Shorewall 4.4.19.2 Dump at gateway - Di 19. Jul 00:25:33 CEST 2011

Counters reset Di 19. Jul 00:25:14 CEST 2011

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    5  1111 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   61  4468 seth0_in   all  --  seth0  *       0.0.0.0/0            0.0.0.0/0           
    0     0 seth4_in   all  --  seth4  *       0.0.0.0/0            0.0.0.0/0           
    0     0 vlan32fw   all  --  seth1  *       0.0.0.0/0            0.0.0.0/0           
   10  1371 seth3_in   all  --  seth3  *       0.0.0.0/0            0.0.0.0/0           
    0     0 ppp+_in    all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ipsec+_in  all  --  ipsec+ *       0.0.0.0/0            0.0.0.0/0           
    0     0 tap+_in    all  --  tap+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   16  6837 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   15  6805 seth0_fwd  all  --  seth0  *       0.0.0.0/0            0.0.0.0/0           
    0     0 seth4_fwd  all  --  seth4  *       0.0.0.0/0            0.0.0.0/0           
    9   912 vlan3_frwd  all  --  seth1  *       0.0.0.0/0            0.0.0.0/0           
   10   603 seth3_fwd  all  --  seth3  *       0.0.0.0/0            0.0.0.0/0           
    0     0 ppp+_fwd   all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ipsec+_fwd  all  --  ipsec+ *       0.0.0.0/0            0.0.0.0/0           
    0     0 tap+_fwd   all  --  tap+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   42  3912 seth0_out  all  --  *      seth0   0.0.0.0/0            0.0.0.0/0           
    0     0 fw2local   all  --  *      seth4   0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vlan3   all  --  *      seth1   0.0.0.0/0            0.0.0.0/0           
   12   919 fw2wan     all  --  *      seth3   0.0.0.0/0            0.0.0.0/0           
    0     0 ppp+_out   all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vpn     all  --  *      ipsec+  0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vpn     all  --  *      tap+    0.0.0.0/0            0.0.0.0/0           
    0     0 fw2fw      all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain Drop (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain Reject (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2fw:ACCEPT:' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2local (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   42  3912 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:68 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2mwlan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2vlan3 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.20.210      tcp dpt:443 /* HTTPS */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2vpn (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 500,4500 ctstate NEW 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 500,4500 ctstate NEW 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:500 ctstate NEW 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:500 ctstate NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2wan (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
   12   919 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ~log3      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] udp spt:500 dpt:500 /* IPsec */ 
    0     0 ~log3      esp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] /* IPsec */ 
    0     0 ~log3      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] udp dpt:500 /* IPsecnat */ 
    0     0 ~log3      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] udp dpt:4500 /* IPsecnat */ 
    0     0 ~log3      esp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] /* IPsecnat */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:500 dpt:500 /* IPsecah */ 
    0     0 ACCEPT     ah   --  *      *       0.0.0.0/0            0.0.0.0/0           /* IPsecah */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ipsec+_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn_frwd   all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ipsec+_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain local2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   61  4468 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ~excl1     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3128 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:67 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 /* Webmin */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain local2mwlan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain local2vlan3 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    99 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.20.210      tcp dpt:443 /* HTTPS */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain local2vpn (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain local2wan (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
   14  6706 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain local_frwd (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      seth0   0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      seth4   0.0.0.0/0            0.0.0.0/0           
    1    99 local2vlan3  all  --  *      seth1   0.0.0.0/0            0.0.0.0/0           
   14  6706 local2wan  all  --  *      seth3   0.0.0.0/0            0.0.0.0/0           
    0     0 local2wan  all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
    0     0 local2vpn  all  --  *      ppp+    0.0.0.0/0            10.0.10.0/24        
    0     0 local2vpn  all  --  *      ipsec+  0.0.0.0/0            0.0.0.0/0           
    0     0 local2vpn  all  --  *      tap+    0.0.0.0/0            0.0.0.0/0           
    0     0 local2mwlan  all  --  *      seth0   0.0.0.0/0            192.168.0.0/24      

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwlan2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 /* Webmin */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwlan2local (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwlan2vlan3 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.20.210      tcp dpt:443 /* HTTPS */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwlan2vpn (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwlan2wan (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwlan_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 mwlan2local  all  --  *      seth0   0.0.0.0/0            0.0.0.0/0           
    0     0 mwlan2local  all  --  *      seth4   0.0.0.0/0            0.0.0.0/0           
    0     0 mwlan2vlan3  all  --  *      seth1   0.0.0.0/0            0.0.0.0/0           
    0     0 mwlan2wan  all  --  *      seth3   0.0.0.0/0            0.0.0.0/0           
    0     0 mwlan2wan  all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
    0     0 mwlan2vpn  all  --  *      ppp+    0.0.0.0/0            10.0.10.0/24        
    0     0 mwlan2vpn  all  --  *      ipsec+  0.0.0.0/0            0.0.0.0/0           
    0     0 mwlan2vpn  all  --  *      tap+    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      seth0   0.0.0.0/0            192.168.0.0/24      

Chain ppp+_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       10.0.10.0/24         0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 tcpflags   tcp  --  *      *       10.0.10.0/24         0.0.0.0/0           
    0     0 wan_frwd   all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn_frwd   all  --  *      *       10.0.10.0/24         0.0.0.0/0           

Chain ppp+_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       10.0.10.0/24         0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 tcpflags   tcp  --  *      *       10.0.10.0/24         0.0.0.0/0           
    0     0 wan2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2fw     all  --  *      *       10.0.10.0/24         0.0.0.0/0           

Chain ppp+_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 fw2wan     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vpn     all  --  *      *       0.0.0.0/0            10.0.10.0/24        

Chain reject (9 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain seth0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   14  6706 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   15  6805 local_frwd  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 mwlan_frwd  all  --  *      *       192.168.0.0/24       0.0.0.0/0           

Chain seth0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   61  4468 local2fw   all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 mwlan2fw   all  --  *      *       192.168.0.0/24       0.0.0.0/0           

Chain seth0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   42  3912 fw2local   all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 fw2mwlan   all  --  *      *       0.0.0.0/0            192.168.0.0/24      

Chain seth3_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    60 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
   10   603 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   10   603 wan_frwd   all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain seth3_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    5  1111 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    3   984 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    5   260 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    7   387 wan2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain seth4_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 local_frwd  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain seth4_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 local2fw   all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurflog (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain smurfs (16 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 smurflog   all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] ADDRTYPE match src-type BROADCAST 
    0     0 smurflog   all  --  *      *       224.0.0.0/4          0.0.0.0/0           [goto] 

Chain tap+_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn_frwd   all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tap+_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcpflags (10 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp spt:0 flags:0x17/0x02 

Chain vlan32fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 /* Webmin */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vlan32local (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    1    71 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vlan32mwlan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vlan32vpn (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vlan32wan (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    8   841 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vlan3_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    71 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    1    71 vlan32local  all  --  *      seth0   0.0.0.0/0            0.0.0.0/0           
    0     0 vlan32local  all  --  *      seth4   0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      seth1   0.0.0.0/0            0.0.0.0/0           
    8   841 vlan32wan  all  --  *      seth3   0.0.0.0/0            0.0.0.0/0           
    0     0 vlan32wan  all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
    0     0 vlan32vpn  all  --  *      ppp+    0.0.0.0/0            10.0.10.0/24        
    0     0 vlan32vpn  all  --  *      ipsec+  0.0.0.0/0            0.0.0.0/0           
    0     0 vlan32vpn  all  --  *      tap+    0.0.0.0/0            0.0.0.0/0           
    0     0 vlan32mwlan  all  --  *      seth0   0.0.0.0/0            192.168.0.0/24      

Chain vpn2fw (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 500,4500 ctstate NEW 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 500,4500 ctstate NEW 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:500 ctstate NEW 
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:500 ctstate NEW 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 /* Webmin */ 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2fw:ACCEPT:' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2local (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2local:ACCEPT:' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2mwlan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2mwlan:ACCEPT:' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2vlan3 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.20.210      tcp dpt:443 /* HTTPS */ 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2vlan3:ACCEPT:' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain vpn2wan (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain vpn_frwd (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 vpn2local  all  --  *      seth0   0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2local  all  --  *      seth4   0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2vlan3  all  --  *      seth1   0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2wan    all  --  *      seth3   0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2wan    all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      ppp+    0.0.0.0/0            10.0.10.0/24        
    0     0 ACCEPT     all  --  *      ipsec+  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      tap+    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2mwlan  all  --  *      seth0   0.0.0.0/0            192.168.0.0/24      

Chain wan2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    5   260 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1194 /* OpenVPN */ 
    0     0 ~log2      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] udp spt:500 dpt:500 /* IPsec */ 
    0     0 ~log2      esp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] /* IPsec */ 
    0     0 ~log2      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] udp dpt:500 /* IPsecnat */ 
    0     0 ~log2      udp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] udp dpt:4500 /* IPsecnat */ 
    0     0 ~log2      esp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] /* IPsecnat */ 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:500 dpt:500 /* IPsecah */ 
    0     0 ACCEPT     ah   --  *      *       0.0.0.0/0            0.0.0.0/0           /* IPsecah */ 
    0     0 DROP       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10000 /* Webmin */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 /* SSH */ 
    2   127 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:wan2fw:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain wan2local (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.10.240      udp spt:5060 dpt:5060 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.10.240      udp spt:5004 dpt:5004 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.10.240      udp spts:10001:20000 dpts:10001:20000 
    0     0 DROP       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:wan2local:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain wan2mwlan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:wan2mwlan:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain wan2vlan3 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    9   543 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    1    60 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.20.210      tcp dpt:25 /* SMTP */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.20.210      tcp dpt:465 /* SMTPS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.20.210      tcp dpt:443 /* HTTPS */ 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:wan2vlan3:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain wan2vpn (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 ctstate RELATED /* Ping */ 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:wan2vpn:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain wan_frwd (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 wan2local  all  --  *      seth0   0.0.0.0/0            0.0.0.0/0           
    0     0 wan2local  all  --  *      seth4   0.0.0.0/0            0.0.0.0/0           
   10   603 wan2vlan3  all  --  *      seth1   0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      seth3   0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      ppp+    0.0.0.0/0            0.0.0.0/0           
    0     0 wan2vpn    all  --  *      ppp+    0.0.0.0/0            10.0.10.0/24        
    0     0 wan2vpn    all  --  *      ipsec+  0.0.0.0/0            0.0.0.0/0           
    0     0 wan2vpn    all  --  *      tap+    0.0.0.0/0            0.0.0.0/0           
    0     0 wan2mwlan  all  --  *      seth0   0.0.0.0/0            192.168.0.0/24      

Chain ~excl1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 192.168.10.254 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 80.67.28.231 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 192.168.100.0/24 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 192.168.20.0/24 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 10.0.0.0/24 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain ~log2 (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           /* IPsec */ LOG flags 0 level 7 prefix `Shorewall:wan2fw:ACCEPT:' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           /* IPsec */ 

Chain ~log3 (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           /* IPsec */ LOG flags 0 level 7 prefix `Shorewall:fw2wan:ACCEPT:' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           /* IPsec */ 

Log (/var/log/messages)

Jul 18 23:54:19 fw2fw:ACCEPT:IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=49903 DF PROTO=TCP SPT=39954 DPT=953 WINDOW=32792 RES=0x00 SYN URGP=0 
Jul 19 00:00:38 wan2fw:DROP:IN=seth3 OUT= SRC=58.218.199.227 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=8000 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:00:38 wan2fw:DROP:IN=seth3 OUT= SRC=58.218.199.227 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=8088 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:00:38 wan2fw:DROP:IN=seth3 OUT= SRC=58.218.199.227 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=8080 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:00:38 wan2fw:DROP:IN=seth3 OUT= SRC=58.218.199.227 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:03:57 vpn2fw:ACCEPT:IN=tap0 OUT= SRC=10.8.0.1 DST=224.0.0.251 LEN=141 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=121 
Jul 19 00:03:58 vpn2fw:ACCEPT:IN=tap0 OUT= SRC=10.8.0.1 DST=224.0.0.251 LEN=129 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=109 
Jul 19 00:03:58 vpn2fw:ACCEPT:IN=tap0 OUT= SRC=10.8.0.1 DST=224.0.0.251 LEN=177 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=157 
Jul 19 00:04:01 vpn2fw:ACCEPT:IN=tap0 OUT= SRC=10.8.0.1 DST=224.0.0.251 LEN=298 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=278 
Jul 19 00:04:02 vpn2fw:ACCEPT:IN=tap0 OUT= SRC=10.8.0.1 DST=224.0.0.251 LEN=238 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=218 
Jul 19 00:04:03 vpn2fw:ACCEPT:IN=tap0 OUT= SRC=10.8.0.1 DST=224.0.0.251 LEN=104 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=84 
Jul 19 00:04:03 vpn2fw:ACCEPT:IN=tap0 OUT= SRC=10.8.0.1 DST=224.0.0.251 LEN=78 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=58 
Jul 19 00:04:04 vpn2fw:ACCEPT:IN=tap0 OUT= SRC=10.8.0.1 DST=224.0.0.251 LEN=238 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=218 
Jul 19 00:12:34 wan2fw:DROP:IN=seth3 OUT= SRC=221.192.199.49 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 DF PROTO=TCP SPT=12200 DPT=9415 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:12:34 wan2fw:DROP:IN=seth3 OUT= SRC=221.192.199.49 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 DF PROTO=TCP SPT=12200 DPT=3246 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:12:34 wan2fw:DROP:IN=seth3 OUT= SRC=221.192.199.49 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 DF PROTO=TCP SPT=12200 DPT=9090 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:12:34 wan2fw:DROP:IN=seth3 OUT= SRC=221.192.199.49 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 DF PROTO=TCP SPT=12200 DPT=9000 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:12:34 wan2fw:DROP:IN=seth3 OUT= SRC=221.192.199.49 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 DF PROTO=TCP SPT=12200 DPT=1080 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:12:34 wan2fw:DROP:IN=seth3 OUT= SRC=221.192.199.49 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 DF PROTO=TCP SPT=12200 DPT=8088 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 19 00:13:26 wan2fw:DROP:IN=seth3 OUT= SRC=67.215.235.247 DST=91.64.242.13 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=3389 WINDOW=16384 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 154 packets, 13303 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    5   586 dnat       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 264 packets, 17966 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 seth3_masq  all  --  *      seth3   0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 246 packets, 16807 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 local_dnat  all  --  seth0  *       0.0.0.0/0            0.0.0.0/0           
    0     0 local_dnat  all  --  seth4  *       0.0.0.0/0            0.0.0.0/0           
    4   515 wan_dnat   all  --  seth3  *       0.0.0.0/0            0.0.0.0/0           
    0     0 wan_dnat   all  --  ppp+   *       0.0.0.0/0            0.0.0.0/0           

Chain local_dnat (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ~excl0     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            91.64.242.13        tcp dpt:443 to:192.168.20.210:443 

Chain seth3_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all  --  *      *       192.168.10.0/24      0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       192.168.20.0/24      0.0.0.0/0           

Chain wan_dnat (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:5060 dpt:5060 to:192.168.10.240 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:5004 dpt:5004 to:192.168.10.240 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spts:10001:20000 dpts:10001:20000 to:192.168.10.240 
    1    60 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 /* SMTP */ to:192.168.20.210 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:465 /* SMTPS */ to:192.168.20.210 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 /* HTTPS */ to:192.168.20.210 

Chain ~excl0 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.10.254      
    0     0 RETURN     all  --  *      *       0.0.0.0/0            80.67.28.231        
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.100.0/24    
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.20.0/24     
    0     0 RETURN     all  --  *      *       0.0.0.0/0            10.0.0.0/24         
    0     0 REDIRECT   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           redir ports 3128 

Mangle Table

Chain PREROUTING (policy ACCEPT 3303 packets, 1818K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  105 14159 tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 2593 packets, 1581K bytes)
 pkts bytes target     prot opt in     out     source               destination         
   71  5839 tcin       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 710 packets, 238K bytes)
 pkts bytes target     prot opt in     out     source               destination         
   34  8320 MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK set 0x0 
   34  8320 tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 2927 packets, 1690K bytes)
 pkts bytes target     prot opt in     out     source               destination         
   54  4831 tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 3637 packets, 1927K bytes)
 pkts bytes target     prot opt in     out     source               destination         
   88 13151 tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 3303 packets, 1818K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 2927 packets, 1690K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table ( out of )

tcp      6 431920 ESTABLISHED src=192.168.10.21 dst=74.125.43.102 sport=49395 dport=80 packets=4 bytes=572 src=192.168.10.254 dst=192.168.10.21 sport=3128 dport=49395 packets=4 bytes=2691 [ASSURED] mark=0 secmark=0 use=1
tcp      6 101 TIME_WAIT src=91.64.242.13 dst=74.125.43.100 sport=42251 dport=80 packets=7 bytes=879 src=74.125.43.100 dst=91.64.242.13 sport=80 dport=42251 packets=5 bytes=2675 [ASSURED] mark=0 secmark=0 use=1
udp      17 100 src=91.64.242.13 dst=83.169.184.33 sport=53490 dport=53 packets=26 bytes=1669 src=83.169.184.33 dst=91.64.242.13 sport=53 dport=53490 packets=26 bytes=3585 [ASSURED] mark=0 secmark=0 use=1
tcp      6 2 CLOSE src=88.84.150.45 dst=91.64.242.13 sport=55756 dport=25 packets=10 bytes=603 src=192.168.20.210 dst=88.84.150.45 sport=25 dport=55756 packets=8 bytes=841 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431920 ESTABLISHED src=192.168.10.21 dst=74.125.43.139 sport=49396 dport=80 packets=4 bytes=572 src=192.168.10.254 dst=192.168.10.21 sport=3128 dport=49396 packets=4 bytes=2731 [ASSURED] mark=0 secmark=0 use=1
tcp      6 39 TIME_WAIT src=91.64.242.13 dst=74.125.43.100 sport=41195 dport=80 packets=31 bytes=2750 src=74.125.43.100 dst=91.64.242.13 sport=80 dport=41195 packets=58 bytes=78430 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431920 ESTABLISHED src=192.168.10.21 dst=74.125.43.139 sport=49397 dport=80 packets=4 bytes=572 src=192.168.10.254 dst=192.168.10.21 sport=3128 dport=49397 packets=4 bytes=2835 [ASSURED] mark=0 secmark=0 use=1
udp      17 22 src=88.84.138.129 dst=91.64.242.13 sport=55893 dport=53 packets=1 bytes=60 src=91.64.242.13 dst=88.84.138.129 sport=53 dport=55893 packets=1 bytes=266 mark=0 secmark=0 use=1
tcp      6 431978 ESTABLISHED src=192.168.10.25 dst=205.188.11.66 sport=2090 dport=5190 packets=51 bytes=4542 src=205.188.11.66 dst=91.64.242.13 sport=5190 dport=2090 packets=59 bytes=22714 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431920 ESTABLISHED src=192.168.10.21 dst=74.125.43.102 sport=49398 dport=80 packets=4 bytes=572 src=192.168.10.254 dst=192.168.10.21 sport=3128 dport=49398 packets=4 bytes=2279 [ASSURED] mark=0 secmark=0 use=1
udp      17 4 src=202.188.0.137 dst=91.64.242.13 sport=30678 dport=53 packets=1 bytes=62 src=91.64.242.13 dst=202.188.0.137 sport=53 dport=30678 packets=1 bytes=111 mark=0 secmark=0 use=1
udp      17 22 src=192.168.20.210 dst=192.168.10.1 sport=50378 dport=53 packets=1 bytes=71 src=192.168.10.1 dst=192.168.20.210 sport=53 dport=50378 packets=1 bytes=99 mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=192.168.10.25 dst=192.168.10.254 sport=2095 dport=22 packets=260 bytes=18676 src=192.168.10.254 dst=192.168.10.25 sport=22 dport=2095 packets=222 bytes=26500 [ASSURED] mark=0 secmark=0 use=1
tcp      6 38 TIME_WAIT src=91.64.242.13 dst=74.125.43.139 sport=51536 dport=80 packets=7 bytes=1524 src=74.125.43.139 dst=91.64.242.13 sport=80 dport=51536 packets=7 bytes=717 [ASSURED] mark=0 secmark=0 use=1
tcp      6 101 TIME_WAIT src=91.64.242.13 dst=74.125.43.113 sport=60329 dport=80 packets=7 bytes=879 src=74.125.43.113 dst=91.64.242.13 sport=80 dport=60329 packets=5 bytes=2263 [ASSURED] mark=0 secmark=0 use=1
udp      17 100 src=192.168.10.1 dst=192.168.10.254 sport=54224 dport=53 packets=2 bytes=144 src=192.168.10.254 dst=192.168.10.1 sport=53 dport=54224 packets=2 bytes=1518 [ASSURED] mark=0 secmark=0 use=1
udp      17 100 src=192.168.10.1 dst=192.168.10.254 sport=55219 dport=53 packets=2 bytes=146 src=192.168.10.254 dst=192.168.10.1 sport=53 dport=55219 packets=2 bytes=1563 [ASSURED] mark=0 secmark=0 use=1
tcp      6 101 TIME_WAIT src=91.64.242.13 dst=74.125.43.113 sport=50783 dport=80 packets=7 bytes=879 src=74.125.43.113 dst=91.64.242.13 sport=80 dport=50783 packets=5 bytes=2819 [ASSURED] mark=0 secmark=0 use=1
udp      17 22 src=88.84.138.129 dst=91.64.242.13 sport=36767 dport=53 packets=1 bytes=67 src=91.64.242.13 dst=88.84.138.129 sport=53 dport=36767 packets=1 bytes=133 mark=0 secmark=0 use=1
udp      17 2 src=192.168.10.205 dst=192.168.10.255 sport=137 dport=137 packets=3 bytes=234 [UNREPLIED] src=192.168.10.255 dst=192.168.10.205 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431882 ESTABLISHED src=192.168.10.25 dst=192.168.10.254 sport=2117 dport=22 packets=142 bytes=15913 src=192.168.10.254 dst=192.168.10.25 sport=22 dport=2117 packets=208 bytes=71848 [ASSURED] mark=0 secmark=0 use=1
udp      17 25 src=83.169.170.22 dst=255.255.255.255 sport=67 dport=68 packets=3 bytes=984 [UNREPLIED] src=255.255.255.255 dst=83.169.170.22 sport=68 dport=67 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431920 ESTABLISHED src=192.168.10.21 dst=72.14.204.120 sport=49400 dport=80 packets=4 bytes=643 src=192.168.10.254 dst=192.168.10.21 sport=3128 dport=49400 packets=3 bytes=483 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431518 ESTABLISHED src=192.168.10.25 dst=192.168.10.254 sport=2120 dport=22 packets=92 bytes=16769 src=192.168.10.254 dst=192.168.10.25 sport=22 dport=2120 packets=131 bytes=53080 [ASSURED] mark=0 secmark=0 use=1
tcp      6 101 TIME_WAIT src=91.64.242.13 dst=74.125.43.113 sport=44363 dport=80 packets=7 bytes=879 src=74.125.43.113 dst=91.64.242.13 sport=80 dport=44363 packets=5 bytes=2715 [ASSURED] mark=0 secmark=0 use=1
tcp      6 102 TIME_WAIT src=91.64.242.13 dst=72.14.204.120 sport=52810 dport=80 packets=6 bytes=893 src=72.14.204.120 dst=91.64.242.13 sport=80 dport=52810 packets=4 bytes=455 [ASSURED] mark=0 secmark=0 use=1
tcp      6 79 TIME_WAIT src=62.201.201.135 dst=91.64.242.13 sport=5353 dport=25 packets=7 bytes=378 src=192.168.20.210 dst=62.201.201.135 sport=25 dport=5353 packets=7 bytes=548 [ASSURED] mark=0 secmark=0 use=1
udp      17 4 src=202.188.0.137 dst=91.64.242.13 sport=33133 dport=53 packets=1 bytes=67 src=91.64.242.13 dst=202.188.0.137 sport=53 dport=33133 packets=1 bytes=133 mark=0 secmark=0 use=1
udp      17 29 src=192.168.10.240 dst=217.10.79.9 sport=5060 dport=5060 packets=1166 bytes=554092 [UNREPLIED] src=217.10.79.9 dst=192.168.10.240 sport=5060 dport=5060 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 3 src=202.188.0.138 dst=91.64.242.13 sport=44099 dport=53 packets=1 bytes=60 src=91.64.242.13 dst=202.188.0.138 sport=53 dport=44099 packets=1 bytes=200 mark=0 secmark=0 use=1
tcp      6 40 TIME_WAIT src=91.64.242.13 dst=74.125.43.113 sport=49937 dport=80 packets=10 bytes=1691 src=74.125.43.113 dst=91.64.242.13 sport=80 dport=49937 packets=10 bytes=7947 [ASSURED] mark=0 secmark=0 use=1
udp      17 100 src=192.168.10.1 dst=192.168.10.254 sport=55448 dport=53 packets=2 bytes=147 src=192.168.10.254 dst=192.168.10.1 sport=53 dport=55448 packets=2 bytes=1521 [ASSURED] mark=0 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    inet 127.0.0.1/8 scope host lo
2: seth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 192.168.10.254/24 brd 192.168.10.255 scope global seth0
3: seth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 192.168.20.254/24 brd 192.168.20.255 scope global seth1
4: seth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 192.168.1.2/24 brd 192.168.1.255 scope global seth2
5: seth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 91.64.242.13/23 brd 91.64.243.255 scope global seth3
6: seth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 10.0.0.254/24 brd 10.0.0.255 scope global seth4
8: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 100
    inet 10.8.0.1/24 brd 10.8.0.255 scope global tap0

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    560        8        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    560        8        0       0       0       0      
2: seth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:15:5d:0a:01:09 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    1019179    4261     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2479464    3383     0       0       0       0      
3: seth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:15:5d:0a:01:0a brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    58439      540      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    62018      656      0       0       0       0      
4: seth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:15:5d:0a:01:0b brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2828       24       0       0       0       0      
5: seth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:15:5d:0a:01:0c brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    7941110    84158    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    969010     4062     0       0       0       0      
6: seth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:15:5d:0a:01:0e brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2890       25       0       0       0       0      
7: sit0: <NOARP> mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
8: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 100
    link/ether 66:83:95:73:89:21 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2783       20       0       0       0       0      

Bridges

bridge name	bridge id		STP enabled	interfaces

Per-IP Counters

   iptaccount is not installed

PFKEY SPD

No SPD entries.

PFKEY SAD

No SAD entries.

/proc

   /proc/version = Linux version 2.6.18-238.9.1.el5 (mockbuild@builder10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-50)) #1 SMP Tue Apr 12 18:10:13 EDT 2011
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 1
   /proc/sys/net/ipv4/conf/seth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/seth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/seth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/seth0/rp_filter = 0
   /proc/sys/net/ipv4/conf/seth0/log_martians = 1
   /proc/sys/net/ipv4/conf/seth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/seth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/seth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/seth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/seth1/log_martians = 1
   /proc/sys/net/ipv4/conf/seth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/seth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/seth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/seth2/rp_filter = 0
   /proc/sys/net/ipv4/conf/seth2/log_martians = 1
   /proc/sys/net/ipv4/conf/seth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/seth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/seth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/seth3/rp_filter = 1
   /proc/sys/net/ipv4/conf/seth3/log_martians = 1
   /proc/sys/net/ipv4/conf/seth4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/seth4/arp_filter = 0
   /proc/sys/net/ipv4/conf/seth4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/seth4/rp_filter = 0
   /proc/sys/net/ipv4/conf/seth4/log_martians = 1
   /proc/sys/net/ipv4/conf/tap0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/tap0/arp_filter = 0
   /proc/sys/net/ipv4/conf/tap0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/tap0/rp_filter = 0
   /proc/sys/net/ipv4/conf/tap0/log_martians = 1

Routing Rules

0:	from all lookup 255 
32766:	from all lookup main 
32767:	from all lookup default 

Table 255:

broadcast 192.168.1.0 dev seth2  proto kernel  scope link  src 192.168.1.2 
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
local 192.168.10.254 dev seth0  proto kernel  scope host  src 192.168.10.254 
local 192.168.1.2 dev seth2  proto kernel  scope host  src 192.168.1.2 
broadcast 192.168.10.255 dev seth0  proto kernel  scope link  src 192.168.10.254 
local 10.8.0.1 dev tap0  proto kernel  scope host  src 10.8.0.1 
broadcast 192.168.20.255 dev seth1  proto kernel  scope link  src 192.168.20.254 
broadcast 10.8.0.0 dev tap0  proto kernel  scope link  src 10.8.0.1 
broadcast 10.0.0.0 dev seth4  proto kernel  scope link  src 10.0.0.254 
broadcast 91.64.242.0 dev seth3  proto kernel  scope link  src 91.64.242.13 
broadcast 91.64.243.255 dev seth3  proto kernel  scope link  src 91.64.242.13 
local 192.168.20.254 dev seth1  proto kernel  scope host  src 192.168.20.254 
local 91.64.242.13 dev seth3  proto kernel  scope host  src 91.64.242.13 
broadcast 192.168.1.255 dev seth2  proto kernel  scope link  src 192.168.1.2 
broadcast 192.168.10.0 dev seth0  proto kernel  scope link  src 192.168.10.254 
local 10.0.0.254 dev seth4  proto kernel  scope host  src 10.0.0.254 
broadcast 192.168.20.0 dev seth1  proto kernel  scope link  src 192.168.20.254 
broadcast 10.8.0.255 dev tap0  proto kernel  scope link  src 10.8.0.1 
broadcast 10.0.0.255 dev seth4  proto kernel  scope link  src 10.0.0.254 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table default:


Table main:

192.168.20.0/24 dev seth1  proto kernel  scope link  src 192.168.20.254 
10.0.0.0/24 dev seth4  proto kernel  scope link  src 10.0.0.254 
10.8.0.0/24 dev tap0  proto kernel  scope link  src 10.8.0.1 
192.168.1.0/24 dev seth2  proto kernel  scope link  src 192.168.1.2 
192.168.10.0/24 dev seth0  proto kernel  scope link  src 192.168.10.254 
91.64.242.0/23 dev seth3  proto kernel  scope link  src 91.64.242.13 
169.254.0.0/16 dev seth4  scope link 
default via 91.64.243.254 dev seth3 

ARP

? (192.168.10.240) auf 00:1B:21:70:0F:E2 [ether] auf seth0
? (192.168.10.1) auf 00:22:15:6E:90:AF [ether] auf seth0
? (192.168.10.21) auf 00:26:9E:E7:BA:A9 [ether] auf seth0
? (91.64.243.254) auf 00:01:5C:31:75:00 [ether] auf seth3
? (192.168.20.210) auf 00:15:5D:0A:01:04 [ether] auf seth1
? (192.168.10.25) auf 00:1D:60:80:86:E1 [ether] auf seth0

Modules

ip_conntrack           91621  23 xt_connlimit,ipt_MASQUERADE,ip_nat_tftp,ip_nat_snmp_basic,ip_nat_pptp,ip_nat_irc,ip_nat_h323,ip_nat_ftp,ip_nat_amanda,ip_conntrack_tftp,ip_conntrack_pptp,ip_conntrack_netbios_ns,ip_conntrack_irc,ip_conntrack_h323,ip_conntrack_ftp,ip_conntrack_amanda,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,ip_nat
ip_conntrack_amanda    38345  1 ip_nat_amanda
ip_conntrack_ftp       41361  1 ip_nat_ftp
ip_conntrack_h323      88065  1 ip_nat_h323
ip_conntrack_irc       40465  1 ip_nat_irc
ip_conntrack_netbios_ns    36033  0 
ip_conntrack_pptp      45665  1 ip_nat_pptp
ip_conntrack_tftp      37913  1 ip_nat_tftp
ip_nat                 52973  11 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ip_nat_tftp,ip_nat_pptp,ip_nat_irc,ip_nat_h323,ip_nat_ftp,ip_nat_amanda,iptable_nat
ip_nat_amanda          35393  0 
ip_nat_ftp             36545  0 
ip_nat_h323            40769  0 
ip_nat_irc             35777  0 
ip_nat_pptp            39237  0 
ip_nat_snmp_basic      43461  0 
ip_nat_tftp            34881  0 
iptable_filter         36161  1 
iptable_mangle         36033  1 
iptable_nat            40517  1 
iptable_raw            35137  0 
ip_tables              55329  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_addrtype           34881  3 
ipt_ah                 35009  0 
ipt_CLUSTERIP          42057  0 
ipt_dscp               34753  0 
ipt_DSCP               35265  0 
ipt_ecn                35265  0 
ipt_ECN                36161  0 
ipt_hashlimit          42577  0 
ipt_iprange            34881  0 
ipt_LOG                39617  16 
ipt_MASQUERADE         36801  2 
ipt_NETMAP             35009  0 
ipt_owner              35009  0 
ipt_recent             42969  0 
ipt_REDIRECT           35009  1 
ipt_REJECT             38849  4 
ipt_SAME               35393  0 
ipt_TCPMSS             37313  0 
ipt_tos                34753  0 
ipt_TOS                35265  0 
ipt_ttl                34881  0 
ipt_TTL                35393  0 
ipt_ULOG               42569  0 
xt_CLASSIFY            35009  0 
xt_comment             35009  91 
xt_connlimit           37321  0 
xt_connmark            35393  0 
xt_CONNMARK            35649  0 
xt_conntrack           35649  126 
xt_dccp                36425  0 
xt_DSCP                35521  0 
xt_helper              35649  0 
xt_length              35137  0 
xt_limit               35905  0 
xt_mac                 35009  0 
xt_mark                35265  0 
xt_MARK                35649  1 
xt_multiport           36417  8 
xt_NFQUEUE             35137  0 
xt_physdev             36049  0 
xt_pkttype             35009  0 
xt_policy              36545  0 
xt_realm               34753  0 
xt_state               35265  0 
xt_tcpmss              35393  0 
xt_tcpudp              36289  62 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Not available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Not available
   MARK Target: Available
   Extended MARK Target: Available
   Extended MARK Target 2: Not available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   Old Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Not available
   Goto Support: Available
   LOGMARK Target: Not available
   IPMARK Target: Not available
   LOG Target: Available
   Persistent SNAT: Not available
   TPROXY Target: Not available
   FLOW Classifier: Not available
   fwmark route mask: Not available
   Mark in any table: Not available
   Header Match: Not available
   ACCOUNT Target: Not available

Aktive Internetverbindungen (Server und stehende Verbindungen)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
tcp        0      0 0.0.0.0:835                 0.0.0.0:*                   LISTEN      2349/rpc.statd      
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      2313/portmap        
tcp        0      0 0.0.0.0:10000               0.0.0.0:*                   LISTEN      3401/perl           
tcp        0      0 10.0.0.254:53               0.0.0.0:*                   LISTEN      2287/named          
tcp        0      0 91.64.242.13:53             0.0.0.0:*                   LISTEN      2287/named          
tcp        0      0 192.168.1.2:53              0.0.0.0:*                   LISTEN      2287/named          
tcp        0      0 192.168.20.254:53           0.0.0.0:*                   LISTEN      2287/named          
tcp        0      0 192.168.10.254:53           0.0.0.0:*                   LISTEN      2287/named          
tcp        0      0 127.0.0.1:53                0.0.0.0:*                   LISTEN      2287/named          
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      3185/cupsd          
tcp        0      0 0.0.0.0:3128                0.0.0.0:*                   LISTEN      3283/(squid)        
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      3228/sendmail: acce 
tcp        0      0 127.0.0.1:953               0.0.0.0:*                   LISTEN      2287/named          
tcp        0      0 91.64.242.13:50783          74.125.43.113:80            TIME_WAIT   -                   
tcp        0      0 192.168.10.254:3128         192.168.10.21:49398         VERBUNDEN   3283/(squid)        
tcp        0      0 192.168.10.254:3128         192.168.10.21:49397         VERBUNDEN   3283/(squid)        
tcp        0      0 192.168.10.254:3128         192.168.10.21:49396         VERBUNDEN   3283/(squid)        
tcp        0      0 192.168.10.254:3128         192.168.10.21:49395         VERBUNDEN   3283/(squid)        
tcp        0      0 192.168.10.254:3128         192.168.10.21:49400         VERBUNDEN   3283/(squid)        
tcp        0      0 91.64.242.13:60329          74.125.43.113:80            TIME_WAIT   -                   
tcp        0      0 91.64.242.13:44363          74.125.43.113:80            TIME_WAIT   -                   
tcp        0      0 91.64.242.13:42251          74.125.43.100:80            TIME_WAIT   -                   
tcp        0      0 91.64.242.13:52810          72.14.204.120:80            TIME_WAIT   -                   
tcp        0      0 :::53                       :::*                        LISTEN      2287/named          
tcp        0      0 :::22                       :::*                        LISTEN      3172/sshd           
tcp        0      0 ::ffff:192.168.10.254:22    ::ffff:192.168.10.25:2117   VERBUNDEN   3577/sshd: root@not 
tcp        0      0 ::ffff:192.168.10.254:22    ::ffff:192.168.10.25:2120   VERBUNDEN   3633/sshd: root@not 
tcp        0      0 ::ffff:192.168.10.254:22    ::ffff:192.168.10.25:2095   VERBUNDEN   3476/0              
udp        0      0 0.0.0.0:10000               0.0.0.0:*                               3401/perl           
udp        0      0 0.0.0.0:1194                0.0.0.0:*                               2445/openvpn        
udp        0      0 10.0.0.254:53               0.0.0.0:*                               2287/named          
udp        0      0 91.64.242.13:53             0.0.0.0:*                               2287/named          
udp        0      0 192.168.1.2:53              0.0.0.0:*                               2287/named          
udp        0      0 192.168.20.254:53           0.0.0.0:*                               2287/named          
udp        0      0 192.168.10.254:53           0.0.0.0:*                               2287/named          
udp        0      0 127.0.0.1:53                0.0.0.0:*                               2287/named          
udp        0      0 0.0.0.0:42935               0.0.0.0:*                               3363/avahi-daemon:  
udp        0      0 0.0.0.0:3130                0.0.0.0:*                               3283/(squid)        
udp        0      0 0.0.0.0:829                 0.0.0.0:*                               2349/rpc.statd      
udp        0      0 0.0.0.0:832                 0.0.0.0:*                               2349/rpc.statd      
udp        0      0 0.0.0.0:68                  0.0.0.0:*                               2017/dhclient       
udp        0      0 0.0.0.0:5353                0.0.0.0:*                               3363/avahi-daemon:  
udp        0      0 0.0.0.0:111                 0.0.0.0:*                               2313/portmap        
udp        0      0 0.0.0.0:53490               0.0.0.0:*                               3283/(squid)        
udp        0      0 0.0.0.0:631                 0.0.0.0:*                               3185/cupsd          
udp        0      0 :::53                       :::*                                    2287/named          
udp        0      0 :::51021                    :::*                                    3363/avahi-daemon:  
udp        0      0 :::5353                     :::*                                    3363/avahi-daemon:  

Traffic Control

Device seth0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 2479464 bytes 3383 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device seth1:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 62018 bytes 656 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device seth2:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 2828 bytes 24 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device seth3:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 971116 bytes 4066 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device seth4:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 2890 bytes 25 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device tap0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 2783 bytes 20 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 



TC Filters

Device seth0:

Device seth1:

Device seth2:

Device seth3:

Device seth4:

Device tap0:

