rendered paste bodyroot@shark:~# shorewall version
3.0.4
bilange@shark:~$ ip addr show
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:04:5a:86:0e:3a brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/24 brd 192.168.0.255 scope global eth1
inet6 fe80::204:5aff:fe86:e3a/64 scope link
valid_lft forever preferred_lft forever
3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:04:ac:b8:96:80 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.1/24 brd 192.168.1.255 scope global eth0
inet6 fe80::204:acff:feb8:9680/64 scope link
valid_lft forever preferred_lft forever
4: sit0: <NOARP> mtu 1480 qdisc noop
link/sit 0.0.0.0 brd 0.0.0.0
17: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP> mtu 1492 qdisc cbq qlen 30
link/ppp
inet 70.53.228.69 peer 64.230.197.144/32 scope global ppp0
bilange@shark:~$ ip route show
64.230.197.144 dev ppp0 proto kernel scope link src 70.53.228.69
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.1
192.168.0.0/24 dev eth1 proto kernel scope link src 192.168.0.1
bilange@shark:~$ free
total used free shared buffers cached
Mem: 256292 251416 4876 0 121344 96948
-/+ buffers/cache: 33124 223168
Swap: 979924 26032 953892
Shorewall-3.0.4 Dump at shark - Wed Sep 27 18:40:26 EDT 2006
Counters reset Tue Sep 26 19:15:17 EDT 2006
Chain Drop (1 references)
pkts bytes target prot opt in out source destination
1 60 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113
1052 58905 dropBcast all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11
1052 58905 dropInvalid all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535
192 9632 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900
793 39988 dropNotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
699 64088 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
1348 118K ppp0_in all -- ppp0 * 0.0.0.0/0 0.0.0.0/0
1358 111K eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0
4 1312 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:'
0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy DROP 3 packets, 4476 bytes)
pkts bytes target prot opt in out source destination
794 38112 TCPMSS tcp -- * ppp0 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 tcpmss match 1400:1536 TCPMSS clamp to PMTU
1430 68128 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS set 1400
278K 378M ppp0_fwd all -- ppp0 * 0.0.0.0/0 0.0.0.0/0
162K 18M eth1_fwd all -- eth1 * 0.0.0.0/0 0.0.0.0/0
2 122 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
2 122 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:'
2 122 reject all -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
699 64088 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
253 124K fw2net all -- * ppp0 0.0.0.0/0 0.0.0.0/0
1531 243K fw2loc all -- * eth1 0.0.0.0/0 192.168.0.0/24
0 0 fw2loc all -- * eth1 0.0.0.0/0 255.255.255.255
0 0 fw2loc all -- * eth1 0.0.0.0/0 224.0.0.0/4
1086 96019 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
688 44032 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:'
688 44032 reject all -- * * 0.0.0.0/0 0.0.0.0/0
Chain Reject (4 references)
pkts bytes target prot opt in out source destination
0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113
1490 149K dropBcast all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11
1486 148K dropInvalid all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445
796 104K reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139
0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535
0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900
0 0 dropNotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53
Chain all2all (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
398 51987 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:'
0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
Chain dropBcast (2 references)
pkts bytes target prot opt in out source destination
4 1312 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast
Chain dropInvalid (2 references)
pkts bytes target prot opt in out source destination
55 2656 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
Chain dropNotSyn (2 references)
pkts bytes target prot opt in out source destination
9 360 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02
Chain dynamic (4 references)
pkts bytes target prot opt in out source destination
Chain eth1_fwd (1 references)
pkts bytes target prot opt in out source destination
978 47136 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
978 47136 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
162K 18M tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
162K 18M loc2net all -- * ppp0 192.168.0.0/24 0.0.0.0/0
Chain eth1_in (1 references)
pkts bytes target prot opt in out source destination
27 5866 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
27 5866 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
1332 105K tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
1354 109K loc2fw all -- * * 192.168.0.0/24 0.0.0.0/0
Chain fw2loc (3 references)
pkts bytes target prot opt in out source destination
1133 191K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
398 51987 all2all all -- * * 0.0.0.0/0 0.0.0.0/0
Chain fw2net (1 references)
pkts bytes target prot opt in out source destination
230 123K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
8 512 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
15 680 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain loc2fw (1 references)
pkts bytes target prot opt in out source destination
1331 105K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
23 4554 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 all2all all -- * * 0.0.0.0/0 0.0.0.0/0
Chain loc2net (1 references)
pkts bytes target prot opt in out source destination
161K 18M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
976 47014 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain logflags (5 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:'
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain net2all (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
1053 58965 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
796 46257 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2all:DROP:'
796 46257 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain net2fw (1 references)
pkts bytes target prot opt in out source destination
254 56817 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 reject icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
41 2236 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
1053 58965 net2all all -- * * 0.0.0.0/0 0.0.0.0/0
Chain net2loc (1 references)
pkts bytes target prot opt in out source destination
278K 378M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.0.5 tcp dpt:29805
0 0 net2all all -- * * 0.0.0.0/0 0.0.0.0/0
Chain norfc1918 (2 references)
pkts bytes target prot opt in out source destination
0 0 rfc1918 all -- * * 172.16.0.0/12 0.0.0.0/0
0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 172.16.0.0/12
0 0 rfc1918 all -- * * 192.168.0.0/16 0.0.0.0/0
0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 192.168.0.0/16
0 0 rfc1918 all -- * * 10.0.0.0/8 0.0.0.0/0
0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 10.0.0.0/8
Chain ppp0_fwd (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
0 0 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
0 0 norfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
278K 378M tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
278K 378M net2loc all -- * eth1 0.0.0.0/0 192.168.0.0/24
Chain ppp0_in (1 references)
pkts bytes target prot opt in out source destination
1094 61201 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
1094 61201 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
1028 57973 norfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
1317 109K tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
1348 118K net2fw all -- * * 0.0.0.0/0 0.0.0.0/0
Chain reject (11 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast
0 0 DROP all -- * * 192.168.0.255 0.0.0.0/0
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0
1 60 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
1486 148K REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain rfc1918 (6 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:rfc1918:DROP:'
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain shorewall (0 references)
pkts bytes target prot opt in out source destination
Chain smurfs (4 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 192.168.0.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:'
0 0 DROP all -- * * 192.168.0.255 0.0.0.0/0
0 0 LOG all -- * * 255.255.255.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:'
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 LOG all -- * * 224.0.0.0/4 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:'
0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0
Chain tcpflags (4 references)
pkts bytes target prot opt in out source destination
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:0 flags:0x17/0x02
Sep 27 18:39:53 shark [3183408.700111] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=83.116.221.30 DST=70.53.228.69 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=37802 DF PROTO=TCP SPT=47032 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:39:54 shark [3183409.458328] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=125.209.73.16 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=33908 PROTO=TCP SPT=43087 DPT=5980 WINDOW=16384 RES=0x00 SYN URGP=0
Sep 27 18:40:00 shark [3183416.348349] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=190.53.8.236 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=18982 DF PROTO=TCP SPT=64353 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:05 shark [3183421.064006] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=213.107.78.114 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=61893 DF PROTO=TCP SPT=3216 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:06 shark [3183422.341892] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=190.53.8.236 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=19325 DF PROTO=TCP SPT=64353 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:08 shark [3183423.397659] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=85.248.125.121 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=2560 DF PROTO=TCP SPT=54311 DPT=5980 WINDOW=64240 RES=0x00 SYN URGP=0
Sep 27 18:40:08 shark [3183423.535317] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=213.107.78.114 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=62041 DF PROTO=TCP SPT=3216 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:08 shark [3183424.368224] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=87.11.247.170 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=13348 DF PROTO=TCP SPT=4920 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:09 shark [3183424.980810] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=81.225.101.18 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=37129 DF PROTO=TCP SPT=55561 DPT=5980 WINDOW=64512 RES=0x00 SYN URGP=0
Sep 27 18:40:10 shark [3183426.259463] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=85.248.125.121 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=42488 DF PROTO=TCP SPT=62061 DPT=5980 WINDOW=64240 RES=0x00 SYN URGP=0
Sep 27 18:40:11 shark [3183427.362529] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=87.11.247.170 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=13474 DF PROTO=TCP SPT=4920 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:12 shark [3183427.993791] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=81.225.101.18 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=37224 DF PROTO=TCP SPT=55561 DPT=5980 WINDOW=64512 RES=0x00 SYN URGP=0
Sep 27 18:40:15 shark [3183430.451372] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=213.107.78.114 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=62370 DF PROTO=TCP SPT=3216 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:17 shark [3183432.822524] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=83.161.93.6 DST=70.53.228.69 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=59535 DF PROTO=TCP SPT=28308 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:17 shark [3183433.097022] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=85.248.125.121 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=43143 DF PROTO=TCP SPT=64023 DPT=5980 WINDOW=64240 RES=0x00 SYN URGP=0
Sep 27 18:40:18 shark [3183433.471319] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=87.11.247.170 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=13748 DF PROTO=TCP SPT=4920 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:18 shark [3183434.140956] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=81.225.101.18 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=37398 DF PROTO=TCP SPT=55561 DPT=5980 WINDOW=64512 RES=0x00 SYN URGP=0
Sep 27 18:40:20 shark [3183435.748300] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=83.161.93.6 DST=70.53.228.69 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=59687 DF PROTO=TCP SPT=28308 DPT=5980 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 27 18:40:20 shark [3183436.043588] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=85.248.125.121 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=63535 DF PROTO=TCP SPT=64023 DPT=5980 WINDOW=64240 RES=0x00 SYN URGP=0
Sep 27 18:40:26 shark [3183442.063870] Shorewall:net2all:DROP:IN=ppp0 OUT= SRC=85.248.125.121 DST=70.53.228.69 LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=3352 DF PROTO=TCP SPT=64023 DPT=5980 WINDOW=64240 RES=0x00 SYN URGP=0
NAT Table
Chain PREROUTING (policy ACCEPT 1791 packets, 97778 bytes)
pkts bytes target prot opt in out source destination
1028 57973 net_dnat all -- ppp0 * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 11 packets, 664 bytes)
pkts bytes target prot opt in out source destination
785 38165 ppp0_masq all -- * ppp0 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 1494 packets, 149K bytes)
pkts bytes target prot opt in out source destination
Chain net_dnat (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:29805 to:192.168.0.5
30 1664 REDIRECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 redir ports 80
0 0 REDIRECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 redir ports 22
Chain ppp0_masq (1 references)
pkts bytes target prot opt in out source destination
774 37501 MASQUERADE all -- * * 192.168.0.0/24 0.0.0.0/0
Mangle Table
Chain PREROUTING (policy ACCEPT 444K packets, 398M bytes)
pkts bytes target prot opt in out source destination
444K 397M tcpre all -- * * 0.0.0.0/0 0.0.0.0/0
Chain INPUT (policy ACCEPT 3462 packets, 295K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 441K packets, 397M bytes)
pkts bytes target prot opt in out source destination
440K 397M tcfor all -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 11M packets, 15G bytes)
pkts bytes target prot opt in out source destination
3574 528K tcout all -- * * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 443K packets, 398M bytes)
pkts bytes target prot opt in out source destination
442K 397M tcpost all -- * * 0.0.0.0/0 0.0.0.0/0
Chain tcfor (1 references)
pkts bytes target prot opt in out source destination
Chain tcout (1 references)
pkts bytes target prot opt in out source destination
Chain tcpost (1 references)
pkts bytes target prot opt in out source destination
Chain tcpre (1 references)
pkts bytes target prot opt in out source destination
tcp 6 431928 ESTABLISHED src=192.168.0.5 dst=85.131.94.254 sport=2949 dport=13190 packets=37 bytes=2335 src=85.131.94.254 dst=70.53.228.69 sport=13190 dport=2949 packets=32 bytes=35991 [ASSURED] mark=0 use=1
tcp 6 333583 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=2810 dport=45980 packets=12 bytes=1277 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=2810 packets=16 bytes=1361 [ASSURED] mark=0 use=1
tcp 6 337267 ESTABLISHED src=86.80.36.153 dst=70.50.168.177 sport=3237 dport=45980 packets=253 bytes=172763 src=192.168.0.5 dst=86.80.36.153 sport=45980 dport=3237 packets=263 bytes=240635 [ASSURED] mark=0 use=1
tcp 6 327873 ESTABLISHED src=88.246.116.127 dst=70.50.168.177 sport=3151 dport=45980 packets=6 bytes=548 src=192.168.0.5 dst=88.246.116.127 sport=45980 dport=3151 packets=14 bytes=1023 [ASSURED] mark=0 use=1
tcp 6 345828 ESTABLISHED src=86.80.36.153 dst=67.71.133.198 sport=3484 dport=29805 packets=311 bytes=194280 src=192.168.0.5 dst=86.80.36.153 sport=29805 dport=3484 packets=363 bytes=382518 [ASSURED] mark=0 use=1
tcp 6 431999 ESTABLISHED src=192.168.0.5 dst=212.10.146.97 sport=2930 dport=6881 packets=301 bytes=153448 src=212.10.146.97 dst=70.53.228.69 sport=6881 dport=2930 packets=295 bytes=126068 [ASSURED] mark=0 use=5
tcp 6 118 FIN_WAIT src=192.168.0.5 dst=161.53.218.3 sport=2971 dport=6882 packets=4 bytes=379 src=161.53.218.3 dst=70.53.228.69 sport=6882 dport=2971 packets=2 bytes=88 [ASSURED] mark=0 use=2
tcp 6 333999 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=3658 dport=45980 packets=12 bytes=2791 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=3658 packets=15 bytes=1385 [ASSURED] mark=0 use=1
tcp 6 333372 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=2377 dport=45980 packets=15 bytes=1871 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=2377 packets=16 bytes=2432 [ASSURED] mark=0 use=1
tcp 6 327014 ESTABLISHED src=88.246.116.127 dst=70.50.168.177 sport=4714 dport=45980 packets=5 bytes=508 src=192.168.0.5 dst=88.246.116.127 sport=45980 dport=4714 packets=11 bytes=828 [ASSURED] mark=0 use=1
tcp 6 326386 ESTABLISHED src=194.247.227.84 dst=70.50.168.177 sport=2531 dport=45980 packets=8 bytes=736 src=192.168.0.5 dst=194.247.227.84 sport=45980 dport=2531 packets=12 bytes=2276 [ASSURED] mark=0 use=1
udp 17 121 src=192.168.0.5 dst=206.47.244.89 sport=2574 dport=53 packets=4 bytes=264 src=206.47.244.89 dst=70.53.228.69 sport=53 dport=2574 packets=4 bytes=1090 [ASSURED] mark=0 use=1
tcp 6 431998 ESTABLISHED src=192.168.0.5 dst=86.75.99.116 sport=2731 dport=24176 packets=1494 bytes=1159964 src=86.75.99.116 dst=70.53.228.69 sport=24176 dport=2731 packets=1377 bytes=807621 [ASSURED] mark=0 use=3
tcp 6 431818 ESTABLISHED src=192.168.0.5 dst=64.233.167.104 sport=2952 dport=80 packets=18 bytes=2160 src=64.233.167.104 dst=70.53.228.69 sport=80 dport=2952 packets=15 bytes=13663 [ASSURED] mark=0 use=1
tcp 6 334721 ESTABLISHED src=88.246.116.127 dst=70.50.168.177 sport=4339 dport=45980 packets=6 bytes=548 src=192.168.0.5 dst=88.246.116.127 sport=45980 dport=4339 packets=12 bytes=1081 [ASSURED] mark=0 use=1
tcp 6 58 TIME_WAIT src=192.168.0.5 dst=71.126.167.146 sport=2916 dport=17382 packets=14 bytes=1335 src=71.126.167.146 dst=70.53.228.69 sport=17382 dport=2916 packets=12 bytes=1305 [ASSURED] mark=0 use=1
tcp 6 431988 ESTABLISHED src=192.168.0.5 dst=213.143.87.33 sport=2965 dport=17034 packets=9 bytes=965 src=213.143.87.33 dst=70.53.228.69 sport=17034 dport=2965 packets=7 bytes=701 [ASSURED] mark=0 use=1
tcp 6 58 TIME_WAIT src=192.168.0.5 dst=80.220.88.24 sport=2918 dport=45475 packets=16 bytes=1147 src=80.220.88.24 dst=70.53.228.69 sport=45475 dport=2918 packets=15 bytes=1170 [ASSURED] mark=0 use=1
tcp 6 336169 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=4207 dport=45980 packets=12 bytes=1445 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=4207 packets=16 bytes=1399 [ASSURED] mark=0 use=1
tcp 6 63 TIME_WAIT src=192.168.0.5 dst=207.46.216.61 sport=2966 dport=80 packets=5 bytes=1025 src=207.46.216.61 dst=70.53.228.69 sport=80 dport=2966 packets=3 bytes=535 [ASSURED] mark=0 use=1
tcp 6 117 TIME_WAIT src=192.168.0.5 dst=84.167.7.222 sport=2793 dport=52525 packets=75 bytes=3789 src=84.167.7.222 dst=70.53.228.69 sport=52525 dport=2793 packets=73 bytes=19921 [ASSURED] mark=0 use=2
tcp 6 107 SYN_SENT src=192.168.0.5 dst=62.165.208.243 sport=2973 dport=16567 packets=2 bytes=96 [UNREPLIED] src=62.165.208.243 dst=70.53.228.69 sport=16567 dport=2973 packets=0 bytes=0 mark=0 use=1
tcp 6 344551 ESTABLISHED src=82.65.164.129 dst=67.71.133.198 sport=2105 dport=29805 packets=139 bytes=177450 src=192.168.0.5 dst=82.65.164.129 sport=29805 dport=2105 packets=87 bytes=4899 [ASSURED] mark=0 use=1
tcp 6 331390 ESTABLISHED src=69.196.147.13 dst=70.50.168.177 sport=4657 dport=45980 packets=19 bytes=8677 src=192.168.0.5 dst=69.196.147.13 sport=45980 dport=4657 packets=21 bytes=1437 [ASSURED] mark=0 use=1
tcp 6 326396 ESTABLISHED src=213.44.25.183 dst=70.50.168.177 sport=2152 dport=45980 packets=7 bytes=1227 src=192.168.0.5 dst=213.44.25.183 sport=45980 dport=2152 packets=10 bytes=1215 [ASSURED] mark=0 use=1
tcp 6 336830 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=1773 dport=45980 packets=13 bytes=1607 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=1773 packets=18 bytes=10027 [ASSURED] mark=0 use=1
tcp 6 332380 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=3909 dport=45980 packets=14 bytes=1694 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=3909 packets=18 bytes=1945 [ASSURED] mark=0 use=1
tcp 6 335651 ESTABLISHED src=201.223.57.154 dst=70.50.168.177 sport=3691 dport=45980 packets=8 bytes=736 src=192.168.0.5 dst=201.223.57.154 sport=45980 dport=3691 packets=12 bytes=2969 [ASSURED] mark=0 use=1
tcp 6 335844 ESTABLISHED src=201.223.57.154 dst=70.50.168.177 sport=3980 dport=45980 packets=8 bytes=736 src=192.168.0.5 dst=201.223.57.154 sport=45980 dport=3980 packets=12 bytes=2897 [ASSURED] mark=0 use=1
tcp 6 431998 ESTABLISHED src=192.168.0.5 dst=211.28.193.96 sport=2553 dport=57272 packets=3079 bytes=2563752 src=211.28.193.96 dst=70.53.228.69 sport=57272 dport=2553 packets=2648 bytes=1598080 [ASSURED] mark=0 use=16
tcp 6 430086 ESTABLISHED src=192.168.0.5 dst=82.253.118.65 sport=2330 dport=35377 packets=18 bytes=1643 src=82.253.118.65 dst=70.53.228.69 sport=35377 dport=2330 packets=9 bytes=1081 [ASSURED] mark=0 use=1
tcp 6 337684 ESTABLISHED src=203.214.39.235 dst=70.50.168.177 sport=3921 dport=45980 packets=6 bytes=548 src=192.168.0.5 dst=203.214.39.235 sport=45980 dport=3921 packets=11 bytes=1027 [ASSURED] mark=0 use=1
tcp 6 431975 ESTABLISHED src=192.168.0.5 dst=81.179.77.33 sport=2414 dport=51232 packets=1943 bytes=1884980 src=81.179.77.33 dst=70.53.228.69 sport=51232 dport=2414 packets=1705 bytes=450519 [ASSURED] mark=0 use=1
tcp 6 431999 ESTABLISHED src=192.168.0.5 dst=192.168.0.1 sport=2240 dport=22 packets=1222 bytes=95820 src=192.168.0.1 dst=192.168.0.5 sport=22 dport=2240 packets=1018 bytes=168706 [ASSURED] mark=0 use=1
tcp 6 249853 ESTABLISHED src=205.237.78.99 dst=67.70.78.251 sport=26130 dport=80 packets=23282 bytes=1031819 src=67.70.78.251 dst=205.237.78.99 sport=80 dport=26130 packets=25492 bytes=38031168 [ASSURED] mark=0 use=1
udp 17 96 src=192.168.0.5 dst=206.47.244.61 sport=1944 dport=53 packets=4 bytes=238 src=206.47.244.61 dst=70.53.228.69 sport=53 dport=1944 packets=4 bytes=1199 [ASSURED] mark=0 use=1
tcp 6 179479 ESTABLISHED src=84.144.249.166 dst=67.70.78.251 sport=65005 dport=5980 packets=175 bytes=7976 src=192.168.0.5 dst=84.144.249.166 sport=5980 dport=65005 packets=196 bytes=8866 [ASSURED] mark=0 use=1
tcp 6 325223 ESTABLISHED src=85.75.83.186 dst=70.50.168.177 sport=4135 dport=45980 packets=539 bytes=294642 src=192.168.0.5 dst=85.75.83.186 sport=45980 dport=4135 packets=543 bytes=380402 [ASSURED] mark=0 use=1
tcp 6 328805 ESTABLISHED src=201.246.23.215 dst=70.50.168.177 sport=3223 dport=45980 packets=17 bytes=1158 src=192.168.0.5 dst=201.246.23.215 sport=45980 dport=3223 packets=29 bytes=23438 [ASSURED] mark=0 use=1
tcp 6 334530 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=4567 dport=45980 packets=13 bytes=3127 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=4567 packets=16 bytes=2164 [ASSURED] mark=0 use=1
tcp 6 326885 ESTABLISHED src=201.223.57.154 dst=70.50.168.177 sport=1984 dport=45980 packets=8 bytes=736 src=192.168.0.5 dst=201.223.57.154 sport=45980 dport=1984 packets=12 bytes=2258 [ASSURED] mark=0 use=1
tcp 6 431999 ESTABLISHED src=192.168.0.5 dst=64.233.167.18 sport=2922 dport=80 packets=33 bytes=12938 src=64.233.167.18 dst=70.53.228.69 sport=80 dport=2922 packets=33 bytes=6427 [ASSURED] mark=0 use=2
tcp 6 338262 ESTABLISHED src=213.161.252.201 dst=70.50.168.177 sport=15584 dport=45980 packets=53610 bytes=64751408 src=192.168.0.5 dst=213.161.252.201 sport=45980 dport=15584 packets=49122 bytes=33480652 [ASSURED] mark=0 use=1
tcp 6 320911 ESTABLISHED src=84.123.159.11 dst=70.50.168.177 sport=3458 dport=5980 packets=9 bytes=776 src=192.168.0.5 dst=84.123.159.11 sport=5980 dport=3458 packets=14 bytes=2350 [ASSURED] mark=0 use=1
tcp 6 431919 ESTABLISHED src=192.168.0.5 dst=213.65.89.251 sport=2471 dport=11940 packets=2294 bytes=1964270 src=213.65.89.251 dst=70.53.228.69 sport=11940 dport=2471 packets=2072 bytes=870408 [ASSURED] mark=0 use=1
tcp 6 431939 ESTABLISHED src=192.168.0.5 dst=207.46.104.17 sport=2963 dport=1863 packets=10 bytes=887 src=207.46.104.17 dst=70.53.228.69 sport=1863 dport=2963 packets=9 bytes=2018 [ASSURED] mark=0 use=1
tcp 6 329230 ESTABLISHED src=82.99.180.22 dst=70.50.168.177 sport=4866 dport=45980 packets=1812 bytes=971752 src=192.168.0.5 dst=82.99.180.22 sport=45980 dport=4866 packets=1453 bytes=169611 [ASSURED] mark=0 use=1
tcp 6 431947 ESTABLISHED src=192.168.0.5 dst=85.134.2.173 sport=2964 dport=59864 packets=10 bytes=1202 src=85.134.2.173 dst=70.53.228.69 sport=59864 dport=2964 packets=9 bytes=2283 [ASSURED] mark=0 use=1
tcp 6 431934 ESTABLISHED src=192.168.0.5 dst=172.200.32.248 sport=2923 dport=49152 packets=186 bytes=8094 src=172.200.32.248 dst=70.53.228.69 sport=49152 dport=2923 packets=201 bytes=151052 [ASSURED] mark=0 use=1
tcp 6 50 TIME_WAIT src=192.168.0.5 dst=64.4.27.74 sport=2962 dport=1863 packets=6 bytes=383 src=64.4.27.74 dst=70.53.228.69 sport=1863 dport=2962 packets=5 bytes=430 [ASSURED] mark=0 use=1
tcp 6 431984 ESTABLISHED src=192.168.0.5 dst=71.126.167.146 sport=2972 dport=17382 packets=6 bytes=859 src=71.126.167.146 dst=70.53.228.69 sport=17382 dport=2972 packets=4 bytes=1097 [ASSURED] mark=0 use=1
tcp 6 431994 ESTABLISHED src=192.168.0.5 dst=70.81.8.248 sport=2767 dport=6881 packets=95 bytes=4214 src=70.81.8.248 dst=70.53.228.69 sport=6881 dport=2767 packets=99 bytes=66670 [ASSURED] mark=0 use=1
tcp 6 235155 ESTABLISHED src=70.25.201.52 dst=67.70.78.251 sport=2500 dport=5980 packets=6 bytes=931 src=192.168.0.5 dst=70.25.201.52 sport=5980 dport=2500 packets=10 bytes=1047 [ASSURED] mark=0 use=1
tcp 6 345184 ESTABLISHED src=201.212.169.107 dst=67.71.133.198 sport=3402 dport=29805 packets=8 bytes=736 src=192.168.0.5 dst=201.212.169.107 sport=29805 dport=3402 packets=12 bytes=2987 [ASSURED] mark=0 use=1
tcp 6 333869 ESTABLISHED src=85.241.6.70 dst=70.50.168.177 sport=2041 dport=45980 packets=342 bytes=71713 src=192.168.0.5 dst=85.241.6.70 sport=45980 dport=2041 packets=345 bytes=14484 [ASSURED] mark=0 use=1
tcp 6 320613 ESTABLISHED src=213.44.25.183 dst=70.50.168.177 sport=1092 dport=5980 packets=7 bytes=994 src=192.168.0.5 dst=213.44.25.183 sport=5980 dport=1092 packets=12 bytes=1469 [ASSURED] mark=0 use=1
tcp 6 337372 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=2781 dport=45980 packets=12 bytes=2618 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=2781 packets=15 bytes=1553 [ASSURED] mark=0 use=1
tcp 6 333554 ESTABLISHED src=201.223.57.154 dst=70.50.168.177 sport=3743 dport=45980 packets=8 bytes=736 src=192.168.0.5 dst=201.223.57.154 sport=45980 dport=3743 packets=14 bytes=2697 [ASSURED] mark=0 use=1
tcp 6 331918 ESTABLISHED src=85.240.241.184 dst=70.50.168.177 sport=3092 dport=45980 packets=4 bytes=240 src=192.168.0.5 dst=85.240.241.184 sport=45980 dport=3092 packets=8 bytes=753 [ASSURED] mark=0 use=1
tcp 6 337983 ESTABLISHED src=203.214.39.235 dst=70.50.168.177 sport=4232 dport=45980 packets=7 bytes=593 src=192.168.0.5 dst=203.214.39.235 sport=45980 dport=4232 packets=12 bytes=1022 [ASSURED] mark=0 use=1
tcp 6 333263 ESTABLISHED src=82.251.10.92 dst=70.50.168.177 sport=4612 dport=45980 packets=8 bytes=962 src=192.168.0.5 dst=82.251.10.92 sport=45980 dport=4612 packets=12 bytes=1220 [ASSURED] mark=0 use=1
tcp 6 42 TIME_WAIT src=192.168.0.5 dst=207.46.28.93 sport=2960 dport=1863 packets=7 bytes=423 src=207.46.28.93 dst=70.53.228.69 sport=1863 dport=2960 packets=6 bytes=477 [ASSURED] mark=0 use=1
tcp 6 431997 ESTABLISHED src=192.168.0.5 dst=212.242.176.85 sport=2795 dport=4662 packets=931 bytes=607437 src=212.242.176.85 dst=70.53.228.69 sport=4662 dport=2795 packets=780 bytes=195801 [ASSURED] mark=0 use=13
tcp 6 336113 ESTABLISHED src=201.235.181.54 dst=70.50.168.177 sport=7210 dport=45980 packets=450 bytes=400694 src=192.168.0.5 dst=201.235.181.54 sport=45980 dport=7210 packets=340 bytes=178139 [ASSURED] mark=0 use=1
tcp 6 431996 ESTABLISHED src=192.168.0.5 dst=140.211.166.3 sport=2954 dport=6667 packets=23 bytes=1149 src=140.211.166.3 dst=70.53.228.69 sport=6667 dport=2954 packets=21 bytes=6967 [ASSURED] mark=0 use=2
tcp 6 343801 ESTABLISHED src=84.162.190.2 dst=67.71.133.198 sport=3817 dport=29805 packets=1077 bytes=662498 src=192.168.0.5 dst=84.162.190.2 sport=29805 dport=3817 packets=1124 bytes=1021571 [ASSURED] mark=0 use=1
tcp 6 326136 ESTABLISHED src=83.43.149.200 dst=70.50.168.177 sport=3107 dport=45980 packets=5 bytes=507 src=192.168.0.5 dst=83.43.149.200 sport=45980 dport=3107 packets=11 bytes=854 [ASSURED] mark=0 use=1
tcp 6 431990 ESTABLISHED src=192.168.0.5 dst=193.95.221.108 sport=2970 dport=51997 packets=7 bytes=1035 src=193.95.221.108 dst=70.53.228.69 sport=51997 dport=2970 packets=5 bytes=926 [ASSURED] mark=0 use=1
tcp 6 431995 ESTABLISHED src=192.168.0.5 dst=81.230.98.22 sport=2714 dport=33434 packets=227 bytes=206675 src=81.230.98.22 dst=70.53.228.69 sport=33434 dport=2714 packets=210 bytes=26494 [ASSURED] mark=0 use=1
tcp 6 112 TIME_WAIT src=192.168.0.5 dst=64.233.167.99 sport=2951 dport=80 packets=7 bytes=1100 src=64.233.167.99 dst=70.53.228.69 sport=80 dport=2951 packets=7 bytes=1126 [ASSURED] mark=0 use=1
tcp 6 330704 ESTABLISHED src=201.29.223.43 dst=70.50.168.177 sport=60244 dport=45980 packets=3 bytes=196 src=192.168.0.5 dst=201.29.223.43 sport=45980 dport=60244 packets=7 bytes=2445 [ASSURED] mark=0 use=1
tcp 6 328542 ESTABLISHED src=87.80.233.24 dst=70.50.168.177 sport=1166 dport=45980 packets=14 bytes=9729 src=192.168.0.5 dst=87.80.233.24 sport=45980 dport=1166 packets=16 bytes=1386 [ASSURED] mark=0 use=1
tcp 6 234319 ESTABLISHED src=70.25.201.52 dst=67.70.78.251 sport=1311 dport=5980 packets=7 bytes=702 src=192.168.0.5 dst=70.25.201.52 sport=5980 dport=1311 packets=11 bytes=1884 [ASSURED] mark=0 use=1
tcp 6 430266 ESTABLISHED src=192.168.0.5 dst=82.253.118.65 sport=2496 dport=35377 packets=17 bytes=1350 src=82.253.118.65 dst=70.53.228.69 sport=35377 dport=2496 packets=10 bytes=1390 [ASSURED] mark=0 use=1
tcp 6 431997 ESTABLISHED src=192.168.0.5 dst=82.253.118.65 sport=2908 dport=35377 packets=419 bytes=297032 src=82.253.118.65 dst=70.53.228.69 sport=35377 dport=2908 packets=334 bytes=230897 [ASSURED] mark=0 use=2
tcp 6 332119 ESTABLISHED src=84.123.159.11 dst=70.50.168.177 sport=2716 dport=45980 packets=8 bytes=736 src=192.168.0.5 dst=84.123.159.11 sport=45980 dport=2716 packets=12 bytes=2645 [ASSURED] mark=0 use=1
tcp 6 338302 ESTABLISHED src=212.96.175.28 dst=70.50.168.177 sport=2464 dport=45980 packets=12 bytes=1473 src=192.168.0.5 dst=212.96.175.28 sport=45980 dport=2464 packets=16 bytes=1865 [ASSURED] mark=0 use=1
tcp 6 325339 ESTABLISHED src=219.75.6.45 dst=70.50.168.177 sport=2284 dport=45980 packets=76 bytes=21574 src=192.168.0.5 dst=219.75.6.45 sport=45980 dport=2284 packets=93 bytes=67677 [ASSURED] mark=0 use=1
tcp 6 430883 ESTABLISHED src=192.168.0.5 dst=82.253.118.65 sport=2659 dport=35377 packets=20 bytes=2087 src=82.253.118.65 dst=70.53.228.69 sport=35377 dport=2659 packets=11 bytes=1066 [ASSURED] mark=0 use=1
tcp 6 431977 ESTABLISHED src=192.168.0.5 dst=85.226.255.117 sport=2968 dport=40416 packets=6 bytes=960 src=85.226.255.117 dst=70.53.228.69 sport=40416 dport=2968 packets=4 bytes=691 [ASSURED] mark=0 use=1
tcp 6 332895 ESTABLISHED src=82.251.10.92 dst=70.50.168.177 sport=3799 dport=45980 packets=11 bytes=1043 src=192.168.0.5 dst=82.251.10.92 sport=45980 dport=3799 packets=22 bytes=17015 [ASSURED] mark=0 use=1
udp 17 155 src=192.168.0.5 dst=206.47.244.89 sport=1944 dport=53 packets=20 bytes=1259 src=206.47.244.89 dst=70.53.228.69 sport=53 dport=1944 packets=19 bytes=5704 [ASSURED] mark=0 use=1
tcp 6 431992 ESTABLISHED src=192.168.0.5 dst=64.233.167.19 sport=2956 dport=80 packets=23 bytes=7503 src=64.233.167.19 dst=70.53.228.69 sport=80 dport=2956 packets=27 bytes=6885 [ASSURED] mark=0 use=1
tcp 6 431998 ESTABLISHED src=192.168.0.5 dst=65.54.170.20 sport=2969 dport=443 packets=76 bytes=4958 src=65.54.170.20 dst=70.53.228.69 sport=443 dport=2969 packets=73 bytes=98357 [ASSURED] mark=0 use=7
tcp 6 254582 ESTABLISHED src=200.127.248.32 dst=70.50.168.177 sport=4238 dport=5980 packets=43 bytes=2268 src=192.168.0.5 dst=200.127.248.32 sport=5980 dport=4238 packets=61 bytes=52515 [ASSURED] mark=0 use=1
tcp 6 328843 ESTABLISHED src=200.104.130.24 dst=70.50.168.177 sport=60726 dport=45980 packets=48 bytes=52024 src=192.168.0.5 dst=200.104.130.24 sport=45980 dport=60726 packets=44 bytes=2607 [ASSURED] mark=0 use=1
tcp 6 100561 ESTABLISHED src=84.144.191.37 dst=67.70.78.251 sport=61711 dport=5980 packets=528 bytes=22956 src=192.168.0.5 dst=84.144.191.37 sport=5980 dport=61711 packets=539 bytes=23048 [ASSURED] mark=0 use=1
tcp 6 326186 ESTABLISHED src=82.246.98.18 dst=70.50.168.177 sport=2706 dport=45980 packets=908 bytes=236691 src=192.168.0.5 dst=82.246.98.18 sport=45980 dport=2706 packets=837 bytes=798596 [ASSURED] mark=0 use=1
tcp 6 47 TIME_WAIT src=192.168.0.5 dst=207.46.111.27 sport=2961 dport=1863 packets=8 bytes=807 src=207.46.111.27 dst=70.53.228.69 sport=1863 dport=2961 packets=8 bytes=909 [ASSURED] mark=0 use=1
tcp 6 45 TIME_WAIT src=192.168.0.5 dst=65.54.179.248 sport=2959 dport=443 packets=16 bytes=4520 src=65.54.179.248 dst=70.53.228.69 sport=443 dport=2959 packets=13 bytes=8282 [ASSURED] mark=0 use=1
tcp 6 184833 ESTABLISHED src=84.144.188.5 dst=67.70.78.251 sport=62461 dport=5980 packets=66 bytes=3211 src=192.168.0.5 dst=84.144.188.5 sport=5980 dport=62461 packets=74 bytes=3527 [ASSURED] mark=0 use=1
tcp 6 431974 ESTABLISHED src=192.168.0.5 dst=65.54.170.20 sport=2967 dport=443 packets=96 bytes=5864 src=65.54.170.20 dst=70.53.228.69 sport=443 dport=2967 packets=97 bytes=126078 [ASSURED] mark=0 use=1
tcp 6 330378 ESTABLISHED src=217.121.197.55 dst=70.50.168.177 sport=4411 dport=45980 packets=15 bytes=8681 src=192.168.0.5 dst=217.121.197.55 sport=45980 dport=4411 packets=17 bytes=1402 [ASSURED] mark=0 use=1
tcp 6 118 SYN_SENT src=192.168.0.5 dst=161.53.218.3 sport=2974 dport=6882 packets=1 bytes=48 [UNREPLIED] src=161.53.218.3 dst=70.53.228.69 sport=6882 dport=2974 packets=0 bytes=0 mark=0 use=2
tcp 6 325194 ESTABLISHED src=88.246.116.127 dst=70.50.168.177 sport=3507 dport=45980 packets=6 bytes=548 src=192.168.0.5 dst=88.246.116.127 sport=45980 dport=3507 packets=12 bytes=868 [ASSURED] mark=0 use=1
tcp 6 58 TIME_WAIT src=192.168.0.5 dst=85.226.255.117 sport=2920 dport=40416 packets=15 bytes=1313 src=85.226.255.117 dst=70.53.228.69 sport=40416 dport=2920 packets=13 bytes=1033 [ASSURED] mark=0 use=1
tcp 6 322555 ESTABLISHED src=82.251.10.92 dst=70.50.168.177 sport=1686 dport=5980 packets=10 bytes=940 src=192.168.0.5 dst=82.251.10.92 sport=5980 dport=1686 packets=13 bytes=1130 [ASSURED] mark=0 use=1
tcp 6 335540 ESTABLISHED src=212.1.147.122 dst=70.50.168.177 sport=2696 dport=45980 packets=13 bytes=1453 src=192.168.0.5 dst=212.1.147.122 sport=45980 dport=2696 packets=18 bytes=2403 [ASSURED] mark=0 use=1
tcp 6 234520 ESTABLISHED src=70.25.201.52 dst=67.70.78.251 sport=1558 dport=5980 packets=6 bytes=838 src=192.168.0.5 dst=70.25.201.52 sport=5980 dport=1558 packets=11 bytes=1731 [ASSURED] mark=0 use=1
tcp 6 235751 ESTABLISHED src=70.25.201.52 dst=67.70.78.251 sport=3029 dport=5980 packets=99 bytes=82565 src=192.168.0.5 dst=70.25.201.52 sport=5980 dport=3029 packets=84 bytes=5292 [ASSURED] mark=0 use=1
tcp 6 344493 ESTABLISHED src=82.255.164.47 dst=67.71.133.198 sport=2712 dport=29805 packets=77 bytes=86060 src=192.168.0.5 dst=82.255.164.47 sport=29805 dport=2712 packets=51 bytes=3607 [ASSURED] mark=0 use=1
IP Configuration
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:04:5a:86:0e:3a brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/24 brd 192.168.0.255 scope global eth1
inet6 fe80::204:5aff:fe86:e3a/64 scope link
valid_lft forever preferred_lft forever
3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:04:ac:b8:96:80 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.1/24 brd 192.168.1.255 scope global eth0
inet6 fe80::204:acff:feb8:9680/64 scope link
valid_lft forever preferred_lft forever
4: sit0: <NOARP> mtu 1480 qdisc noop
link/sit 0.0.0.0 brd 0.0.0.0
17: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP> mtu 1492 qdisc cbq qlen 30
link/ppp
inet 70.53.228.69 peer 64.230.197.144/32 scope global ppp0
IP Stats
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
RX: bytes packets errors dropped overrun mcast
89064 980 0 0 0 0
TX: bytes packets errors dropped carrier collsns
89064 980 0 0 0 0
2: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:04:5a:86:0e:3a brd ff:ff:ff:ff:ff:ff
RX: bytes packets errors dropped overrun mcast
1026022469 17571733 13890 0 0 0
TX: bytes packets errors dropped carrier collsns
3559431503 22336192 3795416 0 3795416 0
3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:04:ac:b8:96:80 brd ff:ff:ff:ff:ff:ff
RX: bytes packets errors dropped overrun mcast
3151273424 31049778 0 0 0 0
TX: bytes packets errors dropped carrier collsns
973959288 25653106 1 0 1 198819
4: sit0: <NOARP> mtu 1480 qdisc noop
link/sit 0.0.0.0 brd 0.0.0.0
RX: bytes packets errors dropped overrun mcast
0 0 0 0 0 0
TX: bytes packets errors dropped carrier collsns
0 0 0 0 0 0
17: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP> mtu 1492 qdisc cbq qlen 30
link/ppp
RX: bytes packets errors dropped overrun mcast
15872116 26227 0 0 0 0
TX: bytes packets errors dropped carrier collsns
12619978 27576 0 0 0 0
Bridges
bridge name bridge id STP enabled interfaces
/proc
/proc/version = Linux version 2.6.15-25-386 (buildd@terranova) (gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5)) #1 PREEMPT Wed Jun 14 11:25:49 UTC 2006
/proc/sys/net/ipv4/ip_forward = 1
/proc/sys/net/ipv4/icmp_echo_ignore_all = 0
/proc/sys/net/ipv4/conf/all/proxy_arp = 0
/proc/sys/net/ipv4/conf/all/arp_filter = 0
/proc/sys/net/ipv4/conf/all/arp_ignore = 0
/proc/sys/net/ipv4/conf/all/rp_filter = 1
/proc/sys/net/ipv4/conf/all/log_martians = 0
/proc/sys/net/ipv4/conf/default/proxy_arp = 0
/proc/sys/net/ipv4/conf/default/arp_filter = 0
/proc/sys/net/ipv4/conf/default/arp_ignore = 0
/proc/sys/net/ipv4/conf/default/rp_filter = 1
/proc/sys/net/ipv4/conf/default/log_martians = 0
/proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
/proc/sys/net/ipv4/conf/eth0/arp_filter = 0
/proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
/proc/sys/net/ipv4/conf/eth0/rp_filter = 0
/proc/sys/net/ipv4/conf/eth0/log_martians = 0
/proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
/proc/sys/net/ipv4/conf/eth1/arp_filter = 0
/proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
/proc/sys/net/ipv4/conf/eth1/rp_filter = 0
/proc/sys/net/ipv4/conf/eth1/log_martians = 0
/proc/sys/net/ipv4/conf/lo/proxy_arp = 0
/proc/sys/net/ipv4/conf/lo/arp_filter = 0
/proc/sys/net/ipv4/conf/lo/arp_ignore = 0
/proc/sys/net/ipv4/conf/lo/rp_filter = 0
/proc/sys/net/ipv4/conf/lo/log_martians = 0
/proc/sys/net/ipv4/conf/ppp0/proxy_arp = 0
/proc/sys/net/ipv4/conf/ppp0/arp_filter = 0
/proc/sys/net/ipv4/conf/ppp0/arp_ignore = 0
/proc/sys/net/ipv4/conf/ppp0/rp_filter = 1
/proc/sys/net/ipv4/conf/ppp0/log_martians = 0
Routing Rules
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
Table default:
Table local:
local 192.168.1.1 dev eth0 proto kernel scope host src 192.168.1.1
broadcast 192.168.1.0 dev eth0 proto kernel scope link src 192.168.1.1
broadcast 192.168.0.255 dev eth1 proto kernel scope link src 192.168.0.1
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
local 70.53.228.69 dev ppp0 proto kernel scope host src 70.53.228.69
local 192.168.0.1 dev eth1 proto kernel scope host src 192.168.0.1
broadcast 192.168.1.255 dev eth0 proto kernel scope link src 192.168.1.1
broadcast 192.168.0.0 dev eth1 proto kernel scope link src 192.168.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
Table main:
64.230.197.144 dev ppp0 proto kernel scope link src 70.53.228.69
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.1
192.168.0.0/24 dev eth1 proto kernel scope link src 192.168.0.1
default dev ppp0 scope link
ARP
? (192.168.0.5) at 00:16:D3:43:68:C7 [ether] on eth1
Modules
iptable_raw 2176 0
iptable_mangle 2944 1
ipt_ULOG 8196 0
ipt_TTL 2688 0
ipt_ttl 2048 0
ipt_TOS 2560 0
ipt_tos 1664 0
ipt_state 2048 19
ipt_sctp 3072 0
ipt_SAME 2432 0
ipt_REJECT 5632 4
ipt_REDIRECT 2304 2
ipt_recent 11404 0
ipt_realm 2048 0
ipt_pkttype 1792 4
ipt_physdev 2320 0
ipt_owner 2176 0
ipt_NOTRACK 2176 0
ipt_NETMAP 2048 0
ipt_multiport 2816 4
ipt_MASQUERADE 3456 1
ipt_MARK 2560 0
ipt_mark 1792 0
ipt_mac 2048 0
ipt_LOG 6912 10
ipt_limit 2432 0
ipt_length 1792 0
ipt_iprange 1920 0
ipt_helper 2176 0
ipt_hashlimit 9608 0
ipt_esp 2048 0
ipt_ECN 3328 0
ipt_ecn 2304 0
ipt_DSCP 2560 0
ipt_dscp 1792 0
ipt_conntrack 2560 3
ipt_CONNMARK 2432 0
ipt_connmark 1792 0
ipt_comment 1792 0
ipt_CLUSTERIP 8836 0
ipt_CLASSIFY 2176 0
ipt_ah 2048 0
ipt_addrtype 2176 0
ip_nat_irc 2688 0
ip_nat_tftp 1920 0
ip_nat_ftp 3328 0
iptable_nat 7812 1
ip_nat 19628 8 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat
ip_conntrack_irc 6768 1 ip_nat_irc
ip_conntrack_tftp 4216 1 ip_nat_tftp
ip_conntrack_ftp 7792 1 ip_nat_ftp
ip_conntrack 51500 14 ipt_state,ipt_NOTRACK,ipt_MASQUERADE,ipt_helper,ipt_conntrack,ipt_CONNMARK,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp
ipt_TCPMSS 4608 2
ipt_tcpmss 2432 1
iptable_filter 3072 1
ip_tables 22400 47 iptable_raw,iptable_mangle,ipt_ULOG,ipt_TTL,ipt_ttl,ipt_TOS,ipt_tos,ipt_state,ipt_sctp,ipt_SAME,ipt_REJECT,ipt_REDIRECT,ipt_recent,ipt_realm,ipt_pkttype,ipt_physdev,ipt_owner,ipt_NOTRACK,ipt_NETMAP,ipt_multiport,ipt_MASQUERADE,ipt_MARK,ipt_mark,ipt_mac,ipt_LOG,ipt_limit,ipt_length,ipt_iprange,ipt_helper,ipt_hashlimit,ipt_esp,ipt_ECN,ipt_ecn,ipt_DSCP,ipt_dscp,ipt_conntrack,ipt_CONNMARK,ipt_connmark,ipt_comment,ipt_CLUSTERIP,ipt_CLASSIFY,ipt_ah,ipt_addrtype,iptable_nat,ipt_TCPMSS,ipt_tcpmss,iptable_filter
Shorewall has detected the following iptables/netfilter capabilities:
NAT: Available
Packet Mangling: Available
Multi-port Match: Available
Extended Multi-port Match: Available
Connection Tracking Match: Available
Packet Type Match: Available
Policy Match: Not available
Physdev Match: Available
IP range Match: Available
Recent Match: Available
Owner Match: Available
Ipset Match: Not available
CONNMARK Target: Available
Connmark Match: Available
Raw Table: Available
CLASSIFY Target: Available
Traffic Control
Device eth1:
qdisc pfifo_fast 0: bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
Sent 29554614574 bytes 26131614 pkts (dropped 0, overlimits 0)
Device eth0:
qdisc pfifo_fast 0: bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
Sent 18153832858 bytes 25653110 pkts (dropped 0, overlimits 0)
Device ppp0:
qdisc cbq 8000: rate 30000bit cell 8b (bounded,isolated) prio no-transmit/8 weight 30000bit allot 1492b
level 2 ewma 5 avpkt 1000b maxidle 8333us
Sent 12639129 bytes 27622 pkts (dropped 0, overlimits 43526)
backlog 46p
borrowed 0 overactions 0 avgidle 273065 undertime 0
qdisc sfq 8025: parent 8000:3 limit 128p quantum 1492b flows 128/1024 perturb 15sec
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
qdisc pfifo 8026: parent 8000:4 limit 3p
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
qdisc cbq 9000: parent 8000:2 rate 20000bit cell 8b (bounded,isolated) prio no-transmit/8 weight 20000bit allot 1492b
level 1 ewma 5 avpkt 1000b maxidle 12499us
Sent 12639129 bytes 27622 pkts (dropped 0, overlimits 0)
backlog 46p
borrowed 0 overactions 0 avgidle 1351 undertime 0
qdisc sfq 8027: parent 9000:1 limit 128p quantum 1492b flows 128/1024 perturb 15sec
Sent 12639129 bytes 27622 pkts (dropped 0, overlimits 0)
backlog 46p
class cbq 8000: root rate 30000bit cell 8b (bounded,isolated) prio no-transmit/8 weight 30000bit allot 1492b
level 2 ewma 5 avpkt 1000b maxidle 8333us
Sent 12624244 bytes 27576 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 273065 undertime 0
class cbq 8000:1 parent 8000: rate 30000bit cell 8b (bounded) prio no-transmit/8 allot 1500b
level 1 ewma 5 avpkt 1000b maxidle 8333us
Sent 12624244 bytes 27576 pkts (dropped 0, overlimits 0)
rate 61688bit 13pps
borrowed 0 overactions 0 avgidle 273065 undertime 0
class cbq 8000:2 parent 8000:1 leaf 9000: rate 20000bit cell 8b (bounded) prio 6/6 weight 20000bit allot 1500b
level 0 ewma 5 avpkt 1000b maxidle 8333us
split 8000: defmap 0000ff7f
Sent 12624244 bytes 27576 pkts (dropped 0, overlimits 47680)
rate 61688bit 13pps backlog 46p
borrowed 0 overactions 11841 avgidle -160801 undertime 172032
class cbq 8000:3 parent 8000:1 leaf 8025: rate 10000bit cell 8b (bounded,isolated) prio 2/2 weight 10000bit allot 1500b
level 0 ewma 5 avpkt 1000b maxidle 473051us
split 8000: defmap 00000080
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 1.5501e+07 undertime 0
class cbq 8000:4 parent 8000:1 leaf 8026: rate 30000bit cell 8b (bounded) prio 1/1 weight 30000bit allot 1500b
level 0 ewma 5 avpkt 1000b maxidle 8333us
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 0 undertime 0
class cbq 9000: root rate 20000bit cell 8b (bounded,isolated) prio no-transmit/8 weight 20000bit allot 1492b
level 1 ewma 5 avpkt 1000b maxidle 12499us
Sent 12622804 bytes 27575 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 1351 undertime 0
class cbq 9000:1 parent 9000: leaf 8027: rate 20000bit cell 8b prio 6/6 weight 20000bit allot 1500b
level 0 ewma 5 avpkt 1000b maxidle 12499us
split 9000: defmap 0000ffff
Sent 12622804 bytes 27575 pkts (dropped 0, overlimits 0)
rate 61608bit 13pps backlog 46p
borrowed 0 overactions 0 avgidle 1351 undertime 0
Traffic Filters
Device eth1:
Device eth0:
Device ppp0:
filter parent 8000: protocol ip pref 50 fw
filter parent 8000: protocol ip pref 50 fw handle 0x1 classid 8000:4
filter parent 8000: protocol ip pref 60 fw
filter parent 8000: protocol ip pref 60 fw handle 0x2 classid 8000:3