All pastes #50742 Raw Edit

Miscellany

public text v1 · immutable
#50742 ·published 2006-04-23 19:06 UTC
rendered paste body
Shorewall-3.0.5 Dump at secondary - Sun Apr 23 14:45:30 EDT 2006

Counters reset Sun Apr 23 14:42:06 EDT 2006

Chain Drop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
   63 27865 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
   63 27865 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    3   234 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    5   240 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  122  8587 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
   64  6121 ppp0_in    all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
   10   800 eth0_in    all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
  157 13125 eth1_in    all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
  290 21778 eth2_in    all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  277 13796 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
 1709  194K ppp0_fwd   all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
    4   303 eth0_fwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
 3456 2049K eth1_fwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 1283  148K eth2_fwd   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  122  8587 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    1   328 ACCEPT     udp  --  *      eth1    0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
   10   666 fw2all     all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
  245 57411 fw2all     all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
   16  1850 fw2loc     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
   10   800 fw2dmz     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain Reject (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
    4   424 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    4   424 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain all2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2all (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    4   303 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dmz2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:995 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:993 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
   10   800 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 dmz2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    2    96 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (8 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
    4   303 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2all    all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
    4   303 dmz2all    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 dmz2all    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           

Chain eth0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10   800 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
   10   800 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
   10   800 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   10   800 dmz2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  176 10696 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 2899 2003K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 1818 1045K loc2net    all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
 1638 1004K loc2net    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2dmz    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain eth1_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  148 11764 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    1   328 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
   10  1409 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  156 12797 loc2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  141  8652 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  141  8652 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  141  8652 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
 1076  132K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
 1279  148K net2loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    4   160 net2dmz    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain eth2_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    5   272 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    5   272 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    4   216 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
  285 21484 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  290 21778 net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2all (4 references)
 pkts bytes target     prot opt in     out     source               destination         
  253 57937 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    2   140 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10   800 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:5900:5909 
    0     0 fw2all     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   15  1760 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    1    90 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 fw2all     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2all (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    4   424 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    4   424 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2dmz (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:995 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:993 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3389 
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.100           0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.100           0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.91            0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.91            0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.95            0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.95            0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.97            0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.97            0.0.0.0/0           udp 
    0     0 loc2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    9  1361 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
  146 11388 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:995 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:993 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.100           0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.100           0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.91            0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.91            0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.95            0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.95            0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.97            0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.97            0.0.0.0/0           udp 
    0     0 loc2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 3280 2038K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
   12   576 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    2    96 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:995 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:993 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:119 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:563 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:123 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            216.126.78.135      tcp dpt:25 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            216.126.78.135      tcp dpt:8025 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:9980:9984 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:9980:9984 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:4890:4899 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:4890:4899 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:88 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:53533:53537 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:53533:53537 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3389 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3388 
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
    9   512 ACCEPT     tcp  --  *      *       10.0.0.100           0.0.0.0/0           tcp 
  124  6288 ACCEPT     udp  --  *      *       10.0.0.100           0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.91            0.0.0.0/0           tcp 
   25  2800 ACCEPT     udp  --  *      *       10.0.0.91            0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.95            0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.95            0.0.0.0/0           udp 
    0     0 ACCEPT     tcp  --  *      *       10.0.0.97            0.0.0.0/0           tcp 
    0     0 ACCEPT     udp  --  *      *       10.0.0.97            0.0.0.0/0           udp 
    4   424 loc2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2all (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   63 27865 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
   53 27295 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2dmz (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    4   160 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:5900:5909 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    3   132 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:995 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:993 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:4559 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3389 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3388 
    0     0 ACCEPT     47   --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1723 
   52 25379 net2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  308 23110 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:5900:5909 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:995 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:993 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
   26  1727 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    9   576 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     tcp  --  *      *       206.248.0.0/16       0.0.0.0/0           tcp dpt:10000 
   11  2486 net2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 2505  291K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:5900:5909 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.0.0.100          tcp dpt:40611 
   96  4764 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.0.0.100          tcp dpt:4662 
  332 21029 ACCEPT     udp  --  *      *       0.0.0.0/0            10.0.0.100          udp dpt:4672 
    0     0 ACCEPT     tcp  --  *      *       206.248.0.0/16       10.0.0.100          tcp dpt:5901 
    0     0 ACCEPT     tcp  --  *      *       206.248.0.0/16       10.0.0.91           tcp dpt:53533 
    0     0 ACCEPT     udp  --  *      *       206.248.0.0/16       10.0.0.91           udp dpt:53533 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            10.0.0.91           tcp dpt:53599 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            10.0.0.91           udp dpt:53599 
    0     0 net2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain norfc1918 (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 rfc1918    all  --  *      *       172.16.0.0/12        0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 172.16.0.0/12 
    0     0 rfc1918    all  --  *      *       192.168.0.0/16       0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 192.168.0.0/16 
    0     0 rfc1918    all  --  *      *       10.0.0.0/8           0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 10.0.0.0/8 

Chain ppp0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  342 42652 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  342 42652 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  342 42652 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
 1381  149K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
 1654  169K net2loc    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
   55 25511 net2dmz    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain ppp0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   41  4517 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
   41  4517 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
   40  4477 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
    6   410 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   64  6121 net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain reject (10 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = multicast 
    0     0 DROP       all  --  *      *       206.248.149.255      0.0.0.0/0           
    0     0 DROP       all  --  *      *       10.0.0.255           0.0.0.0/0           
    0     0 DROP       all  --  *      *       216.123.169.255      0.0.0.0/0           
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    4   424 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain rfc1918 (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:rfc1918:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       206.248.149.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       206.248.149.255      0.0.0.0/0           
    0     0 LOG        all  --  *      *       10.0.0.255           0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       10.0.0.255           0.0.0.0/0           
    0     0 LOG        all  --  *      *       216.123.169.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       216.123.169.255      0.0.0.0/0           
    0     0 LOG        all  --  *      *       255.255.255.255      0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       255.255.255.255      0.0.0.0/0           
    0     0 LOG        all  --  *      *       224.0.0.0/4          0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           

Chain tcpflags (8 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:0 flags:0x17/0x02

 
Apr 23 13:15:09 INPUT:REJECT:IN=ppp0 OUT= SRC=210.85.202.213 DST=206.248.149.193 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=14601 DF PROTO=TCP SPT=3063 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 23 13:15:09 INPUT:REJECT:IN=ppp0 OUT= SRC=212.194.33.91 DST=206.248.149.193 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=34590 DF PROTO=TCP SPT=4249 DPT=4662 WINDOW=60352 RES=0x00 SYN URGP=0 
Apr 23 13:15:09 INPUT:REJECT:IN=ppp0 OUT= SRC=84.136.205.76 DST=206.248.149.193 LEN=55 TOS=0x00 PREC=0x00 TTL=114 ID=16802 PROTO=UDP SPT=4672 DPT=4672 LEN=35 
Apr 23 13:15:09 INPUT:REJECT:IN=ppp0 OUT= SRC=85.216.199.18 DST=206.248.149.193 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=5281 DF PROTO=TCP SPT=1144 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 23 13:15:10 INPUT:REJECT:IN=ppp0 OUT= SRC=212.194.33.91 DST=206.248.149.193 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=34668 DF PROTO=TCP SPT=4249 DPT=4662 WINDOW=60352 RES=0x00 SYN URGP=0 
Apr 23 13:15:10 INPUT:REJECT:IN=ppp0 OUT= SRC=88.154.238.229 DST=206.248.149.193 LEN=55 TOS=0x00 PREC=0x00 TTL=114 ID=12840 PROTO=UDP SPT=4672 DPT=4672 LEN=35 
Apr 23 13:15:10 INPUT:REJECT:IN=ppp0 OUT= SRC=210.85.202.213 DST=206.248.149.193 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=14659 DF PROTO=TCP SPT=3063 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 23 13:15:10 INPUT:REJECT:IN=ppp0 OUT= SRC=212.194.33.91 DST=206.248.149.193 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=34739 DF PROTO=TCP SPT=4249 DPT=4662 WINDOW=60352 RES=0x00 SYN URGP=0 
Apr 23 13:15:11 INPUT:REJECT:IN=ppp0 OUT= SRC=86.202.1.125 DST=206.248.149.193 LEN=55 TOS=0x00 PREC=0x00 TTL=112 ID=36373 PROTO=UDP SPT=4672 DPT=4672 LEN=35 
Apr 23 13:15:12 INPUT:REJECT:IN=ppp0 OUT= SRC=85.60.54.62 DST=206.248.149.193 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=51451 DF PROTO=TCP SPT=34472 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 23 13:15:13 INPUT:REJECT:IN=ppp0 OUT= SRC=85.60.54.62 DST=206.248.149.193 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=51497 DF PROTO=TCP SPT=34472 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 23 13:15:13 INPUT:REJECT:IN=ppp0 OUT= SRC=172.211.238.58 DST=206.248.149.193 LEN=63 TOS=0x00 PREC=0x00 TTL=111 ID=30357 PROTO=UDP SPT=4672 DPT=4672 LEN=43 
Apr 23 13:15:13 INPUT:REJECT:IN=ppp0 OUT= SRC=85.60.54.62 DST=206.248.149.193 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=51527 DF PROTO=TCP SPT=34472 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 23 13:15:14 INPUT:REJECT:IN=ppp0 OUT= SRC=84.189.247.36 DST=206.248.149.193 LEN=63 TOS=0x00 PREC=0x00 TTL=114 ID=15995 PROTO=UDP SPT=4672 DPT=4672 LEN=43 
Apr 23 13:27:57 rfc1918:DROP:IN=ppp0 OUT=eth0 SRC=10.141.0.10 DST=206.248.149.247 LEN=404 TOS=0x00 PREC=0x00 TTL=108 ID=16397 PROTO=UDP SPT=1555 DPT=1434 LEN=384 
Apr 23 13:37:29 rfc1918:DROP:IN=ppp0 OUT=eth0 SRC=10.141.0.10 DST=206.248.149.206 LEN=404 TOS=0x00 PREC=0x00 TTL=108 ID=39811 PROTO=UDP SPT=1555 DPT=1434 LEN=384 
Apr 23 14:15:42 rfc1918:DROP:IN=ppp0 OUT=eth0 SRC=10.208.220.34 DST=206.248.149.214 LEN=515 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=UDP SPT=31260 DPT=1026 LEN=495 
Apr 23 14:15:42 rfc1918:DROP:IN=ppp0 OUT= SRC=10.10.165.3 DST=206.248.149.255 LEN=515 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=UDP SPT=31260 DPT=1026 LEN=495 
Apr 23 14:30:12 rfc1918:DROP:IN=ppp0 OUT=eth0 SRC=10.140.3.210 DST=206.248.149.250 LEN=404 TOS=0x00 PREC=0x00 TTL=105 ID=43354 PROTO=UDP SPT=1774 DPT=1434 LEN=384 
Apr 23 14:41:07 rfc1918:DROP:IN=ppp0 OUT=eth0 SRC=10.140.3.210 DST=206.248.149.229 LEN=404 TOS=0x00 PREC=0x00 TTL=105 ID=27512 PROTO=UDP SPT=1774 DPT=1434 LEN=384 

NAT Table

Chain PREROUTING (policy ACCEPT 300 packets, 43048 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  376 46751 net_dnat   all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           
  146  8920 net_dnat   all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 435 packets, 26532 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    1    60 ppp0_masq  all  --  *      ppp0    0.0.0.0/0            0.0.0.0/0           
  168  9958 eth2_masq  all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 7 packets, 479 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth2_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  167  9878 SNAT       all  --  *      *       10.0.0.0/24          0.0.0.0/0           to:216.123.169.254 
    0     0 MASQUERADE  all  --  *      *       206.248.149.192/26   0.0.0.0/0           
    1    80 SNAT       all  --  *      *       206.248.137.64       0.0.0.0/0           to:216.123.169.254 

Chain net_dnat (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:40611 to:10.0.0.100 
   97  4816 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:4662 to:10.0.0.100 
  330 20881 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:4672 to:10.0.0.100 
    0     0 DNAT       tcp  --  *      *       206.248.0.0/16       0.0.0.0/0           tcp dpt:5901 to:10.0.0.100 
    0     0 DNAT       tcp  --  *      *       206.248.0.0/16       0.0.0.0/0           tcp dpt:53533 to:10.0.0.91 
    0     0 DNAT       udp  --  *      *       206.248.0.0/16       0.0.0.0/0           udp dpt:53533 to:10.0.0.91 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53599 to:10.0.0.91 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53599 to:10.0.0.91 

Chain ppp0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    60 SNAT       all  --  *      *       206.248.137.64       0.0.0.0/0           to:206.248.149.193 
    0     0 SNAT       all  --  *      *       206.248.137.64       0.0.0.0/0           to:216.123.169.254 
    0     0 SNAT       all  --  *      *       10.0.0.0/24          0.0.0.0/0           to:206.248.149.193 
    0     0 SNAT       all  --  *      *       216.123.169.0/24     0.0.0.0/0           to:206.248.149.193 

Mangle Table

Chain PREROUTING (policy ACCEPT 7560 packets, 2527K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 6453 2427K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0 CONNMARK restore 
  392 47993 routemark  all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0 
  233 15587 routemark  all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0 
  467 33364 tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0 

Chain INPUT (policy ACCEPT 965 packets, 67562 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 6593 packets, 2459K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 6463 2394K tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 318K packets, 76M bytes)
 pkts bytes target     prot opt in     out     source               destination         
  620  107K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0 CONNMARK restore 
  151 11705 tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0 

Chain POSTROUTING (policy ACCEPT 7319 packets, 2553K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 6814 2438K tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain routemark (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  392 47993 MARK       all  --  ppp0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 
  233 15587 MARK       all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
  625 63580 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match !0x0 CONNMARK save mask 0xff 

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

tcp      6 108 TIME_WAIT src=10.0.0.81 dst=206.190.36.17 sport=3391 dport=110 packets=8 bytes=367 src=206.190.36.17 dst=216.123.169.254 sport=110 dport=3391 packets=9 bytes=517 [ASSURED] mark=2 use=1
tcp      6 336678 ESTABLISHED src=206.248.137.43 dst=216.123.169.254 sport=50557 dport=22 packets=305 bytes=25259 src=216.123.169.254 dst=206.248.137.43 sport=22 dport=50557 packets=201 bytes=33107 [ASSURED] mark=0 use=1
tcp      6 431998 ESTABLISHED src=82.71.29.84 dst=206.248.149.193 sport=4576 dport=4662 packets=7 bytes=506 src=10.0.0.100 dst=82.71.29.84 sport=4662 dport=4576 packets=8 bytes=552 [ASSURED] mark=1 use=1
tcp      6 431983 ESTABLISHED src=62.175.90.20 dst=206.248.149.193 sport=3739 dport=4662 packets=8 bytes=488 src=10.0.0.100 dst=62.175.90.20 sport=4662 dport=3739 packets=9 bytes=567 [ASSURED] mark=1 use=1
tcp      6 73 TIME_WAIT src=222.82.71.229 dst=206.248.149.193 sport=64143 dport=4662 packets=9 bytes=553 src=10.0.0.100 dst=222.82.71.229 sport=4662 dport=64143 packets=9 bytes=631 [ASSURED] mark=1 use=1
tcp      6 20 TIME_WAIT src=84.7.118.181 dst=216.123.169.254 sport=4205 dport=4662 packets=9 bytes=566 src=10.0.0.100 dst=84.7.118.181 sport=4662 dport=4205 packets=10 bytes=781 [ASSURED] mark=2 use=1
udp      17 15 src=84.60.223.166 dst=216.123.169.254 sport=4672 dport=4672 packets=1 bytes=55 src=10.0.0.100 dst=84.60.223.166 sport=4672 dport=4672 packets=1 bytes=55 mark=2 use=1
tcp      6 431997 ESTABLISHED src=80.178.128.139 dst=206.248.149.193 sport=4564 dport=4662 packets=9 bytes=610 src=10.0.0.100 dst=80.178.128.139 sport=4662 dport=4564 packets=8 bytes=654 [ASSURED] mark=1 use=1
udp      17 18 src=10.0.0.100 dst=66.135.32.97 sport=4665 dport=5664 packets=1 bytes=50 [UNREPLIED] src=66.135.32.97 dst=216.123.169.254 sport=5664 dport=4665 packets=0 bytes=0 mark=0 use=1
tcp      6 431950 ESTABLISHED src=10.0.0.91 dst=68.238.113.182 sport=1774 dport=1653 packets=594 bytes=39293 src=68.238.113.182 dst=216.123.169.254 sport=1653 dport=1774 packets=824 bytes=77907 [ASSURED] mark=2 use=1
udp      17 12 src=88.73.237.199 dst=206.248.149.193 sport=10021 dport=4672 packets=2 bytes=193 src=10.0.0.100 dst=88.73.237.199 sport=4672 dport=10021 packets=2 bytes=194 [ASSURED] mark=1 use=1
tcp      6 36 TIME_WAIT src=62.148.89.186 dst=206.248.149.193 sport=64013 dport=4662 packets=9 bytes=544 src=10.0.0.100 dst=62.148.89.186 sport=4662 dport=64013 packets=10 bytes=676 [ASSURED] mark=1 use=1
udp      17 7 src=84.101.250.28 dst=206.248.149.193 sport=4672 dport=4672 packets=1 bytes=63 src=10.0.0.100 dst=84.101.250.28 sport=4672 dport=4672 packets=1 bytes=147 mark=1 use=1
udp      17 5 src=10.0.0.100 dst=219.149.195.134 sport=4665 dport=4236 packets=1 bytes=50 [UNREPLIED] src=219.149.195.134 dst=216.123.169.254 sport=4236 dport=4665 packets=0 bytes=0 mark=0 use=1
udp      17 59 src=196.217.70.152 dst=206.248.149.193 sport=4672 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=196.217.70.152 sport=4672 dport=4672 packets=2 bytes=169 [ASSURED] mark=1 use=1
udp      17 14 src=10.0.0.100 dst=64.34.196.70 sport=4665 dport=9844 packets=1 bytes=50 [UNREPLIED] src=64.34.196.70 dst=216.123.169.254 sport=9844 dport=4665 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=67.159.2.229 dst=206.248.149.193 sport=1025 dport=53 packets=2 bytes=100 src=206.248.149.193 dst=67.159.2.229 sport=53 dport=1025 packets=1 bytes=225 [ASSURED] mark=1 use=1
udp      17 8 src=84.189.110.167 dst=206.248.149.193 sport=4672 dport=4672 packets=2 bytes=224 src=10.0.0.100 dst=84.189.110.167 sport=4672 dport=4672 packets=2 bytes=194 [ASSURED] mark=1 use=1
udp      17 59 src=82.232.185.154 dst=206.248.149.193 sport=4672 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=82.232.185.154 sport=4672 dport=4672 packets=2 bytes=169 [ASSURED] mark=1 use=1
udp      17 6 src=10.0.0.100 dst=66.135.33.36 sport=4665 dport=8464 packets=1 bytes=50 [UNREPLIED] src=66.135.33.36 dst=216.123.169.254 sport=8464 dport=4665 packets=0 bytes=0 mark=0 use=1
tcp      6 396862 ESTABLISHED src=10.0.0.100 dst=88.121.14.49 sport=4662 dport=3756 packets=1 bytes=1264 [UNREPLIED] src=88.121.14.49 dst=216.123.169.254 sport=3756 dport=4662 packets=0 bytes=0 mark=0 use=1
tcp      6 391746 ESTABLISHED src=206.248.149.197 dst=84.228.77.60 sport=80 dport=58108 packets=2 bytes=1516 [UNREPLIED] src=84.228.77.60 dst=206.248.149.197 sport=58108 dport=80 packets=0 bytes=0 mark=0 use=1
tcp      6 431999 ESTABLISHED src=10.0.0.100 dst=87.0.204.90 sport=33751 dport=4998 packets=5321 bytes=6671114 src=87.0.204.90 dst=216.123.169.254 sport=4998 dport=33751 packets=3538 bytes=185770 [ASSURED] mark=2 use=1
udp      17 28 src=83.22.95.184 dst=216.123.169.254 sport=4672 dport=4672 packets=1 bytes=63 src=10.0.0.100 dst=83.22.95.184 sport=4672 dport=4672 packets=1 bytes=147 mark=2 use=1
udp      17 16 src=10.0.0.100 dst=213.210.245.55 sport=4672 dport=50382 packets=1 bytes=55 [UNREPLIED] src=213.210.245.55 dst=216.123.169.254 sport=50382 dport=4672 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=85.136.22.58 dst=216.123.169.254 sport=4672 dport=4672 packets=1 bytes=55 src=10.0.0.100 dst=85.136.22.58 sport=4672 dport=4672 packets=1 bytes=55 mark=2 use=1
udp      17 99 src=83.43.9.133 dst=206.248.149.193 sport=29239 dport=4672 packets=2 bytes=191 src=10.0.0.100 dst=83.43.9.133 sport=4672 dport=29239 packets=2 bytes=194 [ASSURED] mark=1 use=1
udp      17 6 src=87.14.104.241 dst=216.123.169.254 sport=4672 dport=4672 packets=1 bytes=63 src=10.0.0.100 dst=87.14.104.241 sport=4672 dport=4672 packets=1 bytes=97 mark=2 use=1
tcp      6 431977 ESTABLISHED src=82.92.214.52 dst=216.123.169.254 sport=48566 dport=4662 packets=5 bytes=323 src=10.0.0.100 dst=82.92.214.52 sport=4662 dport=48566 packets=6 bytes=374 [ASSURED] mark=2 use=1
udp      17 9 src=84.63.103.38 dst=206.248.149.193 sport=4814 dport=4672 packets=2 bytes=256 src=10.0.0.100 dst=84.63.103.38 sport=4672 dport=4814 packets=2 bytes=194 [ASSURED] mark=1 use=1
udp      17 43 src=24.232.51.153 dst=216.123.169.254 sport=52230 dport=4672 packets=2 bytes=191 src=10.0.0.100 dst=24.232.51.153 sport=4672 dport=52230 packets=2 bytes=194 [ASSURED] mark=2 use=1
udp      17 166 src=213.60.69.206 dst=206.248.149.193 sport=4672 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=213.60.69.206 sport=4672 dport=4672 packets=2 bytes=144 [ASSURED] mark=1 use=1
udp      17 132 src=213.238.95.98 dst=216.123.169.254 sport=4672 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=213.238.95.98 sport=4672 dport=4672 packets=2 bytes=194 [ASSURED] mark=2 use=1
udp      17 90 src=10.0.0.91 dst=64.180.112.19 sport=5416 dport=51251 packets=3 bytes=378 src=64.180.112.19 dst=216.123.169.254 sport=51251 dport=5416 packets=3 bytes=158 [ASSURED] mark=2 use=1
udp      17 92 src=83.55.24.170 dst=216.123.169.254 sport=4672 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=83.55.24.170 sport=4672 dport=4672 packets=2 bytes=194 [ASSURED] mark=2 use=1
tcp      6 108 TIME_WAIT src=87.74.16.112 dst=206.248.149.193 sport=62621 dport=4662 packets=9 bytes=539 src=10.0.0.100 dst=87.74.16.112 sport=4662 dport=62621 packets=9 bytes=609 [ASSURED] mark=1 use=1
tcp      6 77 TIME_WAIT src=64.229.203.140 dst=216.123.169.254 sport=61655 dport=4662 packets=10 bytes=631 src=10.0.0.100 dst=64.229.203.140 sport=4662 dport=61655 packets=10 bytes=770 [ASSURED] mark=2 use=1
udp      17 26 src=10.0.0.100 dst=207.226.112.18 sport=4665 dport=4665 packets=1 bytes=46 [UNREPLIED] src=207.226.112.18 dst=216.123.169.254 sport=4665 dport=4665 packets=0 bytes=0 mark=0 use=1
tcp      6 431968 ESTABLISHED src=201.9.35.93 dst=216.123.169.254 sport=1232 dport=4662 packets=9 bytes=679 src=10.0.0.100 dst=201.9.35.93 sport=4662 dport=1232 packets=9 bytes=726 [ASSURED] mark=2 use=1
udp      17 23 src=10.0.0.100 dst=61.151.239.219 sport=4665 dport=8892 packets=1 bytes=50 [UNREPLIED] src=61.151.239.219 dst=216.123.169.254 sport=8892 dport=4665 packets=0 bytes=0 mark=0 use=1
tcp      6 96 TIME_WAIT src=10.0.0.100 dst=67.70.84.189 sport=57832 dport=4662 packets=9 bytes=627 src=67.70.84.189 dst=216.123.169.254 sport=4662 dport=57832 packets=8 bytes=671 [ASSURED] mark=2 use=1
tcp      6 98 TIME_WAIT src=10.0.0.100 dst=72.56.67.88 sport=49258 dport=4662 packets=11 bytes=888 src=72.56.67.88 dst=216.123.169.254 sport=4662 dport=49258 packets=9 bytes=939 [ASSURED] mark=2 use=1
udp      17 92 src=88.5.39.64 dst=206.248.149.193 sport=4692 dport=4672 packets=2 bytes=191 src=10.0.0.100 dst=88.5.39.64 sport=4672 dport=4692 packets=2 bytes=144 [ASSURED] mark=1 use=1
tcp      6 387192 ESTABLISHED src=10.0.0.100 dst=218.1.15.214 sport=4662 dport=49845 packets=1 bytes=123 [UNREPLIED] src=218.1.15.214 dst=216.123.169.254 sport=49845 dport=4662 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=10.0.0.100 dst=66.172.60.146 sport=4665 dport=4665 packets=1 bytes=46 [UNREPLIED] src=66.172.60.146 dst=216.123.169.254 sport=4665 dport=4665 packets=0 bytes=0 mark=0 use=1
tcp      6 431961 ESTABLISHED src=10.0.0.100 dst=216.126.78.142 sport=45404 dport=993 packets=7097 bytes=3465507 src=216.126.78.142 dst=216.123.169.254 sport=993 dport=45404 packets=8433 bytes=8332406 [ASSURED] mark=2 use=1
udp      17 11 src=206.64.119.136 dst=206.248.149.193 sport=45855 dport=53 packets=1 bytes=66 src=206.248.149.193 dst=206.64.119.136 sport=53 dport=45855 packets=1 bytes=193 mark=1 use=1
tcp      6 114 TIME_WAIT src=201.19.71.65 dst=206.248.149.193 sport=2957 dport=4662 packets=11 bytes=603 src=10.0.0.100 dst=201.19.71.65 sport=4662 dport=2957 packets=12 bytes=816 [ASSURED] mark=1 use=1
tcp      6 431989 ESTABLISHED src=213.140.17.106 dst=206.248.149.193 sport=54351 dport=4662 packets=8 bytes=586 src=10.0.0.100 dst=213.140.17.106 sport=4662 dport=54351 packets=10 bytes=876 [ASSURED] mark=1 use=1
udp      17 2 src=10.0.0.100 dst=83.149.98.3 sport=4665 dport=4665 packets=1 bytes=50 [UNREPLIED] src=83.149.98.3 dst=216.123.169.254 sport=4665 dport=4665 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=201.250.48.227 dst=206.248.149.193 sport=4672 dport=4672 packets=1 bytes=63 src=10.0.0.100 dst=201.250.48.227 sport=4672 dport=4672 packets=1 bytes=147 mark=1 use=1
tcp      6 431980 ESTABLISHED src=80.181.252.117 dst=206.248.149.193 sport=4051 dport=4662 packets=8 bytes=501 src=10.0.0.100 dst=80.181.252.117 sport=4662 dport=4051 packets=7 bytes=496 [ASSURED] mark=1 use=1
tcp      6 431617 ESTABLISHED src=10.0.0.91 dst=206.248.149.194 sport=2236 dport=143 packets=574 bytes=27956 src=206.248.149.194 dst=10.0.0.91 sport=143 dport=2236 packets=677 bytes=662797 [ASSURED] mark=0 use=1
tcp      6 431998 ESTABLISHED src=201.13.14.208 dst=206.248.149.193 sport=3769 dport=4662 packets=8 bytes=515 src=10.0.0.100 dst=201.13.14.208 sport=4662 dport=3769 packets=8 bytes=648 [ASSURED] mark=1 use=1
tcp      6 40 TIME_WAIT src=200.118.112.93 dst=206.248.149.193 sport=3076 dport=4662 packets=9 bytes=555 src=10.0.0.100 dst=200.118.112.93 sport=4662 dport=3076 packets=8 bytes=536 [ASSURED] mark=1 use=1
udp      17 154 src=85.137.92.170 dst=216.123.169.254 sport=4672 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=85.137.92.170 sport=4672 dport=4672 packets=2 bytes=194 [ASSURED] mark=2 use=1
udp      17 132 src=85.49.203.42 dst=216.123.169.254 sport=4672 dport=4672 packets=2 bytes=191 src=10.0.0.100 dst=85.49.203.42 sport=4672 dport=4672 packets=2 bytes=194 [ASSURED] mark=2 use=1
tcp      6 431999 ESTABLISHED src=166.114.248.234 dst=216.123.169.254 sport=18363 dport=4662 packets=273 bytes=11313 src=10.0.0.100 dst=166.114.248.234 sport=4662 dport=18363 packets=370 bytes=449388 [ASSURED] mark=2 use=1
tcp      6 431511 ESTABLISHED src=203.73.152.231 dst=216.123.169.254 sport=1498 dport=4662 packets=10 bytes=672 src=10.0.0.100 dst=203.73.152.231 sport=4662 dport=1498 packets=9 bytes=619 [ASSURED] mark=2 use=1
tcp      6 95 TIME_WAIT src=10.0.0.100 dst=24.137.208.19 sport=39300 dport=4662 packets=7 bytes=512 src=24.137.208.19 dst=216.123.169.254 sport=4662 dport=39300 packets=6 bytes=474 [ASSURED] mark=2 use=1
udp      17 20 src=80.59.136.203 dst=206.248.149.193 sport=4672 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=80.59.136.203 sport=4672 dport=4672 packets=2 bytes=144 [ASSURED] mark=1 use=1
udp      17 171 src=70.48.174.100 dst=206.248.149.193 sport=62517 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=70.48.174.100 sport=4672 dport=62517 packets=2 bytes=144 [ASSURED] mark=1 use=1
tcp      6 110 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=33512 dport=631 packets=31 bytes=2058 src=127.0.0.1 dst=127.0.0.1 sport=631 dport=33512 packets=29 bytes=2106 [ASSURED] mark=0 use=1
udp      17 17 src=208.97.196.2 dst=206.248.149.193 sport=32769 dport=53 packets=2 bytes=139 src=206.248.149.193 dst=208.97.196.2 sport=53 dport=32769 packets=2 bytes=452 [ASSURED] mark=1 use=1
tcp      6 1 LAST_ACK src=84.223.4.59 dst=206.248.149.193 sport=1369 dport=4662 packets=8 bytes=606 src=10.0.0.100 dst=84.223.4.59 sport=4662 dport=1369 packets=17 bytes=1061 [ASSURED] mark=1 use=1
udp      17 20 src=127.0.0.1 dst=127.0.0.1 sport=33132 dport=53 packets=1 bytes=66 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=33132 packets=1 bytes=193 mark=0 use=1
udp      17 4 src=10.0.0.100 dst=66.162.178.108 sport=4665 dport=4265 packets=1 bytes=50 [UNREPLIED] src=66.162.178.108 dst=216.123.169.254 sport=4265 dport=4665 packets=0 bytes=0 mark=0 use=1
tcp      6 111 TIME_WAIT src=82.249.76.153 dst=216.123.169.254 sport=1795 dport=4662 packets=3 bytes=128 src=10.0.0.100 dst=82.249.76.153 sport=4662 dport=1795 packets=3 bytes=128 [ASSURED] mark=2 use=1
udp      17 6 src=80.28.25.32 dst=206.248.149.193 sport=8890 dport=4672 packets=1 bytes=62 src=10.0.0.100 dst=80.28.25.32 sport=4672 dport=8890 packets=1 bytes=34 mark=1 use=1
udp      17 125 src=84.57.91.179 dst=206.248.149.193 sport=4672 dport=4672 packets=2 bytes=139 src=10.0.0.100 dst=84.57.91.179 sport=4672 dport=4672 packets=2 bytes=194 [ASSURED] mark=1 use=1
udp      17 29 src=10.0.0.91 dst=10.0.0.255 sport=137 dport=137 packets=59710 bytes=4657380 [UNREPLIED] src=10.0.0.255 dst=10.0.0.91 sport=137 dport=137 packets=0 bytes=0 mark=0 use=1