Shorewall 5.2.3.2 Dump at fw - Fri 21 Feb 14:09:27 AEDT 2020

Shorewall is running
State:Started Fri 21 Feb 14:07:56 AEDT 2020 from /etc/shorewall/ (/var/lib/shorewall/firewall compiled Fri 21 Feb 14:07:54 AEDT 2020 by Shorewall version 5.2.3.2)

Counters reset Fri 21 Feb 14:07:56 AEDT 2020

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   13  1928 net-fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc-fw     all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc-fw     all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
   73  5775 loc-fw     all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc-fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-fw     all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-fw     all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-fw     all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-fw     all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:INPUT:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
11411 6411K net_frwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
 1764  747K loc_frwd   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
   24 14394 dmz_frwd   all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
   83 84428 dmz_frwd   all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz_frwd   all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz_frwd   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:FORWARD:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   60 11787 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   11   811 fw-net     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 eth2_out   all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_out  all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
    0     0 eth3_out   all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_out   all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www_out  all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
    0     0 vif-mail_out  all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www2_out  all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_out   all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 fw-fw      all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:OUTPUT:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-dmz:ACCEPT:"
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz-fw (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-fw:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-loc:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   24 14394 vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
   83 84428 vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ~log1      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  udp dpt:53
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp dpt:53
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  multiport dports 80,443
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp dpt:25
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  multiport dports 993,465,587
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    1   109 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-net:REJECT:"
    1   109 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz_frwd (4 references)
 pkts bytes target     prot opt in     out     source               destination         
  107 98822 dmz-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp flags:!0x17/0x02

Chain dynamic (17 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth1_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           [goto] 
   71  3572 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 1693  744K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   71  3572 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    8  1731 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   65  4044 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:67:68
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:fw-dmz:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain fw-fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:67:68
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spts:67:68 dpts:67:68 /* DHCPfwd */
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10   735 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* DNS */
    1    76 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ~log3      tcp  --  *      *       172.16.3.2           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.3           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.4           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.5           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.6           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.7           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.8           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.9           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.10          0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 /* SMTP */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:465 /* SMTPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:465 /* SMTPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:465 /* SMTPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:993 /* IMAPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:993 /* IMAPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:993 /* IMAPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:loc-dmz:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc-fw (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_iop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_iop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
   73  5775 eth3_iop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_iop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ~log2      tcp  --  *      *       172.16.3.2           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.3           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.4           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.5           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.6           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.7           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.8           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.9           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.10          0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    2   147 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* DNS */
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spts:67:68 dpts:67:68 /* DHCPfwd */
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:548
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    6  1584 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
 1764  747K eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
   71  3572 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc_frwd (4 references)
 pkts bytes target     prot opt in     out     source               destination         
 1764  747K loc-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
    0     0 loc-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    0     0 loc-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 loc-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (7 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 4 level 6 prefix "Shorewall:logflags:DROP:"
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
   61  3476 net-dmz~   all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   60  3432 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   32  4680 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   43  2087 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    1    71 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
   42  2016 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ~log0      udp  --  *      *       49.183.151.254       0.0.0.0/0           [goto]  udp dpts:33434:33524 /* Trcrt */
    0     0 ~log0      icmp --  *      *       49.183.151.254       0.0.0.0/0           [goto]  icmptype 8 /* Trcrt */
    2   220 ~log0      udp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  udp dpt:53
    0     0 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  tcp dpt:53
    3   180 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.103      [goto]  multiport dports 80,443
    0     0 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  tcp dpt:25
    4   236 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.104      [goto]  multiport dports 993,465,587
    3   192 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.105      [goto]  multiport dports 993,465,587
    0     0 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.106      [goto]  multiport dports 993,465,587
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
   47  2533 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-dmz~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
    1    44 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    2    97 net-fw~    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    2    97 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   11  1831 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    1    40 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
    1    40 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123
    0     0 ACCEPT     icmp --  *      *       203.214.66.97        0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    2    97 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-fw~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 net-loc~   all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
11318 6403K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-loc~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 net-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
11318 6403K net-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
   46  3599 net-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
   47  4557 net-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    0     0 net-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 net-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain reject (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match src-type BROADCAST
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    1   109 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with tcp-reset
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-port-unreachable
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-unreachable
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibited

Chain sfilter (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:sfilter:DROP:"
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcpflags (17 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x3F/0x29
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x3F/0x00
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x06/0x06
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x05/0x05
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x03/0x03
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x19/0x09
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp spt:0 flags:0x17/0x02

Chain vif-fileserv_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-fileserv_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-fileserv_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-mail_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   83 84428 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-mail_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www2_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www2_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    1   109 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   23 14285 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    1   109 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ~log0 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
   12   828 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* Trcrt */ LOG flags 0 level 6 prefix "Shorewall:net-dmz:ACCEPT:"
   12   828 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* Trcrt */

Chain ~log1 (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-net:ACCEPT:"
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ~log2 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */ LOG flags 0 level 6 prefix "Shorewall:loc-fw:ACCEPT:"
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */

Chain ~log3 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */ LOG flags 0 level 6 prefix "Shorewall:loc-dmz:ACCEPT:"
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */

Chain sha-lh-188597c58103019b4bb0 (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain sha-rh-a393d8e58f8c44e437a5 (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0            recent: SET name: %CURRENTTIME side: source mask: 255.255.255.255

ARP rules

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)

Log (/var/log/messages)

Feb 21 14:06:55 dmz-net:ACCEPT:IN=vif-mail OUT=eth0 SRC=203.214.66.104 DST=203.214.66.97 LEN=85 TOS=0x00 PREC=0x00 TTL=63 ID=9104 DF PROTO=UDP SPT=35781 DPT=53 LEN=65 
Feb 21 14:06:55 dmz-net:ACCEPT:IN=vif-mail OUT=eth0 SRC=203.214.66.104 DST=203.214.66.97 LEN=85 TOS=0x00 PREC=0x00 TTL=63 ID=9108 DF PROTO=UDP SPT=50948 DPT=53 LEN=65 
Feb 21 14:06:57 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=46 ID=0 PROTO=TCP SPT=3604 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:07:01 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=3605 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:07:29 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=18.222.192.104 DST=203.214.66.100 LEN=62 TOS=0x00 PREC=0x00 TTL=39 ID=44105 DF PROTO=UDP SPT=57754 DPT=53 LEN=42 
Feb 21 14:07:31 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=3607 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:07:53 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=5.101.0.209 DST=203.214.66.103 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=15473 PROTO=TCP SPT=47563 DPT=80 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 21 14:08:02 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=3609 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:08:10 dmz-net:REJECT:IN=vif-www OUT=eth0 SRC=203.214.66.100 DST=149.8.144.55 LEN=109 TOS=0x00 PREC=0x00 TTL=63 ID=42330 DF PROTO=TCP SPT=25 DPT=59797 WINDOW=502 RES=0x00 ACK PSH URGP=0 
Feb 21 14:08:14 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=49.199.143.136 DST=203.214.66.103 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=8623 DF PROTO=TCP SPT=3610 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:08:14 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=49.199.143.136 DST=203.214.66.103 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=8630 DF PROTO=TCP SPT=3611 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:08:22 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=49.199.143.136 DST=203.214.66.103 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=55470 DF PROTO=TCP SPT=3612 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:08:32 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.104 LEN=64 TOS=0x10 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=3613 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:08:35 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=62.7.235.35 DST=203.214.66.100 LEN=106 TOS=0x00 PREC=0x00 TTL=48 ID=1746 PROTO=UDP SPT=39668 DPT=53 LEN=86 
Feb 21 14:08:45 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.104 LEN=64 TOS=0x10 PREC=0x00 TTL=44 ID=0 PROTO=TCP SPT=3615 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:08:45 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=46 ID=0 PROTO=TCP SPT=3618 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:08:45 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=44 ID=0 PROTO=TCP SPT=3619 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:08:49 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=162.243.129.40 DST=203.214.66.104 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=44549 DPT=465 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:09:02 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.143.136 DST=203.214.66.104 LEN=64 TOS=0x10 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=3623 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 21 14:09:26 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=62.7.235.35 DST=203.214.66.100 LEN=114 TOS=0x00 PREC=0x00 TTL=48 ID=7831 PROTO=UDP SPT=53704 DPT=53 LEN=94 

NAT Table

Chain PREROUTING (policy ACCEPT 141 packets, 9398 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 8 packets, 1731 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 24 packets, 1679 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   70  3903 eth0_masq  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 11 packets, 811 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all  --  *      *       172.16.1.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.2.0/24        0.0.0.0/0           
   59  3092 MASQUERADE  all  --  *      *       172.16.3.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.4.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.5.0/24        0.0.0.0/0           

Mangle Table

Chain PREROUTING (policy ACCEPT 13402 packets, 7278K bytes)
 pkts bytes target     prot opt in     out     source               destination         
13402 7278K tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 86 packets, 7703 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   86  7703 tcin       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 13301 packets, 7269K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  176  8800 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp flags:0x06/0x02 TCPMSS clamp to PMTU
13301 7269K MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            MARK and 0xffffff00
13301 7269K tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 71 packets, 12598 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   71 12598 tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 13322 packets, 7279K bytes)
 pkts bytes target     prot opt in     out     source               destination         
13322 7279K tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 13407 packets, 7281K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:10080 CT helper amanda
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 flags:0x17/0x02 CT helper ftp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1719 CT helper RAS
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6667 flags:0x17/0x02 CT helper irc
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:137 CT helper netbios-ns
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1723 flags:0x17/0x02 CT helper pptp
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6566 flags:0x17/0x02 CT helper sane
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:5060 CT helper sip
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161 CT helper snmp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:69 CT helper tftp

Chain OUTPUT (policy ACCEPT 71 packets, 12598 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:10080 CT helper amanda
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 flags:0x17/0x02 CT helper ftp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1719 CT helper RAS
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6667 flags:0x17/0x02 CT helper irc
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:137 CT helper netbios-ns
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1723 flags:0x17/0x02 CT helper pptp
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6566 flags:0x17/0x02 CT helper sane
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:5060 CT helper sip
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161 CT helper snmp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:69 CT helper tftp

Conntrack Table (173 out of 262144)

ipv4     2 tcp      6 266852 ESTABLISHED src=36.110.199.141 dst=203.214.66.103 sport=31668 dport=443 src=172.16.4.103 dst=36.110.199.141 sport=443 dport=31668 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431731 ESTABLISHED src=172.16.3.8 dst=150.101.161.114 sport=64754 dport=80 src=150.101.161.114 dst=203.214.66.98 sport=80 dport=64754 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431989 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54499 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54499 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431925 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=61409 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=61409 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431879 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=56362 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=56362 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431884 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59341 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59341 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431999 ESTABLISHED src=172.16.3.152 dst=52.113.66.204 sport=60109 dport=443 src=52.113.66.204 dst=203.214.66.98 sport=443 dport=60109 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431904 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=57467 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=57467 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 391714 ESTABLISHED src=123.125.71.104 dst=203.214.66.103 sport=33264 dport=443 src=203.214.66.103 dst=123.125.71.104 sport=443 dport=33264 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54468 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54468 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 2 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=56389 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=56389 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 179 src=172.16.3.152 dst=52.113.5.181 sport=50012 dport=57103 src=52.113.5.181 dst=203.214.66.98 sport=57103 dport=50012 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 10 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54399 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54399 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 378129 ESTABLISHED src=220.181.108.113 dst=203.214.66.103 sport=39957 dport=443 src=203.214.66.103 dst=220.181.108.113 sport=443 dport=39957 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431709 ESTABLISHED src=172.16.3.8 dst=203.214.64.50 sport=64753 dport=80 src=203.214.64.50 dst=203.214.66.98 sport=80 dport=64753 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 37 TIME_WAIT src=49.199.143.136 dst=203.214.66.105 sport=3604 dport=993 src=203.214.66.105 dst=49.199.143.136 sport=993 dport=3604 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 270 ESTABLISHED src=49.199.143.136 dst=203.214.66.103 sport=3612 dport=443 src=203.214.66.103 dst=49.199.143.136 sport=443 dport=3612 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 385269 ESTABLISHED src=123.125.71.116 dst=203.214.66.103 sport=34290 dport=80 src=203.214.66.103 dst=123.125.71.116 sport=80 dport=34290 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 95 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54401 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54401 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431879 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=56373 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=56373 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54456 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54456 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431110 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=65398 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=65398 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431998 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=65314 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=65314 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 52 TIME_WAIT src=49.199.143.136 dst=203.214.66.103 sport=3610 dport=80 src=203.214.66.103 dst=49.199.143.136 sport=80 dport=3610 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 347593 ESTABLISHED src=123.125.71.41 dst=203.214.66.103 sport=29916 dport=443 src=172.16.4.103 dst=123.125.71.41 sport=443 dport=29916 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 333216 ESTABLISHED src=123.125.71.33 dst=203.214.66.103 sport=26879 dport=443 src=172.16.4.103 dst=123.125.71.33 sport=443 dport=26879 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431986 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=61436 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=61436 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 379923 ESTABLISHED src=123.125.71.40 dst=203.214.66.103 sport=28699 dport=443 src=203.214.66.103 dst=123.125.71.40 sport=443 dport=28699 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 74 TIME_WAIT src=172.16.3.2 dst=17.248.155.47 sport=56404 dport=443 src=17.248.155.47 dst=203.214.66.98 sport=443 dport=56404 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 99 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54477 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54477 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431879 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=56374 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=56374 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54472 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54472 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 396031 ESTABLISHED src=123.125.71.25 dst=203.214.66.103 sport=27162 dport=443 src=203.214.66.103 dst=123.125.71.25 sport=443 dport=27162 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 87 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=59586 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=59586 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 99 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54485 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54485 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431995 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54416 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54416 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431159 ESTABLISHED src=172.16.3.198 dst=17.57.145.37 sport=49362 dport=443 src=17.57.145.37 dst=203.214.66.98 sport=443 dport=49362 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431980 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=54483 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54483 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 292 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=61444 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=61444 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 371651 ESTABLISHED src=123.125.71.105 dst=203.214.66.103 sport=64648 dport=443 src=203.214.66.103 dst=123.125.71.105 sport=443 dport=64648 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 54 TIME_WAIT src=49.199.143.136 dst=203.214.66.103 sport=3611 dport=80 src=203.214.66.103 dst=49.199.143.136 sport=80 dport=3611 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431923 ESTABLISHED src=172.16.3.2 dst=162.125.35.134 sport=56346 dport=443 src=162.125.35.134 dst=203.214.66.98 sport=443 dport=56346 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 100 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54488 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54488 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431319 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=60181 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=60181 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431984 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=61438 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=61438 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54473 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54473 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431988 ESTABLISHED src=172.16.3.152 dst=52.113.66.214 sport=54432 dport=443 src=52.113.66.214 dst=203.214.66.98 sport=443 dport=54432 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431781 ESTABLISHED src=49.199.143.136 dst=203.214.66.105 sport=3595 dport=465 src=203.214.66.105 dst=49.199.143.136 sport=465 dport=3595 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431879 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=52009 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=52009 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 87 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=59583 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=59583 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 422175 ESTABLISHED src=220.181.108.114 dst=203.214.66.103 sport=44018 dport=443 src=203.214.66.103 dst=220.181.108.114 sport=443 dport=44018 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 27 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54405 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54405 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431780 ESTABLISHED src=172.16.3.2 dst=17.57.145.36 sport=56557 dport=5223 src=17.57.145.36 dst=203.214.66.98 sport=5223 dport=56557 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431866 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59333 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59333 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 94 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54427 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54427 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 28 src=62.7.235.35 dst=203.214.66.100 sport=53704 dport=53 src=203.214.66.100 dst=62.7.235.35 sport=53 dport=53704 mark=0 zone=0 use=2
ipv4     2 tcp      6 106 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54428 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54428 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431978 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54448 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54448 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431976 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54450 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54450 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 374526 ESTABLISHED src=123.125.71.44 dst=203.214.66.103 sport=29865 dport=80 src=203.214.66.103 dst=123.125.71.44 sport=80 dport=29865 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431993 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54409 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54409 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431990 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=61170 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=61170 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 4 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=56401 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=56401 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 425306 ESTABLISHED src=172.16.3.2 dst=203.214.66.103 sport=51801 dport=22 src=203.214.66.103 dst=172.16.3.2 sport=22 dport=51801 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 27 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54403 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54403 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431994 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=52730 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=52730 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431882 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=56398 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=56398 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 117 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54500 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54500 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 96 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54407 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54407 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431998 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56559 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56559 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 378784 ESTABLISHED src=220.181.108.184 dst=203.214.66.103 sport=25874 dport=443 src=203.214.66.103 dst=220.181.108.184 sport=443 dport=25874 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431990 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=61439 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=61439 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431598 ESTABLISHED src=172.16.3.2 dst=203.214.66.103 sport=51800 dport=22 src=203.214.66.103 dst=172.16.3.2 sport=22 dport=51800 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431916 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=61414 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=61414 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431884 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59346 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59346 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 375125 ESTABLISHED src=123.125.71.103 dst=203.214.66.103 sport=31803 dport=80 src=203.214.66.103 dst=123.125.71.103 sport=80 dport=31803 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 21 SYN_RECV src=162.243.129.40 dst=203.214.66.104 sport=44549 dport=465 src=203.214.66.104 dst=162.243.129.40 sport=465 dport=44549 mark=0 zone=0 use=2
ipv4     2 udp      17 2 src=172.16.3.2 dst=172.16.3.255 sport=17500 dport=17500 [UNREPLIED] src=172.16.3.255 dst=172.16.3.2 sport=17500 dport=17500 mark=0 zone=0 use=2
ipv4     2 tcp      6 431999 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=60506 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=60506 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431705 ESTABLISHED src=172.16.3.2 dst=52.24.186.236 sport=64042 dport=443 src=52.24.186.236 dst=203.214.66.98 sport=443 dport=64042 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431321 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=60212 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=60212 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431866 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59334 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59334 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431998 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=55952 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=55952 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 381492 ESTABLISHED src=220.181.108.87 dst=203.214.66.103 sport=45612 dport=443 src=203.214.66.103 dst=220.181.108.87 sport=443 dport=45612 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431809 ESTABLISHED src=172.16.3.198 dst=40.100.149.146 sport=57166 dport=443 src=40.100.149.146 dst=203.214.66.98 sport=443 dport=57166 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431989 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=59585 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=59585 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 40 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54414 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54414 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 370929 ESTABLISHED src=123.125.71.92 dst=203.214.66.103 sport=37614 dport=80 src=203.214.66.103 dst=123.125.71.92 sport=80 dport=37614 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 2 src=172.16.3.2 dst=255.255.255.255 sport=17500 dport=17500 [UNREPLIED] src=255.255.255.255 dst=172.16.3.2 sport=17500 dport=17500 mark=0 zone=0 use=2
ipv4     2 tcp      6 431976 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54458 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54458 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 179 src=172.16.3.152 dst=52.113.5.181 sport=50038 dport=52119 src=52.113.5.181 dst=203.214.66.98 sport=52119 dport=50038 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431979 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=61481 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=61481 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 61 src=18.222.192.104 dst=203.214.66.100 sport=57754 dport=53 src=203.214.66.100 dst=18.222.192.104 sport=53 dport=57754 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431976 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54438 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54438 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 250 ESTABLISHED src=95.216.149.140 dst=203.214.66.103 sport=50054 dport=443 src=203.214.66.103 dst=95.216.149.140 sport=443 dport=50054 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431975 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=54431 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54431 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431324 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=60382 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=60382 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 107 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54497 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54497 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431984 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54425 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54425 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54469 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54469 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 386010 ESTABLISHED src=123.125.71.95 dst=203.214.66.103 sport=32293 dport=443 src=203.214.66.103 dst=123.125.71.95 sport=443 dport=32293 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431979 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=49795 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=49795 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54475 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54475 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431884 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59348 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59348 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 378794 ESTABLISHED src=220.181.108.156 dst=203.214.66.103 sport=31116 dport=443 src=203.214.66.103 dst=220.181.108.156 sport=443 dport=31116 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431976 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54446 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54446 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 428066 ESTABLISHED src=172.16.3.2 dst=172.16.4.203 sport=51799 dport=22 src=172.16.4.203 dst=172.16.3.2 sport=22 dport=51799 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431714 ESTABLISHED src=172.16.3.8 dst=17.57.145.36 sport=50044 dport=5223 src=17.57.145.36 dst=203.214.66.98 sport=5223 dport=50044 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 70 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54421 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54421 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 99 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54480 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54480 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 67 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54420 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54420 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431175 ESTABLISHED src=172.16.3.2 dst=172.16.4.203 sport=51795 dport=22 src=172.16.4.203 dst=172.16.3.2 sport=22 dport=51795 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431920 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=57812 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=57812 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 87 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=56190 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=56190 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 110 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54495 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54495 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431611 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=49302 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=49302 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431884 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59347 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59347 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 391724 ESTABLISHED src=123.125.71.113 dst=203.214.66.103 sport=45444 dport=443 src=203.214.66.103 dst=123.125.71.113 sport=443 dport=45444 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 290 ESTABLISHED src=49.199.143.136 dst=203.214.66.104 sport=3623 dport=993 src=203.214.66.104 dst=49.199.143.136 sport=993 dport=3623 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431444 ESTABLISHED src=172.16.3.7 dst=17.57.145.36 sport=49487 dport=5223 src=17.57.145.36 dst=203.214.66.98 sport=5223 dport=49487 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 376324 ESTABLISHED src=220.181.108.113 dst=203.214.66.103 sport=43843 dport=80 src=203.214.66.103 dst=220.181.108.113 sport=80 dport=43843 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 0 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=56372 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=56372 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54436 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54436 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 349589 ESTABLISHED src=220.181.108.91 dst=203.214.66.103 sport=54830 dport=443 src=172.16.4.103 dst=220.181.108.91 sport=443 dport=54830 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431978 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54447 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54447 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 96 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54454 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54454 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54471 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54471 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431337 ESTABLISHED src=172.16.3.152 dst=40.119.211.203 sport=49456 dport=443 src=40.119.211.203 dst=203.214.66.98 sport=443 dport=49456 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431884 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59343 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59343 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431994 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=61169 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=61169 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431980 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=54492 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54492 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431994 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54411 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54411 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431881 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=53081 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=53081 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 292 ESTABLISHED src=49.199.143.136 dst=203.214.66.105 sport=3618 dport=993 src=203.214.66.105 dst=49.199.143.136 sport=993 dport=3618 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 70 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54418 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54418 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 268777 ESTABLISHED src=220.181.108.187 dst=203.214.66.103 sport=42327 dport=80 src=172.16.4.103 dst=220.181.108.187 sport=80 dport=42327 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 353532 ESTABLISHED src=220.181.108.143 dst=203.214.66.103 sport=56059 dport=443 src=172.16.4.103 dst=220.181.108.143 sport=443 dport=56059 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431980 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=54490 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54490 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 396027 ESTABLISHED src=220.181.108.142 dst=203.214.66.103 sport=48658 dport=80 src=203.214.66.103 dst=220.181.108.142 sport=80 dport=48658 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 96 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54453 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54453 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431973 ESTABLISHED src=172.16.3.2 dst=172.217.167.74 sport=56403 dport=443 src=172.217.167.74 dst=203.214.66.98 sport=443 dport=56403 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431884 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59342 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59342 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431984 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=58309 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=58309 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431992 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=61192 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=61192 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 384552 ESTABLISHED src=220.181.108.140 dst=203.214.66.103 sport=54657 dport=443 src=203.214.66.103 dst=220.181.108.140 sport=443 dport=54657 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 427790 ESTABLISHED src=172.16.3.2 dst=172.16.4.203 sport=51793 dport=22 src=172.16.4.203 dst=172.16.3.2 sport=22 dport=51793 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54474 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54474 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431978 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54470 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54470 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431470 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56556 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56556 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431847 ESTABLISHED src=49.199.143.136 dst=203.214.66.104 sport=3602 dport=465 src=203.214.66.104 dst=49.199.143.136 sport=465 dport=3602 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 294 ESTABLISHED src=49.199.143.136 dst=203.214.66.105 sport=3619 dport=993 src=203.214.66.105 dst=49.199.143.136 sport=993 dport=3619 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 77 TIME_WAIT src=172.16.3.152 dst=202.69.132.25 sport=54422 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=54422 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 353590 ESTABLISHED src=123.125.71.27 dst=203.214.66.103 sport=25307 dport=80 src=172.16.4.103 dst=123.125.71.27 sport=80 dport=25307 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 352199 ESTABLISHED src=123.125.71.91 dst=203.214.66.103 sport=38868 dport=80 src=172.16.4.103 dst=123.125.71.91 sport=80 dport=38868 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 369524 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56558 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56558 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431780 ESTABLISHED src=49.199.143.136 dst=203.214.66.105 sport=3594 dport=465 src=203.214.66.105 dst=49.199.143.136 sport=465 dport=3594 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 376923 ESTABLISHED src=220.181.108.178 dst=203.214.66.103 sport=47606 dport=80 src=203.214.66.103 dst=220.181.108.178 sport=80 dport=47606 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431999 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56478 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56478 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431462 ESTABLISHED src=172.16.3.7 dst=74.125.68.109 sport=53456 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=53456 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431919 ESTABLISHED src=172.16.3.152 dst=202.69.132.25 sport=64605 dport=443 src=202.69.132.25 dst=203.214.66.98 sport=443 dport=64605 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 288 ESTABLISHED src=49.199.143.136 dst=203.214.66.104 sport=3615 dport=993 src=203.214.66.104 dst=49.199.143.136 sport=993 dport=3615 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 100 TIME_WAIT src=172.16.3.152 dst=165.225.114.28 sport=54493 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54493 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431511 ESTABLISHED src=172.16.3.2 dst=172.16.1.130 sport=56555 dport=22 src=172.16.1.130 dst=172.16.3.2 sport=22 dport=56555 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431977 ESTABLISHED src=172.16.3.152 dst=165.225.114.28 sport=54476 dport=443 src=165.225.114.28 dst=203.214.66.98 sport=443 dport=54476 [ASSURED] mark=0 zone=0 use=2

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    inet 203.214.66.98/28 brd 203.214.66.111 scope global eth0
       valid_lft forever preferred_lft forever
    inet 172.16.0.1/24 scope global eth0
       valid_lft forever preferred_lft forever
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
    inet 172.16.1.1/24 brd 172.16.1.255 scope global eth1
       valid_lft forever preferred_lft forever
4: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    inet 172.16.2.1/24 brd 172.16.2.255 scope global eth2
       valid_lft forever preferred_lft forever
5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 172.16.3.1/24 brd 172.16.3.255 scope global eth3
       valid_lft forever preferred_lft forever
6: eth5: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    inet 172.16.5.1/24 brd 172.16.5.255 scope global eth5
       valid_lft forever preferred_lft forever
7: eth4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
    inet 172.16.4.1/24 brd 172.16.4.255 scope global eth4
       valid_lft forever preferred_lft forever
11: vif-fileserv: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-fileserv
       valid_lft forever preferred_lft forever
12: vif-www2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-www2
       valid_lft forever preferred_lft forever
14: vif-www: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-www
       valid_lft forever preferred_lft forever
15: vif-mail: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-mail
       valid_lft forever preferred_lft forever

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    3741       37       0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    3741       37       0       0       0       0       
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 38:2c:4a:70:23:c0 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    11332867917 9756346  0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    1879208149 4475707  0       0       0       0       
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
    link/ether 38:2c:4a:70:1c:d2 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
4: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:49:2e:44 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 68:05:ca:2c:44:f0 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    1885949223 4738698  0       16      0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    11416198746 9346216  0       0       0       0       
6: eth5: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:49:2e:45 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
7: eth4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
    link/ether 68:05:ca:2c:44:f1 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
11: vif-fileserv: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    716801     10008    0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    1343086    5461     0       0       0       0       
12: vif-www2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    14154451   12741    0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    2692653    19519    0       0       0       0       
14: vif-www: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    17346413   26345    0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    12034363   27663    0       0       0       0       
15: vif-mail: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    37595020   84482    0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    15008332   106763   0       0       0       0       

Bridges


Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

local 203.214.66.98 dev vif-www proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-www2 proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-mail proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-fileserv proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev eth0 proto kernel scope host src 203.214.66.98
local 172.16.5.1 dev eth5 proto kernel scope host src 172.16.5.1
local 172.16.4.1 dev eth4 proto kernel scope host src 172.16.4.1
local 172.16.3.1 dev eth3 proto kernel scope host src 172.16.3.1
local 172.16.2.1 dev eth2 proto kernel scope host src 172.16.2.1
local 172.16.1.1 dev eth1 proto kernel scope host src 172.16.1.1
local 172.16.0.1 dev eth0 proto kernel scope host src 172.16.0.1
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
broadcast 203.214.66.96 dev eth0 proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-www proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-www2 proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-mail proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-fileserv proto kernel scope link src 203.214.66.98
broadcast 203.214.66.111 dev eth0 proto kernel scope link src 203.214.66.98
broadcast 172.16.5.255 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
broadcast 172.16.5.0 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
broadcast 172.16.4.255 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
broadcast 172.16.4.0 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
broadcast 172.16.3.255 dev eth3 proto kernel scope link src 172.16.3.1
broadcast 172.16.3.0 dev eth3 proto kernel scope link src 172.16.3.1
broadcast 172.16.2.255 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
broadcast 172.16.2.0 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
broadcast 172.16.1.255 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
broadcast 172.16.1.0 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
broadcast 172.16.0.255 dev eth0 proto kernel scope link src 172.16.0.1
broadcast 172.16.0.0 dev eth0 proto kernel scope link src 172.16.0.1
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1

Table main:

203.214.66.106 dev vif-mail scope link src 203.214.66.98
203.214.66.105 dev vif-mail scope link src 203.214.66.98
203.214.66.104 dev vif-mail scope link src 203.214.66.98
203.214.66.103 dev vif-www scope link src 203.214.66.98
203.214.66.100 dev vif-www scope link src 203.214.66.98
172.16.4.203 dev vif-www2 scope link src 203.214.66.98
172.16.1.130 dev vif-fileserv scope link src 203.214.66.98
203.214.66.96/28 dev eth0 proto kernel scope link src 203.214.66.98
172.16.5.0/24 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
172.16.4.0/24 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
172.16.3.0/24 dev eth3 proto kernel scope link src 172.16.3.1
172.16.2.0/24 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
172.16.1.0/24 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
172.16.0.0/24 dev eth0 proto kernel scope link src 172.16.0.1
default via 203.214.66.97 dev eth0 onlink

Per-IP Counters

   iptaccount is not installed

NF Accounting

No NF Accounting defined (nfacct not found)

Events


PFKEY SPD


PFKEY SAD


/proc

   /proc/version = Linux version 4.19.0-8-amd64 (debian-kernel@lists.debian.org) (gcc version 8.3.0 (Debian 8.3.0-6)) #1 SMP Debian 4.19.98-1 (2020-01-26)
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 0
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/log_martians = 1
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/log_martians = 1
   /proc/sys/net/ipv4/conf/eth4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth4/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth4/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/log_martians = 1
   /proc/sys/net/ipv4/conf/eth5/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth5/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth5/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth5/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth5/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-fileserv/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-fileserv/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-mail/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-mail/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-mail/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-mail/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-mail/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-www/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-www/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-www/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-www/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-www/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-www2/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-www2/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-www2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-www2/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-www2/log_martians = 1

ARP

? (203.214.66.99) at <incomplete> on eth0
? (172.16.4.104) at <incomplete> on eth4
? (203.214.66.100) at 68:05:ca:2c:44:f1 [ether] on vif-www
? (172.16.1.130) at 38:2c:4a:70:1c:d2 [ether] on vif-fileserv
? (172.16.3.201) at 9c:ae:d3:0a:f4:8f [ether] on eth3
? (172.16.3.100) at <incomplete> on eth3
? (172.16.4.254) at <incomplete> on eth4
? (203.214.66.109) at 74:d0:2b:8e:70:80 [ether] on eth0
? (203.214.66.103) at <incomplete> on eth0
? (172.16.4.203) at <incomplete> on eth4
? (172.16.3.10) at <incomplete> on eth3
? (203.214.66.104) at <incomplete> on eth0
? (203.214.66.104) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (203.214.66.97) at 78:24:af:93:40:88 [ether] on eth0
? (172.16.3.214) at <incomplete> on eth3
? (172.16.3.7) at a4:f1:e8:b4:95:d3 [ether] on eth3
? (203.214.66.105) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (172.16.3.198) at 8c:fe:57:0d:fc:23 [ether] on eth3
? (172.16.3.8) at 5c:ad:cf:92:67:47 [ether] on eth3
? (172.16.4.100) at <incomplete> on eth4
? (172.16.3.2) at 68:5b:35:7e:11:5f [ether] on eth3
? (172.16.4.105) at <incomplete> on eth4
? (203.214.66.100) at <incomplete> on eth0
? (203.214.66.106) at <incomplete> on eth0
? (203.214.66.106) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (203.214.66.103) at 68:05:ca:2c:44:f1 [ether] on vif-www
? (172.16.4.103) at <incomplete> on eth4
? (172.16.3.152) at dc:fb:48:0e:34:72 [ether] on eth3
? (203.214.66.105) at <incomplete> on eth0
? (172.16.3.5) at <incomplete> on eth3
? (172.16.4.203) at 68:05:ca:2c:44:f1 [ether] on vif-www2
? (172.16.4.203) at <from_interface> PERM PUB on eth0
? (203.214.66.104) at <from_interface> PERM PUB on eth0
? (203.214.66.105) at <from_interface> PERM PUB on eth0
? (203.214.66.106) at <from_interface> PERM PUB on eth0
? (203.214.66.100) at <from_interface> PERM PUB on eth0
? (203.214.66.103) at <from_interface> PERM PUB on eth0

