Shorewall 5.2.3.2 Dump at fw - Sat 22 Feb 06:47:15 AEDT 2020

Shorewall is running
State:Started Sat 22 Feb 06:39:04 AEDT 2020 from /etc/shorewall/ (/var/lib/shorewall/firewall compiled Sat 22 Feb 06:39:03 AEDT 2020 by Shorewall version 5.2.3.2)

Counters reset Sat 22 Feb 06:39:11 AEDT 2020

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  132 15386 net-fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc-fw     all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    3   538 loc-fw     all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
  312 25682 loc-fw     all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc-fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-fw     all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
    1    76 dmz-fw     all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    1    76 dmz-fw     all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-fw     all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:INPUT:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 7548 1866K net_frwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
 9581  937K loc_frwd   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 1532 3710K dmz_frwd   all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
 2530 2063K dmz_frwd   all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
  337 3442K dmz_frwd   all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz_frwd   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:FORWARD:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  287 69748 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   96  6286 fw-net     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 eth2_out   all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_out  all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
    0     0 eth3_out   all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_out   all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www_out  all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
    0     0 vif-mail_out  all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www2_out  all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_out   all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 fw-fw      all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:OUTPUT:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
  222 40015 vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
   55  7342 vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
  237 3416K vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
   26  1400 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-dmz:ACCEPT:"
   26  1400 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz-fw (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    2   152 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    2   152 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-fw:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
  318 85792 vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
 2181 1760K vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
  100 26184 vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    1    40 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-loc:REJECT:"
    1    40 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  992 3585K vif-www_fop  all  --  vif-www *       0.0.0.0/0            0.0.0.0/0           
  294  295K vif-mail_fop  all  --  vif-mail *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-www2_fop  all  --  vif-www2 *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth4_fop   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
   14   949 ~log1      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  udp dpt:53
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp dpt:53
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  multiport dports 80,443
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp dpt:25
    0     0 ~log1      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  multiport dports 993,465,587
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    2   120 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-net:REJECT:"
    2   120 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dmz_frwd (4 references)
 pkts bytes target     prot opt in     out     source               destination         
 1286 3880K dmz-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
 2599 1872K dmz-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
  292 3424K dmz-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
   40 22021 dmz-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
  182 17994 dmz-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 dmz-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp flags:!0x17/0x02

Chain dynamic (17 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth1_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           [goto] 
  190 11356 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 9391  926K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
  190 11356 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   80 11574 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
  232 14108 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:67:68
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:33434:33524 /* Trcrt */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Trcrt */
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:fw-dmz:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain fw-fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:67:68
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spts:67:68 dpts:67:68 /* DHCPfwd */
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   92  5982 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* DNS */
    4   304 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
 3956  387K eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ~log3      tcp  --  *      *       172.16.3.2           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.3           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.4           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.5           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.6           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.7           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.8           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.9           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log3      tcp  --  *      *       172.16.3.10          0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:587 /* MSA */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 /* SMTP */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:465 /* SMTPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:465 /* SMTPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:465 /* SMTPS */
   37  2080 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.104       tcp dpt:993 /* IMAPS */
   34  1864 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.105       tcp dpt:993 /* IMAPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            203.214.66.106       tcp dpt:993 /* IMAPS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:loc-dmz:REJECT:"
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc-fw (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_iop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    3   538 vif-fileserv_iop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
  312 25682 eth3_iop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_iop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ~log2      tcp  --  *      *       172.16.3.2           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.3           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.4           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.5           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.6           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.7           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.8           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.9           0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
    0     0 ~log2      tcp  --  *      *       172.16.3.10          0.0.0.0/0           [goto]  tcp dpt:22 /* SSH */
   48  3102 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* DNS */
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spts:67:68 dpts:67:68 /* DHCPfwd */
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123 /* NTP */
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:548
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
   35  9010 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth2_fop   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vif-fileserv_fop  all  --  vif-fileserv *       0.0.0.0/0            0.0.0.0/0           
 5625  550K eth3_fop   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fop   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    2   128 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 /* Web */
   31  1960 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 /* Web */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
   86  5324 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc_frwd (4 references)
 pkts bytes target     prot opt in     out     source               destination         
 5625  550K loc-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 loc-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
  503 33620 loc-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
 3321  345K loc-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
  132  8016 loc-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 loc-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (7 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 4 level 6 prefix "Shorewall:logflags:DROP:"
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-dmz (4 references)
 pkts bytes target     prot opt in     out     source               destination         
  254 14776 net-dmz~   all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
  251 14644 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 1961  131K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
  212 10084 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
  212 10084 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ~log0      udp  --  *      *       49.183.151.254       0.0.0.0/0           [goto]  udp dpts:33434:33524 /* Trcrt */
    0     0 ~log0      icmp --  *      *       49.183.151.254       0.0.0.0/0           [goto]  icmptype 8 /* Trcrt */
   11   978 ~log0      udp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  udp dpt:53
    0     0 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  tcp dpt:53
   13   740 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.103      [goto]  multiport dports 80,443
    1    60 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.100      [goto]  tcp dpt:25
   10   624 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.104      [goto]  multiport dports 993,465,587
   15   944 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.105      [goto]  multiport dports 993,465,587
    0     0 ~log0      tcp  --  *      *       0.0.0.0/0            203.214.66.106      [goto]  multiport dports 993,465,587
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
  201 11298 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-dmz~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
    3   132 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   36  1465 net-fw~    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   36  1465 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   96 13921 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   35  1416 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
   35  1416 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:123
    0     0 ACCEPT     icmp --  *      *       203.214.66.97        0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
   36  1465 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-fw~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-loc (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 net-loc~   all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 5333 1720K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-loc~ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1024:1033,1434
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898

Chain net-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 net-net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      vif-fileserv  0.0.0.0/0            0.0.0.0/0           
 5333 1720K net-loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 1947  121K net-dmz    all  --  *      vif-www  0.0.0.0/0            0.0.0.0/0           
  268 24410 net-dmz    all  --  *      vif-mail  0.0.0.0/0            0.0.0.0/0           
    0     0 net-dmz    all  --  *      vif-www2  0.0.0.0/0            0.0.0.0/0           
    0     0 net-dmz    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain reject (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match src-type BROADCAST
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    3   160 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with tcp-reset
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-port-unreachable
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-unreachable
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibited

Chain sfilter (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:sfilter:DROP:"
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcpflags (17 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x3F/0x29
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x3F/0x00
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x06/0x06
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x05/0x05
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x03/0x03
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x19/0x09
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp spt:0 flags:0x17/0x02

Chain vif-fileserv_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-fileserv_iop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    3   538 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-fileserv_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-mail_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
   20  1202 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 2510 2062K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   11   640 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-mail_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www2_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    5   200 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
  332 3442K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    5   200 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www2_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www_fop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
   18  1107 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
 1514 3709K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
   13   720 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vif-www_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 fw-dmz     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ~log0 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
   50  3346 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* Trcrt */ LOG flags 0 level 6 prefix "Shorewall:net-dmz:ACCEPT:"
   50  3346 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* Trcrt */

Chain ~log1 (5 references)
 pkts bytes target     prot opt in     out     source               destination         
   14   949 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 6 prefix "Shorewall:dmz-net:ACCEPT:"
   14   949 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ~log2 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */ LOG flags 0 level 6 prefix "Shorewall:loc-fw:ACCEPT:"
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */

Chain ~log3 (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */ LOG flags 0 level 6 prefix "Shorewall:loc-dmz:ACCEPT:"
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* SSH */

Chain sha-lh-d192733e9318aaf11fdb (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain sha-rh-95df18ab14139355c5ee (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0            recent: SET name: %CURRENTTIME side: source mask: 255.255.255.255

ARP rules

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)

Log (/var/log/messages)

Feb 22 06:46:03 dmz-dmz:ACCEPT:IN=vif-mail OUT=vif-www SRC=203.214.66.104 DST=203.214.66.100 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=46955 DF PROTO=TCP SPT=56774 DPT=995 WINDOW=64240 RES=0x00 SYN URGP=0 
Feb 22 06:46:03 dmz-dmz:ACCEPT:IN=vif-mail OUT=vif-www SRC=203.214.66.104 DST=203.214.66.100 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=22266 DF PROTO=TCP SPT=56776 DPT=995 WINDOW=64240 RES=0x00 SYN URGP=0 
Feb 22 06:46:03 dmz-dmz:ACCEPT:IN=vif-mail OUT=vif-www SRC=203.214.66.104 DST=203.214.66.100 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=31281 DF PROTO=TCP SPT=56778 DPT=995 WINDOW=64240 RES=0x00 SYN URGP=0 
Feb 22 06:46:03 dmz-dmz:ACCEPT:IN=vif-mail OUT=vif-www SRC=203.214.66.104 DST=203.214.66.100 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=12442 DF PROTO=TCP SPT=56780 DPT=995 WINDOW=64240 RES=0x00 SYN URGP=0 
Feb 22 06:46:03 dmz-dmz:ACCEPT:IN=vif-mail OUT=vif-www SRC=203.214.66.104 DST=203.214.66.100 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=40667 DF PROTO=TCP SPT=56782 DPT=995 WINDOW=64240 RES=0x00 SYN URGP=0 
Feb 22 06:46:07 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=49.199.104.114 DST=203.214.66.103 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=8079 DF PROTO=TCP SPT=12303 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 22 06:46:08 dmz-dmz:ACCEPT:IN=vif-www OUT=vif-www2 SRC=203.214.66.103 DST=172.16.4.203 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=63961 DF PROTO=TCP SPT=60008 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 
Feb 22 06:46:08 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=66.249.64.144 DST=203.214.66.103 LEN=60 TOS=0x00 PREC=0x00 TTL=103 ID=41956 PROTO=TCP SPT=47202 DPT=80 WINDOW=62920 RES=0x00 SYN URGP=0 
Feb 22 06:46:08 dmz-dmz:ACCEPT:IN=vif-www OUT=vif-www2 SRC=203.214.66.103 DST=172.16.4.203 LEN=52 TOS=0x00 PREC=0x00 TTL=63 ID=1416 DF PROTO=TCP SPT=54962 DPT=80 WINDOW=501 RES=0x00 ACK FIN URGP=0 
Feb 22 06:46:08 dmz-dmz:ACCEPT:IN=vif-www OUT=vif-www2 SRC=203.214.66.103 DST=172.16.4.203 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=26022 DF PROTO=TCP SPT=55006 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 
Feb 22 06:46:08 dmz-dmz:ACCEPT:IN=vif-www2 OUT=vif-www SRC=172.16.4.203 DST=203.214.66.103 LEN=40 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=80 DPT=54962 WINDOW=0 RES=0x00 RST URGP=0 
Feb 22 06:46:09 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=188.186.147.36 DST=203.214.66.100 LEN=82 TOS=0x00 PREC=0x00 TTL=47 ID=35757 PROTO=UDP SPT=29911 DPT=53 LEN=62 
Feb 22 06:46:09 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=188.186.147.36 DST=203.214.66.100 LEN=82 TOS=0x00 PREC=0x00 TTL=47 ID=35765 PROTO=UDP SPT=50313 DPT=53 LEN=62 
Feb 22 06:46:18 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.104.114 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=46 ID=0 PROTO=TCP SPT=12305 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 
Feb 22 06:46:18 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=188.186.147.34 DST=203.214.66.100 LEN=83 TOS=0x00 PREC=0x00 TTL=47 ID=48894 PROTO=UDP SPT=51148 DPT=53 LEN=63 
Feb 22 06:46:18 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=188.186.147.34 DST=203.214.66.100 LEN=82 TOS=0x00 PREC=0x00 TTL=47 ID=48979 PROTO=UDP SPT=46183 DPT=53 LEN=62 
Feb 22 06:46:20 net-dmz:ACCEPT:IN=eth0 OUT=vif-mail SRC=49.199.104.114 DST=203.214.66.105 LEN=64 TOS=0x10 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=12306 DPT=993 WINDOW=65535 RES=0x00 CWR ECE SYN URGP=0 
Feb 22 06:46:58 net-dmz:ACCEPT:IN=eth0 OUT=vif-www SRC=139.99.142.183 DST=203.214.66.103 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=215 PROTO=TCP SPT=80 DPT=80 WINDOW=0 RES=0x00 SYN URGP=0 
Feb 22 06:47:01 dmz-net:ACCEPT:IN=vif-www OUT=eth0 SRC=203.214.66.103 DST=203.214.66.97 LEN=76 TOS=0x00 PREC=0x00 TTL=63 ID=11986 DF PROTO=UDP SPT=59789 DPT=53 LEN=56 
Feb 22 06:47:03 dmz-net:ACCEPT:IN=vif-www OUT=eth0 SRC=203.214.66.103 DST=203.214.66.97 LEN=102 TOS=0x00 PREC=0x00 TTL=63 ID=12408 DF PROTO=UDP SPT=21671 DPT=53 LEN=82 

NAT Table

Chain PREROUTING (policy ACCEPT 564 packets, 39866 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 84 packets, 12027 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 219 packets, 14249 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  214 13831 eth0_masq  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 96 packets, 6286 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all  --  *      *       172.16.1.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.2.0/24        0.0.0.0/0           
  108  6852 MASQUERADE  all  --  *      *       172.16.3.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.4.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.5.0/24        0.0.0.0/0           

Mangle Table

Chain PREROUTING (policy ACCEPT 22051 packets, 12M bytes)
 pkts bytes target     prot opt in     out     source               destination         
22051   12M tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 482 packets, 43894 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  482 43894 tcin       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 21534 packets, 12M bytes)
 pkts bytes target     prot opt in     out     source               destination         
  636 34516 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp flags:0x06/0x02 TCPMSS clamp to PMTU
21534   12M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            MARK and 0xffffff00
21534   12M tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 407 packets, 78546 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  407 78546 tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 21731 packets, 12M bytes)
 pkts bytes target     prot opt in     out     source               destination         
21731   12M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 22014 packets, 12M bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:10080 CT helper amanda
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 flags:0x17/0x02 CT helper ftp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1719 CT helper RAS
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6667 flags:0x17/0x02 CT helper irc
    1    78 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:137 CT helper netbios-ns
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1723 flags:0x17/0x02 CT helper pptp
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6566 flags:0x17/0x02 CT helper sane
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:5060 CT helper sip
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161 CT helper snmp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:69 CT helper tftp

Chain OUTPUT (policy ACCEPT 385 packets, 76426 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:10080 CT helper amanda
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 flags:0x17/0x02 CT helper ftp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1719 CT helper RAS
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6667 flags:0x17/0x02 CT helper irc
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:137 CT helper netbios-ns
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1723 flags:0x17/0x02 CT helper pptp
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6566 flags:0x17/0x02 CT helper sane
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:5060 CT helper sip
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161 CT helper snmp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:69 CT helper tftp

Conntrack Table (141 out of 262144)

ipv4     2 tcp      6 85 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58785 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58785 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431812 ESTABLISHED src=172.16.3.198 dst=17.57.145.36 sport=49510 dport=5223 src=17.57.145.36 dst=203.214.66.98 sport=5223 dport=49510 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 206985 ESTABLISHED src=36.110.199.141 dst=203.214.66.103 sport=31668 dport=443 src=172.16.4.103 dst=36.110.199.141 sport=443 dport=31668 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431960 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59341 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59341 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 331846 ESTABLISHED src=123.125.71.104 dst=203.214.66.103 sport=33264 dport=443 src=203.214.66.103 dst=123.125.71.104 sport=443 dport=33264 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 46 TIME_WAIT src=203.214.66.103 dst=172.16.4.203 sport=60004 dport=443 src=172.16.4.203 dst=203.214.66.103 sport=443 dport=60004 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 13 src=203.214.66.98 dst=203.0.178.191 sport=46309 dport=53 src=203.0.178.191 dst=203.214.66.98 sport=53 dport=46309 mark=0 zone=0 use=2
ipv4     2 tcp      6 431998 ESTABLISHED src=172.16.3.7 dst=203.214.66.104 sport=57053 dport=993 src=203.214.66.104 dst=172.16.3.7 sport=993 dport=57053 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 80 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58764 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58764 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 70 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58634 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58634 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 24 src=203.214.66.98 dst=203.0.178.191 sport=30512 dport=53 src=203.0.178.191 dst=203.214.66.98 sport=53 dport=30512 mark=0 zone=0 use=2
ipv4     2 tcp      6 318261 ESTABLISHED src=220.181.108.113 dst=203.214.66.103 sport=39957 dport=443 src=203.214.66.103 dst=220.181.108.113 sport=443 dport=39957 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 393737 ESTABLISHED src=220.181.108.108 dst=203.214.66.103 sport=36236 dport=443 src=203.214.66.103 dst=220.181.108.108 sport=443 dport=36236 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 325402 ESTABLISHED src=123.125.71.116 dst=203.214.66.103 sport=34290 dport=80 src=203.214.66.103 dst=123.125.71.116 sport=80 dport=34290 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 76 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58757 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58757 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 78 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58773 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58773 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 420237 ESTABLISHED src=58.250.125.111 dst=203.214.66.103 sport=45458 dport=443 src=203.214.66.103 dst=58.250.125.111 sport=443 dport=45458 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 2 src=203.214.66.98 dst=203.0.178.191 sport=26525 dport=53 src=203.0.178.191 dst=203.214.66.98 sport=53 dport=26525 mark=0 zone=0 use=2
ipv4     2 tcp      6 287726 ESTABLISHED src=123.125.71.41 dst=203.214.66.103 sport=29916 dport=443 src=172.16.4.103 dst=123.125.71.41 sport=443 dport=29916 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 273349 ESTABLISHED src=123.125.71.33 dst=203.214.66.103 sport=26879 dport=443 src=172.16.4.103 dst=123.125.71.33 sport=443 dport=26879 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 320055 ESTABLISHED src=123.125.71.40 dst=203.214.66.103 sport=28699 dport=443 src=203.214.66.103 dst=123.125.71.40 sport=443 dport=28699 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431942 ESTABLISHED src=49.199.104.114 dst=203.214.66.105 sport=12305 dport=993 src=203.214.66.105 dst=49.199.104.114 sport=993 dport=12305 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 336163 ESTABLISHED src=123.125.71.25 dst=203.214.66.103 sport=27162 dport=443 src=203.214.66.103 dst=123.125.71.25 sport=443 dport=27162 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431961 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=58731 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58731 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431961 ESTABLISHED src=172.16.3.2 dst=74.125.200.109 sport=51733 dport=993 src=74.125.200.109 dst=203.214.66.98 sport=993 dport=51733 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 430934 ESTABLISHED src=172.16.3.198 dst=52.98.4.82 sport=58635 dport=443 src=52.98.4.82 dst=203.214.66.98 sport=443 dport=58635 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 24 src=172.16.3.2 dst=172.16.3.1 sport=54686 dport=53 src=172.16.3.1 dst=172.16.3.2 sport=53 dport=54686 mark=0 zone=0 use=2
ipv4     2 tcp      6 311784 ESTABLISHED src=123.125.71.105 dst=203.214.66.103 sport=64648 dport=443 src=203.214.66.103 dst=123.125.71.105 sport=443 dport=64648 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 17 TIME_WAIT src=172.16.3.7 dst=74.125.68.108 sport=57041 dport=993 src=74.125.68.108 dst=203.214.66.98 sport=993 dport=57041 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 42 TIME_WAIT src=49.199.104.114 dst=203.214.66.103 sport=12296 dport=443 src=203.214.66.103 dst=49.199.104.114 sport=443 dport=12296 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 421107 ESTABLISHED src=123.125.71.33 dst=203.214.66.103 sport=33754 dport=443 src=203.214.66.103 dst=123.125.71.33 sport=443 dport=33754 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 108 src=203.214.66.104 dst=203.214.66.97 sport=44118 dport=53 src=203.214.66.97 dst=203.214.66.104 sport=53 dport=44118 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 430570 ESTABLISHED src=172.16.3.2 dst=172.16.1.130 sport=54468 dport=22 src=172.16.1.130 dst=172.16.3.2 sport=22 dport=54468 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 362308 ESTABLISHED src=220.181.108.114 dst=203.214.66.103 sport=44018 dport=443 src=203.214.66.103 dst=220.181.108.114 sport=443 dport=44018 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431745 ESTABLISHED src=172.16.3.2 dst=17.57.145.36 sport=56557 dport=5223 src=17.57.145.36 dst=203.214.66.98 sport=5223 dport=56557 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431996 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59333 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59333 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 415236 ESTABLISHED src=123.125.71.69 dst=203.214.66.103 sport=38338 dport=443 src=203.214.66.103 dst=123.125.71.69 sport=443 dport=38338 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 68 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58695 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58695 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 82 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58769 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58769 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 52 TIME_WAIT src=203.214.66.103 dst=172.16.4.203 sport=60006 dport=443 src=172.16.4.203 dst=203.214.66.103 sport=443 dport=60006 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 314658 ESTABLISHED src=123.125.71.44 dst=203.214.66.103 sport=29865 dport=80 src=203.214.66.103 dst=123.125.71.44 sport=80 dport=29865 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 411588 ESTABLISHED src=58.250.125.111 dst=203.214.66.103 sport=35341 dport=443 src=203.214.66.103 dst=58.250.125.111 sport=443 dport=35341 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 66 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58653 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58653 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 45 TIME_WAIT src=49.199.104.114 dst=203.214.66.103 sport=12297 dport=443 src=203.214.66.103 dst=49.199.104.114 sport=443 dport=12297 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 425505 ESTABLISHED src=172.16.3.198 dst=52.98.76.146 sport=58552 dport=443 src=52.98.76.146 dst=203.214.66.98 sport=443 dport=58552 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 430209 ESTABLISHED src=172.16.3.7 dst=17.57.145.37 sport=59133 dport=5223 src=17.57.145.37 dst=203.214.66.98 sport=5223 dport=59133 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 62 TIME_WAIT src=172.16.3.7 dst=17.167.192.225 sport=57048 dport=443 src=17.167.192.225 dst=203.214.66.98 sport=443 dport=57048 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 24 src=203.214.66.98 dst=8.8.8.8 sport=30512 dport=53 src=8.8.8.8 dst=203.214.66.98 sport=53 dport=30512 mark=0 zone=0 use=2
ipv4     2 tcp      6 70 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58649 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58649 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431998 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56559 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56559 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 79 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58776 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58776 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 318916 ESTABLISHED src=220.181.108.184 dst=203.214.66.103 sport=25874 dport=443 src=203.214.66.103 dst=220.181.108.184 sport=443 dport=25874 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431994 ESTABLISHED src=172.16.3.7 dst=74.125.68.108 sport=57052 dport=993 src=74.125.68.108 dst=203.214.66.98 sport=993 dport=57052 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 429582 ESTABLISHED src=172.16.3.2 dst=203.214.66.103 sport=51800 dport=22 src=203.214.66.103 dst=172.16.3.2 sport=22 dport=51800 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431960 ESTABLISHED src=172.16.3.2 dst=203.214.66.104 sport=59346 dport=993 src=203.214.66.104 dst=172.16.3.2 sport=993 dport=59346 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431763 ESTABLISHED src=172.16.3.8 dst=17.57.145.37 sport=50245 dport=5223 src=17.57.145.37 dst=203.214.66.98 sport=5223 dport=50245 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 17 TIME_WAIT src=172.16.3.7 dst=74.125.68.108 sport=57040 dport=993 src=74.125.68.108 dst=203.214.66.98 sport=993 dport=57040 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 315257 ESTABLISHED src=123.125.71.103 dst=203.214.66.103 sport=31803 dport=80 src=203.214.66.103 dst=123.125.71.103 sport=80 dport=31803 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 5 src=172.16.3.2 dst=172.16.3.255 sport=17500 dport=17500 [UNREPLIED] src=172.16.3.255 dst=172.16.3.2 sport=17500 dport=17500 mark=0 zone=0 use=2
ipv4     2 udp      17 13 src=172.16.3.2 dst=172.16.3.1 sport=60261 dport=53 src=172.16.3.1 dst=172.16.3.2 sport=53 dport=60261 mark=0 zone=0 use=2
ipv4     2 tcp      6 431996 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59334 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59334 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 425975 ESTABLISHED src=220.181.108.119 dst=203.214.66.103 sport=29694 dport=443 src=203.214.66.103 dst=220.181.108.119 sport=443 dport=29694 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 321625 ESTABLISHED src=220.181.108.87 dst=203.214.66.103 sport=45612 dport=443 src=203.214.66.103 dst=220.181.108.87 sport=443 dport=45612 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 69 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58654 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58654 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 19 src=203.214.66.103 dst=203.214.66.97 sport=21671 dport=53 src=203.214.66.97 dst=203.214.66.103 sport=53 dport=21671 mark=0 zone=0 use=2
ipv4     2 tcp      6 67 TIME_WAIT src=172.16.3.2 dst=74.125.200.109 sport=53418 dport=993 src=74.125.200.109 dst=203.214.66.98 sport=993 dport=53418 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 59 SYN_RECV src=139.99.142.183 dst=203.214.66.103 sport=80 dport=80 src=203.214.66.103 dst=139.99.142.183 sport=80 dport=80 mark=0 zone=0 use=2
ipv4     2 tcp      6 431962 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=58768 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58768 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 24 src=203.214.66.98 dst=203.214.66.97 sport=30512 dport=53 src=203.214.66.97 dst=203.214.66.98 sport=53 dport=30512 mark=0 zone=0 use=2
ipv4     2 tcp      6 431961 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=58637 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58637 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431948 ESTABLISHED src=172.16.3.2 dst=203.214.66.103 sport=63201 dport=22 src=203.214.66.103 dst=172.16.3.2 sport=22 dport=63201 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 326142 ESTABLISHED src=123.125.71.95 dst=203.214.66.103 sport=32293 dport=443 src=203.214.66.103 dst=123.125.71.95 sport=443 dport=32293 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 64 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58642 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58642 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 24 src=203.214.66.98 dst=203.215.29.191 sport=30512 dport=53 src=203.215.29.191 dst=203.214.66.98 sport=53 dport=30512 mark=0 zone=0 use=2
ipv4     2 udp      17 24 src=203.214.66.98 dst=8.8.4.4 sport=30512 dport=53 src=8.8.4.4 dst=203.214.66.98 sport=53 dport=30512 mark=0 zone=0 use=2
ipv4     2 tcp      6 431960 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59348 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59348 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 318927 ESTABLISHED src=220.181.108.156 dst=203.214.66.103 sport=31116 dport=443 src=203.214.66.103 dst=220.181.108.156 sport=443 dport=31116 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431435 ESTABLISHED src=123.125.71.107 dst=203.214.66.103 sport=53131 dport=443 src=203.214.66.103 dst=123.125.71.107 sport=443 dport=53131 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 180 ESTABLISHED src=109.233.124.79 dst=203.214.66.100 sport=45903 dport=25 src=203.214.66.100 dst=109.233.124.79 sport=25 dport=45903 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 66 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58657 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58657 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 41 TIME_WAIT src=49.199.104.114 dst=203.214.66.103 sport=12294 dport=80 src=203.214.66.103 dst=49.199.104.114 sport=80 dport=12294 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 78 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58765 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58765 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 102 TIME_WAIT src=172.16.3.7 dst=17.248.155.113 sport=57051 dport=443 src=17.248.155.113 dst=203.214.66.98 sport=443 dport=57051 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 428441 ESTABLISHED src=172.16.3.2 dst=172.16.4.203 sport=51795 dport=22 src=172.16.4.203 dst=172.16.3.2 sport=22 dport=51795 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 393727 ESTABLISHED src=220.181.108.155 dst=203.214.66.103 sport=63302 dport=443 src=203.214.66.103 dst=220.181.108.155 sport=443 dport=63302 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 63 TIME_WAIT src=172.16.3.2 dst=172.217.167.74 sport=58636 dport=443 src=172.217.167.74 dst=203.214.66.98 sport=443 dport=58636 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 72 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58663 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58663 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431960 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59347 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59347 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 331857 ESTABLISHED src=123.125.71.113 dst=203.214.66.103 sport=45444 dport=443 src=203.214.66.103 dst=123.125.71.113 sport=443 dport=45444 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431886 ESTABLISHED src=172.16.3.2 dst=52.41.33.64 sport=52396 dport=443 src=52.41.33.64 dst=203.214.66.98 sport=443 dport=52396 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431961 ESTABLISHED src=172.16.3.2 dst=172.217.194.109 sport=52026 dport=993 src=172.217.194.109 dst=203.214.66.98 sport=993 dport=52026 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431963 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=58782 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58782 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 64 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58639 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58639 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 65 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58648 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58648 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 42 TIME_WAIT src=49.199.104.114 dst=203.214.66.103 sport=12293 dport=80 src=203.214.66.103 dst=49.199.104.114 sport=80 dport=12293 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 316456 ESTABLISHED src=220.181.108.113 dst=203.214.66.103 sport=43843 dport=80 src=203.214.66.103 dst=220.181.108.113 sport=80 dport=43843 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 289721 ESTABLISHED src=220.181.108.91 dst=203.214.66.103 sport=54830 dport=443 src=172.16.4.103 dst=220.181.108.91 sport=443 dport=54830 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431960 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59343 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59343 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 419105 ESTABLISHED src=220.181.108.80 dst=203.214.66.103 sport=57704 dport=80 src=203.214.66.103 dst=220.181.108.80 sport=80 dport=57704 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 16 src=203.214.66.103 dst=203.214.66.97 sport=59789 dport=53 src=203.214.66.97 dst=203.214.66.103 sport=53 dport=59789 mark=0 zone=0 use=2
ipv4     2 tcp      6 67 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58660 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58660 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 78 TIME_WAIT src=172.16.3.2 dst=74.125.200.109 sport=53417 dport=993 src=74.125.200.109 dst=203.214.66.98 sport=993 dport=53417 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 208909 ESTABLISHED src=220.181.108.187 dst=203.214.66.103 sport=42327 dport=80 src=172.16.4.103 dst=220.181.108.187 sport=80 dport=42327 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 293665 ESTABLISHED src=220.181.108.143 dst=203.214.66.103 sport=56059 dport=443 src=172.16.4.103 dst=220.181.108.143 sport=443 dport=56059 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 336160 ESTABLISHED src=220.181.108.142 dst=203.214.66.103 sport=48658 dport=80 src=203.214.66.103 dst=220.181.108.142 sport=80 dport=48658 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 58 TIME_WAIT src=49.199.104.114 dst=203.214.66.103 sport=12303 dport=443 src=203.214.66.103 dst=49.199.104.114 sport=443 dport=12303 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 108 src=203.214.66.104 dst=203.214.66.97 sport=49071 dport=53 src=203.214.66.97 dst=203.214.66.104 sport=53 dport=49071 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 52 TIME_WAIT src=172.16.3.7 dst=17.56.12.41 sport=57046 dport=443 src=17.56.12.41 dst=203.214.66.98 sport=443 dport=57046 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431960 ESTABLISHED src=172.16.3.2 dst=203.214.66.105 sport=59342 dport=993 src=203.214.66.105 dst=172.16.3.2 sport=993 dport=59342 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 79 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58779 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58779 [ASSURED] mark=0 zone=0 use=2
ipv4     2 udp      17 108 src=203.214.66.104 dst=203.214.66.97 sport=42424 dport=53 src=203.214.66.97 dst=203.214.66.104 sport=53 dport=42424 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 324685 ESTABLISHED src=220.181.108.140 dst=203.214.66.103 sport=54657 dport=443 src=203.214.66.103 dst=220.181.108.140 sport=443 dport=54657 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 428441 ESTABLISHED src=172.16.3.2 dst=172.16.4.203 sport=51793 dport=22 src=172.16.4.203 dst=172.16.3.2 sport=22 dport=51793 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 424994 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56556 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56556 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 77 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58758 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58758 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431692 ESTABLISHED src=172.16.3.152 dst=40.90.189.152 sport=49463 dport=443 src=40.90.189.152 dst=203.214.66.98 sport=443 dport=49463 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 75 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58755 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58755 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 88 TIME_WAIT src=49.199.104.114 dst=203.214.66.105 sport=12287 dport=993 src=203.214.66.105 dst=49.199.104.114 sport=993 dport=12287 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 293722 ESTABLISHED src=123.125.71.27 dst=203.214.66.103 sport=25307 dport=80 src=172.16.4.103 dst=123.125.71.27 sport=80 dport=25307 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431717 ESTABLISHED src=172.16.3.2 dst=172.16.4.203 sport=54202 dport=22 src=172.16.4.203 dst=172.16.3.2 sport=22 dport=54202 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 292331 ESTABLISHED src=123.125.71.91 dst=203.214.66.103 sport=38868 dport=80 src=172.16.4.103 dst=123.125.71.91 sport=80 dport=38868 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 430767 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56558 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56558 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431925 ESTABLISHED src=172.16.3.2 dst=162.125.35.134 sport=56887 dport=443 src=162.125.35.134 dst=203.214.66.98 sport=443 dport=56887 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 67 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58674 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58674 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431962 ESTABLISHED src=172.16.3.2 dst=74.125.68.109 sport=58638 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58638 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 317056 ESTABLISHED src=220.181.108.178 dst=203.214.66.103 sport=47606 dport=80 src=203.214.66.103 dst=220.181.108.178 sport=80 dport=47606 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 431999 ESTABLISHED src=172.16.3.2 dst=203.214.66.98 sport=56478 dport=22 src=203.214.66.98 dst=172.16.3.2 sport=22 dport=56478 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 85 TIME_WAIT src=172.16.3.2 dst=74.125.68.109 sport=58786 dport=993 src=74.125.68.109 dst=203.214.66.98 sport=993 dport=58786 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 51 TIME_WAIT src=49.199.104.114 dst=203.214.66.103 sport=12298 dport=443 src=203.214.66.103 dst=49.199.104.114 sport=443 dport=12298 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 58 TIME_WAIT src=66.249.64.144 dst=203.214.66.103 sport=47202 dport=80 src=203.214.66.103 dst=66.249.64.144 sport=80 dport=47202 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 77 TIME_WAIT src=172.16.3.2 dst=216.58.203.106 sport=58763 dport=443 src=216.58.203.106 dst=203.214.66.98 sport=443 dport=58763 [ASSURED] mark=0 zone=0 use=2

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    inet 203.214.66.98/28 brd 203.214.66.111 scope global eth0
       valid_lft forever preferred_lft forever
    inet 172.16.0.1/24 scope global eth0
       valid_lft forever preferred_lft forever
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
    inet 172.16.1.1/24 brd 172.16.1.255 scope global eth1
       valid_lft forever preferred_lft forever
4: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    inet 172.16.2.1/24 brd 172.16.2.255 scope global eth2
       valid_lft forever preferred_lft forever
5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 172.16.3.1/24 brd 172.16.3.255 scope global eth3
       valid_lft forever preferred_lft forever
6: eth5: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    inet 172.16.5.1/24 brd 172.16.5.255 scope global eth5
       valid_lft forever preferred_lft forever
7: eth4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
    inet 172.16.4.1/24 brd 172.16.4.255 scope global eth4
       valid_lft forever preferred_lft forever
11: vif-fileserv: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-fileserv
       valid_lft forever preferred_lft forever
12: vif-www2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-www2
       valid_lft forever preferred_lft forever
14: vif-www: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-www
       valid_lft forever preferred_lft forever
15: vif-mail: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 32
    inet 203.214.66.98/32 brd 203.214.66.255 scope global vif-mail
       valid_lft forever preferred_lft forever

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    28141      304      0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    28141      304      0       0       0       0       
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 38:2c:4a:70:23:c0 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    14555437441 12761071 0       3       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    2716754433 6175329  0       0       0       0       
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
    link/ether 38:2c:4a:70:1c:d2 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
4: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:49:2e:44 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 68:05:ca:2c:44:f0 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    2724297974 6565111  0       16      0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    14736578635 12377569 0       0       0       0       
6: eth5: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:49:2e:45 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
7: eth4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
    link/ether 68:05:ca:2c:44:f1 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
11: vif-fileserv: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    795914     10706    0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    1415968    5982     0       0       0       0       
12: vif-www2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    95431320   55388    0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    32953297   83900    0       0       0       0       
14: vif-www: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    48449239   60872    0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    39612455   71134    0       0       0       0       
15: vif-mail: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 32
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    86554194   158654   0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    27377657   199097   0       0       0       0       

Bridges


Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

local 203.214.66.98 dev vif-www proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-www2 proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-mail proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev vif-fileserv proto kernel scope host src 203.214.66.98
local 203.214.66.98 dev eth0 proto kernel scope host src 203.214.66.98
local 172.16.5.1 dev eth5 proto kernel scope host src 172.16.5.1
local 172.16.4.1 dev eth4 proto kernel scope host src 172.16.4.1
local 172.16.3.1 dev eth3 proto kernel scope host src 172.16.3.1
local 172.16.2.1 dev eth2 proto kernel scope host src 172.16.2.1
local 172.16.1.1 dev eth1 proto kernel scope host src 172.16.1.1
local 172.16.0.1 dev eth0 proto kernel scope host src 172.16.0.1
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
broadcast 203.214.66.96 dev eth0 proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-www proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-www2 proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-mail proto kernel scope link src 203.214.66.98
broadcast 203.214.66.255 dev vif-fileserv proto kernel scope link src 203.214.66.98
broadcast 203.214.66.111 dev eth0 proto kernel scope link src 203.214.66.98
broadcast 172.16.5.255 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
broadcast 172.16.5.0 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
broadcast 172.16.4.255 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
broadcast 172.16.4.0 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
broadcast 172.16.3.255 dev eth3 proto kernel scope link src 172.16.3.1
broadcast 172.16.3.0 dev eth3 proto kernel scope link src 172.16.3.1
broadcast 172.16.2.255 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
broadcast 172.16.2.0 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
broadcast 172.16.1.255 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
broadcast 172.16.1.0 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
broadcast 172.16.0.255 dev eth0 proto kernel scope link src 172.16.0.1
broadcast 172.16.0.0 dev eth0 proto kernel scope link src 172.16.0.1
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1

Table main:

203.214.66.106 dev vif-mail scope link src 203.214.66.98
203.214.66.105 dev vif-mail scope link src 203.214.66.98
203.214.66.104 dev vif-mail scope link src 203.214.66.98
203.214.66.103 dev vif-www scope link src 203.214.66.98
203.214.66.100 dev vif-www scope link src 203.214.66.98
172.16.4.203 dev vif-www2 scope link src 203.214.66.98
172.16.1.130 dev vif-fileserv scope link src 203.214.66.98
203.214.66.96/28 dev eth0 proto kernel scope link src 203.214.66.98
172.16.5.0/24 dev eth5 proto kernel scope link src 172.16.5.1 linkdown
172.16.4.0/24 dev eth4 proto kernel scope link src 172.16.4.1 linkdown
172.16.3.0/24 dev eth3 proto kernel scope link src 172.16.3.1
172.16.2.0/24 dev eth2 proto kernel scope link src 172.16.2.1 linkdown
172.16.1.0/24 dev eth1 proto kernel scope link src 172.16.1.1 linkdown
172.16.0.0/24 dev eth0 proto kernel scope link src 172.16.0.1
default via 203.214.66.97 dev eth0 onlink

Per-IP Counters

   iptaccount is not installed

NF Accounting

No NF Accounting defined (nfacct not found)

Events


PFKEY SPD


PFKEY SAD


/proc

   /proc/version = Linux version 4.19.0-8-amd64 (debian-kernel@lists.debian.org) (gcc version 8.3.0 (Debian 8.3.0-6)) #1 SMP Debian 4.19.98-1 (2020-01-26)
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 0
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/log_martians = 1
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/log_martians = 1
   /proc/sys/net/ipv4/conf/eth4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth4/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth4/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/log_martians = 1
   /proc/sys/net/ipv4/conf/eth5/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth5/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth5/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth5/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth5/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-fileserv/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-fileserv/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-fileserv/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-mail/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-mail/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-mail/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-mail/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-mail/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-www/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-www/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-www/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-www/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-www/log_martians = 1
   /proc/sys/net/ipv4/conf/vif-www2/proxy_arp = 1
   /proc/sys/net/ipv4/conf/vif-www2/arp_filter = 0
   /proc/sys/net/ipv4/conf/vif-www2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vif-www2/rp_filter = 1
   /proc/sys/net/ipv4/conf/vif-www2/log_martians = 1

ARP

? (203.214.66.99) at <incomplete> on eth0
? (172.16.4.104) at <incomplete> on eth4
? (203.214.66.100) at 68:05:ca:2c:44:f1 [ether] on vif-www
? (172.16.1.130) at 38:2c:4a:70:1c:d2 [ether] on vif-fileserv
? (172.16.3.201) at 9c:ae:d3:0a:f4:8f [ether] on eth3
? (172.16.3.100) at <incomplete> on eth3
? (172.16.4.254) at <incomplete> on eth4
? (203.214.66.109) at 74:d0:2b:8e:70:80 [ether] on eth0
? (203.214.66.103) at <incomplete> on eth0
? (172.16.4.203) at <incomplete> on eth4
? (172.16.3.10) at <incomplete> on eth3
? (203.214.66.104) at <incomplete> on eth0
? (203.214.66.104) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (203.214.66.97) at 78:24:af:93:40:88 [ether] on eth0
? (172.16.3.214) at <incomplete> on eth3
? (172.16.3.7) at a4:f1:e8:b4:95:d3 [ether] on eth3
? (203.214.66.105) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (172.16.3.198) at 8c:fe:57:0d:fc:23 [ether] on eth3
? (172.16.3.8) at 5c:ad:cf:92:67:47 [ether] on eth3
? (172.16.4.100) at <incomplete> on eth4
? (172.16.3.2) at 68:5b:35:7e:11:5f [ether] on eth3
? (172.16.4.105) at <incomplete> on eth4
? (203.214.66.100) at <incomplete> on eth0
? (203.214.66.106) at <incomplete> on eth0
? (203.214.66.106) at 68:05:ca:2c:44:f1 [ether] on vif-mail
? (203.214.66.103) at 68:05:ca:2c:44:f1 [ether] on vif-www
? (172.16.4.103) at <incomplete> on eth4
? (172.16.3.152) at dc:fb:48:0e:34:72 [ether] on eth3
? (203.214.66.105) at <incomplete> on eth0
? (172.16.3.5) at <incomplete> on eth3
? (172.16.4.203) at 68:05:ca:2c:44:f1 [ether] on vif-www2
? (172.16.4.203) at <from_interface> PERM PUB on eth0
? (203.214.66.104) at <from_interface> PERM PUB on eth0
? (203.214.66.105) at <from_interface> PERM PUB on eth0
? (203.214.66.106) at <from_interface> PERM PUB on eth0
? (203.214.66.100) at <from_interface> PERM PUB on eth0
? (203.214.66.103) at <from_interface> PERM PUB on eth0

Modules

ip_tables              28672  4
ipt_MASQUERADE         16384  5
ipt_REJECT             16384  4
ipt_rpfilter           16384  0
nf_conncount           20480  1 xt_connlimit
nf_conntrack          172032  34 xt_conntrack,nf_nat_irc,nf_nat,nf_conntrack_tftp,nf_nat_ftp,xt_state,nf_conntrack_pptp,ipt_MASQUERADE,nf_conntrack_netbios_ns,nf_conntrack_sane,nf_nat_ipv4,xt_nat,nf_nat_tftp,nf_nat_amanda,nf_conntrack_sip,xt_helper,nf_conntrack_h323,nf_nat_pptp,xt_NETMAP,nf_conntrack_broadcast,nf_conntrack_irc,nf_conntrack_amanda,nf_conntrack_netlink,xt_connmark,nf_conntrack_proto_gre,nf_conntrack_ftp,xt_CT,nf_nat_h323,nf_conncount,nf_conntrack_snmp,nf_nat_snmp_basic,xt_connlimit,nf_nat_sip,xt_REDIRECT
nf_conntrack_amanda    16384  3 nf_nat_amanda
nf_conntrack_broadcast    16384  2 nf_conntrack_netbios_ns,nf_conntrack_snmp
nf_conntrack_ftp       20480  3 nf_nat_ftp
nf_conntrack_h323      73728  5 nf_nat_h323
nf_conntrack_irc       16384  3 nf_nat_irc
nf_conntrack_netbios_ns    16384  2
nf_conntrack_netlink    49152  0
nf_conntrack_pptp      16384  3 nf_nat_pptp
nf_conntrack_proto_gre    16384  1 nf_conntrack_pptp
nf_conntrack_sane      16384  2
nf_conntrack_sip       32768  3 nf_nat_sip
nf_conntrack_snmp      16384  3 nf_nat_snmp_basic
nf_conntrack_tftp      16384  3 nf_nat_tftp
nf_defrag_ipv4         16384  2 nf_conntrack,xt_TPROXY
nf_defrag_ipv6         20480  2 nf_conntrack,xt_TPROXY
nf_log_common          16384  1 nf_log_ipv4
nf_log_ipv4            16384  15
nf_nat                 36864  12 nf_nat_irc,nf_nat_ftp,nf_nat_ipv4,xt_nat,nf_nat_tftp,nf_nat_amanda,nf_nat_pptp,xt_NETMAP,nf_nat_h323,nf_nat_proto_gre,nf_nat_sip,xt_REDIRECT
nf_nat_amanda          16384  0
nf_nat_ftp             16384  0
nf_nat_h323            20480  0
nf_nat_ipv4            16384  2 ipt_MASQUERADE,nft_chain_nat_ipv4
nf_nat_irc             16384  0
nf_nat_pptp            16384  0
nf_nat_proto_gre       16384  1 nf_nat_pptp
nf_nat_sip             20480  0
nf_nat_snmp_basic      16384  0
nf_nat_tftp            16384  0
nf_reject_ipv4         16384  1 ipt_REJECT
nf_tables             143360  912 nft_chain_route_ipv4,nft_compat,nft_chain_nat_ipv4,nft_counter
nf_tproxy_ipv4         16384  1 xt_TPROXY
nf_tproxy_ipv6         16384  1 xt_TPROXY
xt_addrtype            16384  34
xt_AUDIT               16384  0
xt_CHECKSUM            16384  0
xt_CLASSIFY            16384  0
xt_comment             16384  0
xt_connlimit           16384  0
xt_connmark            16384  0
xt_conntrack           16384  41
xt_CT                  16384  22
xt_dscp                16384  0
xt_DSCP                16384  0
xt_hashlimit           20480  0
xt_helper              16384  0
xt_iprange             16384  0
xt_length              16384  0
xt_LOG                 16384  15
xt_mark                16384  1
xt_multiport           16384  12
xt_nat                 16384  0
xt_NETMAP              16384  0
xt_NFLOG               16384  0
xt_NFQUEUE             16384  0
xt_owner               16384  0
xt_physdev             16384  0
xt_policy              16384  0
xt_realm               16384  0
xt_recent              20480  1
xt_REDIRECT            16384  0
xt_state               16384  0
xt_statistic           16384  0
xt_tcpmss              16384  0
xt_TCPMSS              16384  1
xt_tcpudp              16384  88
xt_time                16384  0
xt_TPROXY              16384  0

Shorewall has detected the following iptables/netfilter capabilities:
   ACCOUNT Target (ACCOUNT_TARGET): Not available
   Address Type Match (ADDRTYPE): Available
   Amanda Helper: Available
   Arptables JF (ARPTABLESJF): Not available
   AUDIT Target (AUDIT_TARGET): Available
   Basic Ematch (BASIC_EMATCH): Available
   Basic Filter (BASIC_FILTER): Available
   Capabilities Version (CAPVERSION): 50200
   Checksum Target (CHECKSUM_TARGET): Available
   CLASSIFY Target (CLASSIFY_TARGET): Available
   Comments (COMMENTS): Available
   Condition Match (CONDITION_MATCH): Not available
   Connection Tracking Match (CONNTRACK_MATCH): Available
   Connlimit Match (CONNLIMIT_MATCH): Available
   Connmark Match (CONNMARK_MATCH): Available
   CONNMARK Target (CONNMARK): Available
   CT Target (CT_TARGET): Available
   DSCP Match (DSCP_MATCH): Available
   DSCP Target (DSCP_TARGET): Available
   Enhanced Multi-port Match (EMULIPORT): Available
   Extended Connection Tracking Match Support (NEW_CONNTRACK_MATCH): Available
   Extended Connmark Match (XCONNMARK_MATCH): Available
   Extended CONNMARK Target (XCONNMARK): Available
   Extended MARK Target 2 (EXMARK): Available
   Extended MARK Target (XMARK): Available
   Extended Multi-port Match (XMULIPORT): Available
   Extended REJECT (ENHANCED_REJECT): Available
   FLOW Classifier (FLOW_FILTER): Available
   FTP-0 Helper: Not available
   FTP Helper: Available
   fwmark route mask (FWMARK_RT_MASK): Available
   Geo IP Match (GEOIP_MATCH): Not available
   Goto Support (GOTO_TARGET): Available
   H323 Helper: Available
   Hashlimit Match (HASHLIMIT_MATCH): Available
   Header Match (HEADER_MATCH): Not available
   Helper Match (HELPER_MATCH): Available
   Iface Match (IFACE_MATCH): Not available
   IMQ Target (IMQ_TARGET): Not available
   INPUT chain in nat table (NAT_INPUT_CHAIN): Available
   IPMARK Target (IPMARK_TARGET): Not available
   IPP2P Match (IPP2P_MATCH): Not available
   IP range Match(IPRANGE_MATCH): Available
   Ipset Match (IPSET_MATCH): Not available
   ipset V5 (IPSET_V5): Not available
   iptables-restore --wait option (RESTORE_WAIT_OPTION): Available
   iptables -S (IPTABLES_S): Available
   iptables --wait option (WAIT_OPTION): Available
   IRC-0 Helper: Not available
   IRC Helper: Available
   Kernel Version (KERNELVERSION): 41900
   LOGMARK Target (LOGMARK_TARGET): Not available
   LOG Target (LOG_TARGET): Available
   Mangle FORWARD Chain (MANGLE_FORWARD): Available
   Mark in the filter table (MARK_ANYWHERE): Available
   MARK Target (MARK): Available
   MASQUERADE Target (MASQUERADE_TGT): Available
   Multi-port Match (MULTIPORT): Available
   NAT (NAT_ENABLED): Available
   Netbios_ns Helper: Available
   NETMAP Target (NETMAP_TARGET): Available
   New tos Match (NEW_TOS_MATCH): Available
   NFAcct Match: Not available
   --nflog-size support (NFLOG_SIZE): Available
   NFLOG Target (NFLOG_TARGET): Available
   NFQUEUE CPU Fanout (CPU_FANOUT): Available
   NFQUEUE Target (NFQUEUE_TARGET): Available
   Owner Match (OWNER_MATCH): Available
   Owner Name Match (OWNER_NAME_MATCH): Available
   Packet length Match (LENGTH_MATCH): Available
   Packet Mangling (MANGLE_ENABLED): Available
   Persistent SNAT (PERSISTENT_SNAT): Available
   Physdev-is-bridged Support (PHYSDEV_BRIDGE): Available
   Physdev Match (PHYSDEV_MATCH): Available
   Policy Match (POLICY_MATCH): Available
   PPTP Helper: Available
   Raw Table (RAW_TABLE): Available
   Realm Match (REALM_MATCH): Available
   Recent Match "--reap" option (REAP_OPTION): Available
   Recent Match (RECENT_MATCH): Available
   Repeat match (KLUDGEFREE): Available
   RPFilter Match (RPFILTER_MATCH): Available
   SANE-0 Helper: Not available
   SANE Helper: Available
   SIP-0 Helper: Not available
   SIP Helper: Available
   SNMP Helper: Available
   Statistic Match (STATISTIC_MATCH): Available
   TARPIT Target (TARPIT_TARGET): Not available
   TCPMSS Match (TCPMSS_MATCH): Available
   TCPMSS Target (TCPMSS_TARGET): Available
   TFTP-0 Helper: Not available
   TFTP Helper: Available
   Time Match (TIME_MATCH): Available
   TPROXY Target (TPROXY_TARGET): Available
   UDPLITE Port Redirection (UDPLITEREDIRECT): Not available
   ULOG Target (ULOG_TARGET): Not available

Netid   State    Recv-Q   Send-Q     Local Address:Port     Peer Address:Port                                                                                   
udp     UNCONN   0        0              127.0.0.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=10))                                            
udp     UNCONN   0        0             172.16.1.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=8))                                             
udp     UNCONN   0        0             172.16.3.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=6))                                             
udp     UNCONN   0        0           0.0.0.0%eth3:67            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=4))                                             
udp     UNCONN   0        0             172.16.0.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=25))                                                
udp     UNCONN   0        0          203.214.66.98:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=24))                                                
udp     UNCONN   0        0             172.16.3.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=23))                                                
udp     UNCONN   0        0              127.0.0.1:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=18))                                                
udp     UNCONN   0        0                0.0.0.0:123           0.0.0.0:*       users:(("ntpd",pid=1057,fd=17))                                                
tcp     LISTEN   0        32             127.0.0.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=11))                                            
tcp     LISTEN   0        32            172.16.1.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=9))                                             
tcp     LISTEN   0        32            172.16.3.1:53            0.0.0.0:*       users:(("dnsmasq",pid=15354,fd=7))                                             
tcp     LISTEN   0        128              0.0.0.0:22            0.0.0.0:*       users:(("sshd",pid=1076,fd=3))                                                 
tcp     LISTEN   0        20               0.0.0.0:25            0.0.0.0:*       users:(("exim4",pid=1346,fd=4))                                                
tcp     LISTEN   0        5              127.0.0.1:3551          0.0.0.0:*       users:(("apcupsd",pid=1051,fd=5))                                              
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56556   users:(("sshd",pid=3534,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56559   users:(("sshd",pid=3556,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56478   users:(("sshd",pid=1919,fd=3))                                                 
tcp     ESTAB    0        0          203.214.66.98:22         172.16.3.2:56558   users:(("sshd",pid=3546,fd=3))                                                 

Traffic Control

Device lo:
qdisc noqueue 0: root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device eth0:
qdisc mq 0: root 
 Sent 2716754433 bytes 6175329 pkt (dropped 0, overlimits 0 requeues 6) 
 backlog 0b 0p requeues 6
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1251925173 bytes 2940710 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1464829260 bytes 3234619 pkt (dropped 0, overlimits 0 requeues 6) 
 backlog 0b 0p requeues 6

class mq :1 root 
 Sent 1464829260 bytes 3234619 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 1251925173 bytes 2940710 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth1:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device eth2:
qdisc mq 0: root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth3:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 14684475685 bytes 12377552 pkt (dropped 0, overlimits 0 requeues 7) 
 backlog 0b 0p requeues 7


Device eth5:
qdisc mq 0: root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device eth4:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device vif-fileserv:
qdisc mq 0: root 
 Sent 1426624 bytes 6152 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1426624 bytes 6152 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 1426624 bytes 6152 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-www2:
qdisc mq 0: root 
 Sent 33363619 bytes 90117 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 5690239 bytes 55108 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 27673380 bytes 35009 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 27673380 bytes 35009 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 5690239 bytes 55108 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-www:
qdisc mq 0: root 
 Sent 40861673 bytes 90065 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 18719618 bytes 29778 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 22142055 bytes 60287 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 22142055 bytes 60287 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 18719618 bytes 29778 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device vif-mail:
qdisc mq 0: root 
 Sent 27389837 bytes 199285 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :8 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :7 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :6 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :5 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :4 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :3 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 8817765 bytes 70632 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc pfifo_fast 0: parent :1 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 18572072 bytes 128653 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

class mq :1 root 
 Sent 18572072 bytes 128653 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :2 root 
 Sent 8817765 bytes 70632 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :3 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


TC Filters

Device lo:

Device eth0:

Device eth1:

Device eth2:

Device eth3:

Device eth5:

Device eth4:

Device vif-fileserv:

Device vif-www2:

Device vif-www:

Device vif-mail:

