This status page includes the following information:

    * System uptime
    * Interfaces
    * Routing tables
    * top | head -n5
    * sysctl hw.physmem
    * ipfw show
    * pfctl -sn
    * pfctl -sr
    * pfctl -ss
    * pfctl -si
    * pfctl -sa
    * pfctl -s rules -vv
    * pfctl -s queue -v
    * pfctl -s queue -v
    * netstat -s -ppfsync
    * pfctl -vsq
    * pfctl -vs Tables
    * Load Balancer
    * pftop -w 150 -a -b
    * pftop -w 150 -a -b -v long
    * pftop -w 150 -a -b -v queue
    * pftop -w 150 -a -b -v rules
    * pftop -w 150 -a -b -v size
    * pftop -w 150 -a -b -v speed
    * resolv.conf
    * Processes
    * dhcpd.conf
    * ez-ipupdate.cache
    * df
    * racoon.conf
    * SPD
    * SAD
    * last 200 system log entries
    * last 50 filter log entries
    * ls /conf
    * ls /var/run
    * /sbin/mount
    * cat /tmp/rules.debug
    * VMStat
    * config.xml
    * DMESG
    * netstat -mb
    * vmstat -z 

System uptime

 1:31AM  up 42 days, 22:21, 2 users, load averages: 0.00, 0.05, 0.09

Interfaces

vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	inet6 fe80::20e:8eff:fe15:900e%vr0 prefixlen 64 scopeid 0x1
	inet 76.126.xxx.xxx netmask 0xfffff800 broadcast 255.255.255.255
	ether 00:0e:8e:15:90:0e
	media: Ethernet autoselect (100baseTX <full-duplex>)
	status: active
vr1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	inet6 fe80::20c:8eff:fe1a:130b%vr1 prefixlen 64 scopeid 0x2
	inet 24.130.xxx.xxx netmask 0xfffff800 broadcast 255.255.255.255
	ether 00:0c:8e:1a:13:0b
	media: Ethernet autoselect (100baseTX <full-duplex>)
	status: active
ath0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2290
	inet6 fe80::20b:6bff:fe09:f5c6%ath0 prefixlen 64 scopeid 0x3
	inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
	ether 00:0b:6b:09:f5:c6
	media: IEEE 802.11 Wireless Ethernet autoselect mode 11a <hostap>
	status: associated
	ssid via-pfsense channel 153 bssid 00:0b:6b:09:f5:c6
	authmode WPA1+WPA2/802.11i privacy MIXED deftxkey 2 AES-CCM 2:128-bit
	AES-CCM 3:128-bit txpowmax 34 bmiss 7 burst dtimperiod 1 bintval 100
pflog0: flags=100<PROMISC> mtu 33208
enc0: flags=0<> mtu 1536
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
	inet 127.0.0.1 netmask 0xff000000
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
pfsync0: flags=41<UP,RUNNING> mtu 2020
	pfsync: syncdev: lo0 syncpeer: 224.0.0.240 maxupd: 128

Routing tables

Routing tables

Internet:
Destination        Gateway            Flags    Refs      Use  Netif Expire
default            76.126.216.1       UGS         0  5219769    vr0
4.2.2.2            76.126.216.1       UGHS        0   997912    vr0
4.2.2.3            24.130.144.1       UGHS        0   980077    vr1
24.130.144/21      link#2             UC          0        0    vr1
24.130.144.1       00:1b:d5:fe:a5:05  UHLW        2   207165    vr1   1200
24.130.xxx.xxx     127.0.0.1          UGHS        0   571906    lo0
24.130.146.197     127.0.0.1          UGHS        0     1016    lo0
24.130.151.190     127.0.0.1          UGHS        0        3    lo0
76.126.211.29      127.0.0.1          UGHS        0        9    lo0
76.126.216/21      link#1             UC          0        0    vr0
76.126.216.1       00:1b:d5:fe:a5:05  UHLW        3   132275    vr0   1200
76.126.xxx.xxx     127.0.0.1          UGHS        0    47597    lo0
127.0.0.1          127.0.0.1          UH          7     8801    lo0
192.168.1          link#3             UC          0        0   ath0
192.168.1.2        00:0e:8e:15:95:0f  UHLW        1 13361581   ath0    972
192.168.2.199      127.0.0.1          UGHS        0       15    lo0
192.168.100.11     127.0.0.1          UGHS        0      217    lo0

Internet6:
Destination                       Gateway                       Flags      Netif Expire
::1                               ::1                           UHL         lo0
fe80::%vr0/64                     link#1                        UC          vr0
fe80::20e:8eff:fe15:900e%vr0      00:0e:8e:15:90:0e             UHL         lo0
fe80::%vr1/64                     link#2                        UC          vr1
fe80::20c:8eff:fe1a:130b%vr1      00:0c:8e:1a:13:0b             UHL         lo0
fe80::%ath0/64                    link#3                        UC         ath0
fe80::20b:6bff:fe09:f5c6%ath0     00:0b:6b:09:f5:c6             UHL         lo0
fe80::%lo0/64                     fe80::1%lo0                   U           lo0
fe80::1%lo0                       link#6                        UHL         lo0
ff01:1::/32                       link#1                        UC          vr0
ff01:2::/32                       link#2                        UC          vr1
ff01:3::/32                       link#3                        UC         ath0
ff01:6::/32                       ::1                           UC          lo0
ff02::%vr0/32                     link#1                        UC          vr0
ff02::%vr1/32                     link#2                        UC          vr1
ff02::%ath0/32                    link#3                        UC         ath0
ff02::%lo0/32                     ::1                           UC          lo0

top | head -n5

last pid: 97958;  load averages:  0.00,  0.05,  0.09  up 42+22:21:47    01:31:50
52 processes:  2 running, 49 sleeping, 1 zombie

Mem: 71M Active, 36M Inact, 82M Wired, 58M Buf, 289M Free
Swap:

sysctl hw.physmem

hw.physmem: 511090688

ipfw show

ipfw: getsockopt(IP_FW_GET): Protocol not available

pfctl -sn

nat-anchor "pftpx/*" all
nat-anchor "natearly/*" all
nat-anchor "natrules/*" all
nat on vr0 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr0) port 500 round-robin
nat on vr0 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr0) port 5060 round-robin
nat on vr0 inet from 192.168.1.0/24 to any -> (vr0) round-robin
nat on vr1 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr1) port 500 round-robin
nat on vr1 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr1) port 5060 round-robin
nat on vr1 inet from 192.168.1.0/24 to any -> (vr1) round-robin
rdr-anchor "pftpx/*" all
rdr-anchor "slb" all
no rdr on ath0 proto tcp from any to <vpns> port = ftp
rdr on ath0 inet proto tcp from any to any port = ftp -> 127.0.0.1 port 8021
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = ssh -> 192.168.1.1
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = ssh -> 192.168.1.1
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 8080 -> 192.168.1.1 port 80
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 8080 -> 192.168.1.1 port 80
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 3389 -> 192.168.1.2
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 3389 -> 192.168.1.2
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr0 inet proto udp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr1 inet proto udp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 30771 -> 192.168.1.199
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 30771 -> 192.168.1.199
rdr-anchor "imspector" all
rdr-anchor "miniupnpd" all

pfctl -sr

scrub all random-id fragment reassemble
anchor "ftpsesame/*" all
anchor "firewallrules" all
block drop quick proto tcp from any port = 0 to any
block drop quick proto tcp from any to any port = 0
block drop quick proto udp from any port = 0 to any
block drop quick proto udp from any to any port = 0
block drop quick from <snort2c> to any label "Block snort2c hosts"
block drop quick from any to <snort2c> label "Block snort2c hosts"
anchor "loopback" all
pass in quick on lo0 all label "pass loopback"
pass out quick on lo0 all label "pass loopback"
anchor "packageearly" all
anchor "carp" all
pass quick inet proto icmp from 76.126.xxx.xxx to any keep state
anchor "dhcpserverlan" all
pass in quick on ath0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps label "allow access to DHCP server on LAN"
pass in quick on ath0 inet proto udp from any port = bootpc to 192.168.1.1 port = bootps label "allow access to DHCP server on LAN"
pass out quick on ath0 inet proto udp from 192.168.1.1 port = bootps to any port = bootpc label "allow access to DHCP server on LAN"
anchor "wandhcp" all
pass out quick on vr0 proto udp from any port = bootpc to any port = bootps label "allow dhcp client out wan"
block drop in log quick on vr0 inet proto udp from any port = bootps to 192.168.1.0/24 port = bootpc label "block dhcp client out wan"
pass in quick on vr0 proto udp from any port = bootps to any port = bootpc label "allow dhcp client out wan"
block drop in on ! ath0 inet from 192.168.1.0/24 to any
block drop in inet from 192.168.1.1 to any
block drop in on ! vr1 inet from 24.130.144.0/21 to any
block drop in inet from 24.130.xxx.xxx to any
block drop in on ath0 inet6 from fe80::20b:6bff:fe09:f5c6 to any
block drop in on vr1 inet6 from fe80::20c:8eff:fe1a:130b to any
anchor "spoofing" all
anchor "limitingesr" all
block drop in quick from <virusprot> to any label "virusprot overload table"
pass out quick on ath0 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr0 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
anchor "firewallout" all
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
pass out quick on ath0 all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
pass out quick on enc0 all keep state label "IPSEC internal host to host"
pass out quick on vr1 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
anchor "anti-lockout" all
pass in quick on ath0 inet from any to 192.168.1.1 keep state label "anti-lockout web rule"
block drop in log proto tcp from <sshlockout> to any port = ssh label "sshlockout"
anchor "ftpproxy" all
anchor "pftpx/*" all
pass in log quick on vr0 inet proto icmp from any to 76.126.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on vr0 inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on vr0 inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr0 inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = pptp keep state label "USER_RULE: PPTP"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port 4999 >< 5016 keep state label "USER_RULE: IRC DCC"
pass in quick on vr0 inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on vr0 inet proto udp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto icmp from any to 24.130.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 24.130.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr1 route-to (vr0 76.126.216.1) inet proto udp from any to 255.255.255.255 keep state label "USER_RULE: Allow DHCP"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 keep state label "USER_RULE"
pass in quick on ath0 route-to (vr1 24.130.144.1) inet from 192.168.1.0/24 to 24.130.144.0/21 keep state label "USER_RULE: WAN DMZ"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to 76.126.208.0/21 keep state label "USER_RULE: WAN2 DMZ"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = telnet keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2"
pass in log quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to <SurfboardHacker> keep state label "USER_RULE: SurfboardHacker -> WAN1"
pass in quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns> port = https keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to any port = https keep state label "USER_RULE: HTTPS -> WAN2"
pass in log quick on ath0 inet proto gre from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN2"
pass in log quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns> port = pptp keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto tcp from 192.168.1.0/24 to any port = pptp keep state label "USER_RULE: PPTP -> WAN2"
pass in quick on ath0 inet from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on ath0 route-to { (vr0 76.126.216.1), (vr1 24.130.144.1) } round-robin inet from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp-proxy keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr0 inet proto tcp from any port = ftp-data to (vr0) port > 49000 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = 8022 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
anchor "imspector" all
anchor "miniupnpd" all
block drop in log quick all label "Default block all just to be sure."
block drop out log quick all label "Default block all just to be sure."

pfctl -si

Status: Enabled for 42 days 22:20:47          Debug: Urgent

Hostid: 0x3c3f3efa

Interface Stats for vr1               IPv4             IPv6
  Bytes In                     68121532363                0
  Bytes Out                    20889937421                0
  Packets In
    Passed                        80441272                0
    Blocked                         616198                0
  Packets Out
    Passed                        69447363                0
    Blocked                            251                0

State Table                          Total             Rate
  current entries                     3062
  searches                       590139516          159.1/s
  inserts                         18109004            4.9/s
  removals                        18105942            4.9/s
Counters
  match                           18966930            5.1/s
  bad-offset                             0            0.0/s
  fragment                             220            0.0/s
  short                                  2            0.0/s
  normalize                          15080            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                             0            0.0/s
  ip-option                            972            0.0/s
  proto-cksum                            0            0.0/s
  state-mismatch                   1021775            0.3/s
  state-insert                       34752            0.0/s
  state-limit                            0            0.0/s
  src-limit                            252            0.0/s
  synproxy                               0            0.0/s

pfctl -sa

TRANSLATION RULES:
nat-anchor "pftpx/*" all
nat-anchor "natearly/*" all
nat-anchor "natrules/*" all
nat on vr0 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr0) port 500 round-robin
nat on vr0 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr0) port 5060 round-robin
nat on vr0 inet from 192.168.1.0/24 to any -> (vr0) round-robin
nat on vr1 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr1) port 500 round-robin
nat on vr1 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr1) port 5060 round-robin
nat on vr1 inet from 192.168.1.0/24 to any -> (vr1) round-robin
rdr-anchor "pftpx/*" all
rdr-anchor "slb" all
no rdr on ath0 proto tcp from any to <vpns> port = ftp
rdr on ath0 inet proto tcp from any to any port = ftp -> 127.0.0.1 port 8021
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = ssh -> 192.168.1.1
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = ssh -> 192.168.1.1
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 8080 -> 192.168.1.1 port 80
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 8080 -> 192.168.1.1 port 80
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 3389 -> 192.168.1.2
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 3389 -> 192.168.1.2
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr0 inet proto udp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr1 inet proto udp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 30771 -> 192.168.1.199
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 30771 -> 192.168.1.199
rdr-anchor "imspector" all
rdr-anchor "miniupnpd" all

FILTER RULES:
scrub all random-id fragment reassemble
anchor "ftpsesame/*" all
anchor "firewallrules" all
block drop quick proto tcp from any port = 0 to any
block drop quick proto tcp from any to any port = 0
block drop quick proto udp from any port = 0 to any
block drop quick proto udp from any to any port = 0
block drop quick from <snort2c> to any label "Block snort2c hosts"
block drop quick from any to <snort2c> label "Block snort2c hosts"
anchor "loopback" all
pass in quick on lo0 all label "pass loopback"
pass out quick on lo0 all label "pass loopback"
anchor "packageearly" all
anchor "carp" all
pass quick inet proto icmp from 76.126.xxx.xxx to any keep state
anchor "dhcpserverlan" all
pass in quick on ath0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps label "allow access to DHCP server on LAN"
pass in quick on ath0 inet proto udp from any port = bootpc to 192.168.1.1 port = bootps label "allow access to DHCP server on LAN"
pass out quick on ath0 inet proto udp from 192.168.1.1 port = bootps to any port = bootpc label "allow access to DHCP server on LAN"
anchor "wandhcp" all
pass out quick on vr0 proto udp from any port = bootpc to any port = bootps label "allow dhcp client out wan"
block drop in log quick on vr0 inet proto udp from any port = bootps to 192.168.1.0/24 port = bootpc label "block dhcp client out wan"
pass in quick on vr0 proto udp from any port = bootps to any port = bootpc label "allow dhcp client out wan"
block drop in on ! ath0 inet from 192.168.1.0/24 to any
block drop in inet from 192.168.1.1 to any
block drop in on ! vr1 inet from 24.130.144.0/21 to any
block drop in inet from 24.130.xxx.xxx to any
block drop in on ath0 inet6 from fe80::20b:6bff:fe09:f5c6 to any
block drop in on vr1 inet6 from fe80::20c:8eff:fe1a:130b to any
anchor "spoofing" all
anchor "limitingesr" all
block drop in quick from <virusprot> to any label "virusprot overload table"
pass out quick on ath0 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr0 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
anchor "firewallout" all
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
pass out quick on ath0 all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
pass out quick on enc0 all keep state label "IPSEC internal host to host"
pass out quick on vr1 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
anchor "anti-lockout" all
pass in quick on ath0 inet from any to 192.168.1.1 keep state label "anti-lockout web rule"
block drop in log proto tcp from <sshlockout> to any port = ssh label "sshlockout"
anchor "ftpproxy" all
anchor "pftpx/*" all
pass in log quick on vr0 inet proto icmp from any to 76.126.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on vr0 inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on vr0 inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr0 inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = pptp keep state label "USER_RULE: PPTP"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port 4999 >< 5016 keep state label "USER_RULE: IRC DCC"
pass in quick on vr0 inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on vr0 inet proto udp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto icmp from any to 24.130.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 24.130.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr1 route-to (vr0 76.126.216.1) inet proto udp from any to 255.255.255.255 keep state label "USER_RULE: Allow DHCP"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 keep state label "USER_RULE"
pass in quick on ath0 route-to (vr1 24.130.144.1) inet from 192.168.1.0/24 to 24.130.144.0/21 keep state label "USER_RULE: WAN DMZ"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to 76.126.208.0/21 keep state label "USER_RULE: WAN2 DMZ"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = telnet keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2"
pass in log quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to <SurfboardHacker> keep state label "USER_RULE: SurfboardHacker -> WAN1"
pass in quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns> port = https keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to any port = https keep state label "USER_RULE: HTTPS -> WAN2"
pass in log quick on ath0 inet proto gre from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN2"
pass in log quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns> port = pptp keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto tcp from 192.168.1.0/24 to any port = pptp keep state label "USER_RULE: PPTP -> WAN2"
pass in quick on ath0 inet from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on ath0 route-to { (vr0 76.126.216.1), (vr1 24.130.144.1) } round-robin inet from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp-proxy keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr0 inet proto tcp from any port = ftp-data to (vr0) port > 49000 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = 8022 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
anchor "imspector" all
anchor "miniupnpd" all
block drop in log quick all label "Default block all just to be sure."
block drop out log quick all label "Default block all just to be sure."
No queue in use

STATES:


INFO:
Status: Enabled for 42 days 22:20:48          Debug: Urgent

Hostid: 0x3c3f3efa

Interface Stats for vr1               IPv4             IPv6
  Bytes In                     68121612565                0
  Bytes Out                    20889998797                0
  Packets In
    Passed                        80441401                0
    Blocked                         616198                0
  Packets Out
    Passed                        69447488                0
    Blocked                            251                0

State Table                          Total             Rate
  current entries                     3066
  searches                       590140301          159.1/s
  inserts                         18109008            4.9/s
  removals                        18105942            4.9/s
Counters
  match                           18966934            5.1/s
  bad-offset                             0            0.0/s
  fragment                             220            0.0/s
  short                                  2            0.0/s
  normalize                          15080            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                             0            0.0/s
  ip-option                            972            0.0/s
  proto-cksum                            0            0.0/s
  state-mismatch                   1021775            0.3/s
  state-insert                       34752            0.0/s
  state-limit                            0            0.0/s
  src-limit                            252            0.0/s
  synproxy                               0            0.0/s

LABEL COUNTERS:
Block snort2c hosts 3170925 0 0
Block snort2c hosts 3170925 0 0
pass loopback 3170925 0 0
pass loopback 0 0 0
allow access to DHCP server on LAN 2541133 146 49156
allow access to DHCP server on LAN 295 295 96940
allow access to DHCP server on LAN 724231 425 139400
allow dhcp client out wan 2540267 0 0
block dhcp client out wan 237856 0 0
allow dhcp client out wan 3206 3206 1112808
virusprot overload table 2537061 422 22284
let out anything from firewall host itself 2536639 13 624
let out anything from firewall host itself 1658276 0 0
let out anything from firewall host itself 732232 29709502 24890902267
let out anything from firewall host itself 2328094 0 0
let out anything from firewall host itself 2219562 25202624 13391801206
let out anything from firewall host itself 1341212 30862029 25164256541
IPSEC internal host to host 0 0 0
let out anything from firewall host itself 0 0 0
let out anything from firewall host itself 0 0 0
anti-lockout web rule 1015735 2315926 660089514
sshlockout 1000069 0 0
USER_RULE: Allow Ping reply 1000064 769 76633
USER_RULE: NAT SSH -> pfsense 107932 1013546 140623528
USER_RULE: NAT Web Config -> pfsense 16 151 14000
USER_RULE: OpenVPN -> pfsense 55732 0 0
USER_RULE: NAT RDP -> Laptop 55732 3 152
USER_RULE: NAT BT -> Laptop 48073 5453885 3028602062
USER_RULE: NAT BT -> Laptop 52081 15844 1062307
USER_RULE: PPTP 51917 0 0
USER_RULE: IRC DCC 7610 9742 4440645
USER_RULE: NAT BT -> Flora Laptop 7647 161 7944
USER_RULE: NAT BT -> Flora Laptop 44259 0 0
USER_RULE: Allow Ping reply 943390 2802 198688
USER_RULE: NAT SSH -> pfsense 551628 2841 367910
USER_RULE: NAT Web Config -> pfsense 10 115 14122
USER_RULE: OpenVPN -> pfsense 190251 0 0
USER_RULE: NAT RDP -> Laptop 190251 3276204 997262251
USER_RULE: NAT BT -> Laptop 163073 25509524 14880795359
USER_RULE: NAT BT -> Laptop 361244 946159 181051654
USER_RULE: Allow DHCP 78027 251729 88046226
USER_RULE: NAT BT -> Flora Laptop 71811 136 6948
USER_RULE 417935 116 7596
USER_RULE: WAN DMZ 383462 345 22514
USER_RULE: WAN2 DMZ 336560 86 5296
USER_RULE: Modem 1 -> WAN1 336540 0 0
USER_RULE: Modem 1 -> WAN1 0 0 0
USER_RULE: Modem 2 -> WAN2 0 0 0
USER_RULE: SurfboardHacker -> WAN1 336540 84528 56727554
NEGATE_ROUTE: Negate policy route for local network(s) 333834 0 0
USER_RULE: HTTPS -> WAN2 142848 515186 179716846
NEGATE_ROUTE: Negate policy route for local network(s) 317356 0 0
USER_RULE: GRE -> WAN2 0 0 0
NEGATE_ROUTE: Negate policy route for local network(s) 317356 0 0
USER_RULE: PPTP -> WAN2 126370 0 0
NEGATE_ROUTE: Negate policy route for local network(s) 317356 0 0
USER_RULE: Load Balance 317356 57056508 49027218651
FTP PROXY: Allow traffic to localhost 2095 0 0
FTP PROXY: Allow traffic to localhost 0 0 0
FTP PROXY: PASV mode data connection 123634 0 0
FTP PROXY: Allow traffic to localhost 79375 0 0
FTP PROXY: Allow traffic to localhost 0 0 0
Default block all just to be sure. 125914 125914 12699045
Default block all just to be sure. 0 0 0

TIMEOUTS:
tcp.first                   120s
tcp.opening                  30s
tcp.established           86400s
tcp.closing                 900s
tcp.finwait                  45s
tcp.closed                   90s
tcp.tsdiff                   30s
udp.first                    60s
udp.single                   30s
udp.multiple                 60s
icmp.first                   20s
icmp.error                   10s
other.first                  60s
other.single                 30s
other.multiple               60s
frag                         30s
interval                     10s
adaptive.start                0 states
adaptive.end                  0 states
src.track                     0s

LIMITS:
states     hard limit 100000
src-nodes  hard limit  10000
frags      hard limit   5000

TABLES:
SurfboardHacker
bogons
snort2c
sshlockout
virusprot
vpns

OS FINGERPRINTS:
348 fingerprints loaded

pfctl -s rules -vv

@0 scrub all random-id fragment reassemble
  [ Evaluations: 361644542  Packets: 361644542  Bytes: 0           States: 0     ]
@0 anchor "ftpsesame/*" all
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@1 anchor "firewallrules" all
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@2 block drop quick proto tcp from any port = 0 to any
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@3 block drop quick proto tcp from any to any port = 0
  [ Evaluations: 757784    Packets: 0         Bytes: 0           States: 0     ]
@4 block drop quick proto udp from any port = 0 to any
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@5 block drop quick proto udp from any to any port = 0
  [ Evaluations: 1151809   Packets: 0         Bytes: 0           States: 0     ]
@6 block drop quick from <snort2c:0> to any label "Block snort2c hosts"
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@7 block drop quick from any to <snort2c:0> label "Block snort2c hosts"
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@8 anchor "loopback" all
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@9 pass in quick on lo0 all label "pass loopback"
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@10 pass out quick on lo0 all label "pass loopback"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@11 anchor "packageearly" all
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@12 anchor "carp" all
  [ Evaluations: 3170928   Packets: 0         Bytes: 0           States: 0     ]
@13 pass quick inet proto icmp from 76.126.xxx.xxx to any keep state
  [ Evaluations: 3170928   Packets: 1392479   Bytes: 116961208   States: 6     ]
@14 anchor "dhcpserverlan" all
  [ Evaluations: 2541136   Packets: 0         Bytes: 0           States: 0     ]
@15 pass in quick on ath0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps label "allow access to DHCP server on LAN"
  [ Evaluations: 2541136   Packets: 146       Bytes: 49156       States: 0     ]
@16 pass in quick on ath0 inet proto udp from any port = bootpc to 192.168.1.1 port = bootps label "allow access to DHCP server on LAN"
  [ Evaluations: 295       Packets: 295       Bytes: 96940       States: 0     ]
@17 pass out quick on ath0 inet proto udp from 192.168.1.1 port = bootps to any port = bootpc label "allow access to DHCP server on LAN"
  [ Evaluations: 724231    Packets: 425       Bytes: 139400      States: 0     ]
@18 anchor "wandhcp" all
  [ Evaluations: 2540270   Packets: 0         Bytes: 0           States: 0     ]
@19 pass out quick on vr0 proto udp from any port = bootpc to any port = bootps label "allow dhcp client out wan"
  [ Evaluations: 2540270   Packets: 0         Bytes: 0           States: 0     ]
@20 block drop in log quick on vr0 inet proto udp from any port = bootps to 192.168.1.0/24 port = bootpc label "block dhcp client out wan"
  [ Evaluations: 237857    Packets: 0         Bytes: 0           States: 0     ]
@21 pass in quick on vr0 proto udp from any port = bootps to any port = bootpc label "allow dhcp client out wan"
  [ Evaluations: 3206      Packets: 3206      Bytes: 1112808     States: 0     ]
@22 block drop in on ! ath0 inet from 192.168.1.0/24 to any
  [ Evaluations: 2411118   Packets: 0         Bytes: 0           States: 0     ]
@23 block drop in inet from 192.168.1.1 to any
  [ Evaluations: 1539872   Packets: 0         Bytes: 0           States: 0     ]
@24 block drop in on ! vr1 inet from 24.130.144.0/21 to any
  [ Evaluations: 1015970   Packets: 0         Bytes: 0           States: 0     ]
@25 block drop in inet from 24.130.xxx.xxx to any
  [ Evaluations: 1015970   Packets: 0         Bytes: 0           States: 0     ]
@26 block drop in on ath0 inet6 from fe80::20b:6bff:fe09:f5c6 to any
  [ Evaluations: 1016159   Packets: 0         Bytes: 0           States: 0     ]
@27 block drop in on vr1 inet6 from fe80::20c:8eff:fe1a:130b to any
  [ Evaluations: 661697    Packets: 0         Bytes: 0           States: 0     ]
@28 anchor "spoofing" all
  [ Evaluations: 2537064   Packets: 0         Bytes: 0           States: 0     ]
@29 anchor "limitingesr" all
  [ Evaluations: 2537064   Packets: 0         Bytes: 0           States: 0     ]
@30 block drop in quick from <virusprot:0> to any label "virusprot overload table"
  [ Evaluations: 2537064   Packets: 422       Bytes: 22284       States: 0     ]
@31 pass out quick on ath0 proto icmp all keep state label "let out anything from firewall host itself"
  [ Evaluations: 2536642   Packets: 13        Bytes: 624         States: 0     ]
@32 pass out quick on vr0 proto icmp all keep state label "let out anything from firewall host itself"
  [ Evaluations: 1658278   Packets: 0         Bytes: 0           States: 0     ]
@33 pass out quick on vr0 all keep state label "let out anything from firewall host itself"
  [ Evaluations: 732232    Packets: 29709502  Bytes: 24890902267  States: 453   ]
@34 anchor "firewallout" all
  [ Evaluations: 2328097   Packets: 0         Bytes: 0           States: 0     ]
@35 pass out quick on vr0 all keep state label "let out anything from firewall host itself"
  [ Evaluations: 2328097   Packets: 0         Bytes: 0           States: 0     ]
@36 pass out quick on ath0 all keep state label "let out anything from firewall host itself"
  [ Evaluations: 2219564   Packets: 25202844  Bytes: 13391945601  States: 590   ]
@37 pass out quick on vr1 all keep state label "let out anything from firewall host itself"
  [ Evaluations: 1341213   Packets: 30862034  Bytes: 25164256813  States: 458   ]
@38 pass out quick on enc0 all keep state label "IPSEC internal host to host"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@39 pass out quick on vr1 proto icmp all keep state label "let out anything from firewall host itself"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@40 pass out quick on vr1 all keep state label "let out anything from firewall host itself"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@41 anchor "anti-lockout" all
  [ Evaluations: 1015737   Packets: 0         Bytes: 0           States: 0     ]
@42 pass in quick on ath0 inet from any to 192.168.1.1 keep state label "anti-lockout web rule"
  [ Evaluations: 1015737   Packets: 2316370   Bytes: 660451945   States: 5     ]
@43 block drop in log proto tcp from <sshlockout:0> to any port = ssh label "sshlockout"
  [ Evaluations: 1000071   Packets: 0         Bytes: 0           States: 0     ]
@44 anchor "ftpproxy" all
  [ Evaluations: 1000071   Packets: 0         Bytes: 0           States: 0     ]
@45 anchor "pftpx/*" all
  [ Evaluations: 1000071   Packets: 51        Bytes: 7322        States: 0     ]
@46 pass in log quick on vr0 inet proto icmp from any to 76.126.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
  [ Evaluations: 1000066   Packets: 769       Bytes: 76633       States: 0     ]
@47 pass in log quick on vr0 inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
  [ Evaluations: 107933    Packets: 1013546   Bytes: 140623528   States: 0     ]
@48 pass in quick on vr0 inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
  [ Evaluations: 16        Packets: 151       Bytes: 14000       States: 0     ]
@49 pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
  [ Evaluations: 55732     Packets: 0         Bytes: 0           States: 0     ]
@50 pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
  [ Evaluations: 55732     Packets: 3         Bytes: 152         States: 0     ]
@51 pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
  [ Evaluations: 48073     Packets: 5453922   Bytes: 3028624140  States: 147   ]
@52 pass in quick on vr0 inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
  [ Evaluations: 52082     Packets: 15844     Bytes: 1062307     States: 1     ]
@53 pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = pptp keep state label "USER_RULE: PPTP"
  [ Evaluations: 51917     Packets: 0         Bytes: 0           States: 0     ]
@54 pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port 4999 >< 5016 keep state label "USER_RULE: IRC DCC"
  [ Evaluations: 7610      Packets: 9742      Bytes: 4440645     States: 0     ]
@55 pass in quick on vr0 inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
  [ Evaluations: 7647      Packets: 161       Bytes: 7944        States: 0     ]
@56 pass in quick on vr0 inet proto udp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
  [ Evaluations: 44259     Packets: 0         Bytes: 0           States: 0     ]
@57 pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto icmp from any to 24.130.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
  [ Evaluations: 943392    Packets: 2802      Bytes: 198688      States: 0     ]
@58 pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
  [ Evaluations: 551628    Packets: 2841      Bytes: 367910      States: 0     ]
@59 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
  [ Evaluations: 10        Packets: 115       Bytes: 14122       States: 0     ]
@60 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 24.130.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
  [ Evaluations: 190251    Packets: 0         Bytes: 0           States: 0     ]
@61 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
  [ Evaluations: 190251    Packets: 3276204   Bytes: 997262251   States: 0     ]
@62 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
  [ Evaluations: 163073    Packets: 25509880  Bytes: 14881015854  States: 434   ]
@63 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
  [ Evaluations: 361244    Packets: 946159    Bytes: 181051654   States: 7     ]
@64 pass in quick on vr1 route-to (vr0 76.126.216.1) inet proto udp from any to 255.255.255.255 keep state label "USER_RULE: Allow DHCP"
  [ Evaluations: 78027     Packets: 251729    Bytes: 88046226    States: 1     ]
@65 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
  [ Evaluations: 71811     Packets: 136       Bytes: 6948        States: 0     ]
@66 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 keep state label "USER_RULE"
  [ Evaluations: 417937    Packets: 116       Bytes: 7596        States: 0     ]
@67 pass in quick on ath0 route-to (vr1 24.130.144.1) inet from 192.168.1.0/24 to 24.130.144.0/21 keep state label "USER_RULE: WAN DMZ"
  [ Evaluations: 383464    Packets: 345       Bytes: 22514       States: 0     ]
@68 pass in quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to 76.126.208.0/21 keep state label "USER_RULE: WAN2 DMZ"
  [ Evaluations: 336562    Packets: 86        Bytes: 5296        States: 0     ]
@69 pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1"
  [ Evaluations: 336542    Packets: 0         Bytes: 0           States: 0     ]
@70 pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = telnet keep state label "USER_RULE: Modem 1 -> WAN1"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@71 pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@72 pass in log quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to <SurfboardHacker:7> keep state label "USER_RULE: SurfboardHacker -> WAN1"
  [ Evaluations: 336542    Packets: 84528     Bytes: 56727554    States: 0     ]
@73 pass in quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns:0> port = https keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
  [ Evaluations: 333836    Packets: 0         Bytes: 0           States: 0     ]
@74 pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to any port = https keep state label "USER_RULE: HTTPS -> WAN2"
  [ Evaluations: 142850    Packets: 515186    Bytes: 179716846   States: 2     ]
@75 pass in log quick on ath0 inet proto gre from 192.168.1.0/24 to <vpns:0> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
  [ Evaluations: 317358    Packets: 0         Bytes: 0           States: 0     ]
@76 pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN2"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@77 pass in log quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns:0> port = pptp keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
  [ Evaluations: 317358    Packets: 0         Bytes: 0           States: 0     ]
@78 pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto tcp from 192.168.1.0/24 to any port = pptp keep state label "USER_RULE: PPTP -> WAN2"
  [ Evaluations: 126372    Packets: 0         Bytes: 0           States: 0     ]
@79 pass in quick on ath0 inet from 192.168.1.0/24 to <vpns:0> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
  [ Evaluations: 317358    Packets: 0         Bytes: 0           States: 0     ]
@80 pass in quick on ath0 route-to { (vr0 76.126.216.1), (vr1 24.130.144.1) } round-robin inet from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance"
  [ Evaluations: 317358    Packets: 57056517  Bytes: 49027219155  States: 897   ]
@81 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp-proxy keep state label "FTP PROXY: Allow traffic to localhost"
  [ Evaluations: 2095      Packets: 0         Bytes: 0           States: 0     ]
@82 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@83 pass in quick on vr0 inet proto tcp from any port = ftp-data to (vr0:1) port > 49000 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
  [ Evaluations: 123634    Packets: 0         Bytes: 0           States: 0     ]
@84 pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = 8022 keep state label "FTP PROXY: Allow traffic to localhost"
  [ Evaluations: 79375     Packets: 0         Bytes: 0           States: 0     ]
@85 pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
@86 anchor "imspector" all
  [ Evaluations: 125914    Packets: 0         Bytes: 0           States: 0     ]
@87 anchor "miniupnpd" all
  [ Evaluations: 125914    Packets: 0         Bytes: 0           States: 0     ]
@88 block drop in log quick all label "Default block all just to be sure."
  [ Evaluations: 125914    Packets: 125914    Bytes: 12699045    States: 0     ]
@89 block drop out log quick all label "Default block all just to be sure."
  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]

pfctl -s queue -v

No queue in use

pfctl -s queue -v

nat-anchor "pftpx/*" all
  [ Evaluations: 2151123   Packets: 0         Bytes: 0           States: 0     ]
nat-anchor "natearly/*" all
  [ Evaluations: 2151118   Packets: 0         Bytes: 0           States: 0     ]
nat-anchor "natrules/*" all
  [ Evaluations: 2151118   Packets: 0         Bytes: 0           States: 0     ]
nat on vr0 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr0) port 500 round-robin
  [ Evaluations: 2151118   Packets: 0         Bytes: 0           States: 0     ]
nat on vr0 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr0) port 5060 round-robin
  [ Evaluations: 177993    Packets: 0         Bytes: 0           States: 0     ]
nat on vr0 inet from 192.168.1.0/24 to any -> (vr0) round-robin
  [ Evaluations: 177993    Packets: 28192706  Bytes: 24219899586  States: 447   ]
nat on vr1 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr1) port 500 round-robin
  [ Evaluations: 1312798   Packets: 0         Bytes: 0           States: 0     ]
nat on vr1 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr1) port 5060 round-robin
  [ Evaluations: 158812    Packets: 0         Bytes: 0           States: 0     ]
nat on vr1 inet from 192.168.1.0/24 to any -> (vr1) round-robin
  [ Evaluations: 158812    Packets: 29467881  Bytes: 25047147877  States: 452   ]
rdr-anchor "pftpx/*" all
  [ Evaluations: 1019901   Packets: 0         Bytes: 0           States: 0     ]
rdr-anchor "slb" all
  [ Evaluations: 1019896   Packets: 0         Bytes: 0           States: 0     ]
no rdr on ath0 proto tcp from any to <vpns> port = ftp
  [ Evaluations: 1019896   Packets: 0         Bytes: 0           States: 0     ]
rdr on ath0 inet proto tcp from any to any port = ftp -> 127.0.0.1 port 8021
  [ Evaluations: 154266    Packets: 116       Bytes: 7596        States: 0     ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = ssh -> 192.168.1.1
  [ Evaluations: 819072    Packets: 1013546   Bytes: 140623528   States: 0     ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = ssh -> 192.168.1.1
  [ Evaluations: 707067    Packets: 2841      Bytes: 367910      States: 0     ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 8080 -> 192.168.1.1 port 80
  [ Evaluations: 400281    Packets: 151       Bytes: 14000       States: 0     ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 8080 -> 192.168.1.1 port 80
  [ Evaluations: 344525    Packets: 115       Bytes: 14122       States: 0     ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 3389 -> 192.168.1.2
  [ Evaluations: 400255    Packets: 3         Bytes: 152         States: 0     ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 3389 -> 192.168.1.2
  [ Evaluations: 344515    Packets: 3276204   Bytes: 997262251   States: 0     ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
  [ Evaluations: 400214    Packets: 5453955   Bytes: 3028646114  States: 147   ]
rdr on vr0 inet proto udp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
  [ Evaluations: 618965    Packets: 15844     Bytes: 1062307     States: 1     ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
  [ Evaluations: 910789    Packets: 25510013  Bytes: 14881096707  States: 435   ]
rdr on vr1 inet proto udp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
  [ Evaluations: 362169    Packets: 946159    Bytes: 181051654   States: 7     ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 30771 -> 192.168.1.199
  [ Evaluations: 489855    Packets: 161       Bytes: 7944        States: 0     ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 30771 -> 192.168.1.199
  [ Evaluations: 434038    Packets: 136       Bytes: 6948        States: 0     ]
rdr-anchor "imspector" all
  [ Evaluations: 489768    Packets: 0         Bytes: 0           States: 0     ]
rdr-anchor "miniupnpd" all
  [ Evaluations: 489768    Packets: 0         Bytes: 0           States: 0     ]

netstat -s -ppfsync

pfsync:
	0 packets received (IPv4)
	0 packets received (IPv6)
		0 packets discarded for bad interface
		0 packets discarded for bad ttl
		0 packets shorter than header
		0 packets discarded for bad version
		0 packets discarded for bad HMAC
		0 packets discarded for bad action
		0 packets discarded for short packet
		0 states discarded for bad values
		0 stale states
		0 failed state lookup/inserts
	43227040 packets sent (IPv4)
	0 packets sent (IPv6)
		0 send failed due to mbuf memory error
		2514 send error

pfctl -vsq

No queue in use

pfctl -vs Tables

--a-r-	SurfboardHacker
-pa---	bogons
-pa-r-	snort2c
-pa-r-	sshlockout
--a-r-	virusprot
--a-r-	vpns

Load Balancer

rdr inet proto tcp from any to 127.0.0.1 port = mdqs -> { 4.2.2.2, 4.2.2.3 } port 666 round-robin
rdr inet proto tcp from any to 127.0.0.1 port = mdqs -> { 4.2.2.3, 4.2.2.2 } port 666 round-robin
rdr inet proto tcp from any to 127.0.0.1 port = mdqs -> { 4.2.2.2, 4.2.2.3 } port 666 round-robin

pftop -w 150 -a -b -v queue

pfTop: Up Queue no entries, View: queue
QUEUE                             BW SCH  PRIO     PKTS    BYTES   DROP_P   DROP_B QLEN BORROW SUSPEN     P/S     B/S

pftop -w 150 -a -b -v rules

update


pfTop: Up Rule 1-107/107, View: rules
RULE ANCHOR     ACTION   DIR LOG Q IF     PR        K     PKTS    BYTES   STATES   MAX INFO
   0            Pass     In                                  0        0        0       all
   1            Pass     In                                  0        0        0       all
   2            Block    In      Q        tcp                0        0        0       drop from any port = 0 to any
   3            Block    In      Q        tcp                0        0        0       drop from any to any port = 0
   4            Block    In      Q        udp                0        0        0       drop from any port = 0 to any
   5            Block    In      Q        udp                0        0        0       drop from any to any port = 0
   6            Block    In      Q                           0        0        0       drop from <snort2c> to any
   7            Block    In      Q                           0        0        0       drop from any to <snort2c>
   8            Pass     In                                  0        0        0       all
   9            Pass     In      Q lo0                       0        0        0       all
  10            Pass     Out     Q lo0                       0        0        0       all
  11            Pass     In                                  0        0        0       all
  12            Pass     In                                  0        0        0       all
  13            Pass     In      Q        icmp      K  1392479  114219K        6       inet from 76.126.xxx.xxx/32 to any
  14            Pass     In                                  0        0        0       all
  15            Pass     In      Q ath0   udp              146    49156        0       inet from any port = bootpc to 255.255.255.255/32 port = bootps
  16            Pass     In      Q ath0   udp              295    96940        0       inet from any port = bootpc to 192.168.1.1/32 port = bootps
  17            Pass     Out     Q ath0   udp              425   139400        0       inet from 192.168.1.1/32 port = bootps to any port = bootpc
  18            Pass     In                                  0        0        0       all
  19            Pass     Out     Q vr0    udp                0        0        0       from any port = bootpc to any port = bootps
  20            Block    In  Log Q vr0    udp                0        0        0       drop inet from any port = bootps to 192.168.1.0/24 port = bootp
  21            Pass     In      Q vr0    udp             3206  1112808        0       from any port = bootps to any port = bootpc
  22            Block    In        !ath0                     0        0        0       drop inet from 192.168.1.0/24 to any
  23            Block    In                                  0        0        0       drop inet from 192.168.1.1/32 to any
  24            Block    In        !vr1                      0        0        0       drop inet from 24.130.144.0/21 to any
  25            Block    In                                  0        0        0       drop inet from 24.130.xxx.xxx/32 to any
  26            Block    In        ath0                      0        0        0       drop inet6 from fe80::20b:6bff:fe09:f5c6/128 to any
  27            Block    In        vr1                       0        0        0       drop inet6 from fe80::20c:8eff:fe1a:130b/128 to any
  28            Pass     In                                  0        0        0       all
  29            Pass     In                                  0        0        0       all
  30            Block    In      Q                         422    22284        0       drop from <virusprot> to any
  31            Pass     Out     Q ath0   icmp      K       13      624        0       all
  32            Pass     Out     Q vr0    icmp      K        0        0        0       all
  33            Pass     Out     Q vr0              K 29709518   23737M      455       all
  34            Pass     In                                  0        0        0       all
  35            Pass     Out     Q vr0              K        0        0        0       all
  36            Pass     Out     Q ath0             K 25203827   12772M      593       all
  37            Pass     Out     Q vr1              K 30862049   23998M      460       all
  38            Pass     Out     Q enc0             K        0        0        0       all
  39            Pass     Out     Q vr1    icmp      K        0        0        0       all
  40            Pass     Out     Q vr1              K        0        0        0       all
  41            Pass     In                                  0        0        0       all
  42            Pass     In      Q ath0             K  2317378  645795K        5       inet from any to 192.168.1.1/32
  43            Block    In  Log          tcp                0        0        0       drop from <sshlockout> to any port = ssh
  44            Pass     In                                  0        0        0       all
  45            Pass     In                                 51     7322        0       all
  46            Pass     In  Log Q vr0    icmp      K      769    76633        0       inet from any to 76.126.xxx.xxx/32
  47            Pass     In  Log Q vr0    tcp       K  1013546  137327K        0       inet from any to 192.168.1.1/32 port = ssh
  48            Pass     In      Q vr0    tcp       K      151    14000        0       inet from any to 192.168.1.1/32 port = http
  49            Pass     In      Q vr0    tcp       K        0        0        0       inet from any to 76.126.xxx.xxx/32 port = 1194
  50            Pass     In      Q vr0    tcp       K        3      152        0       inet from any to 192.168.1.2/32 port = 3389
  51            Pass     In      Q vr0    tcp       K  5454103 2957748K      147       inet from any to 192.168.1.2/32 port = 45526
  52            Pass     In      Q vr0    udp       K    15844  1062307        1       inet from any to 192.168.1.2/32 port = 45526
  53            Pass     In      Q vr0    tcp       K        0        0        0       inet from any to 76.126.xxx.xxx/32 port = pptp
  54            Pass     In      Q vr0    tcp       K     9742  4440645        0       inet from any to 76.126.xxx.xxx/32 port 4999 >< 5016
  55            Pass     In      Q vr0    tcp       K      161     7944        0       inet from any to 192.168.1.199/32 port = 30771
  56            Pass     In      Q vr0    udp       K        0        0        0       inet from any to 192.168.1.199/32 port = 30771
  57            Pass     In  Log Q vr1    icmp      K     2802   198688        0       reply-to ... inet from any to 24.130.xxx.xxx/32
  58            Pass     In  Log Q vr1    tcp       K     2841   367910        0       reply-to ... inet from any to 192.168.1.1/32 port = ssh
  59            Pass     In      Q vr1    tcp       K      115    14122        0       reply-to ... inet from any to 192.168.1.1/32 port = http
  60            Pass     In      Q vr1    tcp       K        0        0        0       reply-to ... inet from any to 24.130.xxx.xxx/32 port = 1194
  61            Pass     In      Q vr1    tcp       K  3276204  973888K        0       reply-to ... inet from any to 192.168.1.2/32 port = 3389
  62            Pass     In      Q vr1    tcp       K 25511012   14192M      437       reply-to ... inet from any to 192.168.1.2/32 port = 45526
  63            Pass     In      Q vr1    udp       K   946162  176808K        7       reply-to ... inet from any to 192.168.1.2/32 port = 45526
  64            Pass     In      Q vr1    udp       K   251729 88046226        1       route-to ... inet from any to 255.255.255.255/32
  65            Pass     In      Q vr1    tcp       K      136     6948        0       reply-to ... inet from any to 192.168.1.199/32 port = 30771
  66            Pass     In      Q ath0   tcp       K      116     7596        0       inet from any to 127.0.0.1/32
  67            Pass     In      Q ath0             K      345    22514        0       route-to ... inet from 192.168.1.0/24 to 24.130.144.0/21
  68            Pass     In      Q ath0             K       86     5296        0       route-to ... inet from 192.168.1.0/24 to 76.126.208.0/21
  69            Pass     In      Q ath0   tcp       K        0        0        0       route-to ... inet from 192.168.1.0/24 to 192.168.100.1/32 port
  70            Pass     In      Q ath0   tcp       K        0        0        0       route-to ... inet from 192.168.1.0/24 to 192.168.100.1/32 port
  71            Pass     In      Q ath0   tcp       K        0        0        0       route-to ... inet from 192.168.1.0/24 to 192.168.100.1/32 port
  72            Pass     In  Log Q ath0             K    84528 56727554        0       route-to ... inet from 192.168.1.0/24 to <SurfboardHacker>
  73            Pass     In      Q ath0   tcp       K        0        0        0       inet from 192.168.1.0/24 to <vpns> port = https
  74            Pass     In      Q ath0   tcp       K   515186  175504K        2       route-to ... inet from 192.168.1.0/24 to any port = https
  75            Pass     In  Log Q ath0   gre       K        0        0        0       inet from 192.168.1.0/24 to <vpns>
  76            Pass     In  Log Q ath0   gre       K        0        0        0       route-to ... inet from 192.168.1.0/24 to any
  77            Pass     In  Log Q ath0   tcp       K        0        0        0       inet from 192.168.1.0/24 to <vpns> port = pptp
  78            Pass     In  Log Q ath0   tcp       K        0        0        0       route-to ... inet from 192.168.1.0/24 to any port = pptp
  79            Pass     In      Q ath0             K        0        0        0       inet from 192.168.1.0/24 to <vpns>
  80            Pass     In      Q ath0             K 57056544   46756M      900       route-to ... inet from 192.168.1.0/24 to any
  81            Pass     In      Q ath0   tcp       K        0        0        0       inet from any to 127.0.0.1/32 port = ftp-proxy
  82            Pass     In      Q ath0   tcp       K        0        0        0       inet from any to 127.0.0.1/32 port = ftp
  83            Pass     In      Q vr0    tcp       K        0        0        0       inet from any port = ftp-data to (vr0) port > 49000  flags S/SA
  84            Pass     In      Q vr1    tcp       K        0        0        0       inet from any to 127.0.0.1/32 port = 8022
  85            Pass     In      Q vr1    tcp       K        0        0        0       inet from any to 127.0.0.1/32 port = ftp
  86            Pass     In                                  0        0        0       all
  87            Pass     In                                  0        0        0       all
  88            Block    In  Log Q                      125915 12699176        0       drop all
  89            Block    Out Log Q                           0        0        0       drop all
   0 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 24293
   1 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 7422
   2 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 59622
   3 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 20965
   4 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 6652
   5 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = pdap-np
   6 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 38894
   7 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 10990
   8 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 12000
   9 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 27626
  10 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 63485
  11 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 26865
  12 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 52957
  13 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 38383
  14 /miniupnpd Pass     In      Q vr0    tcp       K        0        0        0       inet from any to any port = 11474
  15 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 46591
  16 /miniupnpd Pass     In      Q vr0    udp       K        0        0        0       inet from any to any port = 7145


resolv.conf

domain local
nameserver 4.2.2.2
nameserver 208.67.220.220

Processes

USER     PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED      TIME COMMAND
root      10 61.1  0.0     0     8  ??  RL    2Mar08 57819:05.67 [idle]
root   20209  6.8  4.5 23716 22452  ??  S     5Apr08   0:41.99 /usr/local/bin/php
root     921  5.7  1.1  6568  5632  ??  S     2Mar08   4:51.02 /usr/local/sbin/lighttpd -f /var/etc/lighty-webConfigurator.conf
root      32  2.0  0.0     0     8  ??  DL    2Mar08 183:44.86 [ath0 taskq]
root      13  1.0  0.0     0     8  ??  WL    2Mar08 139:00.50 [swi1: net]
root      38  0.1  0.0     0     8  ??  DL    2Mar08 183:28.65 [pagezero]
root       0  0.0  0.0     0     0  ??  WLs   2Mar08   0:00.00 [swapper]
root       1  0.0  0.1   608   356  ??  ILs   2Mar08   0:00.39 /sbin/init --
root       2  0.0  0.0     0     8  ??  DL    2Mar08   4:07.46 [g_event]
root       3  0.0  0.0     0     8  ??  DL    2Mar08  95:49.84 [g_up]
root       4  0.0  0.0     0     8  ??  DL    2Mar08  76:15.44 [g_down]
root       5  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [crypto]
root       6  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [crypto returns]
root       7  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [kqueue taskq]
root       8  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [acpi_task_0]
root       9  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [acpi_task_1]
root      11  0.0  0.0     0     8  ??  RL    2Mar08 164:13.20 [swi4: clock sio]
root      12  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [swi3: vm]
root      14  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [swi2: cambio]
root      15  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [swi5: +]
root      16  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [acpi_task_2]
root      17  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [thread taskq]
root      18  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [swi6: Giant taskq]
root      19  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [swi6: task queue]
root      20  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [irq9: acpi0]
root      21  0.0  0.0     0     8  ??  WL    2Mar08  41:27.98 [irq12: vr0 ehci0]
root      22  0.0  0.0     0     8  ??  WL    2Mar08  46:58.29 [irq10: vr1 uhci0]
root      23  0.0  0.0     0     8  ??  DL    2Mar08   0:00.41 [usb0]
root      24  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [usbtask]
root      25  0.0  0.0     0     8  ??  WL    2Mar08  56:56.75 [irq11: ath0 uhci1]
root      26  0.0  0.0     0     8  ??  DL    2Mar08   0:00.33 [usb1]
root      27  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [irq5: uhci2]
root      28  0.0  0.0     0     8  ??  DL    2Mar08   0:00.36 [usb2]
root      29  0.0  0.0     0     8  ??  DL    2Mar08   0:00.36 [usb3]
root      30  0.0  0.0     0     8  ??  WL    2Mar08 171:51.14 [irq14: ata0]
root      31  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [irq15: ata1]
root      33  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [swi0: sio]
root      34  0.0  0.0     0     8  ??  WL    2Mar08   0:00.00 [irq1: atkbd0]
root      35  0.0  0.0     0     8  ??  DL    2Mar08   0:06.14 [pagedaemon]
root      36  0.0  0.0     0     8  ??  DL    2Mar08   0:00.00 [vmdaemon]
root      37  0.0  0.0     0     8  ??  RL    2Mar08   0:07.05 [idlepoll]
root      39  0.0  0.0     0     8  ??  DL    2Mar08   0:27.36 [bufdaemon]
root      40  0.0  0.0     0     8  ??  DL    2Mar08   6:19.12 [syncer]
root      41  0.0  0.0     0     8  ??  DL    2Mar08   0:27.33 [vnlru]
root      42  0.0  0.0     0     8  ??  DL    2Mar08   0:34.26 [softdepflush]
root      43  0.0  0.0     0     8  ??  DL    2Mar08   8:53.16 [schedcpu]
root      50  0.0  0.0     0     8  ??  DL    2Mar08   0:41.62 [md0]
root     112  0.0  0.1   504   360  ??  Is    2Mar08   0:00.02 /sbin/devd
root     250  0.0  0.5  3064  2416  ??  Is    2Mar08   0:01.24 /usr/sbin/sshd
_dhcp    418  0.0  0.2  1468  1096  ??  Ss    2Mar08   0:34.11 dhclient: vr1 (dhclient)
root     922  0.0  1.0 14924  5096  ??  Is    2Mar08   0:00.05 /usr/local/bin/php
root     928  0.0  1.0 14924  5096  ??  Is    2Mar08   0:00.07 /usr/local/bin/php
root     932  0.0  1.0 14924  5096  ??  Is    2Mar08   0:00.09 /usr/local/bin/php
root     944  0.0  1.0 14924  5096  ??  Is    2Mar08   0:00.10 /usr/local/bin/php
root    1281  0.0  0.2  1372  1056  ??  Ss    2Mar08   1:00.40 /usr/local/sbin/miniupnpd -f /var/etc/miniupnpd.conf
root    1283  0.0  0.2  1384  1020  ??  Is    2Mar08   0:23.87 /usr/sbin/cron -s
root    1330  0.0  0.1  1268   732  ??  Is    2Mar08   0:06.76 minicron 240 /var/run/ping_hosts.pid /etc/ping_hosts.sh
root    4248  0.0  0.1  1268   692  ??  Is    7Mar08   0:00.04 /usr/local/sbin/sshlockout_pf
root   19582  0.0  0.2  1440  1040  ??  Ss    7Mar08   2:05.86 /usr/sbin/syslogd -ss -f /var/etc/syslog.conf
nobody 34738  0.0  0.2  1472  1140  ??  I    Mon06PM   0:05.94 /usr/local/sbin/dnsmasq -l /var/dhcpd/var/db/dhcpd.leases -s local
dhcpd  34763  0.0  0.4  2276  1908  ??  Ss   Mon06PM   0:40.64 /usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd -cf /var/dhcpd/etc/dhcpd.conf ath0
proxy  37448  0.0  0.1   704   540  ??  SNs  11Mar08   0:18.22 /usr/local/sbin/pftpx -c 8021 -g 8021 192.168.1.1
root   42331  0.0  0.6  5800  2816  ??  Ss    8:27AM   0:39.26 sshd: root@ttyp0 (sshd)
root   58827  0.0  0.2  1624  1240  ??  Ss   10Mar08   0:44.08 /usr/sbin/hostapd -B /var/etc/hostapd_ath0.conf
root   65126  0.0  0.2  1384  1072  ??  I    11:20PM   0:00.00 cron: running job (cron)
root   65128  0.0  0.0     0     0  ??  Z    11:20PM   0:00.05 <defunct>
root   65138  0.0  0.1  1272   720  ??  SN   11:20PM   0:00.94 /usr/local/sbin/check_reload_status
root   73321  0.0  2.6 15636 13176  ??  I     5Apr08   0:04.26 /usr/local/bin/php
root   73366  0.0  2.6 15632 13064  ??  I     5Apr08   0:06.33 /usr/local/bin/php
root   79031  0.0  0.2  1468  1056  ??  I    25Mar08   0:00.88 dhclient: vr0 [priv] (dhclient)
_dhcp  79084  0.0  0.2  1468  1100  ??  Ss   25Mar08   0:22.09 dhclient: vr0 (dhclient)
root   79247  0.0  1.0  5532  5040  ??  IN   25Mar08 132:35.52 /bin/sh /var/db/rrd/updaterrd.sh
root   79371  0.0  0.2  2056  1176  ??  SNs  25Mar08  46:11.83 /usr/local/sbin/slbd -c/var/etc/slbd.conf -r5000
_ntp   82047  0.0  0.2  1340  1052  ??  I    25Mar08   0:10.33 ntpd: ntp engine (ntpd)
root   82048  0.0  0.2  1376  1048  ??  Ss   25Mar08   0:02.42 ntpd: [priv] (ntpd)
root   84661  0.0  2.8 16172 13904  ??  I     5Apr08   0:32.97 /usr/local/bin/php
root   94122  0.0  0.2  1328   940  ??  Ss   20Mar08   2:50.24 dtach -c /tmp/weechat weechat-curses
root   95152  0.0  1.1  6316  5256  ??  S    31Mar08   0:43.47 /usr/sbin/tcpdump -v -l -n -e -ttt -i pflog0
root   95153  0.0  0.1  1276   740  ??  S    31Mar08   0:16.13 logger -t pf -p local0.info
root   97820  0.0  0.1  1256   468  ??  IN    1:31AM   0:00.03 sleep 60
root   98042  0.0  0.2  1716  1200  ??  S     1:31AM   0:00.01 sh -c ps xauww 2>&1
root   98043  0.0  0.2  1500   988  ??  R     1:31AM   0:00.00 ps xauww
root   84042  0.0  0.3  1712  1360  v0  Is   Sat09PM   0:00.03 login [pam] (login)
root   84043  0.0  0.2  1720  1204  v0  I    Sat09PM   0:00.01 -sh (sh)
root   84044  0.0  0.2  1724  1208  v0  I+   Sat09PM   0:00.01 /bin/sh /etc/rc.initial
root     369  0.0  0.2  1468  1044 con- S     2Mar08   0:06.55 dhclient: vr1 [priv] (dhclient)
root   42352  0.0  0.2  1720  1204  p0  Is    8:27AM   0:00.01 -sh (sh)
root   42353  0.0  0.2  1728  1212  p0  I     8:27AM   0:00.01 /bin/sh /etc/rc.initial
root   42371  0.0  0.6  5060  3048  p0  I     8:27AM   0:00.04 /bin/tcsh
root   42389  0.0  0.1  1312   584  p0  S+    8:27AM   0:03.33 dtach -a /tmp/weechat
root   94124  0.0  2.1 11544 10284  p1  Ss+  20Mar08 141:02.90 weechat-curses

dhcpd.conf

cat: /var/etc/dhcpd.conf: No such file or directory

ez-ipupdate.cache

cat: /conf/ez-ipupdate.cache: No such file or directory

df

Filesystem  512-blocks   Used   Avail Capacity  Mounted on
/dev/ad0s1a    7738764 397528 6722136     6%    /
devfs                2      2       0   100%    /dev
/dev/md0          3420     60    3088     2%    /var/run
devfs                2      2       0   100%    /var/dhcpd/dev

racoon.conf

cat: /var/etc/racoon.conf: No such file or directory

SPD

No SPD entries.

SAD

No SAD entries.

last 200 system log entries

Apr 12 01:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 01:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 01:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 02:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 02:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 02:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 03:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 03:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 03:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 04:05:00 via check_reload_status: check_reload_status is starting
Apr 12 04:45:00 via check_reload_status: check_reload_status is starting
Apr 12 04:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 04:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 04:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 05:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 05:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 05:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 06:31:32 via sshd[53150]: Did not receive identification string from 221.141.3.126
Apr 12 06:33:42 via sshd[53687]: Invalid user staff from 221.141.3.126
Apr 12 06:33:42 via sshd[53687]: Failed password for invalid user staff from 221.141.3.126 port 41942 ssh2
Apr 12 06:33:43 via sshd[53689]: Invalid user sales from 221.141.3.126
Apr 12 06:33:43 via sshd[53689]: Failed password for invalid user sales from 221.141.3.126 port 42026 ssh2
Apr 12 06:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 06:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 06:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 07:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 07:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 07:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 08:24:25 via sshd[81341]: Invalid user nagios from 213.220.193.35
Apr 12 08:24:25 via sshd[81341]: Failed password for invalid user nagios from 213.220.193.35 port 56098 ssh2
Apr 12 08:24:27 via sshd[81343]: Invalid user nagios from 213.220.193.35
Apr 12 08:24:27 via sshd[81343]: Failed password for invalid user nagios from 213.220.193.35 port 54858 ssh2
Apr 12 08:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 08:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 08:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 09:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 09:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 09:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 10:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 10:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 10:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 11:35:00 via check_reload_status: check_reload_status is starting
Apr 12 11:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 11:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 11:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 12:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 12:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 12:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 13:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 13:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 13:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 14:41:54 via sshd[76027]: Did not receive identification string from 221.141.3.126
Apr 12 14:47:38 via sshd[77412]: Invalid user staff from 221.141.3.126
Apr 12 14:47:38 via sshd[77412]: Failed password for invalid user staff from 221.141.3.126 port 39013 ssh2
Apr 12 14:47:40 via sshd[77419]: Invalid user sales from 221.141.3.126
Apr 12 14:47:40 via sshd[77419]: Failed password for invalid user sales from 221.141.3.126 port 39134 ssh2
Apr 12 14:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 14:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 14:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 15:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 15:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 15:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 16:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 16:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 16:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 17:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 17:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 17:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 18:19:14 via sshd[30398]: Did not receive identification string from 72.233.3.135
Apr 12 18:21:21 via sshd[30934]: Failed password for root from 72.233.3.135 port 51250 ssh2
Apr 12 18:21:22 via sshd[30940]: Failed password for admin from 72.233.3.135 port 51264 ssh2
Apr 12 18:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 18:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 18:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 19:26:38 via sshd[47152]: Accepted keyboard-interactive/pam for root from 192.168.1.2 port 3180 ssh2
Apr 12 19:26:38 via sshd[47152]: subsystem request for sftp
Apr 12 19:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 19:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 19:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 20:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 20:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 20:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 21:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 21:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 21:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 21:54:19 via sshd[25510]: Timeout, client not responding.
Apr 12 21:54:21 via login: login on ttyv0 as root
Apr 12 22:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 22:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 22:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 23:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 23:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 23:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 00:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 00:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 00:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 01:01:03 via php: : DynDns: Running updatedns()
Apr 13 01:01:03 via php: : DynDns: updatedns() starting
Apr 13 01:01:03 via php: : DynDns: _detectChange() starting.
Apr 13 01:01:03 via php: : DynDns: Current WAN IP: 76.126.xxx.xxx
Apr 13 01:01:03 via php: : DynDns: Cached IP: 76.126.xxx.xxx
Apr 13 01:01:03 via php: : phpDynDNS: No Change In My IP Address and/or 25 Days Has Not Past. Not Updating Dynamic DNS Entry.
Apr 13 01:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 01:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 01:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 02:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 02:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 02:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 03:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 03:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 03:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 04:46:47 via sshd[87090]: Did not receive identification string from 67.15.4.55
Apr 13 04:50:42 via sshd[88104]: Failed password for root from 67.15.4.55 port 39971 ssh2
Apr 13 04:50:43 via sshd[88106]: Failed password for root from 67.15.4.55 port 40058 ssh2
Apr 13 04:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 04:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 04:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 05:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 05:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 05:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 06:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 06:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 06:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 07:18:03 via sshd[24962]: Failed password for root from 213.220.193.35 port 51966 ssh2
Apr 13 07:18:05 via sshd[24968]: Failed password for root from 213.220.193.35 port 55004 ssh2
Apr 13 07:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 07:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 07:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 08:27:39 via sshd[42331]: Accepted keyboard-interactive/pam for root from 192.168.1.2 port 4392 ssh2
Apr 13 08:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 08:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 08:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 09:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 09:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 09:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 10:35:00 via check_reload_status: check_reload_status is starting
Apr 13 10:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 10:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 10:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 11:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 11:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 11:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 12:21:25 via sshd[1018]: Failed password for root from 203.66.187.239 port 38910 ssh2
Apr 13 12:21:26 via sshd[1024]: Failed password for root from 203.66.187.239 port 39003 ssh2
Apr 13 12:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 12:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 12:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 13:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 13:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 13:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 14:40:01 via check_reload_status: check_reload_status is starting
Apr 13 14:51:48 via sshd[38511]: Invalid user test from 221.194.44.144
Apr 13 14:51:48 via sshd[38511]: Failed password for invalid user test from 221.194.44.144 port 50250 ssh2
Apr 13 14:51:51 via sshd[38518]: Invalid user guest from 221.194.44.144
Apr 13 14:51:51 via sshd[38518]: Failed password for invalid user guest from 221.194.44.144 port 50350 ssh2
Apr 13 14:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 14:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 14:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 15:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 15:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 15:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 16:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 16:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 16:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 17:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 17:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 17:52:51 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 18:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 18:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 18:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 19:00:01 via check_reload_status: check_reload_status is starting
Apr 13 19:35:00 via check_reload_status: check_reload_status is starting
Apr 13 19:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 19:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 19:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 20:50:36 via sshd[27974]: Did not receive identification string from 202.188.158.175
Apr 13 20:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 20:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 20:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 20:53:05 via sshd[28561]: Failed password for admin from 202.188.158.175 port 32965 ssh2
Apr 13 20:53:14 via sshd[28589]: Failed password for root from 202.188.158.175 port 33031 ssh2
Apr 13 21:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 21:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 21:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 22:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 22:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 22:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 23:20:00 via check_reload_status: check_reload_status is starting
Apr 13 23:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 23:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 23:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 14 00:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 14 00:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 14 00:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 14 01:01:02 via php: : DynDns: Running updatedns()
Apr 14 01:01:02 via php: : DynDns: updatedns() starting
Apr 14 01:01:02 via php: : DynDns: _detectChange() starting.
Apr 14 01:01:02 via php: : DynDns: Current WAN IP: 76.126.xxx.xxx
Apr 14 01:01:02 via php: : DynDns: Cached IP: 76.126.xxx.xxx
Apr 14 01:01:02 via php: : phpDynDNS: No Change In My IP Address and/or 25 Days Has Not Past. Not Updating Dynamic DNS Entry.

last 50 filter log entries

Apr 14 01:29:55 via pf: 9. 233285 rule 88/0(match): block in on vr1: (tos 0x20, ttl 111, id 60549, offset 0, flags [none], proto: UDP (17), length: 134) 87.17.210.48.36258 > 24.130.xxx.xxx.53104: UDP, length 106
Apr 14 01:30:01 via pf: 5. 607015 rule 88/0(match): block in on vr0: (tos 0x20, ttl 115, id 47276, offset 0, flags [none], proto: UDP (17), length: 90) 58.218.210.51.16001 > 76.126.xxx.xxx.63762: UDP, length 62
Apr 14 01:30:04 via pf: 2. 892249 rule 57/0(match): pass in on vr1: (tos 0x20, ttl  51, id 14583, offset 0, flags [none], proto: ICMP (1), length: 92) 220.210.134.30 > 24.130.xxx.xxx: ICMP host 192.168.11.2 unreachable, length 72
Apr 14 01:30:04 via pf: 	(tos 0x0, ttl 114, id 2537, offset 0, flags [DF], proto: TCP (6), length: 64) 24.130.xxx.xxx > 192.168.11.2: [|tcp]
Apr 14 01:30:06 via pf: 1. 724289 rule 88/0(match): block in on vr1: (tos 0x20, ttl 116, id 38460, offset 0, flags [none], proto: UDP (17), length: 131) 201.58.19.21.50001 > 24.130.xxx.xxx.51602: UDP, length 103
Apr 14 01:30:07 via pf: 1. 416010 rule 57/0(match): pass in on vr1: (tos 0x20, ttl  51, id 61777, offset 0, flags [none], proto: ICMP (1), length: 92) 220.210.134.30 > 24.130.xxx.xxx: ICMP host 192.168.11.2 unreachable, length 72
Apr 14 01:30:07 via pf: 	(tos 0x0, ttl 114, id 59043, offset 0, flags [DF], proto: TCP (6), length: 64) 24.130.xxx.xxx > 192.168.11.2: [|tcp]
Apr 14 01:30:08 via pf: 684062 rule 88/0(match): block in on vr0: (tos 0x20, ttl 107, id 28464, offset 0, flags [none], proto: UDP (17), length: 126) 77.191.249.129.20582 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:30:08 via pf: 004535 rule 88/0(match): block in on vr1: (tos 0x20, ttl 107, id 59928, offset 0, flags [none], proto: UDP (17), length: 126) 77.191.249.129.20582 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:30:13 via pf: 5. 681685 rule 88/0(match): block in on vr0: (tos 0x20, ttl 107, id 60235, offset 0, flags [none], proto: UDP (17), length: 126) 77.191.249.129.20582 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:30:13 via pf: 004517 rule 88/0(match): block in on vr1: (tos 0x20, ttl 107, id 6915, offset 0, flags [none], proto: UDP (17), length: 126) 77.191.249.129.20582 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:30:14 via pf: 146993 rule 57/0(match): pass in on vr1: (tos 0x20, ttl  51, id 7239, offset 0, flags [none], proto: ICMP (1), length: 92) 220.210.134.30 > 24.130.xxx.xxx: ICMP host 192.168.11.2 unreachable, length 72
Apr 14 01:30:14 via pf: 	(tos 0x0, ttl 114, id 49426, offset 0, flags [DF], proto: TCP (6), length: 64) 24.130.xxx.xxx > 192.168.11.2: [|tcp]
Apr 14 01:30:24 via pf: 10. 433453 rule 88/0(match): block in on vr0: (tos 0x20, ttl 118, id 11735, offset 0, flags [none], proto: UDP (17), length: 134) 89.110.12.112.25744 > 76.126.xxx.xxx.58698: UDP, length 106
Apr 14 01:30:26 via pf: 1. 963073 rule 88/0(match): block in on vr0: (tos 0x20, ttl 109, id 39825, offset 0, flags [none], proto: UDP (17), length: 131) 84.36.158.25.13344 > 76.126.xxx.xxx.58698: UDP, length 103
Apr 14 01:30:30 via pf: 3. 872848 rule 88/0(match): block in on vr1: (tos 0x20, ttl 105, id 49807, offset 0, flags [none], proto: UDP (17), length: 131) 125.24.5.80.24870 > 24.130.xxx.xxx.55200: UDP, length 103
Apr 14 01:30:30 via pf: 604533 rule 88/0(match): block in on vr0: (tos 0x20, ttl 118, id 61185, offset 0, flags [none], proto: UDP (17), length: 131) 193.153.149.60.25453 > 76.126.xxx.xxx.60117: UDP, length 103
Apr 14 01:30:32 via pf: 1. 197562 rule 88/0(match): block in on vr1: (tos 0x20, ttl 233, id 22065, offset 0, flags [none], proto: TCP (6), length: 40) 60.126.23.7.48838 > 24.130.xxx.xxx.50019: R, cksum 0x2f21 (correct), 0:0(0) win 0
Apr 14 01:30:37 via pf: 5. 021512 rule 88/0(match): block in on vr0: (tos 0x20, ttl 119, id 2347, offset 0, flags [none], proto: UDP (17), length: 134) 82.42.228.52.50052 > 76.126.xxx.xxx.57159: UDP, length 106
Apr 14 01:30:40 via pf: 2. 811908 rule 88/0(match): block in on vr0: (tos 0x20, ttl 113, id 59724, offset 0, flags [none], proto: UDP (17), length: 131) 71.231.222.192.1311 > 76.126.xxx.xxx.58698: UDP, length 103
Apr 14 01:30:43 via pf: 3. 202593 rule 88/0(match): block in on vr1: (tos 0x20, ttl 106, id 51122, offset 0, flags [none], proto: UDP (17), length: 131) 67.55.134.5.16725 > 24.130.xxx.xxx.55200: UDP, length 103
Apr 14 01:30:48 via pf: 5. 358437 rule 88/0(match): block in on vr1: (tos 0x20, ttl  52, id 32511, offset 0, flags [none], proto: UDP (17), length: 129) 58.52.112.112.14743 > 24.130.xxx.xxx.62039: UDP, length 101
Apr 14 01:30:51 via pf: 3. 312415 rule 57/0(match): pass in on vr1: (tos 0x20, ttl  47, id 12831, offset 0, flags [none], proto: ICMP (1), length: 92) 61.125.197.125 > 24.130.xxx.xxx: ICMP host 192.168.11.9 unreachable, length 72
Apr 14 01:30:51 via pf: 	(tos 0x0, ttl 113, id 56993, offset 0, flags [DF], proto: TCP (6), length: 64) 24.130.xxx.xxx > 192.168.11.9: [|tcp]
Apr 14 01:30:56 via pf: 4. 212512 rule 88/0(match): block in on vr0: (tos 0x20, ttl  48, id 16760, offset 0, flags [DF], proto: UDP (17), length: 925) 222.161.2.46.49650 > 76.126.xxx.xxx.1027: UDP, length 897
Apr 14 01:30:57 via pf: 1. 147352 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 359, offset 0, flags [none], proto: UDP (17), length: 131) 121.7.179.182.11406 > 76.126.xxx.xxx.58698: UDP, length 103
Apr 14 01:30:58 via pf: 1. 159885 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 64639, offset 0, flags [none], proto: UDP (17), length: 131) 222.131.189.247.55270 > 76.126.xxx.xxx.63397: UDP, length 103
Apr 14 01:31:02 via pf: 4. 528953 rule 88/0(match): block in on vr0: (tos 0x20, ttl 110, id 34196, offset 0, flags [none], proto: UDP (17), length: 126) 77.204.71.37.7096 > 76.126.xxx.xxx.58698: UDP, length 98
Apr 14 01:31:04 via pf: 1. 628325 rule 88/0(match): block in on vr0: (tos 0x20, ttl 115, id 52205, offset 0, flags [none], proto: UDP (17), length: 126) 61.133.225.181.7860 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:31:04 via pf: 205714 rule 88/0(match): block in on vr1: (tos 0x20, ttl 116, id 9864, offset 0, flags [none], proto: UDP (17), length: 126) 61.133.225.181.7860 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:31:06 via pf: 2. 054756 rule 88/0(match): block in on vr0: (tos 0x20, ttl 104, id 44946, offset 0, flags [none], proto: UDP (17), length: 131) 193.77.45.53.50692 > 76.126.xxx.xxx.53242: UDP, length 103
Apr 14 01:31:08 via pf: 1. 782260 rule 88/0(match): block in on vr0: (tos 0x20, ttl  55, id 30817, offset 0, flags [none], proto: UDP (17), length: 131) 83.30.167.206.22731 > 76.126.xxx.xxx.63397: UDP, length 103
Apr 14 01:31:10 via pf: 1. 568177 rule 88/0(match): block in on vr0: (tos 0x20, ttl 115, id 64774, offset 0, flags [none], proto: UDP (17), length: 126) 61.133.225.181.7860 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:31:10 via pf: 001964 rule 88/0(match): block in on vr1: (tos 0x20, ttl 116, id 16959, offset 0, flags [none], proto: UDP (17), length: 126) 61.133.225.181.7860 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:31:23 via pf: 13. 021072 rule 88/0(match): block in on vr0: (tos 0x20, ttl 108, id 22066, offset 0, flags [none], proto: UDP (17), length: 131) 70.217.128.216.58038 > 76.126.xxx.xxx.57159: UDP, length 103
Apr 14 01:31:31 via pf: 8. 536807 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 9410, offset 0, flags [none], proto: UDP (17), length: 126) 86.52.72.27.21158 > 76.126.xxx.xxx.55296: UDP, length 98
Apr 14 01:31:31 via pf: 108241 rule 88/0(match): block in on vr0: (tos 0x20, ttl 107, id 25228, offset 0, flags [none], proto: UDP (17), length: 131) 83.132.56.50.49152 > 76.126.xxx.xxx.60117: UDP, length 103
Apr 14 01:31:32 via pf: 612165 rule 88/0(match): block in on vr0: (tos 0x20, ttl 111, id 21454, offset 0, flags [none], proto: UDP (17), length: 129) 218.111.220.252.21400 > 76.126.xxx.xxx.58698: UDP, length 101
Apr 14 01:31:33 via pf: 1. 019809 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 57295, offset 0, flags [none], proto: UDP (17), length: 126) 91.163.60.89.26225 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:31:34 via pf: 967221 rule 88/0(match): block in on vr1: (tos 0x20, ttl 112, id 41635, offset 0, flags [none], proto: UDP (17), length: 126) 91.163.60.89.26225 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:31:36 via pf: 2. 007836 rule 88/0(match): block in on vr0: (tos 0x20, ttl 113, id 27380, offset 0, flags [none], proto: UDP (17), length: 131) 216.95.141.99.38937 > 76.126.xxx.xxx.63397: UDP, length 103
Apr 14 01:31:39 via pf: 3. 012875 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 32064, offset 0, flags [none], proto: UDP (17), length: 126) 91.163.60.89.26225 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:31:40 via pf: 1. 003597 rule 88/0(match): block in on vr1: (tos 0x20, ttl 112, id 5402, offset 0, flags [none], proto: UDP (17), length: 126) 91.163.60.89.26225 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:31:44 via pf: 3. 823253 rule 88/0(match): block in on vr0: (tos 0x20, ttl 114, id 18807, offset 0, flags [none], proto: UDP (17), length: 131) 88.110.86.212.18600 > 76.126.xxx.xxx.63397: UDP, length 103
Apr 14 01:31:46 via pf: 2. 590405 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 10468, offset 0, flags [none], proto: UDP (17), length: 131) 24.79.246.118.60430 > 76.126.xxx.xxx.60117: UDP, length 103
Apr 14 01:31:48 via pf: 1. 248300 rule 88/0(match): block in on vr0: (tos 0x20, ttl  46, id 30911, offset 0, flags [none], proto: UDP (17), length: 105) 210.133.178.129.14893 > 76.126.xxx.xxx.14893: UDP, length 77
Apr 14 01:31:51 via pf: 3. 773647 rule 88/0(match): block in on vr1: (tos 0x48, ttl 251, id 17607, offset 0, flags [DF], proto: UDP (17), length: 350) 68.87.76.13.67 > 24.130.xxx.xxx.68: BOOTP/DHCP, Reply, length: 322, xid:0xaad2e060, flags: [none]
Apr 14 01:31:51 via pf: 	  Client IP: 24.130.xxx.xxx
Apr 14 01:31:51 via pf: 	  Your IP: 24.130.xxx.xxx [|bootp]
Apr 14 01:31:55 via pf: 3. 208250 rule 88/0(match): block in on vr0: (tos 0x20, ttl 108, id 7484, offset 0, flags [none], proto: UDP (17), length: 131) 89.129.4.169.4662 > 76.126.xxx.xxx.63397: UDP, length 103

ls /conf

backup
config.xml
dyndns.cache

ls /var/run

.snap
cron.pid
devd.pid
devd.pipe
dnsmasq.pid
filter_reload_status
hostapd
htpasswd
ld-elf.so.hints
lighty-webConfigurator.pid
log
logpriv
miniupnpd.pid
ping_hosts.pid
sshd.pid
syslog.pid
utmp

/sbin/mount

/dev/ad0s1a on / (ufs, local)
devfs on /dev (devfs, local)
/dev/md0 on /var/run (ufs, local)
devfs on /var/dhcpd/dev (devfs, local)

cat /tmp/rules.debug

# System Aliases
loopback = "{ lo0 }"
lan = "{ ath0  }"
wan = "{ vr0  }"
enc0 = "{ enc0 }"
OPT1 = "{ vr1 }"
# User Aliases
SurfboardHacker = "{ 64.18.148.67 209.250.234.170 72.20.13.45 38.101.208.186 74.86.227.138 208.67.212.207 208.69.230.124 }"

set loginterface vr0
set loginterface ath0
set loginterface vr1
set optimization normal
set limit states 100000

scrub all random-id  fragment reassemble


nat-anchor "pftpx/*"
nat-anchor "natearly/*"
nat-anchor "natrules/*"
# FTP proxy
rdr-anchor "pftpx/*"

# Outbound NAT rules
nat on $wan from 192.168.1.0/24 port 500 to any port 500 -> (vr0) port 500
nat on $wan from 192.168.1.0/24 port 5060 to any port 5060 -> (vr0) port 5060
nat on $wan from 192.168.1.0/24 to any -> (vr0)
nat on $OPT1 from 192.168.1.0/24 port 500 to any port 500 -> (vr1) port 500
nat on $OPT1 from 192.168.1.0/24 port 5060 to any port 5060 -> (vr1) port 5060
nat on $OPT1 from 192.168.1.0/24 to any -> (vr1)

#SSH Lockout Table
table <sshlockout> persist


# Load balancing anchor - slbd updates
rdr-anchor "slb"

# FTP Proxy/helper
table <vpns> {   }
no rdr on ath0 proto tcp from any to <vpns> port 21
rdr on ath0 proto tcp from any to any port 21 -> 127.0.0.1 port 8021

# NAT Inbound Redirects
rdr on vr0 proto tcp from any to 76.126.xxx.xxx port { 22 } -> 192.168.1.1
rdr on vr1 proto tcp from any to 24.130.xxx.xxx port { 22 } -> 192.168.1.1
rdr on vr0 proto tcp from any to 76.126.xxx.xxx port { 8080 } -> 192.168.1.1 port 80
rdr on vr1 proto tcp from any to 24.130.xxx.xxx port { 8080 } -> 192.168.1.1 port 80
rdr on vr0 proto tcp from any to 76.126.xxx.xxx port { 3389 } -> 192.168.1.2
rdr on vr1 proto tcp from any to 24.130.xxx.xxx port { 3389 } -> 192.168.1.2
rdr on vr0 proto { tcp udp } from any to 76.126.xxx.xxx port { 45526 } -> 192.168.1.2
rdr on vr1 proto { tcp udp } from any to 24.130.xxx.xxx port { 45526 } -> 192.168.1.2
rdr on vr0 proto tcp from any to 76.126.xxx.xxx port { 30771 } -> 192.168.1.199
rdr on vr1 proto tcp from any to 24.130.xxx.xxx port { 30771 } -> 192.168.1.199
# IMSpector rdr anchor
rdr-anchor "imspector"
# UPnPd rdr anchor
rdr-anchor "miniupnpd"


anchor "ftpsesame/*"
anchor "firewallrules"

# We use the mighty pf, we cannot be fooled.
block quick proto { tcp, udp } from any port = 0 to any
block quick proto { tcp, udp } from any to any port = 0

# snort2c
table <snort2c> persist
block quick from <snort2c> to any label "Block snort2c hosts"
block quick from any to <snort2c> label "Block snort2c hosts"

# loopback
anchor "loopback"
pass in quick on $loopback all label "pass loopback"
pass out quick on $loopback all label "pass loopback"

# package manager early specific hook
anchor "packageearly"


# carp
anchor "carp"

# permit wan interface to ping out (ping_hosts.sh)
pass quick proto icmp from 76.126.xxx.xxx to any keep state

# NAT Reflection rules

# allow access to DHCP server on LAN
anchor "dhcpserverlan"
pass in quick on $lan proto udp from any port = 68 to 255.255.255.255 port = 67 label "allow access to DHCP server on LAN"
pass in quick on $lan proto udp from any port = 68 to 192.168.1.1 port = 67 label "allow access to DHCP server on LAN"
pass out quick on $lan proto udp from 192.168.1.1 port = 67 to any port = 68 label "allow access to DHCP server on LAN"

# Not installing DHCP server firewall rules for OPT1 which is configured for DHCP.

# allow our DHCP client out to the WAN
anchor "wandhcp"
pass out quick on $wan proto udp from any port = 68 to any port = 67 label "allow dhcp client out wan"
block in log quick on $wan proto udp from any port = 67 to 192.168.1.0/24 port = 68 label "block dhcp client out wan"

pass in quick on $wan proto udp from any port = 67 to any port = 68 label "allow dhcp client out wan"

# LAN/OPT spoof check (needs to be after DHCP because of broadcast addresses)
antispoof for ath0
antispoof for vr1

anchor "spoofing"
# Support for allow limiting of TCP connections by establishment rate
anchor "limitingesr"
table <virusprot>
block in quick from <virusprot> to any label "virusprot overload table"

# let out anything from the firewall host itself and decrypted IPsec traffic
pass out quick on $lan proto icmp keep state label "let out anything from firewall host itself"
pass out quick on $wan proto icmp keep state label "let out anything from firewall host itself"
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
# pass traffic from firewall -> out
anchor "firewallout"
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
pass out quick on ath0 all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
pass out quick on $enc0 keep state label "IPSEC internal host to host"

# let out anything from the firewall host itself and decrypted IPsec traffic
pass out quick on vr1 proto icmp keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"

# make sure the user cannot lock himself out of the webGUI or SSH
anchor "anti-lockout"
pass in quick on ath0 from any to 192.168.1.1 keep state label "anti-lockout web rule"

# SSH lockout
block in log proto tcp from <sshlockout> to any port 22 label "sshlockout"

anchor "ftpproxy"
anchor "pftpx/*"

# User-defined aliases follow
table <SurfboardHacker> {  64.18.148.67 209.250.234.170 72.20.13.45 38.101.208.186 74.86.227.138 208.67.212.207 208.69.230.124 }

# User-defined rules follow
pass in log quick on $wan inet proto icmp from any to 76.126.xxx.xxx keep state  label "USER_RULE: Allow Ping reply"
pass in log quick on $wan proto tcp from any to {  192.168.1.1 } port = 22 keep state ( max-src-states 3 max-src-conn-rate 2 /60, overload <virusprot> flush global  )  label "USER_RULE: NAT SSH -> pfsense"
pass in quick on $wan proto tcp from any to {  192.168.1.1 } port = 80 keep state  label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on $wan proto tcp from any to 76.126.xxx.xxx port = 1194 keep state  label "USER_RULE: OpenVPN -> pfsense"
pass in quick on $wan proto tcp from any to {  192.168.1.2 } port = 3389 keep state  label "USER_RULE: NAT RDP -> Laptop"
pass in quick on $wan proto { tcp udp } from any to {  192.168.1.2 } port = 45526 keep state  label "USER_RULE: NAT BT -> Laptop"
pass in quick on $wan proto tcp from any to 76.126.xxx.xxx port = 1723 keep state  label "USER_RULE: PPTP"
pass in quick on $wan proto tcp from any to 76.126.xxx.xxx port 4999 >< 5016 keep state  label "USER_RULE: IRC DCC"
pass in quick on $wan proto { tcp udp } from any to {  192.168.1.199 } port = 30771 keep state  label "USER_RULE: NAT BT -> Flora Laptop"
pass in log quick on $OPT1 reply-to (vr1 24.130.144.1) inet proto icmp from any to 24.130.xxx.xxx keep state  label "USER_RULE:  Allow Ping reply"
pass in log quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to {  192.168.1.1 } port = 22 keep state ( max-src-states 3 max-src-conn-rate 2 /60, overload <virusprot> flush global  )  label "USER_RULE: NAT SSH -> pfsense"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to {  192.168.1.1 } port = 80 keep state  label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to 24.130.xxx.xxx port = 1194 keep state  label "USER_RULE: OpenVPN -> pfsense"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to {  192.168.1.2 } port = 3389 keep state  label "USER_RULE: NAT RDP -> Laptop"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto { tcp udp } from any to {  192.168.1.2 } port = 45526 keep state  label "USER_RULE: NAT BT -> Laptop"
pass in quick on $OPT1  route-to { ( vr0 76.126.216.1 ) } proto udp from any to {  255.255.255.255 } keep state  label "USER_RULE:  Allow DHCP"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to {  192.168.1.199 } port = 30771 keep state  label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on $lan proto tcp from any to {  127.0.0.1 } keep state  label "USER_RULE"
pass in quick on $lan  route-to { ( vr1 24.130.144.1 ) } from 192.168.1.0/24 to {  24.130.144.1/21 } keep state  label "USER_RULE: WAN DMZ"
pass in quick on $lan  route-to { ( vr0 76.126.216.1 ) } from 192.168.1.0/24 to {  76.126.208.1/21 } keep state  label "USER_RULE: WAN2 DMZ"
pass in quick on $lan  route-to { ( vr0 76.126.216.1 ) } proto tcp from 192.168.1.0/24 to {  192.168.100.1 } port = 1337 keep state  label "USER_RULE: Modem 1 -> WAN1"
pass in quick on $lan  route-to { ( vr0 76.126.216.1 ) } proto tcp from 192.168.1.0/24 to {  192.168.100.1 } port = 23 keep state  label "USER_RULE: Modem 1 -> WAN1"
pass in quick on $lan  route-to { ( vr0 76.126.216.1 ) } proto tcp from 192.168.1.0/24 to {  192.168.100.1 } port = 1338 keep state  label "USER_RULE: Modem 2 -> WAN2"
pass in log quick on $lan  route-to { ( vr0 76.126.216.1 ) } from 192.168.1.0/24 to <SurfboardHacker> keep state  label "USER_RULE: SurfboardHacker -> WAN1"
pass in quick on $lan proto tcp from 192.168.1.0/24  to <vpns> port = 443 keep state  label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on $lan  route-to { ( vr0 76.126.216.1 ) } proto tcp from 192.168.1.0/24 to any port = 443 keep state  label "USER_RULE: HTTPS -> WAN2"
pass in log quick on $lan proto gre from 192.168.1.0/24  to <vpns> keep state  label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on $lan  route-to { ( vr1 24.130.144.1 ) } proto gre from 192.168.1.0/24 to any keep state  label "USER_RULE: GRE -> WAN2"
pass in log quick on $lan proto tcp from 192.168.1.0/24  to <vpns> port = 1723 keep state  label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on $lan  route-to { ( vr1 24.130.144.1 ) } proto tcp from 192.168.1.0/24 to any port = 1723 keep state  label "USER_RULE: PPTP -> WAN2"
pass in quick on $lan from 192.168.1.0/24  to <vpns> keep state  label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on $lan  route-to { ( vr0 76.126.216.1 ) , ( vr1 24.130.144.1 ) } round-robin from 192.168.1.0/24 to any keep state  label "USER_RULE: Load Balance"

# VPN Rules

pass in quick on ath0 inet proto tcp from any to $loopback port 8021 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on ath0 inet proto tcp from any to $loopback port 21 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr0 inet proto tcp from port 20 to (vr0) port > 49000 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
# enable ftp-proxy
pass in quick on vr1 inet proto tcp from any to $loopback port 8022 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr1 inet proto tcp from any to $loopback port 21 keep state label "FTP PROXY: Allow traffic to localhost"

# IMSpector
anchor "imspector"

# uPnPd
anchor "miniupnpd"

#---------------------------------------------------------------------------
# default rules (just to be sure)
#---------------------------------------------------------------------------
block in log quick all label "Default block all just to be sure."
block out log quick all label "Default block all just to be sure."

VMStat

15722049 forks, 2578542657 pages, average 164.01
152553 vforks, 110670354 pages, average 725.46
0 rforks, 0 pages, average 0.00
         Type InUse MemUse HighUse Requests  Size(s)
  NULLFS hash     1     1K       -        1  64
    pfs_nodes    20     3K       -       20  128
      ath_hal     6    27K       -        6  128,256,512,1024
         GEOM    76    10K       -      539  16,32,64,128,256,512,1024,4096
       athdev     3   457K       -        3  128
   CAM periph     1     1K       -        1  128
       isadev    21     2K       -       21  64
        pflog     1     1K       -        1  16
       pfsync     1     1K       -        1  512
         cdev    26     4K       -       26  128
        pf_if    32     7K       -       32  16,256,2048
        sigio     1     1K       -        2  32
    file desc    97    25K       - 15881689  16,256,512,1024
         kenv   118     8K       -      119  16,32,64,4096
       kqueue     4     3K       -     7345  256,1024
    proc-args    43     3K       - 14331334  16,32,64,128,256
       zombie     1     1K       - 15874557  128
      ithread    62     5K       -       62  16,64,128
       KTRACE   100    13K       -      100  128
       kbdmux     6     9K       -        6  16,128,256,2048,4096
       linker    84     4K       -      107  16,32,256
        lockf     2     1K       - 59133176  64
       ip6ndp    11     1K       -       13  64,128
         temp    38   215K       - 52625488  16,32,64,128,256,512,1024,2048,4096
       devbuf   691  2363K       -     2922  16,32,64,128,256,512,1024,2048,4096
   MD sectors     5    20K       -        5  4096
       module   432    28K       -      432  64,128
      MD disk     6     3K       -        6  16,2048
     mtx_pool     1     8K       -        1
      subproc   239   401K       - 15874795  256,4096
         proc     2     4K       -        2  2048
      session    29     4K       -    34392  128
         pgrp    34     3K       -    35137  64
         cred    31     4K       - 118144290  128
      uidinfo     7     1K       -      440  32,512
       plimit     9     3K       -   370903  256
    sysctltmp     0     0K       -   609380  16,32,128,256
    sysctloid  2226    67K       -     2226  16,32,64
       sysctl     0     0K       -  1908238  16,32,64
         umtx   170    11K       -      170  64
       bus-sc    51    38K       -     1854  16,32,64,128,256,512,1024,2048,4096
          bus   971    39K       -     3928  16,32,64,128,1024
      devstat     6    13K       -        6  16,4096
 eventhandler    65     4K       -       65  32,128
         kobj   254   508K       -      309  2048
      CAM XPT    10     1K       -       17  16,64,512
         rman   130     8K       -      572  16,64
CAM dev queue     1     1K       -        1  64
         sbuf     0     0K       -      362  16,32,64,128,256,512,1024,2048,4096
 sleep queues   171     6K       -      171  32
    CAM queue     3     1K       -        3  16
      CAM SIM     1     1K       -        1  64
    taskqueue    11     1K       -       11  16,128
   turnstiles   171    11K       -      171  64
       Unitno     8     1K       - 19072568  16,64
          iov     0     0K       -  2925303  16,32,64,128,256,512,1024,2048,4096
     ioctlops     0     0K       - 16882998  16,32,64,128,256,512,1024,2048,4096
          msg     4    53K       -        4  1024,4096
          sem     4     7K       -        4  512,1024,4096
          shm     1    12K       -        1
         ttys   393    71K       -    12468  128,1024
         ptys     5     1K       -        5  128
     mbextcnt     0     0K       -     7389  16
     mbuf_tag     1     1K       - 338677955  16,32
          pcb    30     5K       -    25872  16,32,64,2048
       soname    17     2K       - 19854436  16,32,128
  ata_generic     2     2K       -        2  1024
   BIO buffer    32    64K       -     2938  2048
     vfscache     1   256K       -        1
cluster_save buffer     0     0K       -    73645  32,64
     VFS hash     1   128K       -        1
       vnodes     1     1K       -        1  128
  vnodemarker     0     0K       -   599565  512
        mount    46     2K       -      105  16,32,64,128,2048
    ad_driver     2     1K       -        2  32
          BPF    31   155K       -      462  16,64,128,256,512,2048,4096
  ether_multi    86     4K       -      108  16,32,64
       ifaddr   322    28K       -      342  16,32,64,256,512,2048
        ifnet     8     8K       -        8  256,1024
        clone    12    48K       -       12  4096
       arpcom     3     1K       -        3  16
           lo     1     1K       -        1  16
      ata_dma     2     1K       -        2  128
    ar_driver     0     0K       -       10  512,2048
     routetbl   205    24K       -   449209  16,32,64,128,256,512
    80211node     3     9K       -    27415  512,4096
netgraph_node     3     1K       -        4  256
     netgraph     3     1K       -        3  32
netgraph_sock     0     0K       -        1  64
         igmp     1     1K       -        1  16
     in_multi     6     1K       -        9  32
  Export Host     2     2K       -        2  1024
  ip_moptions     2     1K       -        2  128
    hostcache     1    24K       -        1
     syncache     1     8K       -        1
    in6_multi    52     2K       -       52  16,32,64
  inpcbpolicy    30     1K       -  4608228  16
  ipsecpolicy    60    15K       -  9281836  256
   NFS daemon     1     8K       -        1
       crypto     3     1K       -        3  128,512
        xform     0     0K       -     7724  16,32
          agp     2   257K       -        2  16
     p1003.1b     1     1K       -        1  16
       newblk     1     1K       -        1  256
     inodedep     1   128K       -        1
      pagedep     1    16K       -        1
  UFS dirhash    33     6K       -       33  16,32,512
    UFS mount     6    13K       -        6  256,2048,4096
      UMAHash     2     9K       -        7  256,512,1024,2048,4096
    VM pgdata     1    32K       -        1
       USBdev    17     7K       -       17  16,128,256,512
          USB    64     6K       -       64  16,32,64,128,256
     atkbddev     2     1K       -        2  32
       DEVFS1   107    27K       -      107  256
       DEVFS3   232    29K       -      233  128
         spkr     0     0K       -        5  512
       DEVFS2   107     2K       -      107  16
     nexusdev     3     1K       -        3  16
        DEVFS    28     1K       -       29  16,128
       acpica  1591    84K       -    20047  16,32,64,128,256,512,1024
     acpitask     0     0K       -        1  32
     PCI Link     8     1K       -        8  64,128
      acpisem    18     2K       -       18  64
      acpidev    48     2K       -       48  32
ITEM                     SIZE     LIMIT      USED      FREE  REQUESTS  FAILURES

UMA Kegs:                 140,        0,       88,        8,       88,        0
UMA Zones:                120,        0,       88,        2,       88,        0
UMA Slabs:                 64,        0,      513,       18,     2576,        0
UMA RCntSlabs:            104,        0,     1483,       34,     1483,        0
UMA Hash:                 128,        0,        5,       25,        7,        0
16 Bucket:                 76,        0,       37,       13,       37,        0
32 Bucket:                140,        0,       52,        4,       52,        0
64 Bucket:                268,        0,       49,        7,       49,        0
128 Bucket:               524,        0,      408,        5,      408,   274852
VM OBJECT:                132,        0,     2306,     1493, 417874222,        0
MAP:                      192,        0,        7,       33,        7,        0
KMAP ENTRY:                68,    30968,       17,      151,     9092,        0
MAP ENTRY:                 68,        0,     1633,     5367, 1397900359,        0
PV ENTRY:                  24,   904220,    36715,    20125, 9813134242,        0
DP fakepg:                 72,        0,        0,        0,        0,        0
mt_zone:                   64,        0,      238,       57,      238,        0
16:                        16,        0,     2407,      232, 48814935,        0
32:                        32,        0,     2144,      907, 342356308,        0
64:                        64,        0,     2939,       70, 86680625,        0
128:                      128,        0,     1225,      395, 139516932,        0
256:                      256,        0,      533,      112, 36161943,        0
512:                      512,        0,       58,       14,   683837,        0
1024:                    1024,        0,       54,       90, 28280034,        0
2048:                    2048,        0,      322,       68,  6690497,        0
4096:                    4096,        0,      146,       53, 18189421,        0
Files:                     72,        0,      231,      140, 184913340,        0
PROC:                     536,        0,       90,       57, 15874646,        0
THREAD:                   376,        0,      153,       17,  9536432,        0
KSEGRP:                    88,        0,      148,       52,      166,        0
UPCALL:                    44,        0,        2,      154,       38,        0
VMSPACE:                  296,        0,       46,       58, 15871468,        0
mbuf_packet:              256,        0,     2002,      686, 255468017,        0
mbuf:                     256,        0,      136,     1151, 671295023,        0
mbuf_cluster:            2048,    16576,     2818,      148, 74521309,        0
mbuf_jumbo_pagesize:     4096,        0,        0,        0,        0,        0
mbuf_jumbo_9k:           9216,        0,        0,        0,        0,        0
mbuf_jumbo_16k:         16384,        0,        0,        0,        0,        0
ACL UMA zone:             388,        0,        0,        0,        0,        0
NetGraph items:            36,      546,        0,      156,        2,        0
g_bio:                    132,        0,        0,      406, 32929048,        0
cryptop:                   60,        0,        0,        0,        0,        0
cryptodesc:                56,        0,        0,        0,        0,        0
ata_request:              204,        0,        0,      114,  8169847,        0
ata_composite:            196,        0,        0,        0,        0,        0
VNODE:                    272,        0,     1570,       26,    99759,        0
VNODEPOLL:                 76,        0,        0,        0,        0,        0
NAMEI:                   1024,        0,        0,       12, 350809810,        0
S VFS Cache:               68,        0,     1436,       20,  1135915,        0
L VFS Cache:              291,        0,       12,       14,       18,        0
NFSMOUNT:                 480,        0,        0,        0,        0,        0
NFSNODE:                  460,        0,        0,        0,        0,        0
DIRHASH:                 1024,        0,       24,        4,       24,        0
PIPE:                     408,        0,        8,       46,  4066566,        0
KNOTE:                     68,        0,        5,      107,  7386362,        0
bridge_rtnode:             32,        0,        0,        0,        0,        0
socket:                   356,     7821,       66,       44,  4761966,        0
ipq:                       32,      565,        0,        0,        0,        0
udpcb:                    180,     7832,       12,       32,    46700,        0
inpcb:                    180,     7832,       17,       71,    36240,        0
tcpcb:                    472,     7816,       17,       15,    36240,        0
tcptw:                     48,     1638,        0,      156,    27102,        0
syncache:                 100,    15366,        0,       78,    33000,        0
hostcache:                 76,    15400,        1,       99,      270,        0
tcpreass:                  20,     1183,        0,      169,    34280,        0
sackhole:                  20,        0,        0,      169,     3608,        0
ripcb:                    180,     7832,        1,       43,  4525288,        0
unpcb:                    140,     7840,       33,       51,   143952,        0
rtentry:                  132,        0,      156,       47,     2109,        0
pfsrctrpl:                100,    10023,        0,       78,      371,        0
pfrulepl:                 604,        0,      155,      169,  2247803,        0
pfstatepl:                260,   100005,     3046,    16829, 18143809,        0
pfaltqpl:                 128,        0,        0,        0,        0,        0
pfpooladdrpl:              68,        0,       79,      145,  4431380,        0
pfrktable:               1240,        0,       10,        5,     1078,        0
pfrkentry:                156,        0,       58,       42,      970,        0
pfrkentry2:               156,        0,        0,       50,      130,        0
pffrent:                   16,     5075,        0,      203,     1949,        0
pffrag:                    48,        0,        0,      156,     1069,        0
pffrcache:                 48,    10062,        0,        0,        0,        0
pffrcent:                  12,    50141,        0,        0,        0,        0
pfstatescrub:              28,        0,        0,        0,        0,        0
pfiaddrpl:                 92,        0,        7,       77,     1362,        0
pfospfen:                 108,        0,      348,       48,    68208,        0
pfosfp:                    28,        0,      208,      173,    40768,        0
SWAPMETA:                 276,    61250,        0,        0,        0,        0
Mountpoints:              664,        0,        4,        8,        4,        0
FFS inode:                132,        0,     1426,       24,    99509,        0
FFS1 dinode:              128,        0,        0,        0,        0,        0
FFS2 dinode:              256,        0,     1426,       29,    99509,        0
md0:                      512,        0,      299,       13,      299,        0

434614524 cpu context switches
1918293679 device interrupts
 90521136 software interrupts
1526630514 traps
 92368919 system calls
       44 kernel threads created
 15722049  fork() calls
   152553 vfork() calls
        0 rfork() calls
        0 swap pager pageins
        0 swap pager pages paged in
        0 swap pager pageouts
        0 swap pager pages paged out
      504 vnode pager pageins
     3405 vnode pager pages paged in
  1272217 vnode pager pageouts
  1289905 vnode pager pages paged out
        0 page daemon wakeups
        0 pages examined by the page daemon
      237 pages reactivated
687144345 copy-on-write faults
   431891 copy-on-write optimized faults
534787957 zero fill pages zeroed
533927006 zero fill pages prezeroed
     2088 intransit blocking page faults
1474056477 total VM faults taken
        0 pages affected by kernel thread creation
2578542657 pages affected by  fork()
110670354 pages affected by vfork()
        0 pages affected by rfork()
1323034350 pages freed
        0 pages freed by daemon
970636950 pages freed by exiting processes
    18107 pages active
     9165 pages inactive
        0 pages in VM cache
    21116 pages wired down
    73946 pages free
     4096 bytes per page
840162628 total name lookups
          cache hits (89% pos + 10% neg) system 0% per-directory
          deletions 0%, falsehits 0%, toolong 0%
interrupt                          total       rate
???                                    0          0
irq0: clk                     3709927427       1000
stray irq0                             0          0
irq1: atkbd0                           0          0
stray irq1                             0          0
irq3:                                  0          0
stray irq3                             0          0
irq4: sio0                             0          0
stray irq4                             0          0
irq5: uhci2                            0          0
stray irq5                             0          0
irq6:                                  0          0
stray irq6                             0          0
irq7:                                  0          0
stray irq7                             0          0
irq8: rtc                      474777519        127
stray irq8                             0          0
irq9: acpi0                            0          0
stray irq9                             0          0
irq10: vr1 uhci0               177689875         47
stray irq10                            0          0
irq11: ath0 uhci1              281045130         75
stray irq11                            0          0
irq12: vr0 ehci0               156410041         42
stray irq12                            0          0
irq13:                                 0          0
stray irq13                            0          0
irq14: ata0                     16969122          4
stray irq14                            0          0
irq15: ata1                            0          0
stray irq15                            0          0
Total                         4816819114       1298

config.xml

<?xml version="1.0"?>
<pfsense>
    <version>4.0</version>
    <lastchange/>
    <theme>nervecenter</theme>
    <sysctl>
        <item>
            <desc>Set the ephemeral port range to be lower.</desc>
            <tunable>net.inet.ip.portrange.first</tunable>
            <value>1024</value>
        </item>
        <item>
            <desc>Drop packets to closed TCP ports without returning a RST</desc>
            <tunable>net.inet.tcp.blackhole</tunable>
            <value>2</value>
        </item>
        <item>
            <desc>Do not send ICMP port unreachable messages for closed UDP ports</desc>
            <tunable>net.inet.udp.blackhole</tunable>
            <value>1</value>
        </item>
        <item>
            <desc>Randomize the ID field in IP packets (default is 0: sequential IP IDs)</desc>
            <tunable>net.inet.ip.random_id</tunable>
            <value>1</value>
        </item>
        <item>
            <desc>Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)</desc>
            <tunable>net.inet.tcp.drop_synfin</tunable>
            <value>1</value>
        </item>
        <item>
            <desc>Disable sending IPv4 redirects</desc>
            <tunable>net.inet.ip.redirect</tunable>
            <value>0</value>
        </item>
        <item>
            <desc>Disable sending IPv6 redirects</desc>
            <tunable>net.inet6.ip6.redirect</tunable>
            <value>0</value>
        </item>
        <item>
            <desc>Generate SYN cookies for outbound SYN-ACK packets</desc>
            <tunable>net.inet.tcp.syncookies</tunable>
            <value>1</value>
        </item>
        <item>
            <desc>Maximum incoming/outgoing TCP datagram size (receive)</desc>
            <tunable>net.inet.tcp.recvspace</tunable>
            <value>65228</value>
        </item>
        <item>
            <desc>Maximum incoming/outgoing TCP datagram size (send)</desc>
            <tunable>net.inet.tcp.sendspace</tunable>
            <value>65228</value>
        </item>
        <item>
            <desc>IP Fastforwarding</desc>
            <tunable>net.inet.ip.fastforwarding</tunable>
            <value>1</value>
        </item>
        <item>
            <desc>Do not delay ACK to try and piggyback it onto a data packet</desc>
            <tunable>net.inet.tcp.delayed_ack</tunable>
            <value>0</value>
        </item>
        <item>
            <desc>Maximum outgoing UDP datagram size</desc>
            <tunable>net.inet.udp.maxdgram</tunable>
            <value>57344</value>
        </item>
        <item>
            <desc>Handling of non-IP packets which are not passed to pfil (see if_bridge(4))</desc>
            <tunable>net.link.bridge.pfil_onlyip</tunable>
            <value>0</value>
        </item>
        <item>
            <desc>Allow unprivileged access to tap(4) device nodes</desc>
            <tunable>net.link.tap.user_open</tunable>
            <value>1</value>
        </item>
        <item>
            <desc>Verbosity of the rndtest driver (0: do not display results on console)</desc>
            <tunable>kern.rndtest.verbose</tunable>
            <value>0</value>
        </item>
        <item>
            <desc>Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())</desc>
            <tunable>kern.randompid</tunable>
            <value>347</value>
        </item>
        <item>
            <desc>Maximum size of the IP input queue</desc>
            <tunable>net.inet.ip.intr_queue_maxlen</tunable>
            <value>1000</value>
        </item>
    </sysctl>
    <system>
        <optimization>normal</optimization>
        <schedulertype>priq</schedulertype>
        <hostname>via</hostname>
        <domain>local</domain>
        <timezone>America/Vancouver</timezone>
        <time-update-interval/>
        <timeservers>pool.ntp.org</timeservers>
        <webgui>
            <protocol>http</protocol>
            <auth_method>session</auth_method>
            <backing_method>htpasswd</backing_method>
            <certificate/>
            <private-key/>
            <port/>
        </webgui>
        <disablenatreflection>yes</disablenatreflection>
        <group>
            <name>admins</name>
            <description>System Administrators</description>
            <scope>system</scope>
            <pages>ANY</pages>
            <home>index.php</home>
            <gid>110</gid>
        </group>
        <user>
            <name>admin</name>
            <fullname>System Administrator</fullname>
            <scope>system</scope>
            <groupname>admins</groupname>
            <password/>
            <uid>0</uid>
            <priv>
                <id>lockwc</id>
                <name>Lock webConfigurator</name>
                <descr>Indicates whether this user will lock access to the webConfigurator for other users.</descr>
            </priv>
            <priv>
                <id>lock-ipages</id>
                <name>Lock individual pages</name>
                <descr>Indicates whether this user will lock individual HTML pages after having accessed a particular page (the lock will be freed if the user leaves or saves the page form).</descr>
            </priv>
            <priv>
                <id>hasshell</id>
                <name>Has shell access</name>
                <descr>Indicates whether this user is able to login for example via SSH.</descr>
            </priv>
            <priv>
                <id>copyfiles</id>
                <name>Is allowed to copy files</name>
                <descr>Indicates whether this user is allowed to copy files onto the  appliance via SCP/SFTP. If you are going to use this privilege, you must install scponly on the appliance (Hint: pkg_add -r scponly).</descr>
            </priv>
            <priv>
                <id>isroot</id>
                <name>Is root user</name>
                <descr>This user is associated with the UNIX root user (you should associate this privilege only with one single user).</descr>
            </priv>
        </user>
        <nextuid>111</nextuid>
        <nextgid>111</nextgid>
        <ssh>
            <authorizedkeys/>
            <port/>
        </ssh>
        <enablesshd>yes</enablesshd>
        <maximumstates>100000</maximumstates>
        <shapertype/>
        <sharednet/>
        <shellcmd>sysctl dev.ath.0.rxantenna=1;sysctl dev.ath.0.txantenna=1;sysctl dev.ath.0.diversity=0</shellcmd>
        <afterfilterchangeshellcmd>sysctl dev.ath.0.rxantenna=1; sysctl dev.ath.0.txantenna=1;sysctl dev.ath.0.diversity=0</afterfilterchangeshellcmd>
        <username>admin</username>
        <password>xxxxx</password>
        <dnsserver>4.2.2.2</dnsserver>
        <dnsserver>208.67.220.220</dnsserver>
    </system>
    <interfaces>
        <lan>
            <if>ath0</if>
            <wireless>
                <standard>11a</standard>
                <mode>hostap</mode>
                <protmode>off</protmode>
                <ssid>via-pfsense</ssid>
                <channel>153</channel>
                <authmode/>
                <txpower>99</txpower>
                <distance/>
                <wpa>
                    <macaddr_acl/>
                    <auth_algs>1</auth_algs>
                    <wpa_mode>3</wpa_mode>
                    <wpa_key_mgmt>WPA-PSK</wpa_key_mgmt>
                    <wpa_pairwise>CCMP</wpa_pairwise>
                    <wpa_group_rekey>60</wpa_group_rekey>
                    <wpa_gmk_rekey>3600</wpa_gmk_rekey>
                    <passphrase>passphrase</passphrase>
                    <ext_wpa_sw/>
                    <enable/>
                </wpa>
                <apbridge>
                    <enable/>
                </apbridge>
                <turbo/>
                <wep/>
            </wireless>
            <bridge/>
            <ipaddr>192.168.1.1</ipaddr>
            <subnet>24</subnet>
            <gateway/>
            <spoofmac/>
            <mtu/>
            <enable/>
        </lan>
        <wan>
            <if>vr0</if>
            <mtu/>
            <media/>
            <mediaopt/>
            <bandwidth>100</bandwidth>
            <bandwidthtype>Mb</bandwidthtype>
            <alias-address/>
            <alias-subnet>32</alias-subnet>
            <spoofmac>00:0e:8e:15:90:0e</spoofmac>
            <disableftpproxy/>
            <ipaddr>dhcp</ipaddr>
            <dhcphostname/>
        </wan>
        <opt1>
            <descr>OPT1</descr>
            <if>vr1</if>
            <ipaddr>dhcp</ipaddr>
            <subnet>24</subnet>
            <media/>
            <mediaopt/>
            <bandwidth>100</bandwidth>
            <bandwidthtype>Mb</bandwidthtype>
            <bridge/>
            <alias-address/>
            <alias-subnet>32</alias-subnet>
            <spoofmac>00:0c:8e:1a:13:0b</spoofmac>
            <mtu/>
            <enable/>
            <disableftpproxy/>
            <dhcphostname/>
        </opt1>
    </interfaces>
    <staticroutes/>
    <pppoe>
        <username/>
        <password/>
        <provider/>
    </pppoe>
    <pptp>
        <username/>
        <password/>
        <local/>
        <subnet/>
        <remote/>
    </pptp>
    <bigpond/>
    <dyndns>
        <type>dyndns</type>
        <username>goldserve</username>
        <password>xxxxx</password>
        <host>gs-pfsense.dyndns.org</host>
        <mx/>
        <enable/>
    </dyndns>
    <dhcpd>
        <lan>
            <enable/>
            <range>
                <from>192.168.1.100</from>
                <to>192.168.1.199</to>
            </range>
            <staticmap>
                <mac>00:0e:8e:15:95:0f</mac>
                <ipaddr>192.168.1.2</ipaddr>
                <hostname>tge</hostname>
                <descr/>
            </staticmap>
            <staticmap>
                <mac>00:17:fa:77:f0:71</mac>
                <ipaddr>192.168.1.4</ipaddr>
                <hostname>xbx</hostname>
                <descr/>
            </staticmap>
            <defaultleasetime/>
            <maxleasetime/>
            <netmask/>
            <failover_peerip/>
            <gateway/>
            <ddnsdomain/>
            <next-server/>
            <filename/>
        </lan>
        <opt1>
            <range>
                <from>192.168.20.100</from>
                <to>192.168.20.199</to>
            </range>
            <defaultleasetime/>
            <maxleasetime/>
            <netmask/>
            <failover_peerip/>
            <gateway/>
            <domain/>
            <domainsearchlist/>
            <ddnsdomain/>
            <tftp/>
            <ldap/>
            <next-server/>
            <filename/>
            <rootpath/>
        </opt1>
    </dhcpd>
    <pptpd>
        <redir/>
        <localip>192.168.1.254</localip>
        <remoteip>192.168.1.192</remoteip>
        <radius>
            <server>
                <ip/>
                <port/>
                <acctport>b1kujk79</acctport>
                <secret>kevin99</secret>
            </server>
            <server2>
                <ip/>
                <port/>
                <acctport/>
                <secret2/>
            </server2>
            <nasip/>
            <acct_update/>
        </radius>
        <wins/>
        <n_pptp_units>16</n_pptp_units>
        <pptp_subnet>28</pptp_subnet>
        <req128/>
        <user>
            <name>goldserve</name>
            <ip>192.168.1.192</ip>
            <password>xxxxx</password>
        </user>
    </pptpd>
    <ovpn/>
    <dnsmasq>
        <enable/>
        <regdhcp/>
        <regdhcpstatic/>
    </dnsmasq>
    <snmpd>
        <syslocation/>
        <syscontact/>
        <rocommunity>xxxxx</rocommunity>
    </snmpd>
    <diag>
        <ipv6nat/>
    </diag>
    <bridge/>
    <syslog>
        <reverse/>
        <nentries>400</nentries>
    </syslog>
    <nat>
        <ipsecpassthru>
            <enable/>
        </ipsecpassthru>
        <rule>
            <protocol>tcp</protocol>
            <external-port>22</external-port>
            <target>192.168.1.1</target>
            <local-port>22</local-port>
            <interface>wan</interface>
            <descr>SSH -&gt; pfsense</descr>
        </rule>
        <rule>
            <protocol>tcp</protocol>
            <external-port>22</external-port>
            <target>192.168.1.1</target>
            <local-port>22</local-port>
            <interface>opt1</interface>
            <descr>SSH -&gt; pfsense</descr>
        </rule>
        <rule>
            <protocol>tcp</protocol>
            <external-port>8080</external-port>
            <target>192.168.1.1</target>
            <local-port>80</local-port>
            <interface>wan</interface>
            <descr>Web Config -&gt; pfsense</descr>
        </rule>
        <rule>
            <protocol>tcp</protocol>
            <external-port>8080</external-port>
            <target>192.168.1.1</target>
            <local-port>80</local-port>
            <interface>opt1</interface>
            <descr>Web Config -&gt; pfsense</descr>
        </rule>
        <rule>
            <protocol>tcp</protocol>
            <external-port>3389</external-port>
            <target>192.168.1.2</target>
            <local-port>3389</local-port>
            <interface>wan</interface>
            <descr>RDP -&gt; Laptop</descr>
        </rule>
        <rule>
            <protocol>tcp</protocol>
            <external-port>3389</external-port>
            <target>192.168.1.2</target>
            <local-port>3389</local-port>
            <interface>opt1</interface>
            <descr>RDP -&gt; Laptop</descr>
        </rule>
        <rule>
            <protocol>tcp/udp</protocol>
            <external-port>45526</external-port>
            <target>192.168.1.2</target>
            <local-port>45526</local-port>
            <interface>wan</interface>
            <descr>BT -&gt; Laptop</descr>
        </rule>
        <rule>
            <protocol>tcp/udp</protocol>
            <external-port>45526</external-port>
            <target>192.168.1.2</target>
            <local-port>45526</local-port>
            <interface>opt1</interface>
            <descr>BT -&gt; Laptop</descr>
        </rule>
        <rule>
            <protocol>tcp</protocol>
            <external-port>30771</external-port>
            <target>192.168.1.199</target>
            <local-port>30771</local-port>
            <interface>wan</interface>
            <descr>BT -&gt; Flora Laptop</descr>
        </rule>
        <rule>
            <protocol>tcp</protocol>
            <external-port>30771</external-port>
            <target>192.168.1.199</target>
            <local-port>30771</local-port>
            <interface>opt1</interface>
            <descr>BT -&gt; Flora Laptop</descr>
        </rule>
        <advancedoutbound>
            <rule>
                <source>
                    <network>192.168.100.0/24</network>
                </source>
                <sourceport/>
                <descr>Default NAT</descr>
                <target/>
                <interface>wan</interface>
                <destination>
                    <address>192.168.100.0/24</address>
                    <not/>
                </destination>
                <natport/>
                <dstport/>
            </rule>
            <rule>
                <source>
                    <network>192.168.100.0/24</network>
                </source>
                <sourceport/>
                <descr>NAT</descr>
                <target>192.168.100.2</target>
                <interface>wan</interface>
                <destination>
                    <address>192.168.100.0/24</address>
                </destination>
                <natport/>
                <dstport/>
            </rule>
        </advancedoutbound>
    </nat>
    <filter>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>icmp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <network>wanip</network>
            </destination>
            <log/>
            <descr>Allow Ping reply</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states>3</max-src-states>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <max-src-conn-rate>2</max-src-conn-rate>
            <max-src-conn-rates>60</max-src-conn-rates>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.1</address>
                <port>22</port>
            </destination>
            <log/>
            <descr>NAT SSH -&gt; pfsense</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.1</address>
                <port>80</port>
            </destination>
            <descr>NAT Web Config -&gt; pfsense</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <network>wanip</network>
                <port>1194</port>
            </destination>
            <descr>OpenVPN -&gt; pfsense</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.2</address>
                <port>3389</port>
            </destination>
            <descr>NAT RDP -&gt; Laptop</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp/udp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.2</address>
                <port>45526</port>
            </destination>
            <descr>NAT BT -&gt; Laptop</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <network>wanip</network>
                <port>1723</port>
            </destination>
            <descr>PPTP</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <network>wanip</network>
                <port>5000-5015</port>
            </destination>
            <descr>IRC DCC</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>wan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp/udp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.199</address>
                <port>30771</port>
            </destination>
            <descr>NAT BT -&gt; Flora Laptop</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>opt1</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>icmp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <network>opt1ip</network>
            </destination>
            <log/>
            <descr> Allow Ping reply</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>opt1</interface>
            <max-src-nodes/>
            <max-src-states>3</max-src-states>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <max-src-conn-rate>2</max-src-conn-rate>
            <max-src-conn-rates>60</max-src-conn-rates>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.1</address>
                <port>22</port>
            </destination>
            <log/>
            <descr>NAT SSH -&gt; pfsense</descr>
        </rule>
        <rule>
            <interface>opt1</interface>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.1</address>
                <port>80</port>
            </destination>
            <descr>NAT Web Config -&gt; pfsense</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>opt1</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <network>opt1ip</network>
                <port>1194</port>
            </destination>
            <descr>OpenVPN -&gt; pfsense</descr>
        </rule>
        <rule>
            <interface>opt1</interface>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.2</address>
                <port>3389</port>
            </destination>
            <descr>NAT RDP -&gt; Laptop</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>opt1</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp/udp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.2</address>
                <port>45526</port>
            </destination>
            <descr>NAT BT -&gt; Laptop</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>opt1</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>udp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>255.255.255.255</address>
            </destination>
            <descr> Allow DHCP</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <interface>opt1</interface>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.199</address>
                <port>30771</port>
            </destination>
            <descr>NAT BT -&gt; Flora Laptop</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>127.0.0.1</address>
            </destination>
            <descr/>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <address>24.130.144.1/21</address>
            </destination>
            <descr>WAN DMZ</descr>
            <gateway>WAN1FailesToWAN2</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <address>76.126.208.1/21</address>
            </destination>
            <descr>WAN2 DMZ</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <address>192.168.100.1</address>
                <port>1337</port>
            </destination>
            <descr>Modem 1 -&gt; WAN1</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <address>192.168.100.1</address>
                <port>23</port>
            </destination>
            <descr>Modem 1 -&gt; WAN1</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <address>192.168.100.1</address>
                <port>1338</port>
            </destination>
            <descr>Modem 2 -&gt; WAN2</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <address>SurfboardHacker</address>
            </destination>
            <log/>
            <descr>SurfboardHacker -&gt; WAN1</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <any/>
                <port>443</port>
            </destination>
            <descr>HTTPS -&gt; WAN2</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>gre</protocol>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <any/>
            </destination>
            <log/>
            <descr>GRE -&gt; WAN2</descr>
            <gateway>WAN1FailesToWAN2</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <any/>
                <port>1723</port>
            </destination>
            <log/>
            <descr>PPTP -&gt; WAN2</descr>
            <gateway>WAN1FailesToWAN2</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <address>140.99.99.130</address>
            </destination>
            <disabled/>
            <log/>
            <descr>Easynews use WAN</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <protocol>tcp</protocol>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <address>208.49.0.0/16</address>
            </destination>
            <disabled/>
            <log/>
            <descr>Usenetserver use WAN2</descr>
            <gateway>WAN2FailesToWAN1</gateway>
        </rule>
        <rule>
            <type>pass</type>
            <interface>lan</interface>
            <max-src-nodes/>
            <max-src-states/>
            <statetimeout/>
            <statetype>keep state</statetype>
            <os/>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <any/>
            </destination>
            <descr>Load Balance</descr>
            <gateway>LoadBalance</gateway>
        </rule>
        <bypassstaticroutes/>
    </filter>
    <shaper>
        <itemsshaped>0</itemsshaped>
    </shaper>
    <ipsec>
        <preferredoldsa/>
    </ipsec>
    <aliases>
        <alias>
            <name>SurfboardHacker</name>
            <address>64.18.148.67 209.250.234.170 72.20.13.45 38.101.208.186 74.86.227.138 208.67.212.207 208.69.230.124</address>
            <descr>SurfboardHacker websites</descr>
            <type>host</type>
            <detail>Entry added Sun, 13 Jan 2008 04:22:45 -0800||Entry added Sun, 13 Jan 2008 04:22:45 -0800||Usbjtag.com||Cable Hack||UK Underground||community.intuit.ca||theoryshare.com||</detail>
        </alias>
    </aliases>
    <proxyarp/>
    <wol/>
    <cron>
        <item>
            <minute>0</minute>
            <hour>*</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/bin/nice -n20 newsyslog</command>
        </item>
        <item>
            <minute>1,31</minute>
            <hour>0-5</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/bin/nice -n20 adjkerntz -a</command>
        </item>
        <item>
            <minute>1</minute>
            <hour>3</hour>
            <mday>1</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
        </item>
        <item>
            <minute>*/60</minute>
            <hour>*</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
        </item>
        <item>
            <minute>1</minute>
            <hour>1</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
        </item>
        <item>
            <minute>*/60</minute>
            <hour>*</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
        </item>
        <item>
            <minute>*/60</minute>
            <hour>*</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 3600 snort2c</command>
        </item>
        <item>
            <minute>*/5</minute>
            <hour>*</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/local/bin/checkreload.sh</command>
        </item>
        <item>
            <minute>*/5</minute>
            <hour>*</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/etc/ping_hosts.sh</command>
        </item>
        <item>
            <minute>*/140</minute>
            <hour>*</hour>
            <mday>*</mday>
            <month>*</month>
            <wday>*</wday>
            <who>root</who>
            <command>/usr/local/sbin/reset_slbd.sh</command>
        </item>
    </cron>
    <installedpackages>
        <miniupnpd>
            <config>
                <enable>on</enable>
                <iface_array>lan</iface_array>
                <download/>
                <upload/>
                <overridewanip/>
                <logpackets/>
                <sysuptime>on</sysuptime>
                <permdefault/>
                <permuser1>allow 1024-65535 192.168.1.0/24 1024-65535</permuser1>
                <permuser2/>
                <permuser3/>
                <permuser4/>
            </config>
        </miniupnpd>
        <package/>
        <package>
            <name>nmap</name>
            <maintainer>billm@pfsense.org</maintainer>
            <descr>NMap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), version detection (determine what application/service is runing on a port), and TCP/IP fingerprinting (remote host OS or device identification). It also offers flexible target and port specification, decoy/stealth scanning, SunRPC scanning, and more. Most Unix and Windows platforms are supported in both GUI and command line modes. Several popular handheld devices are also supported, including the Sharp Zaurus and the iPAQ.</descr>
            <category>Security</category>
            <depends_on_package_base_url>http://www.pfsense.com/packages/All/</depends_on_package_base_url>
            <depends_on_package>nmap-4.20_1.tbz</depends_on_package>
            <config_file>http://www.pfsense.com/packages/config/nmap/nmap.xml</config_file>
            <version>4.20_1</version>
            <status>Stable</status>
            <required_version>1.0</required_version>
            <configurationfile>nmap.xml</configurationfile>
        </package>
        <package>
            <name>Dashboard</name>
            <descr>Adds pfSense dashboard that will be included with 1.3. This requires 1.2-BETA-2 or newer. WARNING!  Cannot be deinstalled.</descr>
            <category>System</category>
            <config_file>http://www.pfsense.com/packages/config/dashboard/dashboard.xml</config_file>
            <version>0.6.2</version>
            <status>BETA</status>
            <required_version>1.2-BETA-2</required_version>
            <configurationfile>dashboard.xml</configurationfile>
        </package>
        <menu>
            <name>Shell</name>
            <section>Diagnostics</section>
            <configfile>sshterm.xml</configfile>
            <url>/diag_shell.php</url>
        </menu>
        <menu>
            <name>NMap</name>
            <tooltiptext>NMap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), version detection (determine what application/service is runing on a port), and TCP/IP fingerprinting (remote host OS or device identification). It also offers flexible target and port specification, decoy/stealth scanning, SunRPC scanning, and more. Most Unix and Windows platforms are supported in both GUI and command line modes. Several popular handheld devices are also supported, including the Sharp Zaurus and the iPAQ.</tooltiptext>
            <section>Diagnostics</section>
            <configfile>nmap.xml</configfile>
        </menu>
        <service/>
    </installedpackages>
    <revision>
        <description>/wizard.php made unknown change</description>
        <time>1207804855</time>
    </revision>
    <rrd>
        <category>system</category>
        <style>absolute</style>
        <enable/>
    </rrd>
    <widgets>
        <sequence>system_information-div:col1:show,carp_status-div:col1:close,installed_packages-div:col1:close,interfaces-div:col1:show,interface_statistics-div:col1:show,log-div:col1:show,ipsec-div:col2:close,cpu_graphs-div:col2:show,services_status-div:col2:close,traffic_graphs-div:col2:show,load_balancer_status-div:col2:show</sequence>
        <traffic_graphs-config>WAN_graph-config:show,LAN_graph-config:show,OPT1_graph-config:show,refreshInterval=1</traffic_graphs-config>
    </widgets>
    <gateways/>
    <dnsupdate>
        <host/>
        <ttl>60</ttl>
        <keyname/>
        <keytype>zone</keytype>
        <keydata/>
    </dnsupdate>
    <load_balancer>
        <lbpool>
            <type>gateway</type>
            <behaviour>balance</behaviour>
            <monitorip>4.2.2.3</monitorip>
            <name>LoadBalance</name>
            <desc>Load Balance</desc>
            <port/>
            <servers>wan|4.2.2.2</servers>
            <servers>opt1|4.2.2.3</servers>
            <serversdisabled/>
            <monitor/>
        </lbpool>
        <lbpool>
            <type>gateway</type>
            <behaviour>failover</behaviour>
            <monitorip>4.2.2.2</monitorip>
            <name>WAN1FailesToWAN2</name>
            <desc>WAN1 Fail to WAN2</desc>
            <port/>
            <servers>opt1|4.2.2.3</servers>
            <servers>wan|4.2.2.2</servers>
            <serversdisabled/>
            <monitor/>
        </lbpool>
        <lbpool>
            <type>gateway</type>
            <behaviour>failover</behaviour>
            <monitorip>4.2.2.3</monitorip>
            <name>WAN2FailesToWAN1</name>
            <desc>WAN2 Fail to WAN1</desc>
            <port/>
            <servers>wan|4.2.2.2</servers>
            <servers>opt1|4.2.2.3</servers>
            <serversdisabled/>
            <monitor/>
        </lbpool>
    </load_balancer>
    <vlans/>
    <virtualip/>
</pfsense>

DMESG

Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 6.2-RELEASE-p11 #0: Sun Feb 24 16:32:58 EST 2008
    sullrich@builder6.pfsense.com:/usr/obj.pfSense/usr/src/sys/pfSense.6
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: VIA C3 Nehemiah+RNG (1002.28-MHz 686-class CPU)
  Origin = "CentaurHauls"  Id = 0x695  Stepping = 5
  Features=0x380b03d<FPU,DE,PSE,TSC,MSR,MTRR,PGE,CMOV,MMX,FXSR,SSE>
real memory  = 520028160 (495 MB)
avail memory = 499458048 (476 MB)
wlan: mac acl policy registered
kbd1 at kbdmux0
ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
acpi0: <VT9174 AWRDACPI> on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <VIA 862x (CLE266) host to PCI bridge> mem 0xe6000000-0xe63fffff at device 0.0 on pci0
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
vr0: <VIA VT6105 Rhine III 10/100BaseTX> port 0xd000-0xd0ff mem 0xe6412000-0xe64120ff irq 12 at device 15.0 on pci0
miibus0: <MII bus> on vr0
ukphy0: <Generic IEEE 802.3u media interface> on miibus0
ukphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr0: Ethernet address: 00:40:63:d9:2d:bf
uhci0: <VIA 83C572 USB controller> port 0xd400-0xd41f irq 10 at device 16.0 on pci0
uhci0: [GIANT-LOCKED]
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xd800-0xd81f irq 11 at device 16.1 on pci0
uhci1: [GIANT-LOCKED]
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <VIA 83C572 USB controller> port 0xdc00-0xdc1f irq 5 at device 16.2 on pci0
uhci2: [GIANT-LOCKED]
usb2: <VIA 83C572 USB controller> on uhci2
usb2: USB revision 1.0
uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0: <VIA VT6202 USB 2.0 controller> mem 0xe6410000-0xe64100ff irq 12 at device 16.3 on pci0
ehci0: [GIANT-LOCKED]
usb3: EHCI version 1.0
usb3: companion controllers, 2 ports each: usb0 usb1 usb2
usb3: <VIA VT6202 USB 2.0 controller> on ehci0
usb3: USB revision 2.0
uhub3: VIA EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub3: 6 ports with 6 removable, self powered
isab0: <PCI-ISA bridge> at device 17.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 8235 UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xe000-0xe00f at device 17.1 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
pci0: <multimedia, audio> at device 17.5 (no driver attached)
vr1: <VIA VT6102 Rhine II 10/100BaseTX> port 0xe800-0xe8ff mem 0xe6411000-0xe64110ff irq 10 at device 18.0 on pci0
miibus1: <MII bus> on vr1
ukphy1: <Generic IEEE 802.3u media interface> on miibus1
ukphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr1: Ethernet address: 00:40:63:d9:2d:97
ath0: <Atheros 5212> mem 0xe6400000-0xe640ffff irq 11 at device 20.0 on pci0
ath0: Ethernet address: 00:0b:6b:09:f5:c6
ath0: mac 5.9 phy 4.3 radio 3.6
ath0: using 2000 rx buffers
ath0: using 2000 tx buffers
speaker0: <PC speaker> port 0x61 on acpi0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xcdfff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
ppc0: parallel port not found.
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 1002280784 Hz quality 800
Timecounters tick every 1.000 msec
Fast IPsec: Initialized Security Association Processing.
ad0: 3906MB <HMS360604D5CF00 DP4AC30H> at ata0-master PIO4
ad1: FAILURE - SET_MULTI status=51<READY,DSC,ERROR> error=4<ABORTED>
ad1: 3823MB <ELITE CF CARD 4GB 20071207> at ata0-slave PIO4
Trying to mount root from ufs:/dev/ad0s1a

     ___
 ___/ f \\
/ p \\___/ Sense
\\___/   \\
    \\___/


Welcome to pfSense 1.2-RELEASE on the 'pfSense' platform...

Mounting filesystems...
 done.
Creating symlinks...
.
.
.
done.
Launching PHP init system...
 done.
Initializing...
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
 done.
Starting device manager (devd)...
done.
Loading configuration...
.
.
.


*******************************************************************************
* WARNING!                                                                    *
* The current configuration has been created with a newer version of pfSense  *
* than this one! This can lead to serious misbehavior and even security       *
* holes! You are urged to either upgrade to a newer version of pfSense or     *
* revert to the default configuration immediately!                            *
*******************************************************************************

done.
Updating configuration...
done.
Cleaning backup cache...
done.
Setting up extended sysctls...
done.
Syncing user passwords...
done.
Starting Secure Shell Services...
done.
Setting timezone...
done.
Starting syslog...
done.
Configuring LAN interface...
vr0: link state changed to UP
vr1: link state changed to UP
done.
Configuring WAN interface...
done.
Configuring OPT interfaces...
done.
Configuring CARP interfaces...
done.
Syncing system time before startup...
done.
pflog0: promiscuous mode enabled
Configuring firewall...
.
.
.
done.
Starting webConfigurator...
done.
Starting DHCP service...
done.
Starting DNS forwarder...
done.
Starting DynDNS client...
done.
Setting up microcode and tx/rx offloading...
done.
Starting FTP helpers...
done.
Generating RRD graphs...
done.
Starting DHCP service...
done.
Starting OpenNTP time client...
done.
Starting UPnP service...
done.
Starting CRON...
done.
Syncing packages:

 nmap
 Dashboard
.
Executing rc.d items...
 Starting /usr/local/etc/rc.d/*.sh...
done.
appending output to nohup.out
Bootup complete
vr0: promiscuous mode enabled
vr0: promiscuous mode disabled
vr1: link state changed to DOWN
vr1: link state changed to UP
vr1: link state changed to DOWN
vr1: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
arpresolve: can't allocate route for 192.168.2.1
arpresolve: can't allocate route for 192.168.2.1
arpresolve: can't allocate route for 192.168.2.1
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
vr1: link state changed to DOWN
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
vr1: link state changed to UP
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
vr0: link state changed to DOWN
vr0: link state changed to UP
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
vr0: link state changed to DOWN
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
vr0: link state changed to UP
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
vr0: link state changed to DOWN
vr0: link state changed to UP
vr1: link state changed to DOWN
vr1: link state changed to UP
pflog0: promiscuous mode disabled
pflog0: promiscuous mode enabled
pflog0: promiscuous mode disabled
pflog0: promiscuous mode enabled
vr0: promiscuous mode enabled
vr0: promiscuous mode disabled
vr0: promiscuous mode enabled
vr0: promiscuous mode disabled
vr0: promiscuous mode enabled
vr0: promiscuous mode disabled
ath0: promiscuous mode enabled
ath0: promiscuous mode disabled

netstat -mb

2146/1829/3975 mbufs in use (current/cache/total)
2132/834/2966/16576 mbuf clusters in use (current/cache/total/max)
2002/686 mbuf+clusters out of packet secondary zone in use (current/cache)
0/0/0/0 4k (page size) jumbo clusters in use (current/cache/total/max)
0/0/0/0 9k jumbo clusters in use (current/cache/total/max)
0/0/0/0 16k jumbo clusters in use (current/cache/total/max)
4800K/2125K/6925K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0/25/4400 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
94 requests for I/O initiated by sendfile
0 calls to protocol drain routines

vmstat -z

ITEM                     SIZE     LIMIT      USED      FREE  REQUESTS  FAILURES

UMA Kegs:                 140,        0,       88,        8,       88,        0
UMA Zones:                120,        0,       88,        2,       88,        0
UMA Slabs:                 64,        0,      513,       18,     2579,        0
UMA RCntSlabs:            104,        0,     1483,       34,     1483,        0
UMA Hash:                 128,        0,        5,       25,        7,        0
16 Bucket:                 76,        0,       37,       13,       37,        0
32 Bucket:                140,        0,       52,        4,       52,        0
64 Bucket:                268,        0,       49,        7,       49,        0
128 Bucket:               524,        0,      408,        5,      408,   274852
VM OBJECT:                132,        0,     2305,     1494, 417874339,        0
MAP:                      192,        0,        7,       33,        7,        0
KMAP ENTRY:                68,    30968,       17,      151,     9098,        0
MAP ENTRY:                 68,        0,     1633,     5367, 1397901005,        0
PV ENTRY:                  24,   904220,    36691,    20149, 9813137706,        0
DP fakepg:                 72,        0,        0,        0,        0,        0
mt_zone:                   64,        0,      238,       57,      238,        0
16:                        16,        0,     2407,      232, 48818007,        0
32:                        32,        0,     2143,      908, 342356710,        0
64:                        64,        0,     2939,       70, 86683693,        0
128:                      128,        0,     1225,      395, 139517019,        0
256:                      256,        0,      533,      112, 36161955,        0
512:                      512,        0,       58,       14,   683837,        0
1024:                    1024,        0,       54,       90, 28280038,        0
2048:                    2048,        0,      322,       68,  6690497,        0
4096:                    4096,        0,      146,       53, 18189427,        0
Files:                     72,        0,      231,      140, 184913380,        0
PROC:                     536,        0,       90,       57, 15874652,        0
THREAD:                   376,        0,      153,       17,  9536432,        0
KSEGRP:                    88,        0,      148,       52,      166,        0
UPCALL:                    44,        0,        2,      154,       38,        0
VMSPACE:                  296,        0,       46,       58, 15871474,        0
mbuf_packet:              256,        0,     2002,      686, 255468274,        0
mbuf:                     256,        0,      145,     1142, 671302557,        0
mbuf_cluster:            2048,    16576,     2818,      148, 74521351,        0
mbuf_jumbo_pagesize:     4096,        0,        0,        0,        0,        0
mbuf_jumbo_9k:           9216,        0,        0,        0,        0,        0
mbuf_jumbo_16k:         16384,        0,        0,        0,        0,        0
ACL UMA zone:             388,        0,        0,        0,        0,        0
NetGraph items:            36,      546,        0,      156,        2,        0
g_bio:                    132,        0,        0,      406, 32929048,        0
cryptop:                   60,        0,        0,        0,        0,        0
cryptodesc:                56,        0,        0,        0,        0,        0
ata_request:              204,        0,        0,      114,  8169847,        0
ata_composite:            196,        0,        0,        0,        0,        0
VNODE:                    272,        0,     1570,       26,    99759,        0
VNODEPOLL:                 76,        0,        0,        0,        0,        0
NAMEI:                   1024,        0,        0,       12, 350809950,        0
S VFS Cache:               68,        0,     1436,       20,  1135915,        0
L VFS Cache:              291,        0,       12,       14,       18,        0
NFSMOUNT:                 480,        0,        0,        0,        0,        0
NFSNODE:                  460,        0,        0,        0,        0,        0
DIRHASH:                 1024,        0,       24,        4,       24,        0
PIPE:                     408,        0,        8,       46,  4066569,        0
KNOTE:                     68,        0,        5,      107,  7392476,        0
bridge_rtnode:             32,        0,        0,        0,        0,        0
socket:                   356,     7821,       66,       44,  4761966,        0
ipq:                       32,      565,        0,        0,        0,        0
udpcb:                    180,     7832,       12,       32,    46700,        0
inpcb:                    180,     7832,       17,       71,    36240,        0
tcpcb:                    472,     7816,       17,       15,    36240,        0
tcptw:                     48,     1638,        0,      156,    27102,        0
syncache:                 100,    15366,        0,       78,    33000,        0
hostcache:                 76,    15400,        1,       99,      270,        0
tcpreass:                  20,     1183,        0,      169,    34280,        0
sackhole:                  20,        0,        0,      169,     3608,        0
ripcb:                    180,     7832,        1,       43,  4525288,        0
unpcb:                    140,     7840,       33,       51,   143952,        0
rtentry:                  132,        0,      156,       47,     2109,        0
pfsrctrpl:                100,    10023,        0,       78,      371,        0
pfrulepl:                 604,        0,      155,      169,  2247803,        0
pfstatepl:                260,   100005,     3050,    16825, 18143813,        0
pfaltqpl:                 128,        0,        0,        0,        0,        0
pfpooladdrpl:              68,        0,       79,      145,  4431380,        0
pfrktable:               1240,        0,       10,        5,     1078,        0
pfrkentry:                156,        0,       58,       42,      970,        0
pfrkentry2:               156,        0,        0,       50,      130,        0
pffrent:                   16,     5075,        0,      203,     1949,        0
pffrag:                    48,        0,        0,      156,     1069,        0
pffrcache:                 48,    10062,        0,        0,        0,        0
pffrcent:                  12,    50141,        0,        0,        0,        0
pfstatescrub:              28,        0,        0,        0,        0,        0
pfiaddrpl:                 92,        0,        7,       77,     1362,        0
pfospfen:                 108,        0,      348,       48,    68208,        0
pfosfp:                    28,        0,      208,      173,    40768,        0
SWAPMETA:                 276,    61250,        0,        0,        0,        0
Mountpoints:              664,        0,        4,        8,        4,        0
FFS inode:                132,        0,     1426,       24,    99509,        0
FFS1 dinode:              128,        0,        0,        0,        0,        0
FFS2 dinode:              256,        0,     1426,       29,    99509,        0
md0:                      512,        0,      299,       13,      299,        0

pfSense is © 2004-2007 by Scott Ullrich. All Rights Reserved. [view license]