Modules

ip_tables              28672  4
ipt_MASQUERADE         16384  5
ipt_REJECT             16384  4
ipt_rpfilter           16384  0
nf_conncount           20480  1 xt_connlimit
nf_conntrack          172032  34 xt_conntrack,nf_nat_irc,nf_nat,nf_conntrack_tftp,nf_nat_ftp,xt_state,nf_conntrack_pptp,ipt_MASQUERADE,nf_conntrack_netbios_ns,nf_conntrack_sane,nf_nat_ipv4,xt_nat,nf_nat_tftp,nf_nat_amanda,nf_conntrack_sip,xt_helper,nf_conntrack_h323,nf_nat_pptp,xt_NETMAP,nf_conntrack_broadcast,nf_conntrack_irc,nf_conntrack_amanda,nf_conntrack_netlink,xt_connmark,nf_conntrack_proto_gre,nf_conntrack_ftp,xt_CT,nf_nat_h323,nf_conncount,nf_conntrack_snmp,nf_nat_snmp_basic,xt_connlimit,nf_nat_sip,xt_REDIRECT
nf_conntrack_amanda    16384  3 nf_nat_amanda
nf_conntrack_broadcast    16384  2 nf_conntrack_netbios_ns,nf_conntrack_snmp
nf_conntrack_ftp       20480  3 nf_nat_ftp
nf_conntrack_h323      73728  5 nf_nat_h323
nf_conntrack_irc       16384  3 nf_nat_irc
nf_conntrack_netbios_ns    16384  2
nf_conntrack_netlink    49152  0
nf_conntrack_pptp      16384  3 nf_nat_pptp
nf_conntrack_proto_gre    16384  1 nf_conntrack_pptp
nf_conntrack_sane      16384  2
nf_conntrack_sip       32768  3 nf_nat_sip
nf_conntrack_snmp      16384  3 nf_nat_snmp_basic
nf_conntrack_tftp      16384  3 nf_nat_tftp
nf_defrag_ipv4         16384  2 nf_conntrack,xt_TPROXY
nf_defrag_ipv6         20480  2 nf_conntrack,xt_TPROXY
nf_log_common          16384  1 nf_log_ipv4
nf_log_ipv4            16384  15
nf_nat                 36864  12 nf_nat_irc,nf_nat_ftp,nf_nat_ipv4,xt_nat,nf_nat_tftp,nf_nat_amanda,nf_nat_pptp,xt_NETMAP,nf_nat_h323,nf_nat_proto_gre,nf_nat_sip,xt_REDIRECT
nf_nat_amanda          16384  0
nf_nat_ftp             16384  0
nf_nat_h323            20480  0
nf_nat_ipv4            16384  2 ipt_MASQUERADE,nft_chain_nat_ipv4
nf_nat_irc             16384  0
nf_nat_pptp            16384  0
nf_nat_proto_gre       16384  1 nf_nat_pptp
nf_nat_sip             20480  0
nf_nat_snmp_basic      16384  0
nf_nat_tftp            16384  0
nf_reject_ipv4         16384  1 ipt_REJECT
nf_tables             143360  912 nft_chain_route_ipv4,nft_compat,nft_chain_nat_ipv4,nft_counter
nf_tproxy_ipv4         16384  1 xt_TPROXY
nf_tproxy_ipv6         16384  1 xt_TPROXY
xt_addrtype            16384  34
xt_AUDIT               16384  0
xt_CHECKSUM            16384  0
xt_CLASSIFY            16384  0
xt_comment             16384  0
xt_connlimit           16384  0
xt_connmark            16384  0
xt_conntrack           16384  41
xt_CT                  16384  22
xt_dscp                16384  0
xt_DSCP                16384  0
xt_hashlimit           20480  0
xt_helper              16384  0
xt_iprange             16384  0
xt_length              16384  0
xt_LOG                 16384  15
xt_mark                16384  1
xt_multiport           16384  12
xt_nat                 16384  0
xt_NETMAP              16384  0
xt_NFLOG               16384  0
xt_NFQUEUE             16384  0
xt_owner               16384  0
xt_physdev             16384  0
xt_policy              16384  0
xt_realm               16384  0
xt_recent              20480  1
xt_REDIRECT            16384  0
xt_state               16384  0
xt_statistic           16384  0
xt_tcpmss              16384  0
xt_TCPMSS              16384  1
xt_tcpudp              16384  88
xt_time                16384  0
xt_TPROXY              16384  0

Shorewall has detected the following iptables/netfilter capabilities:
   ACCOUNT Target (ACCOUNT_TARGET): Not available
   Address Type Match (ADDRTYPE): Available
   Amanda Helper: Available
   Arptables JF (ARPTABLESJF): Not available
   AUDIT Target (AUDIT_TARGET): Available
   Basic Ematch (BASIC_EMATCH): Available
   Basic Filter (BASIC_FILTER): Available
   Capabilities Version (CAPVERSION): 50200
   Checksum Target (CHECKSUM_TARGET): Available
   CLASSIFY Target (CLASSIFY_TARGET): Available
   Comments (COMMENTS): Available
   Condition Match (CONDITION_MATCH): Not available
   Connection Tracking Match (CONNTRACK_MATCH): Available
   Connlimit Match (CONNLIMIT_MATCH): Available
   Connmark Match (CONNMARK_MATCH): Available
   CONNMARK Target (CONNMARK): Available
   CT Target (CT_TARGET): Available
   DSCP Match (DSCP_MATCH): Available
   DSCP Target (DSCP_TARGET): Available
   Enhanced Multi-port Match (EMULIPORT): Available
   Extended Connection Tracking Match Support (NEW_CONNTRACK_MATCH): Available
   Extended Connmark Match (XCONNMARK_MATCH): Available
   Extended CONNMARK Target (XCONNMARK): Available
   Extended MARK Target 2 (EXMARK): Available
   Extended MARK Target (XMARK): Available
   Extended Multi-port Match (XMULIPORT): Available
   Extended REJECT (ENHANCED_REJECT): Available
   FLOW Classifier (FLOW_FILTER): Available
   FTP-0 Helper: Not available
   FTP Helper: Available
   fwmark route mask (FWMARK_RT_MASK): Available
   Geo IP Match (GEOIP_MATCH): Not available
   Goto Support (GOTO_TARGET): Available
   H323 Helper: Available
   Hashlimit Match (HASHLIMIT_MATCH): Available
   Header Match (HEADER_MATCH): Not available
   Helper Match (HELPER_MATCH): Available
   Iface Match (IFACE_MATCH): Not available
   IMQ Target (IMQ_TARGET): Not available
   INPUT chain in nat table (NAT_INPUT_CHAIN): Available
   IPMARK Target (IPMARK_TARGET): Not available
   IPP2P Match (IPP2P_MATCH): Not available
   IP range Match(IPRANGE_MATCH): Available
   Ipset Match (IPSET_MATCH): Not available
   ipset V5 (IPSET_V5): Not available
   iptables-restore --wait option (RESTORE_WAIT_OPTION): Available
   iptables -S (IPTABLES_S): Available
   iptables --wait option (WAIT_OPTION): Available
   IRC-0 Helper: Not available
   IRC Helper: Available
   Kernel Version (KERNELVERSION): 41900
   LOGMARK Target (LOGMARK_TARGET): Not available
   LOG Target (LOG_TARGET): Available
   Mangle FORWARD Chain (MANGLE_FORWARD): Available
   Mark in the filter table (MARK_ANYWHERE): Available
   MARK Target (MARK): Available
   MASQUERADE Target (MASQUERADE_TGT): Available
   Multi-port Match (MULTIPORT): Available
   NAT (NAT_ENABLED): Available
   Netbios_ns Helper: Available
   NETMAP Target (NETMAP_TARGET): Available
   New tos Match (NEW_TOS_MATCH): Available
   NFAcct Match: Not available
   --nflog-size support (NFLOG_SIZE): Available
   NFLOG Target (NFLOG_TARGET): Available
   NFQUEUE CPU Fanout (CPU_FANOUT): Available
   NFQUEUE Target (NFQUEUE_TARGET): Available
   Owner Match (OWNER_MATCH): Available
   Owner Name Match (OWNER_NAME_MATCH): Available
   Packet length Match (LENGTH_MATCH): Available
   Packet Mangling (MANGLE_ENABLED): Available
   Persistent SNAT (PERSISTENT_SNAT): Available
   Physdev-is-bridged Support (PHYSDEV_BRIDGE): Available
   Physdev Match (PHYSDEV_MATCH): Available
   Policy Match (POLICY_MATCH): Available
   PPTP Helper: Available
   Raw Table (RAW_TABLE): Available
   Realm Match (REALM_MATCH): Available
   Recent Match "--reap" option (REAP_OPTION): Available
   Recent Match (RECENT_MATCH): Available
   Repeat match (KLUDGEFREE): Available
   RPFilter Match (RPFILTER_MATCH): Available
   SANE-0 Helper: Not available
   SANE Helper: Available
   SIP-0 Helper: Not available
   SIP Helper: Available
   SNMP Helper: Available
   Statistic Match (STATISTIC_MATCH): Available
   TARPIT Target (TARPIT_TARGET): Not available
   TCPMSS Match (TCPMSS_MATCH): Available
   TCPMSS Target (TCPMSS_TARGET): Available
   TFTP-0 Helper: Not available
   TFTP Helper: Available
   Time Match (TIME_MATCH): Available
   TPROXY Target (TPROXY_TARGET): Available
   UDPLITE Port Redirection (UDPLITEREDIRECT): Not available
   ULOG Target (ULOG_TARGET): Not available

Netid   State    Recv-Q   Send-Q     Local Address:Port     Peer Address:Port                                                                                   
udp     UNCONN   0        0              127.0.0.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=10))                                            
udp     UNCONN   0        0             172.16.1.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=8))                                             
udp     UNCONN   0        0             172.16.3.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=6))                                             
udp     UNCONN   0        0           0.0.0.0%eth3:67            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=4))                                             
udp     UNCONN   0        0             172.16.0.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=25))                                                
udp     UNCONN   0        0          203.214.66.98:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=24))                                                
udp     UNCONN   0        0             172.16.3.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=23))                                                
udp     UNCONN   0        0              127.0.0.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=18))                                                
udp     UNCONN   0        0                0.0.0.0:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=17))                                                
tcp     LISTEN   0        32             127.0.0.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=11))                                            
tcp     LISTEN   0        32            172.16.1.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=9))                                             
tcp     LISTEN   0        32            172.16.3.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=7))                                             
tcp     LISTEN   0        128              0.0.0.0:22            0.0.0.0:*       users:(("sshd",pid=1076,fd=3))                                                 
tcp     LISTEN   0        20               0.0.0.0:25            0.0.0.0:*       users:(("exim4",pid=1346,fd=4))                                                
tcp     LISTEN   0        5              127.0.0.1:3551          0.0.0.0:*       users:(("apcupsd",pid=1051,fd=5))                                              
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56556   users:(("sshd",pid=3534,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56559   users:(("sshd",pid=3556,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56478   users:(("sshd",pid=1919,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56558   users:(("sshd",pid=3546,fd=3))                                                 

Traffic Control

Device lo:
qdisc noqueue 0: root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device eth0:
qdisc mq 0: root 
 Sent 1879208792 bytes 4475711 pkt (dropped 0, overlimits 0 requeues 6) 
 backlog 0b 0p requeues 6
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1143264969 bytes 2358992 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 735943823 bytes 2116719 pkt (dropped 0, overlimits 0 requeues 6) 
 backlog 0b 0p requeues 6

class mq :1 root 
 Sent 735943823 bytes 2116719 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 1143264969 bytes 2358992 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth1:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device eth2:
qdisc mq 0: root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth3:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 11377074642 bytes 9346342 pkt (dropped 0, overlimits 0 requeues 5) 
 backlog 0b 0p requeues 5


Device eth5:
qdisc mq 0: root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth4:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device vif-fileserv:
qdisc mq 0: root 
 Sent 1353310 bytes 5623 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1353310 bytes 5623 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 1353310 bytes 5623 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-www2:
qdisc mq 0: root 
 Sent 2707833 bytes 19749 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1445557 bytes 16645 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1262276 bytes 3104 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 1262276 bytes 3104 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 1445557 bytes 16645 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-www:
qdisc mq 0: root 
 Sent 12403579 bytes 33259 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 5725566 bytes 8687 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 6678013 bytes 24572 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 6678013 bytes 24572 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 5725566 bytes 8687 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-mail:
qdisc mq 0: root 
 Sent 15013294 bytes 106840 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 4774432 bytes 37645 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 10238862 bytes 69195 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 10238862 bytes 69195 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 4774432 bytes 37645 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


TC Filters

Device lo:

Device eth0:

Device eth1:

Device eth2:

Device eth3:

Device eth5:

Device eth4:

Device vif-fileserv:

Device vif-www2:

Device vif-www:

Device vif-mail:

