+ LC_ALL=C + date Wed Mar 19 11:05:12 UTC 2008 + hostname DD-WRT + cat /proc/sys/net/ipv4/ip_forward 1 + cat /proc/sys/net/ipv4/conf/all/proxy_arp 0 + cat /proc/sys/net/ipv4/conf/br0/proxy_arp 0 + cat /proc/sys/net/ipv4/conf/default/proxy_arp 0 + cat /proc/sys/net/ipv4/conf/eth1/proxy_arp 0 + cat /proc/sys/net/ipv4/conf/lo/proxy_arp 0 + cat /proc/sys/net/ipv4/conf/vlan0/proxy_arp 0 + cat /proc/sys/net/ipv4/conf/vlan1/proxy_arp 0 + cat /proc/sys/net/ipv4/conf/all/rp_filter 1 + cat /proc/sys/net/ipv4/conf/br0/rp_filter 1 + cat /proc/sys/net/ipv4/conf/default/rp_filter 1 + cat /proc/sys/net/ipv4/conf/eth1/rp_filter 1 + cat /proc/sys/net/ipv4/conf/lo/rp_filter 1 + cat /proc/sys/net/ipv4/conf/vlan0/rp_filter 1 + cat /proc/sys/net/ipv4/conf/vlan1/rp_filter 1 + cat /proc/net/bonding/bond* + ip rule list 0: from all lookup local 32766: from all lookup main 32767: from all lookup default + ip rule list + cut -d -f4 + sort + uniq + ip route list table default + ip route list table local local 194.211.47.58 dev vlan1 proto kernel scope host src 194.211.47.58 broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1 broadcast 194.211.47.56 dev vlan1 proto kernel scope link src 194.211.47.58 local 172.16.11.11 dev br0 proto kernel scope host src 172.16.11.11 broadcast 194.211.47.63 dev vlan1 proto kernel scope link src 194.211.47.58 broadcast 172.16.11.255 dev br0 proto kernel scope link src 172.16.11.11 broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1 broadcast 172.16.11.0 dev br0 proto kernel scope link src 172.16.11.11 local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1 local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1 + ip route list table main 194.211.47.56/29 dev vlan1 proto kernel scope link src 194.211.47.58 172.16.11.0/24 via 172.16.11.21 dev br0 172.16.11.0/24 dev br0 proto kernel scope link src 172.16.11.11 127.0.0.0/8 dev lo scope link default via 194.211.47.57 dev vlan1 + ip link show 1: lo: mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 2: teql0: mtu 1500 qdisc noop link/void 3: eth0: mtu 1500 qdisc pfifo_fast link/ether 00:16:01:7f:86:ae brd ff:ff:ff:ff:ff:ff 4: imq0: mtu 1500 qdisc noop link/void 5: imq1: mtu 1500 qdisc noop link/void 6: eth1: mtu 1500 qdisc pfifo_fast link/ether 00:16:01:7f:86:b0 brd ff:ff:ff:ff:ff:ff 7: vlan0: mtu 1500 qdisc noqueue link/ether 00:16:01:7f:86:ae brd ff:ff:ff:ff:ff:ff 8: vlan1: mtu 1500 qdisc noqueue link/ether 00:16:01:7f:86:af brd ff:ff:ff:ff:ff:ff 9: br0: mtu 1500 qdisc noqueue link/ether 00:16:01:7f:86:ae brd ff:ff:ff:ff:ff:ff + ip addr show 1: lo: mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo 2: teql0: mtu 1500 qdisc noop link/void 3: eth0: mtu 1500 qdisc pfifo_fast link/ether 00:16:01:7f:86:ae brd ff:ff:ff:ff:ff:ff 4: imq0: mtu 1500 qdisc noop link/void 5: imq1: mtu 1500 qdisc noop link/void 6: eth1: mtu 1500 qdisc pfifo_fast link/ether 00:16:01:7f:86:b0 brd ff:ff:ff:ff:ff:ff 7: vlan0: mtu 1500 qdisc noqueue link/ether 00:16:01:7f:86:ae brd ff:ff:ff:ff:ff:ff 8: vlan1: mtu 1500 qdisc noqueue link/ether 00:16:01:7f:86:af brd ff:ff:ff:ff:ff:ff inet 194.211.47.58/29 brd 194.211.47.63 scope global vlan1 9: br0: mtu 1500 qdisc noqueue link/ether 00:16:01:7f:86:ae brd ff:ff:ff:ff:ff:ff inet 172.16.11.11/24 brd 172.16.11.255 scope global br0 + ip neigh show 194.211.47.57 dev vlan1 lladdr 00:11:93:a6:ba:ff DELAY 172.16.11.21 dev br0 lladdr 00:30:05:aa:c6:bb REACHABLE + iptables -t filter -nvL Chain INPUT (policy ACCEPT 3918 packets, 432K bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0 0 0 logdrop all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 0 0 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 tcpmss match 1461:65535 TCPMSS set 1460 0 0 lan2wan all -- br0 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 3 144 ACCEPT tcp -- * * 0.0.0.0/0 172.16.11.21 tcp dpt:3389 0 0 ACCEPT udp -- * * 0.0.0.0/0 172.16.11.21 udp dpt:3389 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0 tcp spt:0 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0 udp dpt:0 0 0 TRIGGER all -- vlan1 br0 0.0.0.0/0 0.0.0.0/0 TRIGGER type:in match:0 relate:0 0 0 trigger_out all -- br0 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- br0 * 0.0.0.0/0 0.0.0.0/0 state NEW Chain OUTPUT (policy ACCEPT 3946 packets, 2636K bytes) pkts bytes target prot opt in out source destination Chain advgrp_1 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_10 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_2 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_3 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_4 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_5 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_6 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_7 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_8 (0 references) pkts bytes target prot opt in out source destination Chain advgrp_9 (0 references) pkts bytes target prot opt in out source destination Chain grp_1 (0 references) pkts bytes target prot opt in out source destination Chain grp_10 (0 references) pkts bytes target prot opt in out source destination Chain grp_2 (0 references) pkts bytes target prot opt in out source destination Chain grp_3 (0 references) pkts bytes target prot opt in out source destination Chain grp_4 (0 references) pkts bytes target prot opt in out source destination Chain grp_5 (0 references) pkts bytes target prot opt in out source destination Chain grp_6 (0 references) pkts bytes target prot opt in out source destination Chain grp_7 (0 references) pkts bytes target prot opt in out source destination Chain grp_8 (0 references) pkts bytes target prot opt in out source destination Chain grp_9 (0 references) pkts bytes target prot opt in out source destination Chain lan2wan (1 references) pkts bytes target prot opt in out source destination Chain logaccept (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain logdrop (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain logreject (0 references) pkts bytes target prot opt in out source destination 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp reject-with tcp-reset Chain trigger_out (1 references) pkts bytes target prot opt in out source destination + iptables -t nat -nvL Chain PREROUTING (policy ACCEPT 461 packets, 45935 bytes) pkts bytes target prot opt in out source destination 0 0 DNAT tcp -- * * 0.0.0.0/0 194.211.47.58 tcp dpt:8080 to:172.16.11.11:80 0 0 DNAT tcp -- * * 0.0.0.0/0 194.211.47.58 tcp dpt:22 to:172.16.11.11:22 0 0 DNAT icmp -- * * 0.0.0.0/0 194.211.47.58 to:172.16.11.11 1 48 DNAT tcp -- * * 0.0.0.0/0 194.211.47.58 tcp dpt:3389 to:172.16.11.21 0 0 DNAT udp -- * * 0.0.0.0/0 194.211.47.58 udp dpt:3389 to:172.16.11.21 101 4848 TRIGGER all -- * * 0.0.0.0/0 194.211.47.58 TRIGGER type:dnat match:0 relate:0 8 TRIGGER type:dnat match:0 relate:0 Chain POSTROUTING (policy ACCEPT 25 packets, 7157 bytes) pkts bytes target prot opt in out source destination 0 0 MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0 0 0 RETURN all -- * br0 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast 63 14893 MASQUERADE all -- * br0 172.16.11.0/24 172.16.11.0/24 Chain OUTPUT (policy ACCEPT 87 packets, 22002 bytes) pkts bytes target prot opt in out source destination + iptables -t mangle -nvL Chain PREROUTING (policy ACCEPT 5318 packets, 645K bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 6357 packets, 711K bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 65 packets, 4960 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 3948 packets, 2636K bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 6772 packets, 4624K bytes) pkts bytes target prot opt in out source destination + cat /etc/resolv.conf nameserver 172.16.11.11