Shorewall-3.2.4 Dump at stageServer - Tue Nov 7 17:17:45 PST 2006 Counters reset Tue Nov 7 17:13:08 PST 2006 Chain Drop (3 references) pkts bytes target prot opt in out source destination 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 0 0 dropBcast all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11 0 0 dropInvalid all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 0 0 dropNotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 310 24579 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 288 41024 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 eth0_fwd all -- eth0 * 0.0.0.0/0 0.0.0.0/0 0 0 eth1_fwd all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 283 139K fw2net all -- * eth0 0.0.0.0/0 0.0.0.0/0 288 50832 fw2loc all -- * eth1 0.0.0.0/0 10.0.0.0/24 7 516 fw2loc all -- * eth1 0.0.0.0/0 10.0.0.0/8 0 0 fw2loc all -- * eth1 0.0.0.0/0 10.0.0.0/8 0 0 fw2loc all -- * eth1 0.0.0.0/0 255.255.255.255 0 0 fw2loc all -- * eth1 0.0.0.0/0 224.0.0.0/4 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain Reject (9 references) pkts bytes target prot opt in out source destination 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 0 0 dropBcast all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11 0 0 dropInvalid all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 0 0 dropNotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 Chain all2all (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain dropBcast (2 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast Chain dropInvalid (2 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID Chain dropNotSyn (2 references) pkts bytes target prot opt in out source destination 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 Chain dynamic (4 references) pkts bytes target prot opt in out source destination Chain eth0_fwd (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW 0 0 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW 0 0 norfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW 0 0 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 net2loc all -- * eth1 0.0.0.0/0 10.0.0.0/24 0 0 net2loc all -- * eth1 0.0.0.0/0 10.0.0.0/8 0 0 net2loc all -- * eth1 0.0.0.0/0 10.0.0.0/8 Chain eth0_in (1 references) pkts bytes target prot opt in out source destination 3 180 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW 3 180 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW 3 180 norfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW 309 24452 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 310 24579 net2fw all -- * * 0.0.0.0/0 0.0.0.0/0 Chain eth1_fwd (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW 0 0 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW 0 0 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 loc_frwd all -- * * 10.0.0.0/24 0.0.0.0/0 0 0 loc_frwd all -- * * 10.0.0.0/8 0.0.0.0/0 0 0 loc_frwd all -- * * 10.0.0.0/8 0.0.0.0/0 Chain eth1_in (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW 0 0 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW 0 0 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 288 41024 loc2fw all -- * * 10.0.0.0/24 0.0.0.0/0 0 0 loc2fw all -- * * 10.0.0.0/8 0.0.0.0/0 0 0 loc2fw all -- * * 10.0.0.0/8 0.0.0.0/0 Chain fw2all (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:fw2all:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain fw2loc (5 references) pkts bytes target prot opt in out source destination 288 50832 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 4 336 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1521 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 3 180 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:fw2loc:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain fw2net (1 references) pkts bytes target prot opt in out source destination 282 139K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 1 74 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:fw2net:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain loc2all (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:loc2all:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain loc2fw (3 references) pkts bytes target prot opt in out source destination 288 41024 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:loc2fw:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain loc2net (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain loc_frwd (3 references) pkts bytes target prot opt in out source destination 0 0 loc2net all -- * eth0 0.0.0.0/0 0.0.0.0/0 Chain logdrop (0 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:logdrop:DROP:' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain logflags (5 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain logreject (0 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:logreject:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain net2all (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2all:DROP:' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain net2fw (1 references) pkts bytes target prot opt in out source destination 307 24399 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 3 180 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 0 0 reject icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2fw:DROP:' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain net2loc (3 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2loc:DROP:' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain norfc1918 (2 references) pkts bytes target prot opt in out source destination 0 0 rfc1918 all -- * * 172.16.0.0/12 0.0.0.0/0 0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 172.16.0.0/12 0 0 rfc1918 all -- * * 192.168.0.0/16 0.0.0.0/0 0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 192.168.0.0/16 0 0 rfc1918 all -- * * 10.0.0.0/8 0.0.0.0/0 0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 10.0.0.0/8 Chain reject (17 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0 0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast 0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0 0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain rfc1918 (6 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:rfc1918:DROP:' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain shorewall (0 references) pkts bytes target prot opt in out source destination Chain smurfs (4 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 63.251.112.223 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 0 0 DROP all -- * * 63.251.112.223 0.0.0.0/0 0 0 LOG all -- * * 10.255.255.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 0 0 DROP all -- * * 10.255.255.255 0.0.0.0/0 0 0 LOG all -- * * 255.255.255.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0 0 0 LOG all -- * * 224.0.0.0/4 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0 Chain tcpflags (4 references) pkts bytes target prot opt in out source destination 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:0 flags:0x17/0x02 Log (/var/log/messages) Nov 7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=61626 PROTO=TCP SPT=63774 DPT=353 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=41889 PROTO=TCP SPT=63774 DPT=1241 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=20626 PROTO=TCP SPT=63774 DPT=849 WINDOW=2048 RES=0x00 SYN URGP=0 Nov 7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=13459 PROTO=TCP SPT=63774 DPT=748 WINDOW=3072 RES=0x00 SYN URGP=0 Nov 7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=2748 PROTO=TCP SPT=63774 DPT=325 WINDOW=4096 RES=0x00 SYN URGP=0 Nov 7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=47739 PROTO=TCP SPT=63774 DPT=2006 WINDOW=3072 RES=0x00 SYN URGP=0 Nov 7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=53333 PROTO=TCP SPT=63773 DPT=899 WINDOW=4096 RES=0x00 SYN URGP=0 Nov 7 14:58:56 net2fw:DROP:IN=eth0 OUT= SRC=60.11.125.41 DST=63.251.112.215 LEN=782 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=33643 DPT=1026 LEN=762 Nov 7 14:58:56 net2fw:DROP:IN=eth0 OUT= SRC=60.11.125.41 DST=63.251.112.215 LEN=782 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=33643 DPT=1027 LEN=762 Nov 7 15:13:15 net2fw:DROP:IN=eth0 OUT= SRC=74.52.74.82 DST=63.251.112.215 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=35436 PROTO=TCP SPT=111 DPT=111 WINDOW=30148 RES=0x00 SYN URGP=0 Nov 7 15:22:42 net2fw:DROP:IN=eth0 OUT= SRC=85.56.41.94 DST=63.251.112.215 LEN=63 TOS=0x00 PREC=0x00 TTL=104 ID=53964 PROTO=UDP SPT=4672 DPT=4672 LEN=43 Nov 7 15:41:24 net2fw:DROP:IN=eth0 OUT= SRC=80.103.96.228 DST=63.251.112.215 LEN=63 TOS=0x00 PREC=0x00 TTL=103 ID=44757 PROTO=UDP SPT=10496 DPT=4672 LEN=43 Nov 7 16:04:27 net2fw:DROP:IN=eth0 OUT= SRC=221.4.39.231 DST=63.251.112.215 LEN=404 TOS=0x00 PREC=0x00 TTL=114 ID=17111 PROTO=UDP SPT=4176 DPT=1434 LEN=384 Nov 7 16:42:27 net2fw:DROP:IN=eth0 OUT= SRC=201.19.194.175 DST=63.251.112.215 LEN=63 TOS=0x00 PREC=0x00 TTL=112 ID=20555 PROTO=UDP SPT=61844 DPT=4672 LEN=43 Nov 7 16:55:43 net2fw:DROP:IN=eth0 OUT= SRC=221.209.244.74 DST=63.251.112.215 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=32886 PROTO=TCP SPT=6000 DPT=8080 WINDOW=16384 RES=0x00 SYN URGP=0 Nov 7 16:57:40 net2fw:DROP:IN=eth0 OUT= SRC=60.11.125.41 DST=63.251.112.215 LEN=782 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=58412 DPT=1026 LEN=762 Nov 7 16:57:40 net2fw:DROP:IN=eth0 OUT= SRC=60.11.125.41 DST=63.251.112.215 LEN=782 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=58412 DPT=1027 LEN=762 Nov 7 16:57:45 fw2loc:REJECT:IN= OUT=eth1 SRC=10.0.0.215 DST=10.0.2.99 LEN=60 TOS=0x10 PREC=0x00 TTL=64 ID=27273 DF PROTO=TCP SPT=37756 DPT=25 WINDOW=5840 RES=0x00 SYN URGP=0 Nov 7 16:59:41 fw2loc:REJECT:IN= OUT=eth1 SRC=10.0.0.215 DST=10.0.2.99 LEN=60 TOS=0x10 PREC=0x00 TTL=64 ID=59042 DF PROTO=TCP SPT=37757 DPT=25 WINDOW=5840 RES=0x00 SYN URGP=0 Nov 7 17:04:38 net2fw:DROP:IN=eth0 OUT= SRC=221.209.244.73 DST=63.251.112.215 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=49745 PROTO=TCP SPT=6000 DPT=7212 WINDOW=16384 RES=0x00 SYN URGP=0 NAT Table Chain PREROUTING (policy ACCEPT 327 packets, 16647 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 5 packets, 362 bytes) pkts bytes target prot opt in out source destination 1 74 eth0_masq all -- * eth0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 5 packets, 362 bytes) pkts bytes target prot opt in out source destination Chain eth0_masq (1 references) pkts bytes target prot opt in out source destination 0 0 MASQUERADE all -- * * 10.0.0.0/8 0.0.0.0/0 Mangle Table Chain PREROUTING (policy ACCEPT 1391 packets, 131K bytes) pkts bytes target prot opt in out source destination 796 76022 tcpre all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INPUT (policy ACCEPT 1067 packets, 114K bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 tcfor all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 3803K packets, 718M bytes) pkts bytes target prot opt in out source destination 578 191K tcout all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 961 packets, 265K bytes) pkts bytes target prot opt in out source destination 578 191K tcpost all -- * * 0.0.0.0/0 0.0.0.0/0 Chain tcfor (1 references) pkts bytes target prot opt in out source destination Chain tcout (1 references) pkts bytes target prot opt in out source destination Chain tcpost (1 references) pkts bytes target prot opt in out source destination Chain tcpre (1 references) pkts bytes target prot opt in out source destination Conntrack Table tcp 6 431077 ESTABLISHED src=10.0.0.215 dst=10.0.0.176 sport=50007 dport=22 packets=1522 bytes=88228 src=10.0.0.176 dst=10.0.0.215 sport=22 dport=50007 packets=2109 bytes=604947 [ASSURED] mark=0 use=1 tcp 6 431999 ESTABLISHED src=209.216.245.214 dst=63.251.112.215 sport=34298 dport=22 packets=6327 bytes=453228 src=63.251.112.215 dst=209.216.245.214 sport=22 dport=34298 packets=4724 bytes=1375285 [ASSURED] mark=0 use=1 tcp 6 430233 ESTABLISHED src=209.216.245.214 dst=63.251.112.215 sport=4589 dport=22 packets=96 bytes=13640 src=63.251.112.215 dst=209.216.245.214 sport=22 dport=4589 packets=106 bytes=67805 [ASSURED] mark=0 use=1 tcp 6 431065 ESTABLISHED src=80.73.195.33 dst=63.251.112.215 sport=43034 dport=22 packets=660 bytes=44504 src=63.251.112.215 dst=80.73.195.33 sport=22 dport=43034 packets=730 bytes=399725 [ASSURED] mark=0 use=1 tcp 6 419785 ESTABLISHED src=127.0.0.1 dst=127.0.0.1 sport=41199 dport=39062 packets=2 bytes=112 src=127.0.0.1 dst=127.0.0.1 sport=39062 dport=41199 packets=1 bytes=60 [ASSURED] mark=0 use=1 udp 17 135 src=10.0.0.215 dst=10.0.0.164 sport=1023 dport=2049 packets=3289321 bytes=596388976 src=10.0.0.164 dst=10.0.0.215 sport=2049 dport=1023 packets=3288198 bytes=1576019520 [ASSURED] mark=0 use=1 icmp 1 8 src=10.0.0.215 dst=10.0.2.99 type=8 code=0 id=59691 packets=4 bytes=336 [UNREPLIED] src=10.0.2.99 dst=10.0.0.215 type=0 code=0 id=59691 packets=0 bytes=0 mark=0 use=1 tcp 6 427507 ESTABLISHED src=10.0.0.215 dst=10.0.0.176 sport=47563 dport=22 packets=1420 bytes=107276 src=10.0.0.176 dst=10.0.0.215 sport=22 dport=47563 packets=805 bytes=81411 [ASSURED] mark=0 use=1 tcp 6 109 SYN_SENT src=10.0.0.215 dst=10.0.2.99 sport=54681 dport=25 packets=3 bytes=180 [UNREPLIED] src=10.0.2.99 dst=10.0.0.215 sport=25 dport=54681 packets=0 bytes=0 mark=0 use=1 tcp 6 428322 ESTABLISHED src=10.0.0.215 dst=10.0.0.176 sport=50498 dport=22 packets=1660 bytes=115596 src=10.0.0.176 dst=10.0.0.215 sport=22 dport=50498 packets=1177 bytes=148355 [ASSURED] mark=0 use=1 tcp 6 428317 ESTABLISHED src=80.73.195.33 dst=63.251.112.215 sport=38524 dport=22 packets=1386 bytes=105626 src=63.251.112.215 dst=80.73.195.33 sport=22 dport=38524 packets=977 bytes=141193 [ASSURED] mark=0 use=1 tcp 6 431825 ESTABLISHED src=209.216.245.214 dst=63.251.112.215 sport=2074 dport=22 packets=4600 bytes=396776 src=63.251.112.215 dst=209.216.245.214 sport=22 dport=2074 packets=4002 bytes=1041693 [ASSURED] mark=0 use=1 tcp 6 427502 ESTABLISHED src=209.216.245.214 dst=63.251.112.215 sport=1493 dport=22 packets=1251 bytes=67704 src=63.251.112.215 dst=209.216.245.214 sport=22 dport=1493 packets=931 bytes=60701 [ASSURED] mark=0 use=1 IP Configuration 1: lo: mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: vif0.0: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff 3: veth0: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 4: vif0.1: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff 5: veth1: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 6: vif0.2: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff 7: veth2: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 8: vif0.3: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff 9: veth3: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 10: vif0.4: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff 11: veth4: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 12: vif0.5: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff 13: veth5: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 14: vif0.6: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff 15: veth6: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 16: vif0.7: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff 17: veth7: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 18: eth0: mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:16:3e:48:6b:2e brd ff:ff:ff:ff:ff:ff inet 63.251.112.215/28 brd 63.251.112.223 scope global eth0 inet6 fe80::216:3eff:fe48:6b2e/64 scope link valid_lft forever preferred_lft forever 19: eth1: mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:16:3e:48:6b:2f brd ff:ff:ff:ff:ff:ff inet 10.0.0.215/8 brd 10.255.255.255 scope global eth1 inet 10.0.2.155/8 brd 10.255.255.255 scope global secondary eth1:1 inet6 fe80::216:3eff:fe48:6b2f/64 scope link valid_lft forever preferred_lft forever 20: sit0: mtu 1480 qdisc noop link/sit 0.0.0.0 brd 0.0.0.0 IP Stats 1: lo: mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 RX: bytes packets errors dropped overrun mcast 21538822 20883 0 0 0 0 TX: bytes packets errors dropped carrier collsns 21538822 20883 0 0 0 0 2: vif0.0: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 3: veth0: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 4: vif0.1: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 5: veth1: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 6: vif0.2: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 7: veth2: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 8: vif0.3: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 9: veth3: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 10: vif0.4: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 11: veth4: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 12: vif0.5: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 13: veth5: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 14: vif0.6: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 15: veth6: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 16: vif0.7: mtu 1500 qdisc noop link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 17: veth7: mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 18: eth0: mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:16:3e:48:6b:2e brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 232562184 3091623 0 0 0 0 TX: bytes packets errors dropped carrier collsns 88893116 340844 0 0 0 0 19: eth1: mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:16:3e:48:6b:2f brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 1425018239 11507084 0 0 0 0 TX: bytes packets errors dropped carrier collsns 662634030 3488867 0 0 0 0 20: sit0: mtu 1480 qdisc noop link/sit 0.0.0.0 brd 0.0.0.0 RX: bytes packets errors dropped overrun mcast 0 0 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 0 0 0 0 Bridges bridge name bridge id STP enabled interfaces /proc /proc/version = Linux version 2.6.16-xen (xenod@freefall.cl.cam.ac.uk) (gcc version 3.3.3 20040412 (Red Hat Linux 3.3.3-7)) #1 SMP Thu Apr 13 18:46:07 BST 2006 /proc/sys/net/ipv4/ip_forward = 1 /proc/sys/net/ipv4/icmp_echo_ignore_all = 0 /proc/sys/net/ipv4/conf/all/proxy_arp = 0 /proc/sys/net/ipv4/conf/all/arp_filter = 0 /proc/sys/net/ipv4/conf/all/arp_ignore = 0 /proc/sys/net/ipv4/conf/all/rp_filter = 1 /proc/sys/net/ipv4/conf/all/log_martians = 0 /proc/sys/net/ipv4/conf/default/proxy_arp = 0 /proc/sys/net/ipv4/conf/default/arp_filter = 0 /proc/sys/net/ipv4/conf/default/arp_ignore = 0 /proc/sys/net/ipv4/conf/default/rp_filter = 0 /proc/sys/net/ipv4/conf/default/log_martians = 0 /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0 /proc/sys/net/ipv4/conf/eth0/arp_filter = 0 /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0 /proc/sys/net/ipv4/conf/eth0/rp_filter = 1 /proc/sys/net/ipv4/conf/eth0/log_martians = 1 /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0 /proc/sys/net/ipv4/conf/eth1/arp_filter = 0 /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0 /proc/sys/net/ipv4/conf/eth1/rp_filter = 0 /proc/sys/net/ipv4/conf/eth1/log_martians = 0 /proc/sys/net/ipv4/conf/lo/proxy_arp = 0 /proc/sys/net/ipv4/conf/lo/arp_filter = 0 /proc/sys/net/ipv4/conf/lo/arp_ignore = 0 /proc/sys/net/ipv4/conf/lo/rp_filter = 0 /proc/sys/net/ipv4/conf/lo/log_martians = 0 Routing Rules 0: from all lookup local 32766: from all lookup main 32767: from all lookup default Table default: Table local: broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1 broadcast 63.251.112.223 dev eth0 proto kernel scope link src 63.251.112.215 local 10.0.0.215 dev eth1 proto kernel scope host src 10.0.0.215 local 10.0.2.155 dev eth1 proto kernel scope host src 10.0.0.215 broadcast 10.255.255.255 dev eth1 proto kernel scope link src 10.0.0.215 local 63.251.112.215 dev eth0 proto kernel scope host src 63.251.112.215 broadcast 63.251.112.208 dev eth0 proto kernel scope link src 63.251.112.215 broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1 local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1 local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1 Table main: 63.251.112.208/28 dev eth0 proto kernel scope link src 63.251.112.215 10.0.0.0/8 dev eth1 proto kernel scope link src 10.0.0.215 127.0.0.0/8 dev lo scope link default via 63.251.112.222 dev eth0 metric 1 ARP ? (10.0.0.176) at 00:0B:CD:CD:41:B8 [ether] on eth1 ? (63.251.112.222) at 00:00:0C:07:AC:01 [ether] on eth0 ? (10.0.2.99) at 00:0D:60:84:3E:FE [ether] on eth1 ? (10.0.0.164) at 00:A0:24:9C:77:DA [ether] on eth1 Modules iptable_raw 2112 0 ipt_ULOG 6980 0 ipt_TTL 2496 0 ipt_ttl 2016 0 ipt_TOS 2400 0 ipt_tos 1792 0 ipt_TCPMSS 4128 0 ipt_SAME 2592 0 ipt_REJECT 4896 4 ipt_REDIRECT 2304 0 ipt_recent 9996 0 ipt_policy 3616 0 ipt_owner 2304 0 ipt_NETMAP 2176 0 ipt_multiport 2688 4 ipt_MASQUERADE 3296 1 ipt_LOG 6784 20 ipt_iprange 1952 0 ipt_hashlimit 7976 0 ipt_esp 2080 0 ipt_ECN 3264 0 ipt_ecn 2336 0 ipt_DSCP 2432 0 ipt_dscp 1856 0 ipt_CLUSTERIP 7940 0 ipt_ah 2080 0 ipt_addrtype 2112 0 ip_nat_tftp 1920 0 ip_nat_snmp_basic 11044 0 ip_nat_pptp 6436 0 ip_nat_irc 2656 0 ip_nat_ftp 3360 0 ip_nat_amanda 2368 0 ip_conntrack_tftp 3992 1 ip_nat_tftp ip_conntrack_pptp 11152 1 ip_nat_pptp ip_conntrack_netbios_ns 2976 0 ip_conntrack_irc 6064 1 ip_nat_irc ip_conntrack_ftp 7344 1 ip_nat_ftp ip_conntrack_amanda 4200 1 ip_nat_amanda iptable_nat 8068 1 ip_nat 17996 10 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ip_nat_tftp,ip_nat_pptp,ip_nat_irc,ip_nat_ftp,ip_nat_amanda,iptable_nat ip_conntrack 53112 20 ipt_MASQUERADE,ip_nat_tftp,ip_nat_snmp_basic,ip_nat_pptp,ip_nat_irc,ip_nat_ftp,ip_nat_amanda,ip_conntrack_tftp,ip_conntrack_pptp,ip_conntrack_netbios_ns,ip_conntrack_irc,ip_conntrack_ftp,ip_conntrack_amanda,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,ip_nat iptable_mangle 2752 1 iptable_filter 2784 1 ip_tables 13620 4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter Traffic Control Device eth0: qdisc pfifo_fast 0: bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1 Sent 88893116 bytes 340844 pkt (dropped 0, overlimits 0 requeues 0) rate 0bit 0pps backlog 0b 0p requeues 0 Device eth1: qdisc pfifo_fast 0: bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1 Sent 662634030 bytes 3488867 pkt (dropped 0, overlimits 0 requeues 0) rate 0bit 0pps backlog 0b 0p requeues 0 TC Filters Device eth0: Device eth1: