All pastes #243059 Raw Edit

Mine

public text v1 · immutable
·published 2006-11-08 01:20 UTC
rendered paste body
Shorewall-3.2.4 Dump at stageServer - Tue Nov  7 17:17:45 PST 2006

Counters reset Tue Nov  7 17:13:08 PST 2006

Chain Drop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
  310 24579 eth0_in    all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
  288 41024 eth1_in    all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 eth0_fwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 eth1_fwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
  283  139K fw2net     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
  288 50832 fw2loc     all  --  *      eth1    0.0.0.0/0            10.0.0.0/24         
    7   516 fw2loc     all  --  *      eth1    0.0.0.0/0            10.0.0.0/8          
    0     0 fw2loc     all  --  *      eth1    0.0.0.0/0            10.0.0.0/8          
    0     0 fw2loc     all  --  *      eth1    0.0.0.0/0            255.255.255.255     
    0     0 fw2loc     all  --  *      eth1    0.0.0.0/0            224.0.0.0/4         
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain Reject (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain all2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (4 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 net2loc    all  --  *      eth1    0.0.0.0/0            10.0.0.0/24         
    0     0 net2loc    all  --  *      eth1    0.0.0.0/0            10.0.0.0/8          
    0     0 net2loc    all  --  *      eth1    0.0.0.0/0            10.0.0.0/8          

Chain eth0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    3   180 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    3   180 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    3   180 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
  309 24452 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  310 24579 net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 loc_frwd   all  --  *      *       10.0.0.0/24          0.0.0.0/0           
    0     0 loc_frwd   all  --  *      *       10.0.0.0/8           0.0.0.0/0           
    0     0 loc_frwd   all  --  *      *       10.0.0.0/8           0.0.0.0/0           

Chain eth1_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  288 41024 loc2fw     all  --  *      *       10.0.0.0/24          0.0.0.0/0           
    0     0 loc2fw     all  --  *      *       10.0.0.0/8           0.0.0.0/0           
    0     0 loc2fw     all  --  *      *       10.0.0.0/8           0.0.0.0/0           

Chain fw2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2all:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (5 references)
 pkts bytes target     prot opt in     out     source               destination         
  288 50832 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    4   336 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:111 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1521 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    3   180 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2loc:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  282  139K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    1    74 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2net:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:loc2all:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (3 references)
 pkts bytes target     prot opt in     out     source               destination         
  288 41024 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:loc2fw:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc_frwd (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 loc2net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logdrop:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:logreject:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2all:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  307 24399 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    3   180 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 reject     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2fw:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2loc:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain norfc1918 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 rfc1918    all  --  *      *       172.16.0.0/12        0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 172.16.0.0/12 
    0     0 rfc1918    all  --  *      *       192.168.0.0/16       0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 192.168.0.0/16 
    0     0 rfc1918    all  --  *      *       10.0.0.0/8           0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 10.0.0.0/8 

Chain reject (17 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain rfc1918 (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:rfc1918:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       63.251.112.223       0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       63.251.112.223       0.0.0.0/0           
    0     0 LOG        all  --  *      *       10.255.255.255       0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       10.255.255.255       0.0.0.0/0           
    0     0 LOG        all  --  *      *       255.255.255.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 LOG        all  --  *      *       224.0.0.0/4          0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           

Chain tcpflags (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:0 flags:0x17/0x02 

Log (/var/log/messages)

Nov  7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=61626 PROTO=TCP SPT=63774 DPT=353 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=41889 PROTO=TCP SPT=63774 DPT=1241 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=20626 PROTO=TCP SPT=63774 DPT=849 WINDOW=2048 RES=0x00 SYN URGP=0 
Nov  7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=13459 PROTO=TCP SPT=63774 DPT=748 WINDOW=3072 RES=0x00 SYN URGP=0 
Nov  7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=2748 PROTO=TCP SPT=63774 DPT=325 WINDOW=4096 RES=0x00 SYN URGP=0 
Nov  7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=47739 PROTO=TCP SPT=63774 DPT=2006 WINDOW=3072 RES=0x00 SYN URGP=0 
Nov  7 14:42:13 fw2net:REJECT:IN= OUT=eth0 SRC=63.251.112.215 DST=63.251.112.219 LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=53333 PROTO=TCP SPT=63773 DPT=899 WINDOW=4096 RES=0x00 SYN URGP=0 
Nov  7 14:58:56 net2fw:DROP:IN=eth0 OUT= SRC=60.11.125.41 DST=63.251.112.215 LEN=782 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=33643 DPT=1026 LEN=762 
Nov  7 14:58:56 net2fw:DROP:IN=eth0 OUT= SRC=60.11.125.41 DST=63.251.112.215 LEN=782 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=33643 DPT=1027 LEN=762 
Nov  7 15:13:15 net2fw:DROP:IN=eth0 OUT= SRC=74.52.74.82 DST=63.251.112.215 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=35436 PROTO=TCP SPT=111 DPT=111 WINDOW=30148 RES=0x00 SYN URGP=0 
Nov  7 15:22:42 net2fw:DROP:IN=eth0 OUT= SRC=85.56.41.94 DST=63.251.112.215 LEN=63 TOS=0x00 PREC=0x00 TTL=104 ID=53964 PROTO=UDP SPT=4672 DPT=4672 LEN=43 
Nov  7 15:41:24 net2fw:DROP:IN=eth0 OUT= SRC=80.103.96.228 DST=63.251.112.215 LEN=63 TOS=0x00 PREC=0x00 TTL=103 ID=44757 PROTO=UDP SPT=10496 DPT=4672 LEN=43 
Nov  7 16:04:27 net2fw:DROP:IN=eth0 OUT= SRC=221.4.39.231 DST=63.251.112.215 LEN=404 TOS=0x00 PREC=0x00 TTL=114 ID=17111 PROTO=UDP SPT=4176 DPT=1434 LEN=384 
Nov  7 16:42:27 net2fw:DROP:IN=eth0 OUT= SRC=201.19.194.175 DST=63.251.112.215 LEN=63 TOS=0x00 PREC=0x00 TTL=112 ID=20555 PROTO=UDP SPT=61844 DPT=4672 LEN=43 
Nov  7 16:55:43 net2fw:DROP:IN=eth0 OUT= SRC=221.209.244.74 DST=63.251.112.215 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=32886 PROTO=TCP SPT=6000 DPT=8080 WINDOW=16384 RES=0x00 SYN URGP=0 
Nov  7 16:57:40 net2fw:DROP:IN=eth0 OUT= SRC=60.11.125.41 DST=63.251.112.215 LEN=782 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=58412 DPT=1026 LEN=762 
Nov  7 16:57:40 net2fw:DROP:IN=eth0 OUT= SRC=60.11.125.41 DST=63.251.112.215 LEN=782 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=58412 DPT=1027 LEN=762 
Nov  7 16:57:45 fw2loc:REJECT:IN= OUT=eth1 SRC=10.0.0.215 DST=10.0.2.99 LEN=60 TOS=0x10 PREC=0x00 TTL=64 ID=27273 DF PROTO=TCP SPT=37756 DPT=25 WINDOW=5840 RES=0x00 SYN URGP=0 
Nov  7 16:59:41 fw2loc:REJECT:IN= OUT=eth1 SRC=10.0.0.215 DST=10.0.2.99 LEN=60 TOS=0x10 PREC=0x00 TTL=64 ID=59042 DF PROTO=TCP SPT=37757 DPT=25 WINDOW=5840 RES=0x00 SYN URGP=0 
Nov  7 17:04:38 net2fw:DROP:IN=eth0 OUT= SRC=221.209.244.73 DST=63.251.112.215 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=49745 PROTO=TCP SPT=6000 DPT=7212 WINDOW=16384 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 327 packets, 16647 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 5 packets, 362 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    1    74 eth0_masq  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 5 packets, 362 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all  --  *      *       10.0.0.0/8           0.0.0.0/0           

Mangle Table

Chain PREROUTING (policy ACCEPT 1391 packets, 131K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  796 76022 tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 1067 packets, 114K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 3803K packets, 718M bytes)
 pkts bytes target     prot opt in     out     source               destination         
  578  191K tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 961 packets, 265K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  578  191K tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table

tcp      6 431077 ESTABLISHED src=10.0.0.215 dst=10.0.0.176 sport=50007 dport=22 packets=1522 bytes=88228 src=10.0.0.176 dst=10.0.0.215 sport=22 dport=50007 packets=2109 bytes=604947 [ASSURED] mark=0 use=1
tcp      6 431999 ESTABLISHED src=209.216.245.214 dst=63.251.112.215 sport=34298 dport=22 packets=6327 bytes=453228 src=63.251.112.215 dst=209.216.245.214 sport=22 dport=34298 packets=4724 bytes=1375285 [ASSURED] mark=0 use=1
tcp      6 430233 ESTABLISHED src=209.216.245.214 dst=63.251.112.215 sport=4589 dport=22 packets=96 bytes=13640 src=63.251.112.215 dst=209.216.245.214 sport=22 dport=4589 packets=106 bytes=67805 [ASSURED] mark=0 use=1
tcp      6 431065 ESTABLISHED src=80.73.195.33 dst=63.251.112.215 sport=43034 dport=22 packets=660 bytes=44504 src=63.251.112.215 dst=80.73.195.33 sport=22 dport=43034 packets=730 bytes=399725 [ASSURED] mark=0 use=1
tcp      6 419785 ESTABLISHED src=127.0.0.1 dst=127.0.0.1 sport=41199 dport=39062 packets=2 bytes=112 src=127.0.0.1 dst=127.0.0.1 sport=39062 dport=41199 packets=1 bytes=60 [ASSURED] mark=0 use=1
udp      17 135 src=10.0.0.215 dst=10.0.0.164 sport=1023 dport=2049 packets=3289321 bytes=596388976 src=10.0.0.164 dst=10.0.0.215 sport=2049 dport=1023 packets=3288198 bytes=1576019520 [ASSURED] mark=0 use=1
icmp     1 8 src=10.0.0.215 dst=10.0.2.99 type=8 code=0 id=59691 packets=4 bytes=336 [UNREPLIED] src=10.0.2.99 dst=10.0.0.215 type=0 code=0 id=59691 packets=0 bytes=0 mark=0 use=1
tcp      6 427507 ESTABLISHED src=10.0.0.215 dst=10.0.0.176 sport=47563 dport=22 packets=1420 bytes=107276 src=10.0.0.176 dst=10.0.0.215 sport=22 dport=47563 packets=805 bytes=81411 [ASSURED] mark=0 use=1
tcp      6 109 SYN_SENT src=10.0.0.215 dst=10.0.2.99 sport=54681 dport=25 packets=3 bytes=180 [UNREPLIED] src=10.0.2.99 dst=10.0.0.215 sport=25 dport=54681 packets=0 bytes=0 mark=0 use=1
tcp      6 428322 ESTABLISHED src=10.0.0.215 dst=10.0.0.176 sport=50498 dport=22 packets=1660 bytes=115596 src=10.0.0.176 dst=10.0.0.215 sport=22 dport=50498 packets=1177 bytes=148355 [ASSURED] mark=0 use=1
tcp      6 428317 ESTABLISHED src=80.73.195.33 dst=63.251.112.215 sport=38524 dport=22 packets=1386 bytes=105626 src=63.251.112.215 dst=80.73.195.33 sport=22 dport=38524 packets=977 bytes=141193 [ASSURED] mark=0 use=1
tcp      6 431825 ESTABLISHED src=209.216.245.214 dst=63.251.112.215 sport=2074 dport=22 packets=4600 bytes=396776 src=63.251.112.215 dst=209.216.245.214 sport=22 dport=2074 packets=4002 bytes=1041693 [ASSURED] mark=0 use=1
tcp      6 427502 ESTABLISHED src=209.216.245.214 dst=63.251.112.215 sport=1493 dport=22 packets=1251 bytes=67704 src=63.251.112.215 dst=209.216.245.214 sport=22 dport=1493 packets=931 bytes=60701 [ASSURED] mark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: vif0.0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
3: veth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
4: vif0.1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
5: veth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
6: vif0.2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
7: veth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
8: vif0.3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
9: veth3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
10: vif0.4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
11: veth4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
12: vif0.5: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
13: veth5: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
14: vif0.6: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
15: veth6: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
16: vif0.7: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
17: veth7: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
18: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:16:3e:48:6b:2e brd ff:ff:ff:ff:ff:ff
    inet 63.251.112.215/28 brd 63.251.112.223 scope global eth0
    inet6 fe80::216:3eff:fe48:6b2e/64 scope link 
       valid_lft forever preferred_lft forever
19: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:16:3e:48:6b:2f brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.215/8 brd 10.255.255.255 scope global eth1
    inet 10.0.2.155/8 brd 10.255.255.255 scope global secondary eth1:1
    inet6 fe80::216:3eff:fe48:6b2f/64 scope link 
       valid_lft forever preferred_lft forever
20: sit0: <NOARP> mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0

IP Stats

1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    21538822   20883    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    21538822   20883    0       0       0       0      
2: vif0.0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
3: veth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
4: vif0.1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
5: veth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
6: vif0.2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
7: veth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
8: vif0.3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
9: veth3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
10: vif0.4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
11: veth4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
12: vif0.5: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
13: veth5: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
14: vif0.6: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
15: veth6: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
16: vif0.7: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
17: veth7: <BROADCAST,MULTICAST> mtu 1500 qdisc noop 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
18: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:16:3e:48:6b:2e brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    232562184  3091623  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    88893116   340844   0       0       0       0      
19: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:16:3e:48:6b:2f brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    1425018239 11507084 0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    662634030  3488867  0       0       0       0      
20: sit0: <NOARP> mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      

Bridges

bridge name	bridge id		STP enabled	interfaces

/proc

   /proc/version = Linux version 2.6.16-xen (xenod@freefall.cl.cam.ac.uk) (gcc version 3.3.3 20040412 (Red Hat Linux 3.3.3-7)) #1 SMP Thu Apr 13 18:46:07 BST 2006
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 63.251.112.223 dev eth0  proto kernel  scope link  src 63.251.112.215 
local 10.0.0.215 dev eth1  proto kernel  scope host  src 10.0.0.215 
local 10.0.2.155 dev eth1  proto kernel  scope host  src 10.0.0.215 
broadcast 10.255.255.255 dev eth1  proto kernel  scope link  src 10.0.0.215 
local 63.251.112.215 dev eth0  proto kernel  scope host  src 63.251.112.215 
broadcast 63.251.112.208 dev eth0  proto kernel  scope link  src 63.251.112.215 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

63.251.112.208/28 dev eth0  proto kernel  scope link  src 63.251.112.215 
10.0.0.0/8 dev eth1  proto kernel  scope link  src 10.0.0.215 
127.0.0.0/8 dev lo  scope link 
default via 63.251.112.222 dev eth0  metric 1 

ARP

? (10.0.0.176) at 00:0B:CD:CD:41:B8 [ether] on eth1
? (63.251.112.222) at 00:00:0C:07:AC:01 [ether] on eth0
? (10.0.2.99) at 00:0D:60:84:3E:FE [ether] on eth1
? (10.0.0.164) at 00:A0:24:9C:77:DA [ether] on eth1

Modules

iptable_raw             2112  0 
ipt_ULOG                6980  0 
ipt_TTL                 2496  0 
ipt_ttl                 2016  0 
ipt_TOS                 2400  0 
ipt_tos                 1792  0 
ipt_TCPMSS              4128  0 
ipt_SAME                2592  0 
ipt_REJECT              4896  4 
ipt_REDIRECT            2304  0 
ipt_recent              9996  0 
ipt_policy              3616  0 
ipt_owner               2304  0 
ipt_NETMAP              2176  0 
ipt_multiport           2688  4 
ipt_MASQUERADE          3296  1 
ipt_LOG                 6784  20 
ipt_iprange             1952  0 
ipt_hashlimit           7976  0 
ipt_esp                 2080  0 
ipt_ECN                 3264  0 
ipt_ecn                 2336  0 
ipt_DSCP                2432  0 
ipt_dscp                1856  0 
ipt_CLUSTERIP           7940  0 
ipt_ah                  2080  0 
ipt_addrtype            2112  0 
ip_nat_tftp             1920  0 
ip_nat_snmp_basic      11044  0 
ip_nat_pptp             6436  0 
ip_nat_irc              2656  0 
ip_nat_ftp              3360  0 
ip_nat_amanda           2368  0 
ip_conntrack_tftp       3992  1 ip_nat_tftp
ip_conntrack_pptp      11152  1 ip_nat_pptp
ip_conntrack_netbios_ns     2976  0 
ip_conntrack_irc        6064  1 ip_nat_irc
ip_conntrack_ftp        7344  1 ip_nat_ftp
ip_conntrack_amanda     4200  1 ip_nat_amanda
iptable_nat             8068  1 
ip_nat                 17996  10 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ip_nat_tftp,ip_nat_pptp,ip_nat_irc,ip_nat_ftp,ip_nat_amanda,iptable_nat
ip_conntrack           53112  20 ipt_MASQUERADE,ip_nat_tftp,ip_nat_snmp_basic,ip_nat_pptp,ip_nat_irc,ip_nat_ftp,ip_nat_amanda,ip_conntrack_tftp,ip_conntrack_pptp,ip_conntrack_netbios_ns,ip_conntrack_irc,ip_conntrack_ftp,ip_conntrack_amanda,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,ip_nat
iptable_mangle          2752  1 
iptable_filter          2784  1 
ip_tables              13620  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter


Traffic Control

Device eth0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 88893116 bytes 340844 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 

Device eth1:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 662634030 bytes 3488867 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


TC Filters

Device eth0:

Device eth1: