rendered paste bodyThis status page includes the following information:
* System uptime
* Interfaces
* Routing tables
* top | head -n5
* sysctl hw.physmem
* ipfw show
* pfctl -sn
* pfctl -sr
* pfctl -ss
* pfctl -si
* pfctl -sa
* pfctl -s rules -vv
* pfctl -s queue -v
* pfctl -s queue -v
* netstat -s -ppfsync
* pfctl -vsq
* pfctl -vs Tables
* Load Balancer
* pftop -w 150 -a -b
* pftop -w 150 -a -b -v long
* pftop -w 150 -a -b -v queue
* pftop -w 150 -a -b -v rules
* pftop -w 150 -a -b -v size
* pftop -w 150 -a -b -v speed
* resolv.conf
* Processes
* dhcpd.conf
* ez-ipupdate.cache
* df
* racoon.conf
* SPD
* SAD
* last 200 system log entries
* last 50 filter log entries
* ls /conf
* ls /var/run
* /sbin/mount
* cat /tmp/rules.debug
* VMStat
* config.xml
* DMESG
* netstat -mb
* vmstat -z
System uptime
1:31AM up 42 days, 22:21, 2 users, load averages: 0.00, 0.05, 0.09
Interfaces
vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet6 fe80::20e:8eff:fe15:900e%vr0 prefixlen 64 scopeid 0x1
inet 76.126.xxx.xxx netmask 0xfffff800 broadcast 255.255.255.255
ether 00:0e:8e:15:90:0e
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vr1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet6 fe80::20c:8eff:fe1a:130b%vr1 prefixlen 64 scopeid 0x2
inet 24.130.xxx.xxx netmask 0xfffff800 broadcast 255.255.255.255
ether 00:0c:8e:1a:13:0b
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
ath0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2290
inet6 fe80::20b:6bff:fe09:f5c6%ath0 prefixlen 64 scopeid 0x3
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
ether 00:0b:6b:09:f5:c6
media: IEEE 802.11 Wireless Ethernet autoselect mode 11a <hostap>
status: associated
ssid via-pfsense channel 153 bssid 00:0b:6b:09:f5:c6
authmode WPA1+WPA2/802.11i privacy MIXED deftxkey 2 AES-CCM 2:128-bit
AES-CCM 3:128-bit txpowmax 34 bmiss 7 burst dtimperiod 1 bintval 100
pflog0: flags=100<PROMISC> mtu 33208
enc0: flags=0<> mtu 1536
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
pfsync0: flags=41<UP,RUNNING> mtu 2020
pfsync: syncdev: lo0 syncpeer: 224.0.0.240 maxupd: 128
Routing tables
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default 76.126.216.1 UGS 0 5219769 vr0
4.2.2.2 76.126.216.1 UGHS 0 997912 vr0
4.2.2.3 24.130.144.1 UGHS 0 980077 vr1
24.130.144/21 link#2 UC 0 0 vr1
24.130.144.1 00:1b:d5:fe:a5:05 UHLW 2 207165 vr1 1200
24.130.xxx.xxx 127.0.0.1 UGHS 0 571906 lo0
24.130.146.197 127.0.0.1 UGHS 0 1016 lo0
24.130.151.190 127.0.0.1 UGHS 0 3 lo0
76.126.211.29 127.0.0.1 UGHS 0 9 lo0
76.126.216/21 link#1 UC 0 0 vr0
76.126.216.1 00:1b:d5:fe:a5:05 UHLW 3 132275 vr0 1200
76.126.xxx.xxx 127.0.0.1 UGHS 0 47597 lo0
127.0.0.1 127.0.0.1 UH 7 8801 lo0
192.168.1 link#3 UC 0 0 ath0
192.168.1.2 00:0e:8e:15:95:0f UHLW 1 13361581 ath0 972
192.168.2.199 127.0.0.1 UGHS 0 15 lo0
192.168.100.11 127.0.0.1 UGHS 0 217 lo0
Internet6:
Destination Gateway Flags Netif Expire
::1 ::1 UHL lo0
fe80::%vr0/64 link#1 UC vr0
fe80::20e:8eff:fe15:900e%vr0 00:0e:8e:15:90:0e UHL lo0
fe80::%vr1/64 link#2 UC vr1
fe80::20c:8eff:fe1a:130b%vr1 00:0c:8e:1a:13:0b UHL lo0
fe80::%ath0/64 link#3 UC ath0
fe80::20b:6bff:fe09:f5c6%ath0 00:0b:6b:09:f5:c6 UHL lo0
fe80::%lo0/64 fe80::1%lo0 U lo0
fe80::1%lo0 link#6 UHL lo0
ff01:1::/32 link#1 UC vr0
ff01:2::/32 link#2 UC vr1
ff01:3::/32 link#3 UC ath0
ff01:6::/32 ::1 UC lo0
ff02::%vr0/32 link#1 UC vr0
ff02::%vr1/32 link#2 UC vr1
ff02::%ath0/32 link#3 UC ath0
ff02::%lo0/32 ::1 UC lo0
top | head -n5
last pid: 97958; load averages: 0.00, 0.05, 0.09 up 42+22:21:47 01:31:50
52 processes: 2 running, 49 sleeping, 1 zombie
Mem: 71M Active, 36M Inact, 82M Wired, 58M Buf, 289M Free
Swap:
sysctl hw.physmem
hw.physmem: 511090688
ipfw show
ipfw: getsockopt(IP_FW_GET): Protocol not available
pfctl -sn
nat-anchor "pftpx/*" all
nat-anchor "natearly/*" all
nat-anchor "natrules/*" all
nat on vr0 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr0) port 500 round-robin
nat on vr0 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr0) port 5060 round-robin
nat on vr0 inet from 192.168.1.0/24 to any -> (vr0) round-robin
nat on vr1 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr1) port 500 round-robin
nat on vr1 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr1) port 5060 round-robin
nat on vr1 inet from 192.168.1.0/24 to any -> (vr1) round-robin
rdr-anchor "pftpx/*" all
rdr-anchor "slb" all
no rdr on ath0 proto tcp from any to <vpns> port = ftp
rdr on ath0 inet proto tcp from any to any port = ftp -> 127.0.0.1 port 8021
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = ssh -> 192.168.1.1
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = ssh -> 192.168.1.1
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 8080 -> 192.168.1.1 port 80
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 8080 -> 192.168.1.1 port 80
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 3389 -> 192.168.1.2
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 3389 -> 192.168.1.2
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr0 inet proto udp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr1 inet proto udp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 30771 -> 192.168.1.199
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 30771 -> 192.168.1.199
rdr-anchor "imspector" all
rdr-anchor "miniupnpd" all
pfctl -sr
scrub all random-id fragment reassemble
anchor "ftpsesame/*" all
anchor "firewallrules" all
block drop quick proto tcp from any port = 0 to any
block drop quick proto tcp from any to any port = 0
block drop quick proto udp from any port = 0 to any
block drop quick proto udp from any to any port = 0
block drop quick from <snort2c> to any label "Block snort2c hosts"
block drop quick from any to <snort2c> label "Block snort2c hosts"
anchor "loopback" all
pass in quick on lo0 all label "pass loopback"
pass out quick on lo0 all label "pass loopback"
anchor "packageearly" all
anchor "carp" all
pass quick inet proto icmp from 76.126.xxx.xxx to any keep state
anchor "dhcpserverlan" all
pass in quick on ath0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps label "allow access to DHCP server on LAN"
pass in quick on ath0 inet proto udp from any port = bootpc to 192.168.1.1 port = bootps label "allow access to DHCP server on LAN"
pass out quick on ath0 inet proto udp from 192.168.1.1 port = bootps to any port = bootpc label "allow access to DHCP server on LAN"
anchor "wandhcp" all
pass out quick on vr0 proto udp from any port = bootpc to any port = bootps label "allow dhcp client out wan"
block drop in log quick on vr0 inet proto udp from any port = bootps to 192.168.1.0/24 port = bootpc label "block dhcp client out wan"
pass in quick on vr0 proto udp from any port = bootps to any port = bootpc label "allow dhcp client out wan"
block drop in on ! ath0 inet from 192.168.1.0/24 to any
block drop in inet from 192.168.1.1 to any
block drop in on ! vr1 inet from 24.130.144.0/21 to any
block drop in inet from 24.130.xxx.xxx to any
block drop in on ath0 inet6 from fe80::20b:6bff:fe09:f5c6 to any
block drop in on vr1 inet6 from fe80::20c:8eff:fe1a:130b to any
anchor "spoofing" all
anchor "limitingesr" all
block drop in quick from <virusprot> to any label "virusprot overload table"
pass out quick on ath0 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr0 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
anchor "firewallout" all
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
pass out quick on ath0 all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
pass out quick on enc0 all keep state label "IPSEC internal host to host"
pass out quick on vr1 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
anchor "anti-lockout" all
pass in quick on ath0 inet from any to 192.168.1.1 keep state label "anti-lockout web rule"
block drop in log proto tcp from <sshlockout> to any port = ssh label "sshlockout"
anchor "ftpproxy" all
anchor "pftpx/*" all
pass in log quick on vr0 inet proto icmp from any to 76.126.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on vr0 inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on vr0 inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr0 inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = pptp keep state label "USER_RULE: PPTP"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port 4999 >< 5016 keep state label "USER_RULE: IRC DCC"
pass in quick on vr0 inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on vr0 inet proto udp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto icmp from any to 24.130.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 24.130.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr1 route-to (vr0 76.126.216.1) inet proto udp from any to 255.255.255.255 keep state label "USER_RULE: Allow DHCP"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 keep state label "USER_RULE"
pass in quick on ath0 route-to (vr1 24.130.144.1) inet from 192.168.1.0/24 to 24.130.144.0/21 keep state label "USER_RULE: WAN DMZ"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to 76.126.208.0/21 keep state label "USER_RULE: WAN2 DMZ"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = telnet keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2"
pass in log quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to <SurfboardHacker> keep state label "USER_RULE: SurfboardHacker -> WAN1"
pass in quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns> port = https keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to any port = https keep state label "USER_RULE: HTTPS -> WAN2"
pass in log quick on ath0 inet proto gre from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN2"
pass in log quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns> port = pptp keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto tcp from 192.168.1.0/24 to any port = pptp keep state label "USER_RULE: PPTP -> WAN2"
pass in quick on ath0 inet from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on ath0 route-to { (vr0 76.126.216.1), (vr1 24.130.144.1) } round-robin inet from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp-proxy keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr0 inet proto tcp from any port = ftp-data to (vr0) port > 49000 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = 8022 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
anchor "imspector" all
anchor "miniupnpd" all
block drop in log quick all label "Default block all just to be sure."
block drop out log quick all label "Default block all just to be sure."
pfctl -si
Status: Enabled for 42 days 22:20:47 Debug: Urgent
Hostid: 0x3c3f3efa
Interface Stats for vr1 IPv4 IPv6
Bytes In 68121532363 0
Bytes Out 20889937421 0
Packets In
Passed 80441272 0
Blocked 616198 0
Packets Out
Passed 69447363 0
Blocked 251 0
State Table Total Rate
current entries 3062
searches 590139516 159.1/s
inserts 18109004 4.9/s
removals 18105942 4.9/s
Counters
match 18966930 5.1/s
bad-offset 0 0.0/s
fragment 220 0.0/s
short 2 0.0/s
normalize 15080 0.0/s
memory 0 0.0/s
bad-timestamp 0 0.0/s
congestion 0 0.0/s
ip-option 972 0.0/s
proto-cksum 0 0.0/s
state-mismatch 1021775 0.3/s
state-insert 34752 0.0/s
state-limit 0 0.0/s
src-limit 252 0.0/s
synproxy 0 0.0/s
pfctl -sa
TRANSLATION RULES:
nat-anchor "pftpx/*" all
nat-anchor "natearly/*" all
nat-anchor "natrules/*" all
nat on vr0 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr0) port 500 round-robin
nat on vr0 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr0) port 5060 round-robin
nat on vr0 inet from 192.168.1.0/24 to any -> (vr0) round-robin
nat on vr1 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr1) port 500 round-robin
nat on vr1 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr1) port 5060 round-robin
nat on vr1 inet from 192.168.1.0/24 to any -> (vr1) round-robin
rdr-anchor "pftpx/*" all
rdr-anchor "slb" all
no rdr on ath0 proto tcp from any to <vpns> port = ftp
rdr on ath0 inet proto tcp from any to any port = ftp -> 127.0.0.1 port 8021
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = ssh -> 192.168.1.1
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = ssh -> 192.168.1.1
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 8080 -> 192.168.1.1 port 80
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 8080 -> 192.168.1.1 port 80
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 3389 -> 192.168.1.2
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 3389 -> 192.168.1.2
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr0 inet proto udp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr1 inet proto udp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 30771 -> 192.168.1.199
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 30771 -> 192.168.1.199
rdr-anchor "imspector" all
rdr-anchor "miniupnpd" all
FILTER RULES:
scrub all random-id fragment reassemble
anchor "ftpsesame/*" all
anchor "firewallrules" all
block drop quick proto tcp from any port = 0 to any
block drop quick proto tcp from any to any port = 0
block drop quick proto udp from any port = 0 to any
block drop quick proto udp from any to any port = 0
block drop quick from <snort2c> to any label "Block snort2c hosts"
block drop quick from any to <snort2c> label "Block snort2c hosts"
anchor "loopback" all
pass in quick on lo0 all label "pass loopback"
pass out quick on lo0 all label "pass loopback"
anchor "packageearly" all
anchor "carp" all
pass quick inet proto icmp from 76.126.xxx.xxx to any keep state
anchor "dhcpserverlan" all
pass in quick on ath0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps label "allow access to DHCP server on LAN"
pass in quick on ath0 inet proto udp from any port = bootpc to 192.168.1.1 port = bootps label "allow access to DHCP server on LAN"
pass out quick on ath0 inet proto udp from 192.168.1.1 port = bootps to any port = bootpc label "allow access to DHCP server on LAN"
anchor "wandhcp" all
pass out quick on vr0 proto udp from any port = bootpc to any port = bootps label "allow dhcp client out wan"
block drop in log quick on vr0 inet proto udp from any port = bootps to 192.168.1.0/24 port = bootpc label "block dhcp client out wan"
pass in quick on vr0 proto udp from any port = bootps to any port = bootpc label "allow dhcp client out wan"
block drop in on ! ath0 inet from 192.168.1.0/24 to any
block drop in inet from 192.168.1.1 to any
block drop in on ! vr1 inet from 24.130.144.0/21 to any
block drop in inet from 24.130.xxx.xxx to any
block drop in on ath0 inet6 from fe80::20b:6bff:fe09:f5c6 to any
block drop in on vr1 inet6 from fe80::20c:8eff:fe1a:130b to any
anchor "spoofing" all
anchor "limitingesr" all
block drop in quick from <virusprot> to any label "virusprot overload table"
pass out quick on ath0 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr0 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
anchor "firewallout" all
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
pass out quick on ath0 all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
pass out quick on enc0 all keep state label "IPSEC internal host to host"
pass out quick on vr1 proto icmp all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
anchor "anti-lockout" all
pass in quick on ath0 inet from any to 192.168.1.1 keep state label "anti-lockout web rule"
block drop in log proto tcp from <sshlockout> to any port = ssh label "sshlockout"
anchor "ftpproxy" all
anchor "pftpx/*" all
pass in log quick on vr0 inet proto icmp from any to 76.126.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on vr0 inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on vr0 inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr0 inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = pptp keep state label "USER_RULE: PPTP"
pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port 4999 >< 5016 keep state label "USER_RULE: IRC DCC"
pass in quick on vr0 inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on vr0 inet proto udp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto icmp from any to 24.130.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 24.130.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on vr1 route-to (vr0 76.126.216.1) inet proto udp from any to 255.255.255.255 keep state label "USER_RULE: Allow DHCP"
pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 keep state label "USER_RULE"
pass in quick on ath0 route-to (vr1 24.130.144.1) inet from 192.168.1.0/24 to 24.130.144.0/21 keep state label "USER_RULE: WAN DMZ"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to 76.126.208.0/21 keep state label "USER_RULE: WAN2 DMZ"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = telnet keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2"
pass in log quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to <SurfboardHacker> keep state label "USER_RULE: SurfboardHacker -> WAN1"
pass in quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns> port = https keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to any port = https keep state label "USER_RULE: HTTPS -> WAN2"
pass in log quick on ath0 inet proto gre from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN2"
pass in log quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns> port = pptp keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto tcp from 192.168.1.0/24 to any port = pptp keep state label "USER_RULE: PPTP -> WAN2"
pass in quick on ath0 inet from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on ath0 route-to { (vr0 76.126.216.1), (vr1 24.130.144.1) } round-robin inet from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp-proxy keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr0 inet proto tcp from any port = ftp-data to (vr0) port > 49000 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = 8022 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
anchor "imspector" all
anchor "miniupnpd" all
block drop in log quick all label "Default block all just to be sure."
block drop out log quick all label "Default block all just to be sure."
No queue in use
STATES:
INFO:
Status: Enabled for 42 days 22:20:48 Debug: Urgent
Hostid: 0x3c3f3efa
Interface Stats for vr1 IPv4 IPv6
Bytes In 68121612565 0
Bytes Out 20889998797 0
Packets In
Passed 80441401 0
Blocked 616198 0
Packets Out
Passed 69447488 0
Blocked 251 0
State Table Total Rate
current entries 3066
searches 590140301 159.1/s
inserts 18109008 4.9/s
removals 18105942 4.9/s
Counters
match 18966934 5.1/s
bad-offset 0 0.0/s
fragment 220 0.0/s
short 2 0.0/s
normalize 15080 0.0/s
memory 0 0.0/s
bad-timestamp 0 0.0/s
congestion 0 0.0/s
ip-option 972 0.0/s
proto-cksum 0 0.0/s
state-mismatch 1021775 0.3/s
state-insert 34752 0.0/s
state-limit 0 0.0/s
src-limit 252 0.0/s
synproxy 0 0.0/s
LABEL COUNTERS:
Block snort2c hosts 3170925 0 0
Block snort2c hosts 3170925 0 0
pass loopback 3170925 0 0
pass loopback 0 0 0
allow access to DHCP server on LAN 2541133 146 49156
allow access to DHCP server on LAN 295 295 96940
allow access to DHCP server on LAN 724231 425 139400
allow dhcp client out wan 2540267 0 0
block dhcp client out wan 237856 0 0
allow dhcp client out wan 3206 3206 1112808
virusprot overload table 2537061 422 22284
let out anything from firewall host itself 2536639 13 624
let out anything from firewall host itself 1658276 0 0
let out anything from firewall host itself 732232 29709502 24890902267
let out anything from firewall host itself 2328094 0 0
let out anything from firewall host itself 2219562 25202624 13391801206
let out anything from firewall host itself 1341212 30862029 25164256541
IPSEC internal host to host 0 0 0
let out anything from firewall host itself 0 0 0
let out anything from firewall host itself 0 0 0
anti-lockout web rule 1015735 2315926 660089514
sshlockout 1000069 0 0
USER_RULE: Allow Ping reply 1000064 769 76633
USER_RULE: NAT SSH -> pfsense 107932 1013546 140623528
USER_RULE: NAT Web Config -> pfsense 16 151 14000
USER_RULE: OpenVPN -> pfsense 55732 0 0
USER_RULE: NAT RDP -> Laptop 55732 3 152
USER_RULE: NAT BT -> Laptop 48073 5453885 3028602062
USER_RULE: NAT BT -> Laptop 52081 15844 1062307
USER_RULE: PPTP 51917 0 0
USER_RULE: IRC DCC 7610 9742 4440645
USER_RULE: NAT BT -> Flora Laptop 7647 161 7944
USER_RULE: NAT BT -> Flora Laptop 44259 0 0
USER_RULE: Allow Ping reply 943390 2802 198688
USER_RULE: NAT SSH -> pfsense 551628 2841 367910
USER_RULE: NAT Web Config -> pfsense 10 115 14122
USER_RULE: OpenVPN -> pfsense 190251 0 0
USER_RULE: NAT RDP -> Laptop 190251 3276204 997262251
USER_RULE: NAT BT -> Laptop 163073 25509524 14880795359
USER_RULE: NAT BT -> Laptop 361244 946159 181051654
USER_RULE: Allow DHCP 78027 251729 88046226
USER_RULE: NAT BT -> Flora Laptop 71811 136 6948
USER_RULE 417935 116 7596
USER_RULE: WAN DMZ 383462 345 22514
USER_RULE: WAN2 DMZ 336560 86 5296
USER_RULE: Modem 1 -> WAN1 336540 0 0
USER_RULE: Modem 1 -> WAN1 0 0 0
USER_RULE: Modem 2 -> WAN2 0 0 0
USER_RULE: SurfboardHacker -> WAN1 336540 84528 56727554
NEGATE_ROUTE: Negate policy route for local network(s) 333834 0 0
USER_RULE: HTTPS -> WAN2 142848 515186 179716846
NEGATE_ROUTE: Negate policy route for local network(s) 317356 0 0
USER_RULE: GRE -> WAN2 0 0 0
NEGATE_ROUTE: Negate policy route for local network(s) 317356 0 0
USER_RULE: PPTP -> WAN2 126370 0 0
NEGATE_ROUTE: Negate policy route for local network(s) 317356 0 0
USER_RULE: Load Balance 317356 57056508 49027218651
FTP PROXY: Allow traffic to localhost 2095 0 0
FTP PROXY: Allow traffic to localhost 0 0 0
FTP PROXY: PASV mode data connection 123634 0 0
FTP PROXY: Allow traffic to localhost 79375 0 0
FTP PROXY: Allow traffic to localhost 0 0 0
Default block all just to be sure. 125914 125914 12699045
Default block all just to be sure. 0 0 0
TIMEOUTS:
tcp.first 120s
tcp.opening 30s
tcp.established 86400s
tcp.closing 900s
tcp.finwait 45s
tcp.closed 90s
tcp.tsdiff 30s
udp.first 60s
udp.single 30s
udp.multiple 60s
icmp.first 20s
icmp.error 10s
other.first 60s
other.single 30s
other.multiple 60s
frag 30s
interval 10s
adaptive.start 0 states
adaptive.end 0 states
src.track 0s
LIMITS:
states hard limit 100000
src-nodes hard limit 10000
frags hard limit 5000
TABLES:
SurfboardHacker
bogons
snort2c
sshlockout
virusprot
vpns
OS FINGERPRINTS:
348 fingerprints loaded
pfctl -s rules -vv
@0 scrub all random-id fragment reassemble
[ Evaluations: 361644542 Packets: 361644542 Bytes: 0 States: 0 ]
@0 anchor "ftpsesame/*" all
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@1 anchor "firewallrules" all
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@2 block drop quick proto tcp from any port = 0 to any
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@3 block drop quick proto tcp from any to any port = 0
[ Evaluations: 757784 Packets: 0 Bytes: 0 States: 0 ]
@4 block drop quick proto udp from any port = 0 to any
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@5 block drop quick proto udp from any to any port = 0
[ Evaluations: 1151809 Packets: 0 Bytes: 0 States: 0 ]
@6 block drop quick from <snort2c:0> to any label "Block snort2c hosts"
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@7 block drop quick from any to <snort2c:0> label "Block snort2c hosts"
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@8 anchor "loopback" all
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@9 pass in quick on lo0 all label "pass loopback"
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@10 pass out quick on lo0 all label "pass loopback"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@11 anchor "packageearly" all
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@12 anchor "carp" all
[ Evaluations: 3170928 Packets: 0 Bytes: 0 States: 0 ]
@13 pass quick inet proto icmp from 76.126.xxx.xxx to any keep state
[ Evaluations: 3170928 Packets: 1392479 Bytes: 116961208 States: 6 ]
@14 anchor "dhcpserverlan" all
[ Evaluations: 2541136 Packets: 0 Bytes: 0 States: 0 ]
@15 pass in quick on ath0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps label "allow access to DHCP server on LAN"
[ Evaluations: 2541136 Packets: 146 Bytes: 49156 States: 0 ]
@16 pass in quick on ath0 inet proto udp from any port = bootpc to 192.168.1.1 port = bootps label "allow access to DHCP server on LAN"
[ Evaluations: 295 Packets: 295 Bytes: 96940 States: 0 ]
@17 pass out quick on ath0 inet proto udp from 192.168.1.1 port = bootps to any port = bootpc label "allow access to DHCP server on LAN"
[ Evaluations: 724231 Packets: 425 Bytes: 139400 States: 0 ]
@18 anchor "wandhcp" all
[ Evaluations: 2540270 Packets: 0 Bytes: 0 States: 0 ]
@19 pass out quick on vr0 proto udp from any port = bootpc to any port = bootps label "allow dhcp client out wan"
[ Evaluations: 2540270 Packets: 0 Bytes: 0 States: 0 ]
@20 block drop in log quick on vr0 inet proto udp from any port = bootps to 192.168.1.0/24 port = bootpc label "block dhcp client out wan"
[ Evaluations: 237857 Packets: 0 Bytes: 0 States: 0 ]
@21 pass in quick on vr0 proto udp from any port = bootps to any port = bootpc label "allow dhcp client out wan"
[ Evaluations: 3206 Packets: 3206 Bytes: 1112808 States: 0 ]
@22 block drop in on ! ath0 inet from 192.168.1.0/24 to any
[ Evaluations: 2411118 Packets: 0 Bytes: 0 States: 0 ]
@23 block drop in inet from 192.168.1.1 to any
[ Evaluations: 1539872 Packets: 0 Bytes: 0 States: 0 ]
@24 block drop in on ! vr1 inet from 24.130.144.0/21 to any
[ Evaluations: 1015970 Packets: 0 Bytes: 0 States: 0 ]
@25 block drop in inet from 24.130.xxx.xxx to any
[ Evaluations: 1015970 Packets: 0 Bytes: 0 States: 0 ]
@26 block drop in on ath0 inet6 from fe80::20b:6bff:fe09:f5c6 to any
[ Evaluations: 1016159 Packets: 0 Bytes: 0 States: 0 ]
@27 block drop in on vr1 inet6 from fe80::20c:8eff:fe1a:130b to any
[ Evaluations: 661697 Packets: 0 Bytes: 0 States: 0 ]
@28 anchor "spoofing" all
[ Evaluations: 2537064 Packets: 0 Bytes: 0 States: 0 ]
@29 anchor "limitingesr" all
[ Evaluations: 2537064 Packets: 0 Bytes: 0 States: 0 ]
@30 block drop in quick from <virusprot:0> to any label "virusprot overload table"
[ Evaluations: 2537064 Packets: 422 Bytes: 22284 States: 0 ]
@31 pass out quick on ath0 proto icmp all keep state label "let out anything from firewall host itself"
[ Evaluations: 2536642 Packets: 13 Bytes: 624 States: 0 ]
@32 pass out quick on vr0 proto icmp all keep state label "let out anything from firewall host itself"
[ Evaluations: 1658278 Packets: 0 Bytes: 0 States: 0 ]
@33 pass out quick on vr0 all keep state label "let out anything from firewall host itself"
[ Evaluations: 732232 Packets: 29709502 Bytes: 24890902267 States: 453 ]
@34 anchor "firewallout" all
[ Evaluations: 2328097 Packets: 0 Bytes: 0 States: 0 ]
@35 pass out quick on vr0 all keep state label "let out anything from firewall host itself"
[ Evaluations: 2328097 Packets: 0 Bytes: 0 States: 0 ]
@36 pass out quick on ath0 all keep state label "let out anything from firewall host itself"
[ Evaluations: 2219564 Packets: 25202844 Bytes: 13391945601 States: 590 ]
@37 pass out quick on vr1 all keep state label "let out anything from firewall host itself"
[ Evaluations: 1341213 Packets: 30862034 Bytes: 25164256813 States: 458 ]
@38 pass out quick on enc0 all keep state label "IPSEC internal host to host"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@39 pass out quick on vr1 proto icmp all keep state label "let out anything from firewall host itself"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@40 pass out quick on vr1 all keep state label "let out anything from firewall host itself"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@41 anchor "anti-lockout" all
[ Evaluations: 1015737 Packets: 0 Bytes: 0 States: 0 ]
@42 pass in quick on ath0 inet from any to 192.168.1.1 keep state label "anti-lockout web rule"
[ Evaluations: 1015737 Packets: 2316370 Bytes: 660451945 States: 5 ]
@43 block drop in log proto tcp from <sshlockout:0> to any port = ssh label "sshlockout"
[ Evaluations: 1000071 Packets: 0 Bytes: 0 States: 0 ]
@44 anchor "ftpproxy" all
[ Evaluations: 1000071 Packets: 0 Bytes: 0 States: 0 ]
@45 anchor "pftpx/*" all
[ Evaluations: 1000071 Packets: 51 Bytes: 7322 States: 0 ]
@46 pass in log quick on vr0 inet proto icmp from any to 76.126.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
[ Evaluations: 1000066 Packets: 769 Bytes: 76633 States: 0 ]
@47 pass in log quick on vr0 inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
[ Evaluations: 107933 Packets: 1013546 Bytes: 140623528 States: 0 ]
@48 pass in quick on vr0 inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
[ Evaluations: 16 Packets: 151 Bytes: 14000 States: 0 ]
@49 pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
[ Evaluations: 55732 Packets: 0 Bytes: 0 States: 0 ]
@50 pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
[ Evaluations: 55732 Packets: 3 Bytes: 152 States: 0 ]
@51 pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
[ Evaluations: 48073 Packets: 5453922 Bytes: 3028624140 States: 147 ]
@52 pass in quick on vr0 inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
[ Evaluations: 52082 Packets: 15844 Bytes: 1062307 States: 1 ]
@53 pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port = pptp keep state label "USER_RULE: PPTP"
[ Evaluations: 51917 Packets: 0 Bytes: 0 States: 0 ]
@54 pass in quick on vr0 inet proto tcp from any to 76.126.xxx.xxx port 4999 >< 5016 keep state label "USER_RULE: IRC DCC"
[ Evaluations: 7610 Packets: 9742 Bytes: 4440645 States: 0 ]
@55 pass in quick on vr0 inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
[ Evaluations: 7647 Packets: 161 Bytes: 7944 States: 0 ]
@56 pass in quick on vr0 inet proto udp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
[ Evaluations: 44259 Packets: 0 Bytes: 0 States: 0 ]
@57 pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto icmp from any to 24.130.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
[ Evaluations: 943392 Packets: 2802 Bytes: 198688 States: 0 ]
@58 pass in log quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = ssh keep state (source-track rule, max-src-states 3, max-src-conn-rate 2/60, overload <virusprot> flush global, src.track 60) label "USER_RULE: NAT SSH -> pfsense"
[ Evaluations: 551628 Packets: 2841 Bytes: 367910 States: 0 ]
@59 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
[ Evaluations: 10 Packets: 115 Bytes: 14122 States: 0 ]
@60 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 24.130.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
[ Evaluations: 190251 Packets: 0 Bytes: 0 States: 0 ]
@61 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
[ Evaluations: 190251 Packets: 3276204 Bytes: 997262251 States: 0 ]
@62 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
[ Evaluations: 163073 Packets: 25509880 Bytes: 14881015854 States: 434 ]
@63 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto udp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
[ Evaluations: 361244 Packets: 946159 Bytes: 181051654 States: 7 ]
@64 pass in quick on vr1 route-to (vr0 76.126.216.1) inet proto udp from any to 255.255.255.255 keep state label "USER_RULE: Allow DHCP"
[ Evaluations: 78027 Packets: 251729 Bytes: 88046226 States: 1 ]
@65 pass in quick on vr1 reply-to (vr1 24.130.144.1) inet proto tcp from any to 192.168.1.199 port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
[ Evaluations: 71811 Packets: 136 Bytes: 6948 States: 0 ]
@66 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 keep state label "USER_RULE"
[ Evaluations: 417937 Packets: 116 Bytes: 7596 States: 0 ]
@67 pass in quick on ath0 route-to (vr1 24.130.144.1) inet from 192.168.1.0/24 to 24.130.144.0/21 keep state label "USER_RULE: WAN DMZ"
[ Evaluations: 383464 Packets: 345 Bytes: 22514 States: 0 ]
@68 pass in quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to 76.126.208.0/21 keep state label "USER_RULE: WAN2 DMZ"
[ Evaluations: 336562 Packets: 86 Bytes: 5296 States: 0 ]
@69 pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1"
[ Evaluations: 336542 Packets: 0 Bytes: 0 States: 0 ]
@70 pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = telnet keep state label "USER_RULE: Modem 1 -> WAN1"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@71 pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@72 pass in log quick on ath0 route-to (vr0 76.126.216.1) inet from 192.168.1.0/24 to <SurfboardHacker:7> keep state label "USER_RULE: SurfboardHacker -> WAN1"
[ Evaluations: 336542 Packets: 84528 Bytes: 56727554 States: 0 ]
@73 pass in quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns:0> port = https keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
[ Evaluations: 333836 Packets: 0 Bytes: 0 States: 0 ]
@74 pass in quick on ath0 route-to (vr0 76.126.216.1) inet proto tcp from 192.168.1.0/24 to any port = https keep state label "USER_RULE: HTTPS -> WAN2"
[ Evaluations: 142850 Packets: 515186 Bytes: 179716846 States: 2 ]
@75 pass in log quick on ath0 inet proto gre from 192.168.1.0/24 to <vpns:0> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
[ Evaluations: 317358 Packets: 0 Bytes: 0 States: 0 ]
@76 pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN2"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@77 pass in log quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns:0> port = pptp keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
[ Evaluations: 317358 Packets: 0 Bytes: 0 States: 0 ]
@78 pass in log quick on ath0 route-to (vr1 24.130.144.1) inet proto tcp from 192.168.1.0/24 to any port = pptp keep state label "USER_RULE: PPTP -> WAN2"
[ Evaluations: 126372 Packets: 0 Bytes: 0 States: 0 ]
@79 pass in quick on ath0 inet from 192.168.1.0/24 to <vpns:0> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
[ Evaluations: 317358 Packets: 0 Bytes: 0 States: 0 ]
@80 pass in quick on ath0 route-to { (vr0 76.126.216.1), (vr1 24.130.144.1) } round-robin inet from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance"
[ Evaluations: 317358 Packets: 57056517 Bytes: 49027219155 States: 897 ]
@81 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp-proxy keep state label "FTP PROXY: Allow traffic to localhost"
[ Evaluations: 2095 Packets: 0 Bytes: 0 States: 0 ]
@82 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@83 pass in quick on vr0 inet proto tcp from any port = ftp-data to (vr0:1) port > 49000 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
[ Evaluations: 123634 Packets: 0 Bytes: 0 States: 0 ]
@84 pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = 8022 keep state label "FTP PROXY: Allow traffic to localhost"
[ Evaluations: 79375 Packets: 0 Bytes: 0 States: 0 ]
@85 pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@86 anchor "imspector" all
[ Evaluations: 125914 Packets: 0 Bytes: 0 States: 0 ]
@87 anchor "miniupnpd" all
[ Evaluations: 125914 Packets: 0 Bytes: 0 States: 0 ]
@88 block drop in log quick all label "Default block all just to be sure."
[ Evaluations: 125914 Packets: 125914 Bytes: 12699045 States: 0 ]
@89 block drop out log quick all label "Default block all just to be sure."
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
pfctl -s queue -v
No queue in use
pfctl -s queue -v
nat-anchor "pftpx/*" all
[ Evaluations: 2151123 Packets: 0 Bytes: 0 States: 0 ]
nat-anchor "natearly/*" all
[ Evaluations: 2151118 Packets: 0 Bytes: 0 States: 0 ]
nat-anchor "natrules/*" all
[ Evaluations: 2151118 Packets: 0 Bytes: 0 States: 0 ]
nat on vr0 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr0) port 500 round-robin
[ Evaluations: 2151118 Packets: 0 Bytes: 0 States: 0 ]
nat on vr0 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr0) port 5060 round-robin
[ Evaluations: 177993 Packets: 0 Bytes: 0 States: 0 ]
nat on vr0 inet from 192.168.1.0/24 to any -> (vr0) round-robin
[ Evaluations: 177993 Packets: 28192706 Bytes: 24219899586 States: 447 ]
nat on vr1 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> (vr1) port 500 round-robin
[ Evaluations: 1312798 Packets: 0 Bytes: 0 States: 0 ]
nat on vr1 inet from 192.168.1.0/24 port = 5060 to any port = 5060 -> (vr1) port 5060 round-robin
[ Evaluations: 158812 Packets: 0 Bytes: 0 States: 0 ]
nat on vr1 inet from 192.168.1.0/24 to any -> (vr1) round-robin
[ Evaluations: 158812 Packets: 29467881 Bytes: 25047147877 States: 452 ]
rdr-anchor "pftpx/*" all
[ Evaluations: 1019901 Packets: 0 Bytes: 0 States: 0 ]
rdr-anchor "slb" all
[ Evaluations: 1019896 Packets: 0 Bytes: 0 States: 0 ]
no rdr on ath0 proto tcp from any to <vpns> port = ftp
[ Evaluations: 1019896 Packets: 0 Bytes: 0 States: 0 ]
rdr on ath0 inet proto tcp from any to any port = ftp -> 127.0.0.1 port 8021
[ Evaluations: 154266 Packets: 116 Bytes: 7596 States: 0 ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = ssh -> 192.168.1.1
[ Evaluations: 819072 Packets: 1013546 Bytes: 140623528 States: 0 ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = ssh -> 192.168.1.1
[ Evaluations: 707067 Packets: 2841 Bytes: 367910 States: 0 ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 8080 -> 192.168.1.1 port 80
[ Evaluations: 400281 Packets: 151 Bytes: 14000 States: 0 ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 8080 -> 192.168.1.1 port 80
[ Evaluations: 344525 Packets: 115 Bytes: 14122 States: 0 ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 3389 -> 192.168.1.2
[ Evaluations: 400255 Packets: 3 Bytes: 152 States: 0 ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 3389 -> 192.168.1.2
[ Evaluations: 344515 Packets: 3276204 Bytes: 997262251 States: 0 ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
[ Evaluations: 400214 Packets: 5453955 Bytes: 3028646114 States: 147 ]
rdr on vr0 inet proto udp from any to 76.126.xxx.xxx port = 45526 -> 192.168.1.2
[ Evaluations: 618965 Packets: 15844 Bytes: 1062307 States: 1 ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
[ Evaluations: 910789 Packets: 25510013 Bytes: 14881096707 States: 435 ]
rdr on vr1 inet proto udp from any to 24.130.xxx.xxx port = 45526 -> 192.168.1.2
[ Evaluations: 362169 Packets: 946159 Bytes: 181051654 States: 7 ]
rdr on vr0 inet proto tcp from any to 76.126.xxx.xxx port = 30771 -> 192.168.1.199
[ Evaluations: 489855 Packets: 161 Bytes: 7944 States: 0 ]
rdr on vr1 inet proto tcp from any to 24.130.xxx.xxx port = 30771 -> 192.168.1.199
[ Evaluations: 434038 Packets: 136 Bytes: 6948 States: 0 ]
rdr-anchor "imspector" all
[ Evaluations: 489768 Packets: 0 Bytes: 0 States: 0 ]
rdr-anchor "miniupnpd" all
[ Evaluations: 489768 Packets: 0 Bytes: 0 States: 0 ]
netstat -s -ppfsync
pfsync:
0 packets received (IPv4)
0 packets received (IPv6)
0 packets discarded for bad interface
0 packets discarded for bad ttl
0 packets shorter than header
0 packets discarded for bad version
0 packets discarded for bad HMAC
0 packets discarded for bad action
0 packets discarded for short packet
0 states discarded for bad values
0 stale states
0 failed state lookup/inserts
43227040 packets sent (IPv4)
0 packets sent (IPv6)
0 send failed due to mbuf memory error
2514 send error
pfctl -vsq
No queue in use
pfctl -vs Tables
--a-r- SurfboardHacker
-pa--- bogons
-pa-r- snort2c
-pa-r- sshlockout
--a-r- virusprot
--a-r- vpns
Load Balancer
rdr inet proto tcp from any to 127.0.0.1 port = mdqs -> { 4.2.2.2, 4.2.2.3 } port 666 round-robin
rdr inet proto tcp from any to 127.0.0.1 port = mdqs -> { 4.2.2.3, 4.2.2.2 } port 666 round-robin
rdr inet proto tcp from any to 127.0.0.1 port = mdqs -> { 4.2.2.2, 4.2.2.3 } port 666 round-robin
pftop -w 150 -a -b -v queue
pfTop: Up Queue no entries, View: queue
QUEUE BW SCH PRIO PKTS BYTES DROP_P DROP_B QLEN BORROW SUSPEN P/S B/S
pftop -w 150 -a -b -v rules
update
pfTop: Up Rule 1-107/107, View: rules
RULE ANCHOR ACTION DIR LOG Q IF PR K PKTS BYTES STATES MAX INFO
0 Pass In 0 0 0 all
1 Pass In 0 0 0 all
2 Block In Q tcp 0 0 0 drop from any port = 0 to any
3 Block In Q tcp 0 0 0 drop from any to any port = 0
4 Block In Q udp 0 0 0 drop from any port = 0 to any
5 Block In Q udp 0 0 0 drop from any to any port = 0
6 Block In Q 0 0 0 drop from <snort2c> to any
7 Block In Q 0 0 0 drop from any to <snort2c>
8 Pass In 0 0 0 all
9 Pass In Q lo0 0 0 0 all
10 Pass Out Q lo0 0 0 0 all
11 Pass In 0 0 0 all
12 Pass In 0 0 0 all
13 Pass In Q icmp K 1392479 114219K 6 inet from 76.126.xxx.xxx/32 to any
14 Pass In 0 0 0 all
15 Pass In Q ath0 udp 146 49156 0 inet from any port = bootpc to 255.255.255.255/32 port = bootps
16 Pass In Q ath0 udp 295 96940 0 inet from any port = bootpc to 192.168.1.1/32 port = bootps
17 Pass Out Q ath0 udp 425 139400 0 inet from 192.168.1.1/32 port = bootps to any port = bootpc
18 Pass In 0 0 0 all
19 Pass Out Q vr0 udp 0 0 0 from any port = bootpc to any port = bootps
20 Block In Log Q vr0 udp 0 0 0 drop inet from any port = bootps to 192.168.1.0/24 port = bootp
21 Pass In Q vr0 udp 3206 1112808 0 from any port = bootps to any port = bootpc
22 Block In !ath0 0 0 0 drop inet from 192.168.1.0/24 to any
23 Block In 0 0 0 drop inet from 192.168.1.1/32 to any
24 Block In !vr1 0 0 0 drop inet from 24.130.144.0/21 to any
25 Block In 0 0 0 drop inet from 24.130.xxx.xxx/32 to any
26 Block In ath0 0 0 0 drop inet6 from fe80::20b:6bff:fe09:f5c6/128 to any
27 Block In vr1 0 0 0 drop inet6 from fe80::20c:8eff:fe1a:130b/128 to any
28 Pass In 0 0 0 all
29 Pass In 0 0 0 all
30 Block In Q 422 22284 0 drop from <virusprot> to any
31 Pass Out Q ath0 icmp K 13 624 0 all
32 Pass Out Q vr0 icmp K 0 0 0 all
33 Pass Out Q vr0 K 29709518 23737M 455 all
34 Pass In 0 0 0 all
35 Pass Out Q vr0 K 0 0 0 all
36 Pass Out Q ath0 K 25203827 12772M 593 all
37 Pass Out Q vr1 K 30862049 23998M 460 all
38 Pass Out Q enc0 K 0 0 0 all
39 Pass Out Q vr1 icmp K 0 0 0 all
40 Pass Out Q vr1 K 0 0 0 all
41 Pass In 0 0 0 all
42 Pass In Q ath0 K 2317378 645795K 5 inet from any to 192.168.1.1/32
43 Block In Log tcp 0 0 0 drop from <sshlockout> to any port = ssh
44 Pass In 0 0 0 all
45 Pass In 51 7322 0 all
46 Pass In Log Q vr0 icmp K 769 76633 0 inet from any to 76.126.xxx.xxx/32
47 Pass In Log Q vr0 tcp K 1013546 137327K 0 inet from any to 192.168.1.1/32 port = ssh
48 Pass In Q vr0 tcp K 151 14000 0 inet from any to 192.168.1.1/32 port = http
49 Pass In Q vr0 tcp K 0 0 0 inet from any to 76.126.xxx.xxx/32 port = 1194
50 Pass In Q vr0 tcp K 3 152 0 inet from any to 192.168.1.2/32 port = 3389
51 Pass In Q vr0 tcp K 5454103 2957748K 147 inet from any to 192.168.1.2/32 port = 45526
52 Pass In Q vr0 udp K 15844 1062307 1 inet from any to 192.168.1.2/32 port = 45526
53 Pass In Q vr0 tcp K 0 0 0 inet from any to 76.126.xxx.xxx/32 port = pptp
54 Pass In Q vr0 tcp K 9742 4440645 0 inet from any to 76.126.xxx.xxx/32 port 4999 >< 5016
55 Pass In Q vr0 tcp K 161 7944 0 inet from any to 192.168.1.199/32 port = 30771
56 Pass In Q vr0 udp K 0 0 0 inet from any to 192.168.1.199/32 port = 30771
57 Pass In Log Q vr1 icmp K 2802 198688 0 reply-to ... inet from any to 24.130.xxx.xxx/32
58 Pass In Log Q vr1 tcp K 2841 367910 0 reply-to ... inet from any to 192.168.1.1/32 port = ssh
59 Pass In Q vr1 tcp K 115 14122 0 reply-to ... inet from any to 192.168.1.1/32 port = http
60 Pass In Q vr1 tcp K 0 0 0 reply-to ... inet from any to 24.130.xxx.xxx/32 port = 1194
61 Pass In Q vr1 tcp K 3276204 973888K 0 reply-to ... inet from any to 192.168.1.2/32 port = 3389
62 Pass In Q vr1 tcp K 25511012 14192M 437 reply-to ... inet from any to 192.168.1.2/32 port = 45526
63 Pass In Q vr1 udp K 946162 176808K 7 reply-to ... inet from any to 192.168.1.2/32 port = 45526
64 Pass In Q vr1 udp K 251729 88046226 1 route-to ... inet from any to 255.255.255.255/32
65 Pass In Q vr1 tcp K 136 6948 0 reply-to ... inet from any to 192.168.1.199/32 port = 30771
66 Pass In Q ath0 tcp K 116 7596 0 inet from any to 127.0.0.1/32
67 Pass In Q ath0 K 345 22514 0 route-to ... inet from 192.168.1.0/24 to 24.130.144.0/21
68 Pass In Q ath0 K 86 5296 0 route-to ... inet from 192.168.1.0/24 to 76.126.208.0/21
69 Pass In Q ath0 tcp K 0 0 0 route-to ... inet from 192.168.1.0/24 to 192.168.100.1/32 port
70 Pass In Q ath0 tcp K 0 0 0 route-to ... inet from 192.168.1.0/24 to 192.168.100.1/32 port
71 Pass In Q ath0 tcp K 0 0 0 route-to ... inet from 192.168.1.0/24 to 192.168.100.1/32 port
72 Pass In Log Q ath0 K 84528 56727554 0 route-to ... inet from 192.168.1.0/24 to <SurfboardHacker>
73 Pass In Q ath0 tcp K 0 0 0 inet from 192.168.1.0/24 to <vpns> port = https
74 Pass In Q ath0 tcp K 515186 175504K 2 route-to ... inet from 192.168.1.0/24 to any port = https
75 Pass In Log Q ath0 gre K 0 0 0 inet from 192.168.1.0/24 to <vpns>
76 Pass In Log Q ath0 gre K 0 0 0 route-to ... inet from 192.168.1.0/24 to any
77 Pass In Log Q ath0 tcp K 0 0 0 inet from 192.168.1.0/24 to <vpns> port = pptp
78 Pass In Log Q ath0 tcp K 0 0 0 route-to ... inet from 192.168.1.0/24 to any port = pptp
79 Pass In Q ath0 K 0 0 0 inet from 192.168.1.0/24 to <vpns>
80 Pass In Q ath0 K 57056544 46756M 900 route-to ... inet from 192.168.1.0/24 to any
81 Pass In Q ath0 tcp K 0 0 0 inet from any to 127.0.0.1/32 port = ftp-proxy
82 Pass In Q ath0 tcp K 0 0 0 inet from any to 127.0.0.1/32 port = ftp
83 Pass In Q vr0 tcp K 0 0 0 inet from any port = ftp-data to (vr0) port > 49000 flags S/SA
84 Pass In Q vr1 tcp K 0 0 0 inet from any to 127.0.0.1/32 port = 8022
85 Pass In Q vr1 tcp K 0 0 0 inet from any to 127.0.0.1/32 port = ftp
86 Pass In 0 0 0 all
87 Pass In 0 0 0 all
88 Block In Log Q 125915 12699176 0 drop all
89 Block Out Log Q 0 0 0 drop all
0 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 24293
1 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 7422
2 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 59622
3 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 20965
4 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 6652
5 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = pdap-np
6 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 38894
7 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 10990
8 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 12000
9 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 27626
10 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 63485
11 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 26865
12 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 52957
13 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 38383
14 /miniupnpd Pass In Q vr0 tcp K 0 0 0 inet from any to any port = 11474
15 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 46591
16 /miniupnpd Pass In Q vr0 udp K 0 0 0 inet from any to any port = 7145
resolv.conf
domain local
nameserver 4.2.2.2
nameserver 208.67.220.220
Processes
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 10 61.1 0.0 0 8 ?? RL 2Mar08 57819:05.67 [idle]
root 20209 6.8 4.5 23716 22452 ?? S 5Apr08 0:41.99 /usr/local/bin/php
root 921 5.7 1.1 6568 5632 ?? S 2Mar08 4:51.02 /usr/local/sbin/lighttpd -f /var/etc/lighty-webConfigurator.conf
root 32 2.0 0.0 0 8 ?? DL 2Mar08 183:44.86 [ath0 taskq]
root 13 1.0 0.0 0 8 ?? WL 2Mar08 139:00.50 [swi1: net]
root 38 0.1 0.0 0 8 ?? DL 2Mar08 183:28.65 [pagezero]
root 0 0.0 0.0 0 0 ?? WLs 2Mar08 0:00.00 [swapper]
root 1 0.0 0.1 608 356 ?? ILs 2Mar08 0:00.39 /sbin/init --
root 2 0.0 0.0 0 8 ?? DL 2Mar08 4:07.46 [g_event]
root 3 0.0 0.0 0 8 ?? DL 2Mar08 95:49.84 [g_up]
root 4 0.0 0.0 0 8 ?? DL 2Mar08 76:15.44 [g_down]
root 5 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [crypto]
root 6 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [crypto returns]
root 7 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [kqueue taskq]
root 8 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [acpi_task_0]
root 9 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [acpi_task_1]
root 11 0.0 0.0 0 8 ?? RL 2Mar08 164:13.20 [swi4: clock sio]
root 12 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [swi3: vm]
root 14 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [swi2: cambio]
root 15 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [swi5: +]
root 16 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [acpi_task_2]
root 17 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [thread taskq]
root 18 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [swi6: Giant taskq]
root 19 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [swi6: task queue]
root 20 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [irq9: acpi0]
root 21 0.0 0.0 0 8 ?? WL 2Mar08 41:27.98 [irq12: vr0 ehci0]
root 22 0.0 0.0 0 8 ?? WL 2Mar08 46:58.29 [irq10: vr1 uhci0]
root 23 0.0 0.0 0 8 ?? DL 2Mar08 0:00.41 [usb0]
root 24 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [usbtask]
root 25 0.0 0.0 0 8 ?? WL 2Mar08 56:56.75 [irq11: ath0 uhci1]
root 26 0.0 0.0 0 8 ?? DL 2Mar08 0:00.33 [usb1]
root 27 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [irq5: uhci2]
root 28 0.0 0.0 0 8 ?? DL 2Mar08 0:00.36 [usb2]
root 29 0.0 0.0 0 8 ?? DL 2Mar08 0:00.36 [usb3]
root 30 0.0 0.0 0 8 ?? WL 2Mar08 171:51.14 [irq14: ata0]
root 31 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [irq15: ata1]
root 33 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [swi0: sio]
root 34 0.0 0.0 0 8 ?? WL 2Mar08 0:00.00 [irq1: atkbd0]
root 35 0.0 0.0 0 8 ?? DL 2Mar08 0:06.14 [pagedaemon]
root 36 0.0 0.0 0 8 ?? DL 2Mar08 0:00.00 [vmdaemon]
root 37 0.0 0.0 0 8 ?? RL 2Mar08 0:07.05 [idlepoll]
root 39 0.0 0.0 0 8 ?? DL 2Mar08 0:27.36 [bufdaemon]
root 40 0.0 0.0 0 8 ?? DL 2Mar08 6:19.12 [syncer]
root 41 0.0 0.0 0 8 ?? DL 2Mar08 0:27.33 [vnlru]
root 42 0.0 0.0 0 8 ?? DL 2Mar08 0:34.26 [softdepflush]
root 43 0.0 0.0 0 8 ?? DL 2Mar08 8:53.16 [schedcpu]
root 50 0.0 0.0 0 8 ?? DL 2Mar08 0:41.62 [md0]
root 112 0.0 0.1 504 360 ?? Is 2Mar08 0:00.02 /sbin/devd
root 250 0.0 0.5 3064 2416 ?? Is 2Mar08 0:01.24 /usr/sbin/sshd
_dhcp 418 0.0 0.2 1468 1096 ?? Ss 2Mar08 0:34.11 dhclient: vr1 (dhclient)
root 922 0.0 1.0 14924 5096 ?? Is 2Mar08 0:00.05 /usr/local/bin/php
root 928 0.0 1.0 14924 5096 ?? Is 2Mar08 0:00.07 /usr/local/bin/php
root 932 0.0 1.0 14924 5096 ?? Is 2Mar08 0:00.09 /usr/local/bin/php
root 944 0.0 1.0 14924 5096 ?? Is 2Mar08 0:00.10 /usr/local/bin/php
root 1281 0.0 0.2 1372 1056 ?? Ss 2Mar08 1:00.40 /usr/local/sbin/miniupnpd -f /var/etc/miniupnpd.conf
root 1283 0.0 0.2 1384 1020 ?? Is 2Mar08 0:23.87 /usr/sbin/cron -s
root 1330 0.0 0.1 1268 732 ?? Is 2Mar08 0:06.76 minicron 240 /var/run/ping_hosts.pid /etc/ping_hosts.sh
root 4248 0.0 0.1 1268 692 ?? Is 7Mar08 0:00.04 /usr/local/sbin/sshlockout_pf
root 19582 0.0 0.2 1440 1040 ?? Ss 7Mar08 2:05.86 /usr/sbin/syslogd -ss -f /var/etc/syslog.conf
nobody 34738 0.0 0.2 1472 1140 ?? I Mon06PM 0:05.94 /usr/local/sbin/dnsmasq -l /var/dhcpd/var/db/dhcpd.leases -s local
dhcpd 34763 0.0 0.4 2276 1908 ?? Ss Mon06PM 0:40.64 /usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd -cf /var/dhcpd/etc/dhcpd.conf ath0
proxy 37448 0.0 0.1 704 540 ?? SNs 11Mar08 0:18.22 /usr/local/sbin/pftpx -c 8021 -g 8021 192.168.1.1
root 42331 0.0 0.6 5800 2816 ?? Ss 8:27AM 0:39.26 sshd: root@ttyp0 (sshd)
root 58827 0.0 0.2 1624 1240 ?? Ss 10Mar08 0:44.08 /usr/sbin/hostapd -B /var/etc/hostapd_ath0.conf
root 65126 0.0 0.2 1384 1072 ?? I 11:20PM 0:00.00 cron: running job (cron)
root 65128 0.0 0.0 0 0 ?? Z 11:20PM 0:00.05 <defunct>
root 65138 0.0 0.1 1272 720 ?? SN 11:20PM 0:00.94 /usr/local/sbin/check_reload_status
root 73321 0.0 2.6 15636 13176 ?? I 5Apr08 0:04.26 /usr/local/bin/php
root 73366 0.0 2.6 15632 13064 ?? I 5Apr08 0:06.33 /usr/local/bin/php
root 79031 0.0 0.2 1468 1056 ?? I 25Mar08 0:00.88 dhclient: vr0 [priv] (dhclient)
_dhcp 79084 0.0 0.2 1468 1100 ?? Ss 25Mar08 0:22.09 dhclient: vr0 (dhclient)
root 79247 0.0 1.0 5532 5040 ?? IN 25Mar08 132:35.52 /bin/sh /var/db/rrd/updaterrd.sh
root 79371 0.0 0.2 2056 1176 ?? SNs 25Mar08 46:11.83 /usr/local/sbin/slbd -c/var/etc/slbd.conf -r5000
_ntp 82047 0.0 0.2 1340 1052 ?? I 25Mar08 0:10.33 ntpd: ntp engine (ntpd)
root 82048 0.0 0.2 1376 1048 ?? Ss 25Mar08 0:02.42 ntpd: [priv] (ntpd)
root 84661 0.0 2.8 16172 13904 ?? I 5Apr08 0:32.97 /usr/local/bin/php
root 94122 0.0 0.2 1328 940 ?? Ss 20Mar08 2:50.24 dtach -c /tmp/weechat weechat-curses
root 95152 0.0 1.1 6316 5256 ?? S 31Mar08 0:43.47 /usr/sbin/tcpdump -v -l -n -e -ttt -i pflog0
root 95153 0.0 0.1 1276 740 ?? S 31Mar08 0:16.13 logger -t pf -p local0.info
root 97820 0.0 0.1 1256 468 ?? IN 1:31AM 0:00.03 sleep 60
root 98042 0.0 0.2 1716 1200 ?? S 1:31AM 0:00.01 sh -c ps xauww 2>&1
root 98043 0.0 0.2 1500 988 ?? R 1:31AM 0:00.00 ps xauww
root 84042 0.0 0.3 1712 1360 v0 Is Sat09PM 0:00.03 login [pam] (login)
root 84043 0.0 0.2 1720 1204 v0 I Sat09PM 0:00.01 -sh (sh)
root 84044 0.0 0.2 1724 1208 v0 I+ Sat09PM 0:00.01 /bin/sh /etc/rc.initial
root 369 0.0 0.2 1468 1044 con- S 2Mar08 0:06.55 dhclient: vr1 [priv] (dhclient)
root 42352 0.0 0.2 1720 1204 p0 Is 8:27AM 0:00.01 -sh (sh)
root 42353 0.0 0.2 1728 1212 p0 I 8:27AM 0:00.01 /bin/sh /etc/rc.initial
root 42371 0.0 0.6 5060 3048 p0 I 8:27AM 0:00.04 /bin/tcsh
root 42389 0.0 0.1 1312 584 p0 S+ 8:27AM 0:03.33 dtach -a /tmp/weechat
root 94124 0.0 2.1 11544 10284 p1 Ss+ 20Mar08 141:02.90 weechat-curses
dhcpd.conf
cat: /var/etc/dhcpd.conf: No such file or directory
ez-ipupdate.cache
cat: /conf/ez-ipupdate.cache: No such file or directory
df
Filesystem 512-blocks Used Avail Capacity Mounted on
/dev/ad0s1a 7738764 397528 6722136 6% /
devfs 2 2 0 100% /dev
/dev/md0 3420 60 3088 2% /var/run
devfs 2 2 0 100% /var/dhcpd/dev
racoon.conf
cat: /var/etc/racoon.conf: No such file or directory
SPD
No SPD entries.
SAD
No SAD entries.
last 200 system log entries
Apr 12 01:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 01:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 01:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 02:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 02:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 02:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 03:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 03:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 03:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 04:05:00 via check_reload_status: check_reload_status is starting
Apr 12 04:45:00 via check_reload_status: check_reload_status is starting
Apr 12 04:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 04:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 04:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 05:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 05:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 05:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 06:31:32 via sshd[53150]: Did not receive identification string from 221.141.3.126
Apr 12 06:33:42 via sshd[53687]: Invalid user staff from 221.141.3.126
Apr 12 06:33:42 via sshd[53687]: Failed password for invalid user staff from 221.141.3.126 port 41942 ssh2
Apr 12 06:33:43 via sshd[53689]: Invalid user sales from 221.141.3.126
Apr 12 06:33:43 via sshd[53689]: Failed password for invalid user sales from 221.141.3.126 port 42026 ssh2
Apr 12 06:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 06:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 06:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 07:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 07:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 07:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 08:24:25 via sshd[81341]: Invalid user nagios from 213.220.193.35
Apr 12 08:24:25 via sshd[81341]: Failed password for invalid user nagios from 213.220.193.35 port 56098 ssh2
Apr 12 08:24:27 via sshd[81343]: Invalid user nagios from 213.220.193.35
Apr 12 08:24:27 via sshd[81343]: Failed password for invalid user nagios from 213.220.193.35 port 54858 ssh2
Apr 12 08:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 08:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 08:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 09:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 09:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 09:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 10:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 10:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 10:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 11:35:00 via check_reload_status: check_reload_status is starting
Apr 12 11:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 11:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 11:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 12:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 12:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 12:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 13:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 13:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 13:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 14:41:54 via sshd[76027]: Did not receive identification string from 221.141.3.126
Apr 12 14:47:38 via sshd[77412]: Invalid user staff from 221.141.3.126
Apr 12 14:47:38 via sshd[77412]: Failed password for invalid user staff from 221.141.3.126 port 39013 ssh2
Apr 12 14:47:40 via sshd[77419]: Invalid user sales from 221.141.3.126
Apr 12 14:47:40 via sshd[77419]: Failed password for invalid user sales from 221.141.3.126 port 39134 ssh2
Apr 12 14:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 14:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 14:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 15:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 15:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 15:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 16:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 16:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 16:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 17:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 17:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 17:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 18:19:14 via sshd[30398]: Did not receive identification string from 72.233.3.135
Apr 12 18:21:21 via sshd[30934]: Failed password for root from 72.233.3.135 port 51250 ssh2
Apr 12 18:21:22 via sshd[30940]: Failed password for admin from 72.233.3.135 port 51264 ssh2
Apr 12 18:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 18:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 18:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 19:26:38 via sshd[47152]: Accepted keyboard-interactive/pam for root from 192.168.1.2 port 3180 ssh2
Apr 12 19:26:38 via sshd[47152]: subsystem request for sftp
Apr 12 19:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 19:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 19:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 20:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 20:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 20:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 21:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 21:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 21:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 21:54:19 via sshd[25510]: Timeout, client not responding.
Apr 12 21:54:21 via login: login on ttyv0 as root
Apr 12 22:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 22:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 22:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 12 23:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 12 23:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 12 23:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 00:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 00:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 00:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 01:01:03 via php: : DynDns: Running updatedns()
Apr 13 01:01:03 via php: : DynDns: updatedns() starting
Apr 13 01:01:03 via php: : DynDns: _detectChange() starting.
Apr 13 01:01:03 via php: : DynDns: Current WAN IP: 76.126.xxx.xxx
Apr 13 01:01:03 via php: : DynDns: Cached IP: 76.126.xxx.xxx
Apr 13 01:01:03 via php: : phpDynDNS: No Change In My IP Address and/or 25 Days Has Not Past. Not Updating Dynamic DNS Entry.
Apr 13 01:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 01:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 01:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 02:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 02:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 02:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 03:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 03:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 03:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 04:46:47 via sshd[87090]: Did not receive identification string from 67.15.4.55
Apr 13 04:50:42 via sshd[88104]: Failed password for root from 67.15.4.55 port 39971 ssh2
Apr 13 04:50:43 via sshd[88106]: Failed password for root from 67.15.4.55 port 40058 ssh2
Apr 13 04:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 04:52:49 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 04:52:49 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 05:52:49 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 05:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 05:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 06:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 06:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 06:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 07:18:03 via sshd[24962]: Failed password for root from 213.220.193.35 port 51966 ssh2
Apr 13 07:18:05 via sshd[24968]: Failed password for root from 213.220.193.35 port 55004 ssh2
Apr 13 07:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 07:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 07:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 08:27:39 via sshd[42331]: Accepted keyboard-interactive/pam for root from 192.168.1.2 port 4392 ssh2
Apr 13 08:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 08:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 08:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 09:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 09:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 09:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 10:35:00 via check_reload_status: check_reload_status is starting
Apr 13 10:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 10:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 10:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 11:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 11:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 11:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 12:21:25 via sshd[1018]: Failed password for root from 203.66.187.239 port 38910 ssh2
Apr 13 12:21:26 via sshd[1024]: Failed password for root from 203.66.187.239 port 39003 ssh2
Apr 13 12:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 12:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 12:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 13:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 13:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 13:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 14:40:01 via check_reload_status: check_reload_status is starting
Apr 13 14:51:48 via sshd[38511]: Invalid user test from 221.194.44.144
Apr 13 14:51:48 via sshd[38511]: Failed password for invalid user test from 221.194.44.144 port 50250 ssh2
Apr 13 14:51:51 via sshd[38518]: Invalid user guest from 221.194.44.144
Apr 13 14:51:51 via sshd[38518]: Failed password for invalid user guest from 221.194.44.144 port 50350 ssh2
Apr 13 14:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 14:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 14:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 15:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 15:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 15:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 16:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 16:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 16:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 17:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 17:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 17:52:51 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 18:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 18:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 18:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 19:00:01 via check_reload_status: check_reload_status is starting
Apr 13 19:35:00 via check_reload_status: check_reload_status is starting
Apr 13 19:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 19:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 19:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 20:50:36 via sshd[27974]: Did not receive identification string from 202.188.158.175
Apr 13 20:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 20:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 20:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 20:53:05 via sshd[28561]: Failed password for admin from 202.188.158.175 port 32965 ssh2
Apr 13 20:53:14 via sshd[28589]: Failed password for root from 202.188.158.175 port 33031 ssh2
Apr 13 21:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 21:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 21:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 22:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 22:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 22:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 13 23:20:00 via check_reload_status: check_reload_status is starting
Apr 13 23:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 13 23:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 13 23:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 14 00:52:50 via dhclient[79084]: DHCPREQUEST on vr0 to 68.87.76.13 port 67
Apr 14 00:52:50 via dhclient[79084]: DHCPACK from 68.87.76.13
Apr 14 00:52:50 via dhclient[79084]: bound to 76.126.xxx.xxx -- renewal in 3600 seconds.
Apr 14 01:01:02 via php: : DynDns: Running updatedns()
Apr 14 01:01:02 via php: : DynDns: updatedns() starting
Apr 14 01:01:02 via php: : DynDns: _detectChange() starting.
Apr 14 01:01:02 via php: : DynDns: Current WAN IP: 76.126.xxx.xxx
Apr 14 01:01:02 via php: : DynDns: Cached IP: 76.126.xxx.xxx
Apr 14 01:01:02 via php: : phpDynDNS: No Change In My IP Address and/or 25 Days Has Not Past. Not Updating Dynamic DNS Entry.
last 50 filter log entries
Apr 14 01:29:55 via pf: 9. 233285 rule 88/0(match): block in on vr1: (tos 0x20, ttl 111, id 60549, offset 0, flags [none], proto: UDP (17), length: 134) 87.17.210.48.36258 > 24.130.xxx.xxx.53104: UDP, length 106
Apr 14 01:30:01 via pf: 5. 607015 rule 88/0(match): block in on vr0: (tos 0x20, ttl 115, id 47276, offset 0, flags [none], proto: UDP (17), length: 90) 58.218.210.51.16001 > 76.126.xxx.xxx.63762: UDP, length 62
Apr 14 01:30:04 via pf: 2. 892249 rule 57/0(match): pass in on vr1: (tos 0x20, ttl 51, id 14583, offset 0, flags [none], proto: ICMP (1), length: 92) 220.210.134.30 > 24.130.xxx.xxx: ICMP host 192.168.11.2 unreachable, length 72
Apr 14 01:30:04 via pf: (tos 0x0, ttl 114, id 2537, offset 0, flags [DF], proto: TCP (6), length: 64) 24.130.xxx.xxx > 192.168.11.2: [|tcp]
Apr 14 01:30:06 via pf: 1. 724289 rule 88/0(match): block in on vr1: (tos 0x20, ttl 116, id 38460, offset 0, flags [none], proto: UDP (17), length: 131) 201.58.19.21.50001 > 24.130.xxx.xxx.51602: UDP, length 103
Apr 14 01:30:07 via pf: 1. 416010 rule 57/0(match): pass in on vr1: (tos 0x20, ttl 51, id 61777, offset 0, flags [none], proto: ICMP (1), length: 92) 220.210.134.30 > 24.130.xxx.xxx: ICMP host 192.168.11.2 unreachable, length 72
Apr 14 01:30:07 via pf: (tos 0x0, ttl 114, id 59043, offset 0, flags [DF], proto: TCP (6), length: 64) 24.130.xxx.xxx > 192.168.11.2: [|tcp]
Apr 14 01:30:08 via pf: 684062 rule 88/0(match): block in on vr0: (tos 0x20, ttl 107, id 28464, offset 0, flags [none], proto: UDP (17), length: 126) 77.191.249.129.20582 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:30:08 via pf: 004535 rule 88/0(match): block in on vr1: (tos 0x20, ttl 107, id 59928, offset 0, flags [none], proto: UDP (17), length: 126) 77.191.249.129.20582 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:30:13 via pf: 5. 681685 rule 88/0(match): block in on vr0: (tos 0x20, ttl 107, id 60235, offset 0, flags [none], proto: UDP (17), length: 126) 77.191.249.129.20582 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:30:13 via pf: 004517 rule 88/0(match): block in on vr1: (tos 0x20, ttl 107, id 6915, offset 0, flags [none], proto: UDP (17), length: 126) 77.191.249.129.20582 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:30:14 via pf: 146993 rule 57/0(match): pass in on vr1: (tos 0x20, ttl 51, id 7239, offset 0, flags [none], proto: ICMP (1), length: 92) 220.210.134.30 > 24.130.xxx.xxx: ICMP host 192.168.11.2 unreachable, length 72
Apr 14 01:30:14 via pf: (tos 0x0, ttl 114, id 49426, offset 0, flags [DF], proto: TCP (6), length: 64) 24.130.xxx.xxx > 192.168.11.2: [|tcp]
Apr 14 01:30:24 via pf: 10. 433453 rule 88/0(match): block in on vr0: (tos 0x20, ttl 118, id 11735, offset 0, flags [none], proto: UDP (17), length: 134) 89.110.12.112.25744 > 76.126.xxx.xxx.58698: UDP, length 106
Apr 14 01:30:26 via pf: 1. 963073 rule 88/0(match): block in on vr0: (tos 0x20, ttl 109, id 39825, offset 0, flags [none], proto: UDP (17), length: 131) 84.36.158.25.13344 > 76.126.xxx.xxx.58698: UDP, length 103
Apr 14 01:30:30 via pf: 3. 872848 rule 88/0(match): block in on vr1: (tos 0x20, ttl 105, id 49807, offset 0, flags [none], proto: UDP (17), length: 131) 125.24.5.80.24870 > 24.130.xxx.xxx.55200: UDP, length 103
Apr 14 01:30:30 via pf: 604533 rule 88/0(match): block in on vr0: (tos 0x20, ttl 118, id 61185, offset 0, flags [none], proto: UDP (17), length: 131) 193.153.149.60.25453 > 76.126.xxx.xxx.60117: UDP, length 103
Apr 14 01:30:32 via pf: 1. 197562 rule 88/0(match): block in on vr1: (tos 0x20, ttl 233, id 22065, offset 0, flags [none], proto: TCP (6), length: 40) 60.126.23.7.48838 > 24.130.xxx.xxx.50019: R, cksum 0x2f21 (correct), 0:0(0) win 0
Apr 14 01:30:37 via pf: 5. 021512 rule 88/0(match): block in on vr0: (tos 0x20, ttl 119, id 2347, offset 0, flags [none], proto: UDP (17), length: 134) 82.42.228.52.50052 > 76.126.xxx.xxx.57159: UDP, length 106
Apr 14 01:30:40 via pf: 2. 811908 rule 88/0(match): block in on vr0: (tos 0x20, ttl 113, id 59724, offset 0, flags [none], proto: UDP (17), length: 131) 71.231.222.192.1311 > 76.126.xxx.xxx.58698: UDP, length 103
Apr 14 01:30:43 via pf: 3. 202593 rule 88/0(match): block in on vr1: (tos 0x20, ttl 106, id 51122, offset 0, flags [none], proto: UDP (17), length: 131) 67.55.134.5.16725 > 24.130.xxx.xxx.55200: UDP, length 103
Apr 14 01:30:48 via pf: 5. 358437 rule 88/0(match): block in on vr1: (tos 0x20, ttl 52, id 32511, offset 0, flags [none], proto: UDP (17), length: 129) 58.52.112.112.14743 > 24.130.xxx.xxx.62039: UDP, length 101
Apr 14 01:30:51 via pf: 3. 312415 rule 57/0(match): pass in on vr1: (tos 0x20, ttl 47, id 12831, offset 0, flags [none], proto: ICMP (1), length: 92) 61.125.197.125 > 24.130.xxx.xxx: ICMP host 192.168.11.9 unreachable, length 72
Apr 14 01:30:51 via pf: (tos 0x0, ttl 113, id 56993, offset 0, flags [DF], proto: TCP (6), length: 64) 24.130.xxx.xxx > 192.168.11.9: [|tcp]
Apr 14 01:30:56 via pf: 4. 212512 rule 88/0(match): block in on vr0: (tos 0x20, ttl 48, id 16760, offset 0, flags [DF], proto: UDP (17), length: 925) 222.161.2.46.49650 > 76.126.xxx.xxx.1027: UDP, length 897
Apr 14 01:30:57 via pf: 1. 147352 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 359, offset 0, flags [none], proto: UDP (17), length: 131) 121.7.179.182.11406 > 76.126.xxx.xxx.58698: UDP, length 103
Apr 14 01:30:58 via pf: 1. 159885 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 64639, offset 0, flags [none], proto: UDP (17), length: 131) 222.131.189.247.55270 > 76.126.xxx.xxx.63397: UDP, length 103
Apr 14 01:31:02 via pf: 4. 528953 rule 88/0(match): block in on vr0: (tos 0x20, ttl 110, id 34196, offset 0, flags [none], proto: UDP (17), length: 126) 77.204.71.37.7096 > 76.126.xxx.xxx.58698: UDP, length 98
Apr 14 01:31:04 via pf: 1. 628325 rule 88/0(match): block in on vr0: (tos 0x20, ttl 115, id 52205, offset 0, flags [none], proto: UDP (17), length: 126) 61.133.225.181.7860 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:31:04 via pf: 205714 rule 88/0(match): block in on vr1: (tos 0x20, ttl 116, id 9864, offset 0, flags [none], proto: UDP (17), length: 126) 61.133.225.181.7860 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:31:06 via pf: 2. 054756 rule 88/0(match): block in on vr0: (tos 0x20, ttl 104, id 44946, offset 0, flags [none], proto: UDP (17), length: 131) 193.77.45.53.50692 > 76.126.xxx.xxx.53242: UDP, length 103
Apr 14 01:31:08 via pf: 1. 782260 rule 88/0(match): block in on vr0: (tos 0x20, ttl 55, id 30817, offset 0, flags [none], proto: UDP (17), length: 131) 83.30.167.206.22731 > 76.126.xxx.xxx.63397: UDP, length 103
Apr 14 01:31:10 via pf: 1. 568177 rule 88/0(match): block in on vr0: (tos 0x20, ttl 115, id 64774, offset 0, flags [none], proto: UDP (17), length: 126) 61.133.225.181.7860 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:31:10 via pf: 001964 rule 88/0(match): block in on vr1: (tos 0x20, ttl 116, id 16959, offset 0, flags [none], proto: UDP (17), length: 126) 61.133.225.181.7860 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:31:23 via pf: 13. 021072 rule 88/0(match): block in on vr0: (tos 0x20, ttl 108, id 22066, offset 0, flags [none], proto: UDP (17), length: 131) 70.217.128.216.58038 > 76.126.xxx.xxx.57159: UDP, length 103
Apr 14 01:31:31 via pf: 8. 536807 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 9410, offset 0, flags [none], proto: UDP (17), length: 126) 86.52.72.27.21158 > 76.126.xxx.xxx.55296: UDP, length 98
Apr 14 01:31:31 via pf: 108241 rule 88/0(match): block in on vr0: (tos 0x20, ttl 107, id 25228, offset 0, flags [none], proto: UDP (17), length: 131) 83.132.56.50.49152 > 76.126.xxx.xxx.60117: UDP, length 103
Apr 14 01:31:32 via pf: 612165 rule 88/0(match): block in on vr0: (tos 0x20, ttl 111, id 21454, offset 0, flags [none], proto: UDP (17), length: 129) 218.111.220.252.21400 > 76.126.xxx.xxx.58698: UDP, length 101
Apr 14 01:31:33 via pf: 1. 019809 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 57295, offset 0, flags [none], proto: UDP (17), length: 126) 91.163.60.89.26225 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:31:34 via pf: 967221 rule 88/0(match): block in on vr1: (tos 0x20, ttl 112, id 41635, offset 0, flags [none], proto: UDP (17), length: 126) 91.163.60.89.26225 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:31:36 via pf: 2. 007836 rule 88/0(match): block in on vr0: (tos 0x20, ttl 113, id 27380, offset 0, flags [none], proto: UDP (17), length: 131) 216.95.141.99.38937 > 76.126.xxx.xxx.63397: UDP, length 103
Apr 14 01:31:39 via pf: 3. 012875 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 32064, offset 0, flags [none], proto: UDP (17), length: 126) 91.163.60.89.26225 > 76.126.xxx.xxx.53242: UDP, length 98
Apr 14 01:31:40 via pf: 1. 003597 rule 88/0(match): block in on vr1: (tos 0x20, ttl 112, id 5402, offset 0, flags [none], proto: UDP (17), length: 126) 91.163.60.89.26225 > 24.130.xxx.xxx.55200: UDP, length 98
Apr 14 01:31:44 via pf: 3. 823253 rule 88/0(match): block in on vr0: (tos 0x20, ttl 114, id 18807, offset 0, flags [none], proto: UDP (17), length: 131) 88.110.86.212.18600 > 76.126.xxx.xxx.63397: UDP, length 103
Apr 14 01:31:46 via pf: 2. 590405 rule 88/0(match): block in on vr0: (tos 0x20, ttl 112, id 10468, offset 0, flags [none], proto: UDP (17), length: 131) 24.79.246.118.60430 > 76.126.xxx.xxx.60117: UDP, length 103
Apr 14 01:31:48 via pf: 1. 248300 rule 88/0(match): block in on vr0: (tos 0x20, ttl 46, id 30911, offset 0, flags [none], proto: UDP (17), length: 105) 210.133.178.129.14893 > 76.126.xxx.xxx.14893: UDP, length 77
Apr 14 01:31:51 via pf: 3. 773647 rule 88/0(match): block in on vr1: (tos 0x48, ttl 251, id 17607, offset 0, flags [DF], proto: UDP (17), length: 350) 68.87.76.13.67 > 24.130.xxx.xxx.68: BOOTP/DHCP, Reply, length: 322, xid:0xaad2e060, flags: [none]
Apr 14 01:31:51 via pf: Client IP: 24.130.xxx.xxx
Apr 14 01:31:51 via pf: Your IP: 24.130.xxx.xxx [|bootp]
Apr 14 01:31:55 via pf: 3. 208250 rule 88/0(match): block in on vr0: (tos 0x20, ttl 108, id 7484, offset 0, flags [none], proto: UDP (17), length: 131) 89.129.4.169.4662 > 76.126.xxx.xxx.63397: UDP, length 103
ls /conf
backup
config.xml
dyndns.cache
ls /var/run
.snap
cron.pid
devd.pid
devd.pipe
dnsmasq.pid
filter_reload_status
hostapd
htpasswd
ld-elf.so.hints
lighty-webConfigurator.pid
log
logpriv
miniupnpd.pid
ping_hosts.pid
sshd.pid
syslog.pid
utmp
/sbin/mount
/dev/ad0s1a on / (ufs, local)
devfs on /dev (devfs, local)
/dev/md0 on /var/run (ufs, local)
devfs on /var/dhcpd/dev (devfs, local)
cat /tmp/rules.debug
# System Aliases
loopback = "{ lo0 }"
lan = "{ ath0 }"
wan = "{ vr0 }"
enc0 = "{ enc0 }"
OPT1 = "{ vr1 }"
# User Aliases
SurfboardHacker = "{ 64.18.148.67 209.250.234.170 72.20.13.45 38.101.208.186 74.86.227.138 208.67.212.207 208.69.230.124 }"
set loginterface vr0
set loginterface ath0
set loginterface vr1
set optimization normal
set limit states 100000
scrub all random-id fragment reassemble
nat-anchor "pftpx/*"
nat-anchor "natearly/*"
nat-anchor "natrules/*"
# FTP proxy
rdr-anchor "pftpx/*"
# Outbound NAT rules
nat on $wan from 192.168.1.0/24 port 500 to any port 500 -> (vr0) port 500
nat on $wan from 192.168.1.0/24 port 5060 to any port 5060 -> (vr0) port 5060
nat on $wan from 192.168.1.0/24 to any -> (vr0)
nat on $OPT1 from 192.168.1.0/24 port 500 to any port 500 -> (vr1) port 500
nat on $OPT1 from 192.168.1.0/24 port 5060 to any port 5060 -> (vr1) port 5060
nat on $OPT1 from 192.168.1.0/24 to any -> (vr1)
#SSH Lockout Table
table <sshlockout> persist
# Load balancing anchor - slbd updates
rdr-anchor "slb"
# FTP Proxy/helper
table <vpns> { }
no rdr on ath0 proto tcp from any to <vpns> port 21
rdr on ath0 proto tcp from any to any port 21 -> 127.0.0.1 port 8021
# NAT Inbound Redirects
rdr on vr0 proto tcp from any to 76.126.xxx.xxx port { 22 } -> 192.168.1.1
rdr on vr1 proto tcp from any to 24.130.xxx.xxx port { 22 } -> 192.168.1.1
rdr on vr0 proto tcp from any to 76.126.xxx.xxx port { 8080 } -> 192.168.1.1 port 80
rdr on vr1 proto tcp from any to 24.130.xxx.xxx port { 8080 } -> 192.168.1.1 port 80
rdr on vr0 proto tcp from any to 76.126.xxx.xxx port { 3389 } -> 192.168.1.2
rdr on vr1 proto tcp from any to 24.130.xxx.xxx port { 3389 } -> 192.168.1.2
rdr on vr0 proto { tcp udp } from any to 76.126.xxx.xxx port { 45526 } -> 192.168.1.2
rdr on vr1 proto { tcp udp } from any to 24.130.xxx.xxx port { 45526 } -> 192.168.1.2
rdr on vr0 proto tcp from any to 76.126.xxx.xxx port { 30771 } -> 192.168.1.199
rdr on vr1 proto tcp from any to 24.130.xxx.xxx port { 30771 } -> 192.168.1.199
# IMSpector rdr anchor
rdr-anchor "imspector"
# UPnPd rdr anchor
rdr-anchor "miniupnpd"
anchor "ftpsesame/*"
anchor "firewallrules"
# We use the mighty pf, we cannot be fooled.
block quick proto { tcp, udp } from any port = 0 to any
block quick proto { tcp, udp } from any to any port = 0
# snort2c
table <snort2c> persist
block quick from <snort2c> to any label "Block snort2c hosts"
block quick from any to <snort2c> label "Block snort2c hosts"
# loopback
anchor "loopback"
pass in quick on $loopback all label "pass loopback"
pass out quick on $loopback all label "pass loopback"
# package manager early specific hook
anchor "packageearly"
# carp
anchor "carp"
# permit wan interface to ping out (ping_hosts.sh)
pass quick proto icmp from 76.126.xxx.xxx to any keep state
# NAT Reflection rules
# allow access to DHCP server on LAN
anchor "dhcpserverlan"
pass in quick on $lan proto udp from any port = 68 to 255.255.255.255 port = 67 label "allow access to DHCP server on LAN"
pass in quick on $lan proto udp from any port = 68 to 192.168.1.1 port = 67 label "allow access to DHCP server on LAN"
pass out quick on $lan proto udp from 192.168.1.1 port = 67 to any port = 68 label "allow access to DHCP server on LAN"
# Not installing DHCP server firewall rules for OPT1 which is configured for DHCP.
# allow our DHCP client out to the WAN
anchor "wandhcp"
pass out quick on $wan proto udp from any port = 68 to any port = 67 label "allow dhcp client out wan"
block in log quick on $wan proto udp from any port = 67 to 192.168.1.0/24 port = 68 label "block dhcp client out wan"
pass in quick on $wan proto udp from any port = 67 to any port = 68 label "allow dhcp client out wan"
# LAN/OPT spoof check (needs to be after DHCP because of broadcast addresses)
antispoof for ath0
antispoof for vr1
anchor "spoofing"
# Support for allow limiting of TCP connections by establishment rate
anchor "limitingesr"
table <virusprot>
block in quick from <virusprot> to any label "virusprot overload table"
# let out anything from the firewall host itself and decrypted IPsec traffic
pass out quick on $lan proto icmp keep state label "let out anything from firewall host itself"
pass out quick on $wan proto icmp keep state label "let out anything from firewall host itself"
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
# pass traffic from firewall -> out
anchor "firewallout"
pass out quick on vr0 all keep state label "let out anything from firewall host itself"
pass out quick on ath0 all keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
pass out quick on $enc0 keep state label "IPSEC internal host to host"
# let out anything from the firewall host itself and decrypted IPsec traffic
pass out quick on vr1 proto icmp keep state label "let out anything from firewall host itself"
pass out quick on vr1 all keep state label "let out anything from firewall host itself"
# make sure the user cannot lock himself out of the webGUI or SSH
anchor "anti-lockout"
pass in quick on ath0 from any to 192.168.1.1 keep state label "anti-lockout web rule"
# SSH lockout
block in log proto tcp from <sshlockout> to any port 22 label "sshlockout"
anchor "ftpproxy"
anchor "pftpx/*"
# User-defined aliases follow
table <SurfboardHacker> { 64.18.148.67 209.250.234.170 72.20.13.45 38.101.208.186 74.86.227.138 208.67.212.207 208.69.230.124 }
# User-defined rules follow
pass in log quick on $wan inet proto icmp from any to 76.126.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on $wan proto tcp from any to { 192.168.1.1 } port = 22 keep state ( max-src-states 3 max-src-conn-rate 2 /60, overload <virusprot> flush global ) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on $wan proto tcp from any to { 192.168.1.1 } port = 80 keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on $wan proto tcp from any to 76.126.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on $wan proto tcp from any to { 192.168.1.2 } port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on $wan proto { tcp udp } from any to { 192.168.1.2 } port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on $wan proto tcp from any to 76.126.xxx.xxx port = 1723 keep state label "USER_RULE: PPTP"
pass in quick on $wan proto tcp from any to 76.126.xxx.xxx port 4999 >< 5016 keep state label "USER_RULE: IRC DCC"
pass in quick on $wan proto { tcp udp } from any to { 192.168.1.199 } port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in log quick on $OPT1 reply-to (vr1 24.130.144.1) inet proto icmp from any to 24.130.xxx.xxx keep state label "USER_RULE: Allow Ping reply"
pass in log quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to { 192.168.1.1 } port = 22 keep state ( max-src-states 3 max-src-conn-rate 2 /60, overload <virusprot> flush global ) label "USER_RULE: NAT SSH -> pfsense"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to { 192.168.1.1 } port = 80 keep state label "USER_RULE: NAT Web Config -> pfsense"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to 24.130.xxx.xxx port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to { 192.168.1.2 } port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto { tcp udp } from any to { 192.168.1.2 } port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
pass in quick on $OPT1 route-to { ( vr0 76.126.216.1 ) } proto udp from any to { 255.255.255.255 } keep state label "USER_RULE: Allow DHCP"
pass in quick on $OPT1 reply-to (vr1 24.130.144.1) proto tcp from any to { 192.168.1.199 } port = 30771 keep state label "USER_RULE: NAT BT -> Flora Laptop"
pass in quick on $lan proto tcp from any to { 127.0.0.1 } keep state label "USER_RULE"
pass in quick on $lan route-to { ( vr1 24.130.144.1 ) } from 192.168.1.0/24 to { 24.130.144.1/21 } keep state label "USER_RULE: WAN DMZ"
pass in quick on $lan route-to { ( vr0 76.126.216.1 ) } from 192.168.1.0/24 to { 76.126.208.1/21 } keep state label "USER_RULE: WAN2 DMZ"
pass in quick on $lan route-to { ( vr0 76.126.216.1 ) } proto tcp from 192.168.1.0/24 to { 192.168.100.1 } port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on $lan route-to { ( vr0 76.126.216.1 ) } proto tcp from 192.168.1.0/24 to { 192.168.100.1 } port = 23 keep state label "USER_RULE: Modem 1 -> WAN1"
pass in quick on $lan route-to { ( vr0 76.126.216.1 ) } proto tcp from 192.168.1.0/24 to { 192.168.100.1 } port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2"
pass in log quick on $lan route-to { ( vr0 76.126.216.1 ) } from 192.168.1.0/24 to <SurfboardHacker> keep state label "USER_RULE: SurfboardHacker -> WAN1"
pass in quick on $lan proto tcp from 192.168.1.0/24 to <vpns> port = 443 keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on $lan route-to { ( vr0 76.126.216.1 ) } proto tcp from 192.168.1.0/24 to any port = 443 keep state label "USER_RULE: HTTPS -> WAN2"
pass in log quick on $lan proto gre from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on $lan route-to { ( vr1 24.130.144.1 ) } proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN2"
pass in log quick on $lan proto tcp from 192.168.1.0/24 to <vpns> port = 1723 keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in log quick on $lan route-to { ( vr1 24.130.144.1 ) } proto tcp from 192.168.1.0/24 to any port = 1723 keep state label "USER_RULE: PPTP -> WAN2"
pass in quick on $lan from 192.168.1.0/24 to <vpns> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
pass in quick on $lan route-to { ( vr0 76.126.216.1 ) , ( vr1 24.130.144.1 ) } round-robin from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance"
# VPN Rules
pass in quick on ath0 inet proto tcp from any to $loopback port 8021 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on ath0 inet proto tcp from any to $loopback port 21 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr0 inet proto tcp from port 20 to (vr0) port > 49000 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
# enable ftp-proxy
pass in quick on vr1 inet proto tcp from any to $loopback port 8022 keep state label "FTP PROXY: Allow traffic to localhost"
pass in quick on vr1 inet proto tcp from any to $loopback port 21 keep state label "FTP PROXY: Allow traffic to localhost"
# IMSpector
anchor "imspector"
# uPnPd
anchor "miniupnpd"
#---------------------------------------------------------------------------
# default rules (just to be sure)
#---------------------------------------------------------------------------
block in log quick all label "Default block all just to be sure."
block out log quick all label "Default block all just to be sure."
VMStat
15722049 forks, 2578542657 pages, average 164.01
152553 vforks, 110670354 pages, average 725.46
0 rforks, 0 pages, average 0.00
Type InUse MemUse HighUse Requests Size(s)
NULLFS hash 1 1K - 1 64
pfs_nodes 20 3K - 20 128
ath_hal 6 27K - 6 128,256,512,1024
GEOM 76 10K - 539 16,32,64,128,256,512,1024,4096
athdev 3 457K - 3 128
CAM periph 1 1K - 1 128
isadev 21 2K - 21 64
pflog 1 1K - 1 16
pfsync 1 1K - 1 512
cdev 26 4K - 26 128
pf_if 32 7K - 32 16,256,2048
sigio 1 1K - 2 32
file desc 97 25K - 15881689 16,256,512,1024
kenv 118 8K - 119 16,32,64,4096
kqueue 4 3K - 7345 256,1024
proc-args 43 3K - 14331334 16,32,64,128,256
zombie 1 1K - 15874557 128
ithread 62 5K - 62 16,64,128
KTRACE 100 13K - 100 128
kbdmux 6 9K - 6 16,128,256,2048,4096
linker 84 4K - 107 16,32,256
lockf 2 1K - 59133176 64
ip6ndp 11 1K - 13 64,128
temp 38 215K - 52625488 16,32,64,128,256,512,1024,2048,4096
devbuf 691 2363K - 2922 16,32,64,128,256,512,1024,2048,4096
MD sectors 5 20K - 5 4096
module 432 28K - 432 64,128
MD disk 6 3K - 6 16,2048
mtx_pool 1 8K - 1
subproc 239 401K - 15874795 256,4096
proc 2 4K - 2 2048
session 29 4K - 34392 128
pgrp 34 3K - 35137 64
cred 31 4K - 118144290 128
uidinfo 7 1K - 440 32,512
plimit 9 3K - 370903 256
sysctltmp 0 0K - 609380 16,32,128,256
sysctloid 2226 67K - 2226 16,32,64
sysctl 0 0K - 1908238 16,32,64
umtx 170 11K - 170 64
bus-sc 51 38K - 1854 16,32,64,128,256,512,1024,2048,4096
bus 971 39K - 3928 16,32,64,128,1024
devstat 6 13K - 6 16,4096
eventhandler 65 4K - 65 32,128
kobj 254 508K - 309 2048
CAM XPT 10 1K - 17 16,64,512
rman 130 8K - 572 16,64
CAM dev queue 1 1K - 1 64
sbuf 0 0K - 362 16,32,64,128,256,512,1024,2048,4096
sleep queues 171 6K - 171 32
CAM queue 3 1K - 3 16
CAM SIM 1 1K - 1 64
taskqueue 11 1K - 11 16,128
turnstiles 171 11K - 171 64
Unitno 8 1K - 19072568 16,64
iov 0 0K - 2925303 16,32,64,128,256,512,1024,2048,4096
ioctlops 0 0K - 16882998 16,32,64,128,256,512,1024,2048,4096
msg 4 53K - 4 1024,4096
sem 4 7K - 4 512,1024,4096
shm 1 12K - 1
ttys 393 71K - 12468 128,1024
ptys 5 1K - 5 128
mbextcnt 0 0K - 7389 16
mbuf_tag 1 1K - 338677955 16,32
pcb 30 5K - 25872 16,32,64,2048
soname 17 2K - 19854436 16,32,128
ata_generic 2 2K - 2 1024
BIO buffer 32 64K - 2938 2048
vfscache 1 256K - 1
cluster_save buffer 0 0K - 73645 32,64
VFS hash 1 128K - 1
vnodes 1 1K - 1 128
vnodemarker 0 0K - 599565 512
mount 46 2K - 105 16,32,64,128,2048
ad_driver 2 1K - 2 32
BPF 31 155K - 462 16,64,128,256,512,2048,4096
ether_multi 86 4K - 108 16,32,64
ifaddr 322 28K - 342 16,32,64,256,512,2048
ifnet 8 8K - 8 256,1024
clone 12 48K - 12 4096
arpcom 3 1K - 3 16
lo 1 1K - 1 16
ata_dma 2 1K - 2 128
ar_driver 0 0K - 10 512,2048
routetbl 205 24K - 449209 16,32,64,128,256,512
80211node 3 9K - 27415 512,4096
netgraph_node 3 1K - 4 256
netgraph 3 1K - 3 32
netgraph_sock 0 0K - 1 64
igmp 1 1K - 1 16
in_multi 6 1K - 9 32
Export Host 2 2K - 2 1024
ip_moptions 2 1K - 2 128
hostcache 1 24K - 1
syncache 1 8K - 1
in6_multi 52 2K - 52 16,32,64
inpcbpolicy 30 1K - 4608228 16
ipsecpolicy 60 15K - 9281836 256
NFS daemon 1 8K - 1
crypto 3 1K - 3 128,512
xform 0 0K - 7724 16,32
agp 2 257K - 2 16
p1003.1b 1 1K - 1 16
newblk 1 1K - 1 256
inodedep 1 128K - 1
pagedep 1 16K - 1
UFS dirhash 33 6K - 33 16,32,512
UFS mount 6 13K - 6 256,2048,4096
UMAHash 2 9K - 7 256,512,1024,2048,4096
VM pgdata 1 32K - 1
USBdev 17 7K - 17 16,128,256,512
USB 64 6K - 64 16,32,64,128,256
atkbddev 2 1K - 2 32
DEVFS1 107 27K - 107 256
DEVFS3 232 29K - 233 128
spkr 0 0K - 5 512
DEVFS2 107 2K - 107 16
nexusdev 3 1K - 3 16
DEVFS 28 1K - 29 16,128
acpica 1591 84K - 20047 16,32,64,128,256,512,1024
acpitask 0 0K - 1 32
PCI Link 8 1K - 8 64,128
acpisem 18 2K - 18 64
acpidev 48 2K - 48 32
ITEM SIZE LIMIT USED FREE REQUESTS FAILURES
UMA Kegs: 140, 0, 88, 8, 88, 0
UMA Zones: 120, 0, 88, 2, 88, 0
UMA Slabs: 64, 0, 513, 18, 2576, 0
UMA RCntSlabs: 104, 0, 1483, 34, 1483, 0
UMA Hash: 128, 0, 5, 25, 7, 0
16 Bucket: 76, 0, 37, 13, 37, 0
32 Bucket: 140, 0, 52, 4, 52, 0
64 Bucket: 268, 0, 49, 7, 49, 0
128 Bucket: 524, 0, 408, 5, 408, 274852
VM OBJECT: 132, 0, 2306, 1493, 417874222, 0
MAP: 192, 0, 7, 33, 7, 0
KMAP ENTRY: 68, 30968, 17, 151, 9092, 0
MAP ENTRY: 68, 0, 1633, 5367, 1397900359, 0
PV ENTRY: 24, 904220, 36715, 20125, 9813134242, 0
DP fakepg: 72, 0, 0, 0, 0, 0
mt_zone: 64, 0, 238, 57, 238, 0
16: 16, 0, 2407, 232, 48814935, 0
32: 32, 0, 2144, 907, 342356308, 0
64: 64, 0, 2939, 70, 86680625, 0
128: 128, 0, 1225, 395, 139516932, 0
256: 256, 0, 533, 112, 36161943, 0
512: 512, 0, 58, 14, 683837, 0
1024: 1024, 0, 54, 90, 28280034, 0
2048: 2048, 0, 322, 68, 6690497, 0
4096: 4096, 0, 146, 53, 18189421, 0
Files: 72, 0, 231, 140, 184913340, 0
PROC: 536, 0, 90, 57, 15874646, 0
THREAD: 376, 0, 153, 17, 9536432, 0
KSEGRP: 88, 0, 148, 52, 166, 0
UPCALL: 44, 0, 2, 154, 38, 0
VMSPACE: 296, 0, 46, 58, 15871468, 0
mbuf_packet: 256, 0, 2002, 686, 255468017, 0
mbuf: 256, 0, 136, 1151, 671295023, 0
mbuf_cluster: 2048, 16576, 2818, 148, 74521309, 0
mbuf_jumbo_pagesize: 4096, 0, 0, 0, 0, 0
mbuf_jumbo_9k: 9216, 0, 0, 0, 0, 0
mbuf_jumbo_16k: 16384, 0, 0, 0, 0, 0
ACL UMA zone: 388, 0, 0, 0, 0, 0
NetGraph items: 36, 546, 0, 156, 2, 0
g_bio: 132, 0, 0, 406, 32929048, 0
cryptop: 60, 0, 0, 0, 0, 0
cryptodesc: 56, 0, 0, 0, 0, 0
ata_request: 204, 0, 0, 114, 8169847, 0
ata_composite: 196, 0, 0, 0, 0, 0
VNODE: 272, 0, 1570, 26, 99759, 0
VNODEPOLL: 76, 0, 0, 0, 0, 0
NAMEI: 1024, 0, 0, 12, 350809810, 0
S VFS Cache: 68, 0, 1436, 20, 1135915, 0
L VFS Cache: 291, 0, 12, 14, 18, 0
NFSMOUNT: 480, 0, 0, 0, 0, 0
NFSNODE: 460, 0, 0, 0, 0, 0
DIRHASH: 1024, 0, 24, 4, 24, 0
PIPE: 408, 0, 8, 46, 4066566, 0
KNOTE: 68, 0, 5, 107, 7386362, 0
bridge_rtnode: 32, 0, 0, 0, 0, 0
socket: 356, 7821, 66, 44, 4761966, 0
ipq: 32, 565, 0, 0, 0, 0
udpcb: 180, 7832, 12, 32, 46700, 0
inpcb: 180, 7832, 17, 71, 36240, 0
tcpcb: 472, 7816, 17, 15, 36240, 0
tcptw: 48, 1638, 0, 156, 27102, 0
syncache: 100, 15366, 0, 78, 33000, 0
hostcache: 76, 15400, 1, 99, 270, 0
tcpreass: 20, 1183, 0, 169, 34280, 0
sackhole: 20, 0, 0, 169, 3608, 0
ripcb: 180, 7832, 1, 43, 4525288, 0
unpcb: 140, 7840, 33, 51, 143952, 0
rtentry: 132, 0, 156, 47, 2109, 0
pfsrctrpl: 100, 10023, 0, 78, 371, 0
pfrulepl: 604, 0, 155, 169, 2247803, 0
pfstatepl: 260, 100005, 3046, 16829, 18143809, 0
pfaltqpl: 128, 0, 0, 0, 0, 0
pfpooladdrpl: 68, 0, 79, 145, 4431380, 0
pfrktable: 1240, 0, 10, 5, 1078, 0
pfrkentry: 156, 0, 58, 42, 970, 0
pfrkentry2: 156, 0, 0, 50, 130, 0
pffrent: 16, 5075, 0, 203, 1949, 0
pffrag: 48, 0, 0, 156, 1069, 0
pffrcache: 48, 10062, 0, 0, 0, 0
pffrcent: 12, 50141, 0, 0, 0, 0
pfstatescrub: 28, 0, 0, 0, 0, 0
pfiaddrpl: 92, 0, 7, 77, 1362, 0
pfospfen: 108, 0, 348, 48, 68208, 0
pfosfp: 28, 0, 208, 173, 40768, 0
SWAPMETA: 276, 61250, 0, 0, 0, 0
Mountpoints: 664, 0, 4, 8, 4, 0
FFS inode: 132, 0, 1426, 24, 99509, 0
FFS1 dinode: 128, 0, 0, 0, 0, 0
FFS2 dinode: 256, 0, 1426, 29, 99509, 0
md0: 512, 0, 299, 13, 299, 0
434614524 cpu context switches
1918293679 device interrupts
90521136 software interrupts
1526630514 traps
92368919 system calls
44 kernel threads created
15722049 fork() calls
152553 vfork() calls
0 rfork() calls
0 swap pager pageins
0 swap pager pages paged in
0 swap pager pageouts
0 swap pager pages paged out
504 vnode pager pageins
3405 vnode pager pages paged in
1272217 vnode pager pageouts
1289905 vnode pager pages paged out
0 page daemon wakeups
0 pages examined by the page daemon
237 pages reactivated
687144345 copy-on-write faults
431891 copy-on-write optimized faults
534787957 zero fill pages zeroed
533927006 zero fill pages prezeroed
2088 intransit blocking page faults
1474056477 total VM faults taken
0 pages affected by kernel thread creation
2578542657 pages affected by fork()
110670354 pages affected by vfork()
0 pages affected by rfork()
1323034350 pages freed
0 pages freed by daemon
970636950 pages freed by exiting processes
18107 pages active
9165 pages inactive
0 pages in VM cache
21116 pages wired down
73946 pages free
4096 bytes per page
840162628 total name lookups
cache hits (89% pos + 10% neg) system 0% per-directory
deletions 0%, falsehits 0%, toolong 0%
interrupt total rate
??? 0 0
irq0: clk 3709927427 1000
stray irq0 0 0
irq1: atkbd0 0 0
stray irq1 0 0
irq3: 0 0
stray irq3 0 0
irq4: sio0 0 0
stray irq4 0 0
irq5: uhci2 0 0
stray irq5 0 0
irq6: 0 0
stray irq6 0 0
irq7: 0 0
stray irq7 0 0
irq8: rtc 474777519 127
stray irq8 0 0
irq9: acpi0 0 0
stray irq9 0 0
irq10: vr1 uhci0 177689875 47
stray irq10 0 0
irq11: ath0 uhci1 281045130 75
stray irq11 0 0
irq12: vr0 ehci0 156410041 42
stray irq12 0 0
irq13: 0 0
stray irq13 0 0
irq14: ata0 16969122 4
stray irq14 0 0
irq15: ata1 0 0
stray irq15 0 0
Total 4816819114 1298
config.xml
<?xml version="1.0"?>
<pfsense>
<version>4.0</version>
<lastchange/>
<theme>nervecenter</theme>
<sysctl>
<item>
<desc>Set the ephemeral port range to be lower.</desc>
<tunable>net.inet.ip.portrange.first</tunable>
<value>1024</value>
</item>
<item>
<desc>Drop packets to closed TCP ports without returning a RST</desc>
<tunable>net.inet.tcp.blackhole</tunable>
<value>2</value>
</item>
<item>
<desc>Do not send ICMP port unreachable messages for closed UDP ports</desc>
<tunable>net.inet.udp.blackhole</tunable>
<value>1</value>
</item>
<item>
<desc>Randomize the ID field in IP packets (default is 0: sequential IP IDs)</desc>
<tunable>net.inet.ip.random_id</tunable>
<value>1</value>
</item>
<item>
<desc>Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)</desc>
<tunable>net.inet.tcp.drop_synfin</tunable>
<value>1</value>
</item>
<item>
<desc>Disable sending IPv4 redirects</desc>
<tunable>net.inet.ip.redirect</tunable>
<value>0</value>
</item>
<item>
<desc>Disable sending IPv6 redirects</desc>
<tunable>net.inet6.ip6.redirect</tunable>
<value>0</value>
</item>
<item>
<desc>Generate SYN cookies for outbound SYN-ACK packets</desc>
<tunable>net.inet.tcp.syncookies</tunable>
<value>1</value>
</item>
<item>
<desc>Maximum incoming/outgoing TCP datagram size (receive)</desc>
<tunable>net.inet.tcp.recvspace</tunable>
<value>65228</value>
</item>
<item>
<desc>Maximum incoming/outgoing TCP datagram size (send)</desc>
<tunable>net.inet.tcp.sendspace</tunable>
<value>65228</value>
</item>
<item>
<desc>IP Fastforwarding</desc>
<tunable>net.inet.ip.fastforwarding</tunable>
<value>1</value>
</item>
<item>
<desc>Do not delay ACK to try and piggyback it onto a data packet</desc>
<tunable>net.inet.tcp.delayed_ack</tunable>
<value>0</value>
</item>
<item>
<desc>Maximum outgoing UDP datagram size</desc>
<tunable>net.inet.udp.maxdgram</tunable>
<value>57344</value>
</item>
<item>
<desc>Handling of non-IP packets which are not passed to pfil (see if_bridge(4))</desc>
<tunable>net.link.bridge.pfil_onlyip</tunable>
<value>0</value>
</item>
<item>
<desc>Allow unprivileged access to tap(4) device nodes</desc>
<tunable>net.link.tap.user_open</tunable>
<value>1</value>
</item>
<item>
<desc>Verbosity of the rndtest driver (0: do not display results on console)</desc>
<tunable>kern.rndtest.verbose</tunable>
<value>0</value>
</item>
<item>
<desc>Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())</desc>
<tunable>kern.randompid</tunable>
<value>347</value>
</item>
<item>
<desc>Maximum size of the IP input queue</desc>
<tunable>net.inet.ip.intr_queue_maxlen</tunable>
<value>1000</value>
</item>
</sysctl>
<system>
<optimization>normal</optimization>
<schedulertype>priq</schedulertype>
<hostname>via</hostname>
<domain>local</domain>
<timezone>America/Vancouver</timezone>
<time-update-interval/>
<timeservers>pool.ntp.org</timeservers>
<webgui>
<protocol>http</protocol>
<auth_method>session</auth_method>
<backing_method>htpasswd</backing_method>
<certificate/>
<private-key/>
<port/>
</webgui>
<disablenatreflection>yes</disablenatreflection>
<group>
<name>admins</name>
<description>System Administrators</description>
<scope>system</scope>
<pages>ANY</pages>
<home>index.php</home>
<gid>110</gid>
</group>
<user>
<name>admin</name>
<fullname>System Administrator</fullname>
<scope>system</scope>
<groupname>admins</groupname>
<password/>
<uid>0</uid>
<priv>
<id>lockwc</id>
<name>Lock webConfigurator</name>
<descr>Indicates whether this user will lock access to the webConfigurator for other users.</descr>
</priv>
<priv>
<id>lock-ipages</id>
<name>Lock individual pages</name>
<descr>Indicates whether this user will lock individual HTML pages after having accessed a particular page (the lock will be freed if the user leaves or saves the page form).</descr>
</priv>
<priv>
<id>hasshell</id>
<name>Has shell access</name>
<descr>Indicates whether this user is able to login for example via SSH.</descr>
</priv>
<priv>
<id>copyfiles</id>
<name>Is allowed to copy files</name>
<descr>Indicates whether this user is allowed to copy files onto the appliance via SCP/SFTP. If you are going to use this privilege, you must install scponly on the appliance (Hint: pkg_add -r scponly).</descr>
</priv>
<priv>
<id>isroot</id>
<name>Is root user</name>
<descr>This user is associated with the UNIX root user (you should associate this privilege only with one single user).</descr>
</priv>
</user>
<nextuid>111</nextuid>
<nextgid>111</nextgid>
<ssh>
<authorizedkeys/>
<port/>
</ssh>
<enablesshd>yes</enablesshd>
<maximumstates>100000</maximumstates>
<shapertype/>
<sharednet/>
<shellcmd>sysctl dev.ath.0.rxantenna=1;sysctl dev.ath.0.txantenna=1;sysctl dev.ath.0.diversity=0</shellcmd>
<afterfilterchangeshellcmd>sysctl dev.ath.0.rxantenna=1; sysctl dev.ath.0.txantenna=1;sysctl dev.ath.0.diversity=0</afterfilterchangeshellcmd>
<username>admin</username>
<password>xxxxx</password>
<dnsserver>4.2.2.2</dnsserver>
<dnsserver>208.67.220.220</dnsserver>
</system>
<interfaces>
<lan>
<if>ath0</if>
<wireless>
<standard>11a</standard>
<mode>hostap</mode>
<protmode>off</protmode>
<ssid>via-pfsense</ssid>
<channel>153</channel>
<authmode/>
<txpower>99</txpower>
<distance/>
<wpa>
<macaddr_acl/>
<auth_algs>1</auth_algs>
<wpa_mode>3</wpa_mode>
<wpa_key_mgmt>WPA-PSK</wpa_key_mgmt>
<wpa_pairwise>CCMP</wpa_pairwise>
<wpa_group_rekey>60</wpa_group_rekey>
<wpa_gmk_rekey>3600</wpa_gmk_rekey>
<passphrase>passphrase</passphrase>
<ext_wpa_sw/>
<enable/>
</wpa>
<apbridge>
<enable/>
</apbridge>
<turbo/>
<wep/>
</wireless>
<bridge/>
<ipaddr>192.168.1.1</ipaddr>
<subnet>24</subnet>
<gateway/>
<spoofmac/>
<mtu/>
<enable/>
</lan>
<wan>
<if>vr0</if>
<mtu/>
<media/>
<mediaopt/>
<bandwidth>100</bandwidth>
<bandwidthtype>Mb</bandwidthtype>
<alias-address/>
<alias-subnet>32</alias-subnet>
<spoofmac>00:0e:8e:15:90:0e</spoofmac>
<disableftpproxy/>
<ipaddr>dhcp</ipaddr>
<dhcphostname/>
</wan>
<opt1>
<descr>OPT1</descr>
<if>vr1</if>
<ipaddr>dhcp</ipaddr>
<subnet>24</subnet>
<media/>
<mediaopt/>
<bandwidth>100</bandwidth>
<bandwidthtype>Mb</bandwidthtype>
<bridge/>
<alias-address/>
<alias-subnet>32</alias-subnet>
<spoofmac>00:0c:8e:1a:13:0b</spoofmac>
<mtu/>
<enable/>
<disableftpproxy/>
<dhcphostname/>
</opt1>
</interfaces>
<staticroutes/>
<pppoe>
<username/>
<password/>
<provider/>
</pppoe>
<pptp>
<username/>
<password/>
<local/>
<subnet/>
<remote/>
</pptp>
<bigpond/>
<dyndns>
<type>dyndns</type>
<username>goldserve</username>
<password>xxxxx</password>
<host>gs-pfsense.dyndns.org</host>
<mx/>
<enable/>
</dyndns>
<dhcpd>
<lan>
<enable/>
<range>
<from>192.168.1.100</from>
<to>192.168.1.199</to>
</range>
<staticmap>
<mac>00:0e:8e:15:95:0f</mac>
<ipaddr>192.168.1.2</ipaddr>
<hostname>tge</hostname>
<descr/>
</staticmap>
<staticmap>
<mac>00:17:fa:77:f0:71</mac>
<ipaddr>192.168.1.4</ipaddr>
<hostname>xbx</hostname>
<descr/>
</staticmap>
<defaultleasetime/>
<maxleasetime/>
<netmask/>
<failover_peerip/>
<gateway/>
<ddnsdomain/>
<next-server/>
<filename/>
</lan>
<opt1>
<range>
<from>192.168.20.100</from>
<to>192.168.20.199</to>
</range>
<defaultleasetime/>
<maxleasetime/>
<netmask/>
<failover_peerip/>
<gateway/>
<domain/>
<domainsearchlist/>
<ddnsdomain/>
<tftp/>
<ldap/>
<next-server/>
<filename/>
<rootpath/>
</opt1>
</dhcpd>
<pptpd>
<redir/>
<localip>192.168.1.254</localip>
<remoteip>192.168.1.192</remoteip>
<radius>
<server>
<ip/>
<port/>
<acctport>b1kujk79</acctport>
<secret>kevin99</secret>
</server>
<server2>
<ip/>
<port/>
<acctport/>
<secret2/>
</server2>
<nasip/>
<acct_update/>
</radius>
<wins/>
<n_pptp_units>16</n_pptp_units>
<pptp_subnet>28</pptp_subnet>
<req128/>
<user>
<name>goldserve</name>
<ip>192.168.1.192</ip>
<password>xxxxx</password>
</user>
</pptpd>
<ovpn/>
<dnsmasq>
<enable/>
<regdhcp/>
<regdhcpstatic/>
</dnsmasq>
<snmpd>
<syslocation/>
<syscontact/>
<rocommunity>xxxxx</rocommunity>
</snmpd>
<diag>
<ipv6nat/>
</diag>
<bridge/>
<syslog>
<reverse/>
<nentries>400</nentries>
</syslog>
<nat>
<ipsecpassthru>
<enable/>
</ipsecpassthru>
<rule>
<protocol>tcp</protocol>
<external-port>22</external-port>
<target>192.168.1.1</target>
<local-port>22</local-port>
<interface>wan</interface>
<descr>SSH -> pfsense</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>22</external-port>
<target>192.168.1.1</target>
<local-port>22</local-port>
<interface>opt1</interface>
<descr>SSH -> pfsense</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>8080</external-port>
<target>192.168.1.1</target>
<local-port>80</local-port>
<interface>wan</interface>
<descr>Web Config -> pfsense</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>8080</external-port>
<target>192.168.1.1</target>
<local-port>80</local-port>
<interface>opt1</interface>
<descr>Web Config -> pfsense</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>3389</external-port>
<target>192.168.1.2</target>
<local-port>3389</local-port>
<interface>wan</interface>
<descr>RDP -> Laptop</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>3389</external-port>
<target>192.168.1.2</target>
<local-port>3389</local-port>
<interface>opt1</interface>
<descr>RDP -> Laptop</descr>
</rule>
<rule>
<protocol>tcp/udp</protocol>
<external-port>45526</external-port>
<target>192.168.1.2</target>
<local-port>45526</local-port>
<interface>wan</interface>
<descr>BT -> Laptop</descr>
</rule>
<rule>
<protocol>tcp/udp</protocol>
<external-port>45526</external-port>
<target>192.168.1.2</target>
<local-port>45526</local-port>
<interface>opt1</interface>
<descr>BT -> Laptop</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>30771</external-port>
<target>192.168.1.199</target>
<local-port>30771</local-port>
<interface>wan</interface>
<descr>BT -> Flora Laptop</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>30771</external-port>
<target>192.168.1.199</target>
<local-port>30771</local-port>
<interface>opt1</interface>
<descr>BT -> Flora Laptop</descr>
</rule>
<advancedoutbound>
<rule>
<source>
<network>192.168.100.0/24</network>
</source>
<sourceport/>
<descr>Default NAT</descr>
<target/>
<interface>wan</interface>
<destination>
<address>192.168.100.0/24</address>
<not/>
</destination>
<natport/>
<dstport/>
</rule>
<rule>
<source>
<network>192.168.100.0/24</network>
</source>
<sourceport/>
<descr>NAT</descr>
<target>192.168.100.2</target>
<interface>wan</interface>
<destination>
<address>192.168.100.0/24</address>
</destination>
<natport/>
<dstport/>
</rule>
</advancedoutbound>
</nat>
<filter>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>icmp</protocol>
<source>
<any/>
</source>
<destination>
<network>wanip</network>
</destination>
<log/>
<descr>Allow Ping reply</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states>3</max-src-states>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<max-src-conn-rate>2</max-src-conn-rate>
<max-src-conn-rates>60</max-src-conn-rates>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.1</address>
<port>22</port>
</destination>
<log/>
<descr>NAT SSH -> pfsense</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.1</address>
<port>80</port>
</destination>
<descr>NAT Web Config -> pfsense</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<network>wanip</network>
<port>1194</port>
</destination>
<descr>OpenVPN -> pfsense</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.2</address>
<port>3389</port>
</destination>
<descr>NAT RDP -> Laptop</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp/udp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.2</address>
<port>45526</port>
</destination>
<descr>NAT BT -> Laptop</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<network>wanip</network>
<port>1723</port>
</destination>
<descr>PPTP</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<network>wanip</network>
<port>5000-5015</port>
</destination>
<descr>IRC DCC</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp/udp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.199</address>
<port>30771</port>
</destination>
<descr>NAT BT -> Flora Laptop</descr>
</rule>
<rule>
<type>pass</type>
<interface>opt1</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>icmp</protocol>
<source>
<any/>
</source>
<destination>
<network>opt1ip</network>
</destination>
<log/>
<descr> Allow Ping reply</descr>
</rule>
<rule>
<type>pass</type>
<interface>opt1</interface>
<max-src-nodes/>
<max-src-states>3</max-src-states>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<max-src-conn-rate>2</max-src-conn-rate>
<max-src-conn-rates>60</max-src-conn-rates>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.1</address>
<port>22</port>
</destination>
<log/>
<descr>NAT SSH -> pfsense</descr>
</rule>
<rule>
<interface>opt1</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.1</address>
<port>80</port>
</destination>
<descr>NAT Web Config -> pfsense</descr>
</rule>
<rule>
<type>pass</type>
<interface>opt1</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<network>opt1ip</network>
<port>1194</port>
</destination>
<descr>OpenVPN -> pfsense</descr>
</rule>
<rule>
<interface>opt1</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.2</address>
<port>3389</port>
</destination>
<descr>NAT RDP -> Laptop</descr>
</rule>
<rule>
<type>pass</type>
<interface>opt1</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp/udp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.2</address>
<port>45526</port>
</destination>
<descr>NAT BT -> Laptop</descr>
</rule>
<rule>
<type>pass</type>
<interface>opt1</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>udp</protocol>
<source>
<any/>
</source>
<destination>
<address>255.255.255.255</address>
</destination>
<descr> Allow DHCP</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<interface>opt1</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.199</address>
<port>30771</port>
</destination>
<descr>NAT BT -> Flora Laptop</descr>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>127.0.0.1</address>
</destination>
<descr/>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<source>
<network>lan</network>
</source>
<destination>
<address>24.130.144.1/21</address>
</destination>
<descr>WAN DMZ</descr>
<gateway>WAN1FailesToWAN2</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<source>
<network>lan</network>
</source>
<destination>
<address>76.126.208.1/21</address>
</destination>
<descr>WAN2 DMZ</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<network>lan</network>
</source>
<destination>
<address>192.168.100.1</address>
<port>1337</port>
</destination>
<descr>Modem 1 -> WAN1</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<network>lan</network>
</source>
<destination>
<address>192.168.100.1</address>
<port>23</port>
</destination>
<descr>Modem 1 -> WAN1</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<network>lan</network>
</source>
<destination>
<address>192.168.100.1</address>
<port>1338</port>
</destination>
<descr>Modem 2 -> WAN2</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<source>
<network>lan</network>
</source>
<destination>
<address>SurfboardHacker</address>
</destination>
<log/>
<descr>SurfboardHacker -> WAN1</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<network>lan</network>
</source>
<destination>
<any/>
<port>443</port>
</destination>
<descr>HTTPS -> WAN2</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>gre</protocol>
<source>
<network>lan</network>
</source>
<destination>
<any/>
</destination>
<log/>
<descr>GRE -> WAN2</descr>
<gateway>WAN1FailesToWAN2</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<network>lan</network>
</source>
<destination>
<any/>
<port>1723</port>
</destination>
<log/>
<descr>PPTP -> WAN2</descr>
<gateway>WAN1FailesToWAN2</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<network>lan</network>
</source>
<destination>
<address>140.99.99.130</address>
</destination>
<disabled/>
<log/>
<descr>Easynews use WAN</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp</protocol>
<source>
<network>lan</network>
</source>
<destination>
<address>208.49.0.0/16</address>
</destination>
<disabled/>
<log/>
<descr>Usenetserver use WAN2</descr>
<gateway>WAN2FailesToWAN1</gateway>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<max-src-nodes/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<source>
<network>lan</network>
</source>
<destination>
<any/>
</destination>
<descr>Load Balance</descr>
<gateway>LoadBalance</gateway>
</rule>
<bypassstaticroutes/>
</filter>
<shaper>
<itemsshaped>0</itemsshaped>
</shaper>
<ipsec>
<preferredoldsa/>
</ipsec>
<aliases>
<alias>
<name>SurfboardHacker</name>
<address>64.18.148.67 209.250.234.170 72.20.13.45 38.101.208.186 74.86.227.138 208.67.212.207 208.69.230.124</address>
<descr>SurfboardHacker websites</descr>
<type>host</type>
<detail>Entry added Sun, 13 Jan 2008 04:22:45 -0800||Entry added Sun, 13 Jan 2008 04:22:45 -0800||Usbjtag.com||Cable Hack||UK Underground||community.intuit.ca||theoryshare.com||</detail>
</alias>
</aliases>
<proxyarp/>
<wol/>
<cron>
<item>
<minute>0</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 newsyslog</command>
</item>
<item>
<minute>1,31</minute>
<hour>0-5</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 adjkerntz -a</command>
</item>
<item>
<minute>1</minute>
<hour>3</hour>
<mday>1</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
</item>
<item>
<minute>*/60</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
</item>
<item>
<minute>1</minute>
<hour>1</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
</item>
<item>
<minute>*/60</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
</item>
<item>
<minute>*/60</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 3600 snort2c</command>
</item>
<item>
<minute>*/5</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/local/bin/checkreload.sh</command>
</item>
<item>
<minute>*/5</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/etc/ping_hosts.sh</command>
</item>
<item>
<minute>*/140</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/local/sbin/reset_slbd.sh</command>
</item>
</cron>
<installedpackages>
<miniupnpd>
<config>
<enable>on</enable>
<iface_array>lan</iface_array>
<download/>
<upload/>
<overridewanip/>
<logpackets/>
<sysuptime>on</sysuptime>
<permdefault/>
<permuser1>allow 1024-65535 192.168.1.0/24 1024-65535</permuser1>
<permuser2/>
<permuser3/>
<permuser4/>
</config>
</miniupnpd>
<package/>
<package>
<name>nmap</name>
<maintainer>billm@pfsense.org</maintainer>
<descr>NMap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), version detection (determine what application/service is runing on a port), and TCP/IP fingerprinting (remote host OS or device identification). It also offers flexible target and port specification, decoy/stealth scanning, SunRPC scanning, and more. Most Unix and Windows platforms are supported in both GUI and command line modes. Several popular handheld devices are also supported, including the Sharp Zaurus and the iPAQ.</descr>
<category>Security</category>
<depends_on_package_base_url>http://www.pfsense.com/packages/All/</depends_on_package_base_url>
<depends_on_package>nmap-4.20_1.tbz</depends_on_package>
<config_file>http://www.pfsense.com/packages/config/nmap/nmap.xml</config_file>
<version>4.20_1</version>
<status>Stable</status>
<required_version>1.0</required_version>
<configurationfile>nmap.xml</configurationfile>
</package>
<package>
<name>Dashboard</name>
<descr>Adds pfSense dashboard that will be included with 1.3. This requires 1.2-BETA-2 or newer. WARNING! Cannot be deinstalled.</descr>
<category>System</category>
<config_file>http://www.pfsense.com/packages/config/dashboard/dashboard.xml</config_file>
<version>0.6.2</version>
<status>BETA</status>
<required_version>1.2-BETA-2</required_version>
<configurationfile>dashboard.xml</configurationfile>
</package>
<menu>
<name>Shell</name>
<section>Diagnostics</section>
<configfile>sshterm.xml</configfile>
<url>/diag_shell.php</url>
</menu>
<menu>
<name>NMap</name>
<tooltiptext>NMap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), version detection (determine what application/service is runing on a port), and TCP/IP fingerprinting (remote host OS or device identification). It also offers flexible target and port specification, decoy/stealth scanning, SunRPC scanning, and more. Most Unix and Windows platforms are supported in both GUI and command line modes. Several popular handheld devices are also supported, including the Sharp Zaurus and the iPAQ.</tooltiptext>
<section>Diagnostics</section>
<configfile>nmap.xml</configfile>
</menu>
<service/>
</installedpackages>
<revision>
<description>/wizard.php made unknown change</description>
<time>1207804855</time>
</revision>
<rrd>
<category>system</category>
<style>absolute</style>
<enable/>
</rrd>
<widgets>
<sequence>system_information-div:col1:show,carp_status-div:col1:close,installed_packages-div:col1:close,interfaces-div:col1:show,interface_statistics-div:col1:show,log-div:col1:show,ipsec-div:col2:close,cpu_graphs-div:col2:show,services_status-div:col2:close,traffic_graphs-div:col2:show,load_balancer_status-div:col2:show</sequence>
<traffic_graphs-config>WAN_graph-config:show,LAN_graph-config:show,OPT1_graph-config:show,refreshInterval=1</traffic_graphs-config>
</widgets>
<gateways/>
<dnsupdate>
<host/>
<ttl>60</ttl>
<keyname/>
<keytype>zone</keytype>
<keydata/>
</dnsupdate>
<load_balancer>
<lbpool>
<type>gateway</type>
<behaviour>balance</behaviour>
<monitorip>4.2.2.3</monitorip>
<name>LoadBalance</name>
<desc>Load Balance</desc>
<port/>
<servers>wan|4.2.2.2</servers>
<servers>opt1|4.2.2.3</servers>
<serversdisabled/>
<monitor/>
</lbpool>
<lbpool>
<type>gateway</type>
<behaviour>failover</behaviour>
<monitorip>4.2.2.2</monitorip>
<name>WAN1FailesToWAN2</name>
<desc>WAN1 Fail to WAN2</desc>
<port/>
<servers>opt1|4.2.2.3</servers>
<servers>wan|4.2.2.2</servers>
<serversdisabled/>
<monitor/>
</lbpool>
<lbpool>
<type>gateway</type>
<behaviour>failover</behaviour>
<monitorip>4.2.2.3</monitorip>
<name>WAN2FailesToWAN1</name>
<desc>WAN2 Fail to WAN1</desc>
<port/>
<servers>wan|4.2.2.2</servers>
<servers>opt1|4.2.2.3</servers>
<serversdisabled/>
<monitor/>
</lbpool>
</load_balancer>
<vlans/>
<virtualip/>
</pfsense>
DMESG
Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 6.2-RELEASE-p11 #0: Sun Feb 24 16:32:58 EST 2008
sullrich@builder6.pfsense.com:/usr/obj.pfSense/usr/src/sys/pfSense.6
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: VIA C3 Nehemiah+RNG (1002.28-MHz 686-class CPU)
Origin = "CentaurHauls" Id = 0x695 Stepping = 5
Features=0x380b03d<FPU,DE,PSE,TSC,MSR,MTRR,PGE,CMOV,MMX,FXSR,SSE>
real memory = 520028160 (495 MB)
avail memory = 499458048 (476 MB)
wlan: mac acl policy registered
kbd1 at kbdmux0
ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
acpi0: <VT9174 AWRDACPI> on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <VIA 862x (CLE266) host to PCI bridge> mem 0xe6000000-0xe63fffff at device 0.0 on pci0
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
vr0: <VIA VT6105 Rhine III 10/100BaseTX> port 0xd000-0xd0ff mem 0xe6412000-0xe64120ff irq 12 at device 15.0 on pci0
miibus0: <MII bus> on vr0
ukphy0: <Generic IEEE 802.3u media interface> on miibus0
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr0: Ethernet address: 00:40:63:d9:2d:bf
uhci0: <VIA 83C572 USB controller> port 0xd400-0xd41f irq 10 at device 16.0 on pci0
uhci0: [GIANT-LOCKED]
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xd800-0xd81f irq 11 at device 16.1 on pci0
uhci1: [GIANT-LOCKED]
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <VIA 83C572 USB controller> port 0xdc00-0xdc1f irq 5 at device 16.2 on pci0
uhci2: [GIANT-LOCKED]
usb2: <VIA 83C572 USB controller> on uhci2
usb2: USB revision 1.0
uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0: <VIA VT6202 USB 2.0 controller> mem 0xe6410000-0xe64100ff irq 12 at device 16.3 on pci0
ehci0: [GIANT-LOCKED]
usb3: EHCI version 1.0
usb3: companion controllers, 2 ports each: usb0 usb1 usb2
usb3: <VIA VT6202 USB 2.0 controller> on ehci0
usb3: USB revision 2.0
uhub3: VIA EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub3: 6 ports with 6 removable, self powered
isab0: <PCI-ISA bridge> at device 17.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 8235 UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xe000-0xe00f at device 17.1 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
pci0: <multimedia, audio> at device 17.5 (no driver attached)
vr1: <VIA VT6102 Rhine II 10/100BaseTX> port 0xe800-0xe8ff mem 0xe6411000-0xe64110ff irq 10 at device 18.0 on pci0
miibus1: <MII bus> on vr1
ukphy1: <Generic IEEE 802.3u media interface> on miibus1
ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr1: Ethernet address: 00:40:63:d9:2d:97
ath0: <Atheros 5212> mem 0xe6400000-0xe640ffff irq 11 at device 20.0 on pci0
ath0: Ethernet address: 00:0b:6b:09:f5:c6
ath0: mac 5.9 phy 4.3 radio 3.6
ath0: using 2000 rx buffers
ath0: using 2000 tx buffers
speaker0: <PC speaker> port 0x61 on acpi0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xcdfff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
ppc0: parallel port not found.
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 1002280784 Hz quality 800
Timecounters tick every 1.000 msec
Fast IPsec: Initialized Security Association Processing.
ad0: 3906MB <HMS360604D5CF00 DP4AC30H> at ata0-master PIO4
ad1: FAILURE - SET_MULTI status=51<READY,DSC,ERROR> error=4<ABORTED>
ad1: 3823MB <ELITE CF CARD 4GB 20071207> at ata0-slave PIO4
Trying to mount root from ufs:/dev/ad0s1a
___
___/ f \\
/ p \\___/ Sense
\\___/ \\
\\___/
Welcome to pfSense 1.2-RELEASE on the 'pfSense' platform...
Mounting filesystems...
done.
Creating symlinks...
.
.
.
done.
Launching PHP init system...
done.
Initializing...
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
done.
Starting device manager (devd)...
done.
Loading configuration...
.
.
.
*******************************************************************************
* WARNING! *
* The current configuration has been created with a newer version of pfSense *
* than this one! This can lead to serious misbehavior and even security *
* holes! You are urged to either upgrade to a newer version of pfSense or *
* revert to the default configuration immediately! *
*******************************************************************************
done.
Updating configuration...
done.
Cleaning backup cache...
done.
Setting up extended sysctls...
done.
Syncing user passwords...
done.
Starting Secure Shell Services...
done.
Setting timezone...
done.
Starting syslog...
done.
Configuring LAN interface...
vr0: link state changed to UP
vr1: link state changed to UP
done.
Configuring WAN interface...
done.
Configuring OPT interfaces...
done.
Configuring CARP interfaces...
done.
Syncing system time before startup...
done.
pflog0: promiscuous mode enabled
Configuring firewall...
.
.
.
done.
Starting webConfigurator...
done.
Starting DHCP service...
done.
Starting DNS forwarder...
done.
Starting DynDNS client...
done.
Setting up microcode and tx/rx offloading...
done.
Starting FTP helpers...
done.
Generating RRD graphs...
done.
Starting DHCP service...
done.
Starting OpenNTP time client...
done.
Starting UPnP service...
done.
Starting CRON...
done.
Syncing packages:
nmap
Dashboard
.
Executing rc.d items...
Starting /usr/local/etc/rc.d/*.sh...
done.
appending output to nohup.out
Bootup complete
vr0: promiscuous mode enabled
vr0: promiscuous mode disabled
vr1: link state changed to DOWN
vr1: link state changed to UP
vr1: link state changed to DOWN
vr1: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
vr0: link state changed to DOWN
vr0: link state changed to UP
arpresolve: can't allocate route for 192.168.2.1
arpresolve: can't allocate route for 192.168.2.1
arpresolve: can't allocate route for 192.168.2.1
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
vr1: link state changed to DOWN
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
vr1: link state changed to UP
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 192.168.2.1 failed: host is not on local network
arpresolve: can't allocate route for 192.168.2.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
arplookup 24.130.144.1 failed: host is not on local network
arpresolve: can't allocate route for 24.130.144.1
vr0: link state changed to DOWN
vr0: link state changed to UP
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
vr0: link state changed to DOWN
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
vr0: link state changed to UP
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
arpresolve: can't allocate route for 76.126.216.1
vr0: link state changed to DOWN
vr0: link state changed to UP
vr1: link state changed to DOWN
vr1: link state changed to UP
pflog0: promiscuous mode disabled
pflog0: promiscuous mode enabled
pflog0: promiscuous mode disabled
pflog0: promiscuous mode enabled
vr0: promiscuous mode enabled
vr0: promiscuous mode disabled
vr0: promiscuous mode enabled
vr0: promiscuous mode disabled
vr0: promiscuous mode enabled
vr0: promiscuous mode disabled
ath0: promiscuous mode enabled
ath0: promiscuous mode disabled
netstat -mb
2146/1829/3975 mbufs in use (current/cache/total)
2132/834/2966/16576 mbuf clusters in use (current/cache/total/max)
2002/686 mbuf+clusters out of packet secondary zone in use (current/cache)
0/0/0/0 4k (page size) jumbo clusters in use (current/cache/total/max)
0/0/0/0 9k jumbo clusters in use (current/cache/total/max)
0/0/0/0 16k jumbo clusters in use (current/cache/total/max)
4800K/2125K/6925K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0/25/4400 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
94 requests for I/O initiated by sendfile
0 calls to protocol drain routines
vmstat -z
ITEM SIZE LIMIT USED FREE REQUESTS FAILURES
UMA Kegs: 140, 0, 88, 8, 88, 0
UMA Zones: 120, 0, 88, 2, 88, 0
UMA Slabs: 64, 0, 513, 18, 2579, 0
UMA RCntSlabs: 104, 0, 1483, 34, 1483, 0
UMA Hash: 128, 0, 5, 25, 7, 0
16 Bucket: 76, 0, 37, 13, 37, 0
32 Bucket: 140, 0, 52, 4, 52, 0
64 Bucket: 268, 0, 49, 7, 49, 0
128 Bucket: 524, 0, 408, 5, 408, 274852
VM OBJECT: 132, 0, 2305, 1494, 417874339, 0
MAP: 192, 0, 7, 33, 7, 0
KMAP ENTRY: 68, 30968, 17, 151, 9098, 0
MAP ENTRY: 68, 0, 1633, 5367, 1397901005, 0
PV ENTRY: 24, 904220, 36691, 20149, 9813137706, 0
DP fakepg: 72, 0, 0, 0, 0, 0
mt_zone: 64, 0, 238, 57, 238, 0
16: 16, 0, 2407, 232, 48818007, 0
32: 32, 0, 2143, 908, 342356710, 0
64: 64, 0, 2939, 70, 86683693, 0
128: 128, 0, 1225, 395, 139517019, 0
256: 256, 0, 533, 112, 36161955, 0
512: 512, 0, 58, 14, 683837, 0
1024: 1024, 0, 54, 90, 28280038, 0
2048: 2048, 0, 322, 68, 6690497, 0
4096: 4096, 0, 146, 53, 18189427, 0
Files: 72, 0, 231, 140, 184913380, 0
PROC: 536, 0, 90, 57, 15874652, 0
THREAD: 376, 0, 153, 17, 9536432, 0
KSEGRP: 88, 0, 148, 52, 166, 0
UPCALL: 44, 0, 2, 154, 38, 0
VMSPACE: 296, 0, 46, 58, 15871474, 0
mbuf_packet: 256, 0, 2002, 686, 255468274, 0
mbuf: 256, 0, 145, 1142, 671302557, 0
mbuf_cluster: 2048, 16576, 2818, 148, 74521351, 0
mbuf_jumbo_pagesize: 4096, 0, 0, 0, 0, 0
mbuf_jumbo_9k: 9216, 0, 0, 0, 0, 0
mbuf_jumbo_16k: 16384, 0, 0, 0, 0, 0
ACL UMA zone: 388, 0, 0, 0, 0, 0
NetGraph items: 36, 546, 0, 156, 2, 0
g_bio: 132, 0, 0, 406, 32929048, 0
cryptop: 60, 0, 0, 0, 0, 0
cryptodesc: 56, 0, 0, 0, 0, 0
ata_request: 204, 0, 0, 114, 8169847, 0
ata_composite: 196, 0, 0, 0, 0, 0
VNODE: 272, 0, 1570, 26, 99759, 0
VNODEPOLL: 76, 0, 0, 0, 0, 0
NAMEI: 1024, 0, 0, 12, 350809950, 0
S VFS Cache: 68, 0, 1436, 20, 1135915, 0
L VFS Cache: 291, 0, 12, 14, 18, 0
NFSMOUNT: 480, 0, 0, 0, 0, 0
NFSNODE: 460, 0, 0, 0, 0, 0
DIRHASH: 1024, 0, 24, 4, 24, 0
PIPE: 408, 0, 8, 46, 4066569, 0
KNOTE: 68, 0, 5, 107, 7392476, 0
bridge_rtnode: 32, 0, 0, 0, 0, 0
socket: 356, 7821, 66, 44, 4761966, 0
ipq: 32, 565, 0, 0, 0, 0
udpcb: 180, 7832, 12, 32, 46700, 0
inpcb: 180, 7832, 17, 71, 36240, 0
tcpcb: 472, 7816, 17, 15, 36240, 0
tcptw: 48, 1638, 0, 156, 27102, 0
syncache: 100, 15366, 0, 78, 33000, 0
hostcache: 76, 15400, 1, 99, 270, 0
tcpreass: 20, 1183, 0, 169, 34280, 0
sackhole: 20, 0, 0, 169, 3608, 0
ripcb: 180, 7832, 1, 43, 4525288, 0
unpcb: 140, 7840, 33, 51, 143952, 0
rtentry: 132, 0, 156, 47, 2109, 0
pfsrctrpl: 100, 10023, 0, 78, 371, 0
pfrulepl: 604, 0, 155, 169, 2247803, 0
pfstatepl: 260, 100005, 3050, 16825, 18143813, 0
pfaltqpl: 128, 0, 0, 0, 0, 0
pfpooladdrpl: 68, 0, 79, 145, 4431380, 0
pfrktable: 1240, 0, 10, 5, 1078, 0
pfrkentry: 156, 0, 58, 42, 970, 0
pfrkentry2: 156, 0, 0, 50, 130, 0
pffrent: 16, 5075, 0, 203, 1949, 0
pffrag: 48, 0, 0, 156, 1069, 0
pffrcache: 48, 10062, 0, 0, 0, 0
pffrcent: 12, 50141, 0, 0, 0, 0
pfstatescrub: 28, 0, 0, 0, 0, 0
pfiaddrpl: 92, 0, 7, 77, 1362, 0
pfospfen: 108, 0, 348, 48, 68208, 0
pfosfp: 28, 0, 208, 173, 40768, 0
SWAPMETA: 276, 61250, 0, 0, 0, 0
Mountpoints: 664, 0, 4, 8, 4, 0
FFS inode: 132, 0, 1426, 24, 99509, 0
FFS1 dinode: 128, 0, 0, 0, 0, 0
FFS2 dinode: 256, 0, 1426, 29, 99509, 0
md0: 512, 0, 299, 13, 299, 0
pfSense is © 2004-2007 by Scott Ullrich. All Rights Reserved. [view license]