       ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:51336      69.171.224.12:80        TIME_WAIT   -               
tcp        0      0 50.100.200.144:35816      199.47.216.149:80       ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:33             10.0.0.212:63737        ESTABLISHED 30605/sshd: erik [p
tcp        0      0 50.100.200.144:46322      96.17.15.81:80          ESTABLISHED 31960/squid     
tcp        0      0 50.100.200.144:54645      23.3.105.115:80         ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54537        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54556        ESTABLISHED 31960/squid     
tcp        0      0 10.0.0.1:3128           10.0.0.166:54555        ESTABLISHED 31960/squid     
tcp6       0      0 :::53                   :::*                    LISTEN      23587/named     
tcp6       0      0 ::1:953                 :::*                    LISTEN      23587/named     
tcp6       0      0 :::25                   :::*                    LISTEN      26077/master    
tcp6       0      0 :::33                   :::*                    LISTEN      1279/sshd       
udp        0      0 10.0.0.1:123            0.0.0.0:*                           1464/ntpd       
udp        0      0 50.100.200.144:123        0.0.0.0:*                           1464/ntpd       
udp        0      0 127.0.0.1:123           0.0.0.0:*                           1464/ntpd       
udp        0      0 0.0.0.0:123             0.0.0.0:*                           1464/ntpd       
udp        0      0 0.0.0.0:161             0.0.0.0:*                           25904/snmpd     
udp        0      0 0.0.0.0:33809           0.0.0.0:*                           31960/squid     
udp        0      0 0.0.0.0:3130            0.0.0.0:*                           31960/squid     
udp        0      0 0.0.0.0:53              0.0.0.0:*                           23587/named     
udp        0      0 10.0.0.1:53             0.0.0.0:*                           23587/named     
udp        0      0 50.100.200.144:53         0.0.0.0:*                           23587/named     
udp        0      0 127.0.0.1:53            0.0.0.0:*                           23587/named     
udp        0      0 0.0.0.0:67              0.0.0.0:*                           27876/dhcpd     
udp        0      0 0.0.0.0:69              0.0.0.0:*                           21850/in.tftpd  
udp6       0      0 ::1:123                 :::*                                1464/ntpd       
udp6       0      0 fe80::214:22ff:fe23:123 :::*                                1464/ntpd       
udp6       0      0 fe80::214:22ff:fe23:123 :::*                                1464/ntpd       
udp6       0      0 :::123                  :::*                                1464/ntpd       
udp6       0      0 ::1:53                  :::*                                23587/named     
udp6       0      0 :::53                   :::*                                23587/named     

Traffic Control

Device eth0:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 39636300436 bytes 194700121 pkt (dropped 0, overlimits 0 requeues 71) 
 backlog 0b 0p requeues 71 


Device eth1:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 268959672661 bytes 239608455 pkt (dropped 0, overlimits 0 requeues 112) 
 backlog 0b 0p requeues 112 



TC Filters

Device eth0:

Device eth1:

