Shorewall 5.2.3.2 Dump at fw - Thu 20 Feb 22:05:54 AEDT 2020

Shorewall is running
State:Started Thu 20 Feb 17:35:10 AEDT 2020 from /etc/shorewall/ (/var/lib/shorewall/firewall compiled Thu 20 Feb 17:35:09 AEDT 2020 by Shorewall version 5.2.3.2)

Counters reset Thu 20 Feb 22:02:46 AEDT 2020

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 5742 1076K net-fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc-fw     all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
   82 13609 loc-fw     all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
17030 1224K loc-fw     all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc-fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
   16  1216 dmz-fw     all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
   16  1216 dmz-fw     all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
   15  1140 dmz-fw     all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-fw     all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:INPUT:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
2027K 4442M net_frwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
  172 10088 loc_frwd   all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
 775K   70M loc_frwd   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 4402 6716K dmz_frwd   all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
18554 9521K dmz_frwd   all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
  314 4777K dmz_frwd   all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz_frwd   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:FORWARD:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
15473 4304K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 4387  298K fw-net     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 eth2_out   all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_out  all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
    8  1556 eth3_out   all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_out   all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    3   120 vif-www_out  all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
    6   240 vif-mail_out  all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www2_out  all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_out   all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 fw-fw      all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:OUTPUT:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
  982  426K vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
 1022  134K vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
  303 4777K vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
  184 10680 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-dmz:ACCEPT:"
  184 10680 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz-fw (4 references)
 pkts bytes target     prot opt in     out     source               destination         
   47  3572 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   47  3572 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-fw:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
  416 4753K vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
13104 5390K vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    2   104 vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    3   132 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-loc:REJECT:"
    3   132 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 3004 1536K vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
 4428 3997K vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    9   450 vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
  384 26809 ~log1      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  udp dpt:53
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp dpt:53
   12   720 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  multiport dports 80,443
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp dpt:25
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  multiport dports 993,465,587
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
   45  3255 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-net:REJECT:"
   45  3255 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz_frwd (4 references)
 pkts bytes target     prot opt in     out     source               destination         
 7441 5534K dmz-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
13522   10M dmz-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 1325 4910K dmz-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
  729  397K dmz-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
  253 29461 dmz-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  260 13508 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp flags:!0x17/0x02

Chain dynamic (17 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth1_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           [goto] 
 7200  485K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 768K   69M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 7033  474K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 6864  669K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
10166  555K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    5  1640 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:67:68
    2   104 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    8  1556 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    9   360 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:fw-dmz:REJECT:"
    9   360 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain fw-fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    4  1352 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:67:68
    1    48 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spts:67:68 dpts:67:68 /* DHCPfwd */
    3   156 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 4248  287K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* DNS */
  137 10412 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    2   120 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
21303 2242K eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    5   248 ~log3      tcp  --  *      *       172.16.3.2           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.3           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.4           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.5           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.6           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.7           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.8           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.9           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.10          0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 /* SMTP */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:465 /* SMTPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:465 /* SMTPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:465 /* SMTPS */
  319 17534 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:993 /* IMAPS */
  255 13824 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:993 /* IMAPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:993 /* IMAPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
    5   320 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    2    80 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:loc-dmz:REJECT:"
    2    80 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc-fw (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_iop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
   82 13609 vif-fileserv_iop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
17030 1224K eth3_iop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_iop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    2   104 ~log2      tcp  --  *      *       172.16.3.2           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.3           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.4           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.5           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.6           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.7           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.8           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.9           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.10          0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
 3813  256K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* DNS */
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spts:67:68 dpts:67:68 /* DHCPfwd */
   28  2128 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:548
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
 3098  422K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    2   104 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
    2   104 eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    2   104 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
  170  9984 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
 754K   67M eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
  374 21192 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
 3928  239K ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
 2315  193K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc_frwd (4 references)
 pkts bytes target     prot opt in     out     source               destination         
 754K   67M loc-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    2   104 loc-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
    2   104 loc-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
  745 46708 loc-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
20554 2195K loc-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    2   104 loc-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    2    80 loc-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (7 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 4 level 6 prefix "Shorewall:logflags:DROP:"
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
 8701  512K net-dmz~   all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 8481  496K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 3249 1585K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 6667  310K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  156  8064 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
 6511  301K dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ~log0      udp  --  *      *       49.183.151.254       0.0.0.0/0           [goto]  udp dpts:33434:33524 /* Trcrt */
    0     0 ~log0      icmp --  *      *       49.183.151.254       0.0.0.0/0           [goto]  icmptype 8 /* Trcrt */
  671 54556 ~log0      udp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  udp dpt:53
    0     0 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  tcp dpt:53
  163  9148 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.103      [goto]  multiport dports 80,443
   42  2464 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  tcp dpt:25
  123  7776 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.104      [goto]  multiport dports 993,465,587
  185 11724 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.105      [goto]  multiport dports 993,465,587
    4   208 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.106      [goto]  multiport dports 993,465,587
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
 6877  388K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-dmz~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   19  6562 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
  201  9516 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1222 59712 net-fw~    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 1172 56341 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 4520 1016K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 1103 44760 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   16   700 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
 1087 44060 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    4   556 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123
    0     0 ACCEPT     icmp --  *      *       203.214.66.97        0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
 1152 55085 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-fw~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    5  1359 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
   45  2012 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 net-loc~   all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
2015K 4440M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-loc~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 net-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
  183  398K net-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
2015K 4440M net-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 5619 1012K net-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
 6322 1083K net-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    9  1125 net-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 net-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain reject (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match src-type BROADCAST
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
   59  3827 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with tcp-reset
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-port-unreachable
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-unreachable
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibited

Chain sfilter (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:sfilter:DROP:"
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcpflags (17 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x3F/0x29
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x3F/0x00
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x06/0x06
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x05/0x05
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x03/0x03
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x19/0x09
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp spt:0 flags:0x17/0x02

Chain vif-fileserv_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    5   300 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
  167  9788 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    5   300 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-fileserv_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   82 13609 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-fileserv_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-mail_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
  419 27261 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
18135 9494K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
  196 12064 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-mail_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    6   240 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www2_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
   19   850 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
  295 4776K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   10   400 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www2_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
  190 13485 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 4212 6702K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   38  2323 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    3   120 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ~log0 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
 1188 85876 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* Trcrt */ LOG flags 0 level 6 prefix "Shorewall:net-dmz:ACCEPT:"
 1188 85876 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* Trcrt */

Chain ~log1 (5 references)
 pkts bytes target     prot opt in     out     source               destination         
  396 27529 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-net:ACCEPT:"
  396 27529 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ~log2 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    2   104 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */ LOG flags 0 level 6 prefix "Shorewall:loc-fw:ACCEPT:"
    2   104 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */

Chain ~log3 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    5   248 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */ LOG flags 0 level 6 prefix "Shorewall:loc-dmz:ACCEPT:"
    5   248 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */

Chain sha-lh-4bd4cc135e1fbb0d6cdc (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain sha-rh-e4eb9fd9de266c24a345 (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0            recent: SET name: %CURRENTTIME side: source mask: 255.255.255.255

ARP rules

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)

Log (/var/log/messages)

Feb 20 22:04:26 eth0_masq:LOG:IN= OUT=eth0 SRC=172.16.3.2 DST=203.214.66.97 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=62374 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:04:31 eth0_masq:LOG:IN= OUT=eth0 SRC=172.16.3.2 DST=203.214.66.97 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=62375 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:04:45 eth0_masq:LOG:IN= OUT=eth0 SRC=172.16.3.2 DST=203.214.66.97 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=62376 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:04:50 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.183.163.227 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=52023 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:04:53 eth0_masq:LOG:IN= OUT=eth0 SRC=203.214.66.98 DST=203.214.66.97 LEN=51 TOS=0x00 PREC=0x00 TTL=64 ID=47344 DF PROTO=UDP SPT=61862 DPT=53 LEN=31 
Feb 20 22:04:53 eth0_masq:LOG:IN= OUT=eth0 SRC=203.214.66.98 DST=203.0.178.191 LEN=51 TOS=0x00 PREC=0x00 TTL=64 ID=54045 DF PROTO=UDP SPT=61862 DPT=53 LEN=31 
Feb 20 22:04:53 eth0_masq:LOG:IN= OUT=eth0 SRC=203.214.66.98 DST=203.215.29.191 LEN=51 TOS=0x00 PREC=0x00 TTL=64 ID=25481 DF PROTO=UDP SPT=61862 DPT=53 LEN=31 
Feb 20 22:04:53 eth0_masq:LOG:IN= OUT=eth0 SRC=203.214.66.98 DST=8.8.8.8 LEN=51 TOS=0x00 PREC=0x00 TTL=64 ID=13416 DF PROTO=UDP SPT=61862 DPT=53 LEN=31 
Feb 20 22:04:53 eth0_masq:LOG:IN= OUT=eth0 SRC=203.214.66.98 DST=8.8.4.4 LEN=51 TOS=0x00 PREC=0x00 TTL=64 ID=2319 DF PROTO=UDP SPT=61862 DPT=53 LEN=31 
Feb 20 22:04:53 eth0_masq:LOG:IN= OUT=eth0 SRC=172.16.3.2 DST=203.214.66.97 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=62399 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:04:56 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=49.183.163.227 DST=203.214.66.103 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=27368 DF PROTO=TCP SPT=52024 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:05:08 eth0_masq:LOG:IN= OUT=eth0 SRC=172.16.3.2 DST=203.214.66.97 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=62444 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:05:09 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=54.232.25.207 DST=203.214.66.100 LEN=66 TOS=0x00 PREC=0x00 TTL=110 ID=27519 PROTO=UDP SPT=57368 DPT=53 LEN=46 
Feb 20 22:05:16 eth0_masq:LOG:IN= OUT=eth0 SRC=172.16.3.2 DST=203.214.66.97 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=62445 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:05:21 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.183.163.227 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=52025 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:05:28 eth0_masq:LOG:IN= OUT=eth0 SRC=172.16.3.2 DST=203.214.66.97 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=62446 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:05:48 eth0_masq:LOG:IN= OUT=eth0 SRC=172.16.3.2 DST=203.214.66.97 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=62447 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:05:53 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.183.163.227 DST=203.214.66.104 LEN=64 TOS=0x10 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP SPT=52030 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:05:53 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.183.163.227 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=52034 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 20 22:05:54 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.183.163.227 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=52035 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 188 packets, 13245 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 21 packets, 3956 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 40 packets, 2420 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   50  3183 eth0_masq  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 17 packets, 1030 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   50  3183 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:eth0_masq:LOG:"
    0     0 MASQUERADE  all  --  *      *       203.214.66.100       0.0.0.0/0           
    4   293 MASQUERADE  all  --  *      *       203.214.66.103       0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.4.203         0.0.0.0/0           
    1    68 MASQUERADE  all  --  *      *       203.214.66.104       0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       203.214.66.105       0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       203.214.66.106       0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.1.130         0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.1.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.2.0/24        0.0.0.0/0           
   28  1792 MASQUERADE  all  --  *      *       172.16.3.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.4.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.5.0/24        0.0.0.0/0           

Mangle Table

Chain PREROUTING (policy ACCEPT 2849K packets, 4535M bytes)
 pkts bytes target     prot opt in     out     source               destination         
2849K 4535M tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 22901 packets, 2318K bytes)
 pkts bytes target     prot opt in     out     source               destination         
22901 2318K tcin       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 2825K packets, 4533M bytes)
 pkts bytes target     prot opt in     out     source               destination         
16362  886K TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp flags:0x06/0x02 TCPMSS clamp to PMTU
2825K 4533M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            MARK and 0xffffff00
2825K 4533M tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 19877 packets, 4603K bytes)
 pkts bytes target     prot opt in     out     source               destination         
19877 4603K tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 2838K packets, 4537M bytes)
 pkts bytes target     prot opt in     out     source               destination         
2838K 4537M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 2849K packets, 4535M bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:10080 CT helper amanda
    9   452 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 flags:0x17/0x02 CT helper ftp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1719 CT helper RAS
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
    4   176 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6667 flags:0x17/0x02 CT helper irc
   47  3666 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:137 CT helper netbios-ns
   29  1680 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1723 flags:0x17/0x02 CT helper pptp
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6566 flags:0x17/0x02 CT helper sane
   53 22959 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:5060 CT helper sip
   11   760 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161 CT helper snmp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:69 CT helper tftp

Chain OUTPUT (policy ACCEPT 19877 packets, 4603K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:10080 CT helper amanda
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 flags:0x17/0x02 CT helper ftp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1719 CT helper RAS
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6667 flags:0x17/0x02 CT helper irc
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:137 CT helper netbios-ns
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1723 flags:0x17/0x02 CT helper pptp
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6566 flags:0x17/0x02 CT helper sane
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:5060 CT helper sip
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161 CT helper snmp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:69 CT helper tftp

Conntrack Table (50 out of 262144)

ipv4     2 tcp      6 324665 ESTABLISHED src=36.110.199.141 dst=203.214.66.103 sport=31668 dport=443 src=172.16.4.103 dst=36.110.199.141 sport=443 dport=31668 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 426978 ESTABLISHED src=172.16.3.2 dst=172.16.4.203 sport=55881 dport=22 src=172.16.4.203 dst=172.16.3.2 sport=22 dport=55881 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59341 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59341 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431889 ESTABLISHED src=185.138.250.49 dst=203.214.66.100 sport=53047 dport=25 src=203.214.66.100 dst=185.138.250.49 sport=25 dport=53047 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 299 ESTABLISHED src=49.183.163.227 dst=203.214.66.105 sport=52034 dport=993 src=203.214.66.105 dst=49.183.163.227 sport=993 dport=52034 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 8 FIN_WAIT src=49.183.163.227 dst=203.214.66.105 sport=51942 dport=993 src=203.214.66.105 dst=49.183.163.227 sport=993 dport=51942 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431820 ESTABLISHED src=172.16.3.2 dst=74.125.68.108 sport=61918 dport=993 src=74.125.68.108 dst=203.214.66.98 sport=993 dport=61918 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 405407 ESTABLISHED src=123.125.71.41 dst=203.214.66.103 sport=29916 dport=443 src=172.16.4.103 dst=123.125.71.41 sport=443 dport=29916 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 391029 ESTABLISHED src=123.125.71.33 dst=203.214.66.103 sport=26879 dport=443 src=172.16.4.103 dst=123.125.71.33 sport=443 dport=26879 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 6 CLOSE src=49.183.163.227 dst=203.214.66.105 sport=52025 dport=993 src=203.214.66.105 dst=49.183.163.227 sport=993 dport=52025 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431815 ESTABLISHED src=172.16.3.198 dst=17.57.145.37 sport=49362 dport=443 src=17.57.145.37 dst=203.214.66.98 sport=443 dport=49362 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 429464 ESTABLISHED src=123.125.71.105 dst=203.214.66.103 sport=64648 dport=443 src=203.214.66.103 dst=123.125.71.105 sport=443 dport=64648 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431630 ESTABLISHED src=172.16.3.198 dst=40.100.151.2 sport=52836 dport=443 src=40.100.151.2 dst=203.214.66.98 sport=443 dport=52836 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431752 ESTABLISHED src=172.16.3.2 dst=17.57.145.36 sport=56557 dport=5223 src=17.57.145.36 dst=203.214.66.98 sport=5223 dport=56557 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431782 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59333 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59333 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431821 ESTABLISHED src=172.16.3.2 dst=74.125.68.108 sport=61907 dport=993 src=74.125.68.108 dst=203.214.66.98 sport=993 dport=61907 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431927 ESTABLISHED src=172.16.3.2 dst=162.125.35.134 sport=62181 dport=443 src=162.125.35.134 dst=203.214.66.98 sport=443 dport=62181 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431999 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56559 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56559 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 70 FIN_WAIT src=49.183.163.227 dst=203.214.66.105 sport=51990 dport=993 src=203.214.66.105 dst=49.183.163.227 sport=993 dport=51990 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59346 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59346 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 1 src=172.16.3.2 dst=172.16.3.255 sport=17500 dport=17500 [UNREPLIED] src=172.16.3.255 dst=172.16.3.2 sport=17500 dport=17500 mark=0 zone=0 use=2
ipv4     2 tcp      6 299 ESTABLISHED src=49.183.163.227 dst=203.214.66.104 sport=52030 dport=993 src=203.214.66.104 dst=49.183.163.227 sport=993 dport=52030 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431782 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59334 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59334 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431821 ESTABLISHED src=172.16.3.2 dst=74.125.68.108 sport=61889 dport=993 src=74.125.68.108 dst=203.214.66.98 sport=993 dport=61889 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 299 ESTABLISHED src=49.183.163.227 dst=203.214.66.105 sport=52035 dport=993 src=203.214.66.105 dst=49.183.163.227 sport=993 dport=52035 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 428742 ESTABLISHED src=123.125.71.92 dst=203.214.66.103 sport=37614 dport=80 src=203.214.66.103 dst=123.125.71.92 sport=80 dport=37614 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 1 src=172.16.3.2 dst=255.255.255.255 sport=17500 dport=17500 [UNREPLIED] src=255.255.255.255 dst=172.16.3.2 sport=17500 dport=17500 mark=0 zone=0 use=2
ipv4     2 tcp      6 428200 ESTABLISHED src=172.16.3.2 dst=203.214.66.103 sport=59202 dport=22 src=203.214.66.103 dst=172.16.3.2 sport=22 dport=59202 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431979 ESTABLISHED src=172.16.3.2 dst=188.127.201.232 sport=62367 dport=443 src=188.127.201.232 dst=203.214.66.98 sport=443 dport=62367 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 70 FIN_WAIT src=49.183.163.227 dst=203.214.66.104 sport=51992 dport=993 src=203.214.66.104 dst=49.183.163.227 sport=993 dport=51992 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 70 FIN_WAIT src=49.183.163.227 dst=203.214.66.105 sport=51989 dport=993 src=203.214.66.105 dst=49.183.163.227 sport=993 dport=51989 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 3 CLOSE src=172.16.3.2 dst=203.214.66.97 sport=62447 dport=8443 src=203.214.66.97 dst=203.214.66.98 sport=8443 dport=62447 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59348 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59348 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431821 ESTABLISHED src=172.16.3.2 dst=172.217.194.108 sport=62091 dport=993 src=172.217.194.108 dst=203.214.66.98 sport=993 dport=62091 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431820 ESTABLISHED src=172.16.3.2 dst=74.125.68.108 sport=61981 dport=993 src=74.125.68.108 dst=203.214.66.98 sport=993 dport=61981 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59347 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59347 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431759 ESTABLISHED src=172.16.3.7 dst=17.57.145.36 sport=49487 dport=5223 src=17.57.145.36 dst=203.214.66.98 sport=5223 dport=49487 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 407402 ESTABLISHED src=220.181.108.91 dst=203.214.66.103 sport=54830 dport=443 src=172.16.4.103 dst=220.181.108.91 sport=443 dport=54830 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59343 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59343 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 326590 ESTABLISHED src=220.181.108.187 dst=203.214.66.103 sport=42327 dport=80 src=172.16.4.103 dst=220.181.108.187 sport=80 dport=42327 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 411346 ESTABLISHED src=220.181.108.143 dst=203.214.66.103 sport=56059 dport=443 src=172.16.4.103 dst=220.181.108.143 sport=443 dport=56059 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59342 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59342 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 411403 ESTABLISHED src=123.125.71.27 dst=203.214.66.103 sport=25307 dport=80 src=172.16.4.103 dst=123.125.71.27 sport=80 dport=25307 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 25 TIME_WAIT src=172.16.3.2 dst=188.127.201.232 sport=62365 dport=80 src=188.127.201.232 dst=203.214.66.98 sport=80 dport=62365 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 410012 ESTABLISHED src=123.125.71.91 dst=203.214.66.103 sport=38868 dport=80 src=172.16.4.103 dst=123.125.71.91 sport=80 dport=38868 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 427337 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56558 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56558 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431999 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56478 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56478 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431856 ESTABLISHED src=172.16.3.2 dst=35.166.229.101 sport=57900 dport=443 src=35.166.229.101 dst=203.214.66.98 sport=443 dport=57900 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 427140 ESTABLISHED src=172.16.3.2 dst=172.16.1.130 sport=56555 dport=22 src=172.16.1.130 dst=172.16.3.2 sport=22 dport=56555 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 272 ESTABLISHED src=49.183.163.227 dst=203.214.66.103 sport=52024 dport=443 src=203.214.66.103 dst=49.183.163.227 sport=443 dport=52024 [ASSURED] mark=0 zone=0 use=2

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    inet 203.214.66.98/28 brd 203.214.66.111 scope global eth0
       valid_lft forever preferred_lft forever
    inet 172.16.0.1/24 scope global eth0
       valid_lft forever preferred_lft forever
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
    inet 172.16.1.1/24 brd 172.16.1.255 scope global eth1
       valid_lft forever preferred_lft forever
4: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    inet 172.16.2.1/24 brd 172.16.2.255 scope global eth2
       valid_lft forever preferred_lft forever
5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 172.16.3.1/24 brd 172.16.3.255 scope global eth3
       valid_lft forever preferred_lft forever
6: eth5: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    inet 172.16.5.1/24 brd 172.16.5.255 scope global eth5
       valid_lft forever preferred_lft forever
7: eth4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
    inet 172.16.4.1/24 brd 172.16.4.255 scope global eth4
       valid_lft forever preferred_lft forever
11: vif-fileserv: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-fileserv
       valid_lft forever preferred_lft forever
12: vif-www2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-www2
       valid_lft forever preferred_lft forever
14: vif-www: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-www
       valid_lft forever preferred_lft forever
15: vif-mail: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-mail
       valid_lft forever preferred_lft forever

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    1996       19       0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    1996       19       0       0       0       0       
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 38:2c:4a:70:23:c0 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    9809825778 7804896  0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    940172631  2857600  0       0       0       0       
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
    link/ether 38:2c:4a:70:1c:d2 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
4: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:49:2e:44 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 68:05:ca:2c:44:f0 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    944185901  3045385  0       16      0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    9868483550 7434070  0       0       0       0       
6: eth5: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:49:2e:45 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
7: eth4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
    link/ether 68:05:ca:2c:44:f1 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
11: vif-fileserv: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    593251     8959     0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    1083743    4390     0       0       0       0       
12: vif-www2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    4835964    895      0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    95558      970      0       0       0       0       
14: vif-www: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    6890875    5768     0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    5926636    5598     0       0       0       0       
15: vif-mail: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    10424860   21218    0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    4091095    25989    0       0       0       0       

Bridges


Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

local 203.214.66.98 dev vif-www proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-www2 proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-mail proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-fileserv proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev eth0 proto kernel scope host src 203.214.66.98
local 172.16.5.1 dev eth5 proto kernel scope host src 172.16.5.1
local 172.16.4.1 dev eth4 proto kernel scope host src 172.16.4.1
local 172.16.3.1 dev eth3 proto kernel scope host src 172.16.3.1
local 172.16.2.1 dev eth2 proto kernel scope host src 172.16.2.1
local 172.16.1.1 dev eth1 proto kernel scope host src 172.16.1.1
local 172.16.0.1 dev eth0 proto kernel scope host src 172.16.0.1
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
broadcast 203.214.66.96 dev eth0 proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-www proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-www2 proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-mail proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-fileserv proto kernel scope link src 203.214.66.98
broadcast 203.214.66.111 dev eth0 proto kernel scope link src 203.214.66.98
broadcast 172.16.5.255 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
broadcast 172.16.5.0 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
broadcast 172.16.4.255 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
broadcast 172.16.4.0 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
broadcast 172.16.3.255 dev eth3 proto kernel scope link src 172.16.3.1
broadcast 172.16.3.0 dev eth3 proto kernel scope link src 172.16.3.1
broadcast 172.16.2.255 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
broadcast 172.16.2.0 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
broadcast 172.16.1.255 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
broadcast 172.16.1.0 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
broadcast 172.16.0.255 dev eth0 proto kernel scope link src 172.16.0.1
broadcast 172.16.0.0 dev eth0 proto kernel scope link src 172.16.0.1
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1

Table main:

203.214.66.106 dev vif-mail scope link src 203.214.66.98
203.214.66.105 dev vif-mail scope link src 203.214.66.98
203.214.66.104 dev vif-mail scope link src 203.214.66.98
203.214.66.103 dev vif-www scope link src 203.214.66.98
203.214.66.100 dev vif-www scope link src 203.214.66.98
172.16.4.203 dev vif-www2 scope link src 203.214.66.98
172.16.1.130 dev vif-fileserv scope link src 203.214.66.98
203.214.66.96/28 dev eth0 proto kernel scope link src 203.214.66.98
172.16.5.0/24 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
172.16.4.0/24 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
172.16.3.0/24 dev eth3 proto kernel scope link src 172.16.3.1
172.16.2.0/24 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
172.16.1.0/24 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
172.16.0.0/24 dev eth0 proto kernel scope link src 172.16.0.1
default via 203.214.66.97 dev eth0 onlink

Per-IP Counters

   iptaccount is not installed

NF Accounting

No NF Accounting defined (nfacct not found)

Events


PFKEY SPD


PFKEY SAD


/proc

   /proc/version = Linux version 4.19.0-8-amd64 (debian-kernel@lists.debian.org) (gcc version 8.3.0 (Debian 8.3.0-6)) #1 SMP Debian 4.19.98-1 (2020-01-26)
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 0
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/log_martians = 1
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/log_martians = 1
   /proc/sys/net/ipv4/conf/eth4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth4/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth4/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/log_martians = 1
   /proc/sys/net/ipv4/conf/eth5/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth5/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth5/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth5/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth5/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-fileserv/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-fileserv/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-mail/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-mail/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-mail/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-mail/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-mail/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-www/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-www/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-www/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-www/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-www/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-www2/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-www2/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-www2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-www2/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-www2/log_martians = 1

ARP

? (203.214.66.99) at <incomplete> on eth0
? (172.16.4.104) at <incomplete> on eth4
? (203.214.66.100) at 68:05:ca:2c:44:f1 [ether] on vif-www
? (172.16.1.130) at 38:2c:4a:70:1c:d2 [ether] on vif-fileserv
? (172.16.3.201) at 9c:ae:d3:0a:f4:8f [ether] on eth3
? (172.16.3.100) at <incomplete> on eth3
? (172.16.4.254) at <incomplete> on eth4
? (203.214.66.103) at <incomplete> on eth0
? (172.16.4.203) at <incomplete> on eth4
? (172.16.3.10) at <incomplete> on eth3
? (203.214.66.104) at <incomplete> on eth0
? (203.214.66.104) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (203.214.66.97) at 78:24:af:93:40:88 [ether] on eth0
? (172.16.3.214) at <incomplete> on eth3
? (172.16.3.7) at a4:f1:e8:b4:95:d3 [ether] on eth3
? (203.214.66.105) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (172.16.3.198) at 8c:fe:57:0d:fc:23 [ether] on eth3
? (172.16.3.8) at 5c:ad:cf:92:67:47 [ether] on eth3
? (172.16.4.100) at <incomplete> on eth4
? (172.16.3.2) at 68:5b:35:7e:11:5f [ether] on eth3
? (172.16.4.105) at <incomplete> on eth4
? (203.214.66.100) at <incomplete> on eth0
? (203.214.66.106) at <incomplete> on eth0
? (203.214.66.106) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (203.214.66.103) at 68:05:ca:2c:44:f1 [ether] on vif-www
? (172.16.4.103) at <incomplete> on eth4
? (203.214.66.105) at <incomplete> on eth0
? (172.16.3.5) at <incomplete> on eth3
? (172.16.4.203) at 68:05:ca:2c:44:f1 [ether] on vif-www2
? (203.214.66.104) at <from_interface> PERM PUB on eth0
? (203.214.66.105) at <from_interface> PERM PUB on eth0
? (203.214.66.106) at <from_interface> PERM PUB on eth0
? (203.214.66.100) at <from_interface> PERM PUB on eth0
? (203.214.66.103) at <from_interface> PERM PUB on eth0

Modules

ip_tables              28672  4
ipt_MASQUERADE         16384  12
ipt_REJECT             16384  4
nf_conntrack          172032  27 xt_conntrack,nf_nat_irc,nf_nat,nf_conntrack_tftp,nf_nat_ftp,nf_conntrack_pptp,ipt_MASQUERADE,nf_conntrack_netbios_ns,nf_conntrack_sane,nf_nat_ipv4,xt_nat,nf_nat_tftp,nf_nat_amanda,nf_conntrack_sip,nf_conntrack_h323,nf_nat_pptp,nf_conntrack_broadcast,nf_conntrack_irc,nf_conntrack_amanda,nf_conntrack_netlink,nf_conntrack_proto_gre,nf_conntrack_ftp,xt_CT,nf_nat_h323,nf_conntrack_snmp,nf_nat_snmp_basic,nf_nat_sip
nf_conntrack_amanda    16384  3 nf_nat_amanda
nf_conntrack_broadcast    16384  2 nf_conntrack_netbios_ns,nf_conntrack_snmp
nf_conntrack_ftp       20480  3 nf_nat_ftp
nf_conntrack_h323      73728  5 nf_nat_h323
nf_conntrack_irc       16384  3 nf_nat_irc
nf_conntrack_netbios_ns    16384  2
nf_conntrack_netlink    49152  0
nf_conntrack_pptp      16384  3 nf_nat_pptp
nf_conntrack_proto_gre    16384  1 nf_conntrack_pptp
nf_conntrack_sane      16384  2
nf_conntrack_sip       32768  3 nf_nat_sip
nf_conntrack_snmp      16384  3 nf_nat_snmp_basic
nf_conntrack_tftp      16384  3 nf_nat_tftp
nf_defrag_ipv4         16384  1 nf_conntrack
nf_defrag_ipv6         20480  1 nf_conntrack
nf_log_common          16384  1 nf_log_ipv4
nf_log_ipv4            16384  16
nf_nat                 36864  10 nf_nat_irc,nf_nat_ftp,nf_nat_ipv4,xt_nat,nf_nat_tftp,nf_nat_amanda,nf_nat_pptp,nf_nat_h323,nf_nat_proto_gre,nf_nat_sip
nf_nat_amanda          16384  0
nf_nat_ftp             16384  0
nf_nat_h323            20480  0
nf_nat_ipv4            16384  2 ipt_MASQUERADE,nft_chain_nat_ipv4
nf_nat_irc             16384  0
nf_nat_pptp            16384  0
nf_nat_proto_gre       16384  1 nf_nat_pptp
nf_nat_sip             20480  0
nf_nat_snmp_basic      16384  0
nf_nat_tftp            16384  0
nf_reject_ipv4         16384  1 ipt_REJECT
nf_tables             143360  933 nft_chain_route_ipv4,nft_compat,nft_chain_nat_ipv4,nft_counter
xt_addrtype            16384  34
xt_AUDIT               16384  0
xt_comment             16384  0
xt_conntrack           16384  41
xt_CT                  16384  22
xt_LOG                 16384  16
xt_mark                16384  1
xt_multiport           16384  12
xt_nat                 16384  0
xt_NFLOG               16384  0
xt_recent              20480  1
xt_TCPMSS              16384  1
xt_tcpudp              16384  88

Shorewall has detected the following iptables/netfilter capabilities:
   ACCOUNT Target (ACCOUNT_TARGET): Not available
   Address Type Match (ADDRTYPE): Available
   Amanda Helper: Available
   Arptables JF (ARPTABLESJF): Not available
   AUDIT Target (AUDIT_TARGET): Available
   Basic Ematch (BASIC_EMATCH): Available
   Basic Filter (BASIC_FILTER): Available
   Capabilities Version (CAPVERSION): 50200
   Checksum Target (CHECKSUM_TARGET): Available
   CLASSIFY Target (CLASSIFY_TARGET): Available
   Comments (COMMENTS): Available
   Condition Match (CONDITION_MATCH): Not available
   Connection Tracking Match (CONNTRACK_MATCH): Available
   Connlimit Match (CONNLIMIT_MATCH): Available
   Connmark Match (CONNMARK_MATCH): Available
   CONNMARK Target (CONNMARK): Available
   CT Target (CT_TARGET): Available
   DSCP Match (DSCP_MATCH): Available
   DSCP Target (DSCP_TARGET): Available
   Enhanced Multi-port Match (EMULIPORT): Available
   Extended Connection Tracking Match Support (NEW_CONNTRACK_MATCH): Available
   Extended Connmark Match (XCONNMARK_MATCH): Available
   Extended CONNMARK Target (XCONNMARK): Available
   Extended MARK Target 2 (EXMARK): Available
   Extended MARK Target (XMARK): Available
   Extended Multi-port Match (XMULIPORT): Available
   Extended REJECT (ENHANCED_REJECT): Available
   FLOW Classifier (FLOW_FILTER): Available
   FTP-0 Helper: Not available
   FTP Helper: Available
   fwmark route mask (FWMARK_RT_MASK): Available
   Geo IP Match (GEOIP_MATCH): Not available
   Goto Support (GOTO_TARGET): Available
   H323 Helper: Available
   Hashlimit Match (HASHLIMIT_MATCH): Available
   Header Match (HEADER_MATCH): Not available
   Helper Match (HELPER_MATCH): Available
   Iface Match (IFACE_MATCH): Not available
   IMQ Target (IMQ_TARGET): Not available
   INPUT chain in nat table (NAT_INPUT_CHAIN): Available
   IPMARK Target (IPMARK_TARGET): Not available
   IPP2P Match (IPP2P_MATCH): Not available
   IP range Match(IPRANGE_MATCH): Available
   Ipset Match (IPSET_MATCH): Not available
   ipset V5 (IPSET_V5): Not available
   iptables-restore --wait option (RESTORE_WAIT_OPTION): Available
   iptables -S (IPTABLES_S): Available
   iptables --wait option (WAIT_OPTION): Available
   IRC-0 Helper: Not available
   IRC Helper: Available
   Kernel Version (KERNELVERSION): 41900
   LOGMARK Target (LOGMARK_TARGET): Not available
   LOG Target (LOG_TARGET): Available
   Mangle FORWARD Chain (MANGLE_FORWARD): Available
   Mark in the filter table (MARK_ANYWHERE): Available
   MARK Target (MARK): Available
   MASQUERADE Target (MASQUERADE_TGT): Available
   Multi-port Match (MULTIPORT): Available
   NAT (NAT_ENABLED): Available
   Netbios_ns Helper: Available
   NETMAP Target (NETMAP_TARGET): Available
   New tos Match (NEW_TOS_MATCH): Available
   NFAcct Match: Not available
   --nflog-size support (NFLOG_SIZE): Available
   NFLOG Target (NFLOG_TARGET): Available
   NFQUEUE CPU Fanout (CPU_FANOUT): Available
   NFQUEUE Target (NFQUEUE_TARGET): Available
   Owner Match (OWNER_MATCH): Available
   Owner Name Match (OWNER_NAME_MATCH): Available
   Packet length Match (LENGTH_MATCH): Available
   Packet Mangling (MANGLE_ENABLED): Available
   Persistent SNAT (PERSISTENT_SNAT): Available
   Physdev-is-bridged Support (PHYSDEV_BRIDGE): Available
   Physdev Match (PHYSDEV_MATCH): Available
   Policy Match (POLICY_MATCH): Available
   PPTP Helper: Available
   Raw Table (RAW_TABLE): Available
   Realm Match (REALM_MATCH): Available
   Recent Match "--reap" option (REAP_OPTION): Available
   Recent Match (RECENT_MATCH): Available
   Repeat match (KLUDGEFREE): Available
   RPFilter Match (RPFILTER_MATCH): Available
   SANE-0 Helper: Not available
   SANE Helper: Available
   SIP-0 Helper: Not available
   SIP Helper: Available
   SNMP Helper: Available
   Statistic Match (STATISTIC_MATCH): Available
   TARPIT Target (TARPIT_TARGET): Not available
   TCPMSS Match (TCPMSS_MATCH): Available
   TCPMSS Target (TCPMSS_TARGET): Available
   TFTP-0 Helper: Not available
   TFTP Helper: Available
   Time Match (TIME_MATCH): Available
   TPROXY Target (TPROXY_TARGET): Available
   UDPLITE Port Redirection (UDPLITEREDIRECT): Not available
   ULOG Target (ULOG_TARGET): Not available

Netid   State    Recv-Q   Send-Q     Local Address:Port     Peer Address:Port                                                                                   
udp     UNCONN   0        0              127.0.0.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=10))                                            
udp     UNCONN   0        0             172.16.1.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=8))                                             
udp     UNCONN   0        0             172.16.3.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=6))                                             
udp     UNCONN   0        0           0.0.0.0%eth3:67            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=4))                                             
udp     UNCONN   0        0             172.16.0.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=25))                                                
udp     UNCONN   0        0          203.214.66.98:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=24))                                                
udp     UNCONN   0        0             172.16.3.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=23))                                                
udp     UNCONN   0        0              127.0.0.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=18))                                                
udp     UNCONN   0        0                0.0.0.0:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=17))                                                
tcp     LISTEN   0        32             127.0.0.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=11))                                            
tcp     LISTEN   0        32            172.16.1.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=9))                                             
tcp     LISTEN   0        32            172.16.3.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=7))                                             
tcp     LISTEN   0        128              0.0.0.0:22            0.0.0.0:*       users:(("sshd",pid=1076,fd=3))                                                 
tcp     LISTEN   0        20               0.0.0.0:25            0.0.0.0:*       users:(("exim4",pid=1346,fd=4))                                                
tcp     LISTEN   0        5              127.0.0.1:3551          0.0.0.0:*       users:(("apcupsd",pid=1051,fd=5))                                              
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56556   users:(("sshd",pid=3534,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56559   users:(("sshd",pid=3556,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56478   users:(("sshd",pid=1919,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56558   users:(("sshd",pid=3546,fd=3))                                                 

Traffic Control

Device lo:
qdisc noqueue 0: root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device eth0:
qdisc mq 0: root 
 Sent 940178487 bytes 2857604 pkt (dropped 0, overlimits 0 requeues 5) 
 backlog 0b 0p requeues 5
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 751966596 bytes 1598662 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 188211891 bytes 1258942 pkt (dropped 0, overlimits 0 requeues 5) 
 backlog 0b 0p requeues 5

class mq :1 root 
 Sent 188211891 bytes 1258942 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 751966596 bytes 1598662 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth1:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device eth2:
qdisc mq 0: root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth3:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 9838138025 bytes 7434079 pkt (dropped 0, overlimits 0 requeues 3) 
 backlog 0b 0p requeues 3


Device eth5:
qdisc mq 0: root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth4:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device vif-fileserv:
qdisc mq 0: root 
 Sent 1092089 bytes 4523 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1092089 bytes 4523 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 1092089 bytes 4523 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-www2:
qdisc mq 0: root 
 Sent 95624 bytes 971 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 61781 bytes 674 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 33843 bytes 297 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 33843 bytes 297 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 61781 bytes 674 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-www:
qdisc mq 0: root 
 Sent 6134458 bytes 8747 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 4946861 bytes 3847 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1187597 bytes 4900 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 1187597 bytes 4900 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 4946861 bytes 3847 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-mail:
qdisc mq 0: root 
 Sent 4095571 bytes 26057 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1046104 bytes 8088 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 3049467 bytes 17969 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 3049467 bytes 17969 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 1046104 bytes 8088 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


TC Filters

Device lo:

Device eth0:

Device eth1:

Device eth2:

Device eth3:

Device eth5:

Device eth4:

Device vif-fileserv:

Device vif-www2:

Device vif-www:

Device vif-mail:

