Shorewall 4.5.0.1 Dump at firewall.gemneye.org - Fri Mar  9 08:02:50 MST 2012

Counters reset Thu Mar  8 22:38:13 MST 2012

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
79936   26M inet2fw    all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
 182K   44M loc2fw     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
 2799  903K von2fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 1668  653K road2fw    all  --  tun+   *       0.0.0.0/0            0.0.0.0/0           
24414 1936K pvpn2fw    all  --  tap0   *       0.0.0.0/0            0.0.0.0/0           
 920K 1184M ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:INPUT:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 183K  109M inet_frwd  all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
 141K   24M loc_frwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
13386 1059K von_frwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 road_frwd  all  --  tun+   *       0.0.0.0/0            0.0.0.0/0           
    0     0 pvpn_frwd  all  --  tap0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:FORWARD:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
35133   15M fw2inet    all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
 273K   75M fw2loc     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
 2799  902K fw2von     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 1670  653K fw2road    all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           
 1680  442K fw2pvpn    all  --  *      tap0    0.0.0.0/0            0.0.0.0/0           
 920K 1184M ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
 1123  255K Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:OUTPUT:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain Broadcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 3279  734K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
 3421 1337K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type MULTICAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type ANYCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain Drop (5 references)
 pkts bytes target     prot opt in     out     source               destination         
 3224  963K            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
 3224  963K Broadcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
  435 46551 Invalid    all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
  201 15870 NotSyn     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    1    71 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain Invalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   85 18745 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID 

Chain NotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   43  9030 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain Reject (14 references)
 pkts bytes target     prot opt in     out     source               destination         
 3911 1155K            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
 3911 1155K Broadcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    0     0 Invalid    all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 NotSyn     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain blacklst (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:1024:1029 
    0     0 DROP       tcp  --  *      *       66.249.64.0/19       0.0.0.0/0           tcp dpt:1115 
    0     0 DROP       tcp  --  *      *       85.0.0.0/8           0.0.0.0/0           tcp dpt:1115 

Chain dynamic (26 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw2inet (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
24255   14M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:1194 
10878 1549K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  109 35804 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 226K   62M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
47186   12M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2pvpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
  384  152K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1194 
 1296  289K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2road (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
 1670  653K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2von (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    5  1640 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    1   476 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
 2793  900K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain inet2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 3492  980K blacklst   all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 3492  980K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 3492  980K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
14651   12M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
76444   25M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
   57  4389 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1194 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
   11   660 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1115 
    4   160 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 
    8   344 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8000 
  101  6060 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8888 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3128 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:51413 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:51413 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3333 
    5   292 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:4242 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:51200 
    0     0 ACCEPT     tcp  --  *      *       208.11.75.2          0.0.0.0/0           tcp dpt:2525 
   24  1440 ACCEPT     tcp  --  *      *       208.79.241.2         0.0.0.0/0           tcp dpt:2525 
   47  2820 ACCEPT     tcp  --  *      *       208.79.240.2         0.0.0.0/0           tcp dpt:2525 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:587 
   10   600 ~log0      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp dpt:993 /* IMAPS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 /* IMAP */ 
    1    60 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 /* FTP */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:15000:15050 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:990 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:36161 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:36161 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:6881 
 3224  963K Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  306 18705 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:inet2fw:DROP:' queue_threshold 1 
  306 18705 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain inet2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    5   301 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    5   301 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 168K  107M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 172K  108M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.168.60      tcp dpt:8081 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.168.60      tcp dpt:8096 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.168.60      tcp dpt:8443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.168.65      tcp dpt:2020 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.168.55      tcp dpt:8020 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.168.55      tcp dpt:554 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.168.55      tcp dpt:38360 
    3   181 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.168.55      udp dpt:38360 
    2   120 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.168.55      tcp dpt:61234 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.168.55      udp dpt:61234 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:inet2loc:DROP:' queue_threshold 1 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain inet2pvpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:inet2pvpn:DROP:' queue_threshold 1 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain inet2road (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:inet2road:DROP:' queue_threshold 1 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain inet2von (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
11027  867K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:inet2von:DROP:' queue_threshold 1 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain inet_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    5   301 blacklst   all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 172K  108M inet2loc   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
11027  867K inet2von   all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 inet2road  all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           
    0     0 inet2pvpn  all  --  *      tap0    0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
37348   10M dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
37348   10M smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
  146 54660 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 144K   34M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 144K   34M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
37202   10M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2inet (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 5257  304K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 5257  304K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
 137K   21M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 136K   23M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 DROP       all  --  *      *       0.0.0.0/0            64.62.181.43        
 5257  304K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2pvpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2road (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2von (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:loc2von:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 141K   24M loc2inet   all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2von    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2road   all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2pvpn   all  --  *      tap0    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 4 level 6 prefix `FW:logflags:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain pvpn2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
24300 1931K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
  691  227K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
  114  5108 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:1194 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
23609 1704K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain pvpn2inet (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      tap0    0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:pvpn2inet:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain pvpn2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      tap0    0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain pvpn2pvpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      tap0    0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain pvpn2road (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      tap0    0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:pvpn2road:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain pvpn2von (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      tap0    0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:pvpn2von:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain pvpn_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 pvpn2inet  all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 pvpn2loc   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 pvpn2von   all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 pvpn2road  all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           
    0     0 pvpn2pvpn  all  --  *      tap0    0.0.0.0/0            0.0.0.0/0           

Chain reject (21 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain road2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1668  653K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:993 /* IMAPS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:143 /* IMAP */ 
 1668  653K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain road2inet (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain road2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:road2loc:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain road2pvpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:road2pvpn:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain road2von (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:road2von:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain road_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 road2inet  all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 road2loc   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 road2von   all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 road2pvpn  all  --  *      tap0    0.0.0.0/0            0.0.0.0/0           

Chain sfilter (8 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `FW:sfilter:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurflog (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `FW:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain smurfs (10 references)
 pkts bytes target     prot opt in     out     source               destination         
    6  2172 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 smurflog   all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] ADDRTYPE match src-type BROADCAST 
    0     0 smurflog   all  --  *      *       224.0.0.0/4          0.0.0.0/0           [goto] 

Chain tcpflags (10 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp spt:0 flags:0x17/0x02 

Chain von2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 2798  903K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    9  2952 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    1    48 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    1    58 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 /* DNS */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 /* DNS */ 
 2788  900K Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:von2fw:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain von2inet (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           [goto] 
  685 68145 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
12701  991K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
  685 68145 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain von2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:von2loc:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain von2pvpn (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:von2pvpn:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain von2road (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 sfilter    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           [goto] 
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ULOG copy_range 0 nlgroup 1 prefix `FW:von2road:REJECT:' queue_threshold 1 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain von_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
13386 1059K von2inet   all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           
    0     0 von2loc    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    0     0 von2road   all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           
    0     0 von2pvpn   all  --  *      tap0    0.0.0.0/0            0.0.0.0/0           

Chain ~log0 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10   600 ULOG       all  --  *      *       0.0.0.0/0            0.0.0.0/0           /* IMAPS */ ULOG copy_range 0 nlgroup 1 prefix `FW:ULOG):ACCEPT:' queue_threshold 1 
   10   600 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           /* IMAPS */ 

Log (/var/log/messages)


NAT Table

Chain PREROUTING (policy ACCEPT 27559 packets, 3885K bytes)
 pkts bytes target     prot opt in     out     source               destination         
27563 3885K dnat       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 30854 packets, 3156K bytes)
 pkts bytes target     prot opt in     out     source               destination         
14798 1245K eth2_masq  all  --  *      eth2    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 31973 packets, 3411K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1852  296K inet_dnat  all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           

Chain eth2_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 4964  282K MASQUERADE  all  --  *      *       192.168.168.0/24     0.0.0.0/0           
  558 44057 MASQUERADE  all  --  *      *       10.0.0.0/24          0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      *       172.16.99.0/24       0.0.0.0/0           

Chain inet_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8081 to:192.168.168.60 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8096 to:192.168.168.60 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8443 to:192.168.168.60 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:2020 to:192.168.168.65 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8020 to:192.168.168.55 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:554 to:192.168.168.55 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:38360 to:192.168.168.55 
    3   181 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:38360 to:192.168.168.55 
    1    60 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:61234 to:192.168.168.55 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:61234 to:192.168.168.55 

Mangle Table

Chain PREROUTING (policy ACCEPT 1556K packets, 1392M bytes)
 pkts bytes target     prot opt in     out     source               destination         
1556K 1392M tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 1211K packets, 1257M bytes)
 pkts bytes target     prot opt in     out     source               destination         
1211K 1257M tcin       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 338K packets, 133M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 338K  133M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK set 0x0 
 338K  133M tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 1236K packets, 1276M bytes)
 pkts bytes target     prot opt in     out     source               destination         
1236K 1276M tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 1585K packets, 1413M bytes)
 pkts bytes target     prot opt in     out     source               destination         
1585K 1413M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 1556K packets, 1392M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 1236K packets, 1276M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table ( out of )

tcp      6 431955 ESTABLISHED src=192.168.168.55 dst=74.125.127.125 sport=49854 dport=5222 packets=869 bytes=60214 src=74.125.127.125 dst=68.106.255.123 sport=5222 dport=49854 packets=882 bytes=63849 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430272 ESTABLISHED src=192.168.168.144 dst=198.160.100.32 sport=3356 dport=443 packets=15 bytes=3465 src=198.160.100.32 dst=68.106.255.123 sport=443 dport=3356 packets=12 bytes=5409 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431995 ESTABLISHED src=192.168.168.55 dst=74.125.227.51 sport=52024 dport=443 packets=4924 bytes=335910 src=74.125.227.51 dst=68.106.255.123 sport=443 dport=52024 packets=5599 bytes=1759724 [ASSURED] mark=0 secmark=0 use=1
tcp      6 96 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=47000 dport=49152 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49152 dport=47000 packets=6 bytes=2375 [ASSURED] mark=0 secmark=0 use=1
tcp      6 96 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=47001 dport=49152 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49152 dport=47001 packets=6 bytes=2375 [ASSURED] mark=0 secmark=0 use=1
udp      17 27 src=192.168.222.109 dst=192.168.222.255 sport=53174 dport=31077 packets=6712 bytes=228208 [UNREPLIED] src=192.168.222.255 dst=192.168.222.109 sport=31077 dport=53174 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 430286 ESTABLISHED src=192.168.168.144 dst=198.160.97.56 sport=3382 dport=443 packets=272 bytes=47049 src=198.160.97.56 dst=68.106.255.123 sport=443 dport=3382 packets=125 bytes=8775 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431986 ESTABLISHED src=192.168.168.55 dst=64.4.61.86 sport=49815 dport=1863 packets=1515 bytes=67422 src=64.4.61.86 dst=68.106.255.123 sport=1863 dport=49815 packets=794 bytes=54507 [ASSURED] mark=0 secmark=0 use=1
udp      17 7 src=68.106.255.123 dst=68.106.255.255 sport=631 dport=631 packets=1 bytes=227 [UNREPLIED] src=68.106.255.255 dst=68.106.255.123 sport=631 dport=631 packets=0 bytes=0 mark=0 secmark=0 use=1
unknown  2 567 src=192.168.222.1 dst=224.0.0.1 packets=272 bytes=7616 [UNREPLIED] src=224.0.0.1 dst=192.168.222.1 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431552 ESTABLISHED src=108.121.115.246 dst=68.106.255.123 sport=49297 dport=993 packets=22 bytes=1850 src=68.106.255.123 dst=108.121.115.246 sport=993 dport=49297 packets=14 bytes=3343 [ASSURED] mark=0 secmark=0 use=1
tcp      6 110 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40187 dport=8888 packets=16 bytes=3849 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40187 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 68 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=40036 dport=49153 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49153 dport=40036 packets=6 bytes=2261 [ASSURED] mark=0 secmark=0 use=1
tcp      6 118 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40236 dport=8888 packets=12 bytes=2959 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40236 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
udp      17 177 src=10.0.0.103 dst=208.83.244.218 sport=1194 dport=1194 packets=5656 bytes=443311 src=208.83.244.218 dst=68.106.255.123 sport=1194 dport=1024 packets=3467 bytes=277540 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431983 ESTABLISHED src=192.168.168.67 dst=69.171.234.16 sport=48342 dport=80 packets=32 bytes=19362 src=69.171.234.16 dst=68.106.255.123 sport=80 dport=48342 packets=23 bytes=3613 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=192.168.168.55 dst=192.168.168.1 sport=49841 dport=22 packets=2365 bytes=130220 src=192.168.168.1 dst=192.168.168.55 sport=22 dport=49841 packets=4260 bytes=903040 [ASSURED] mark=0 secmark=0 use=1
tcp      6 68 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=40037 dport=49153 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49153 dport=40037 packets=6 bytes=2261 [ASSURED] mark=0 secmark=0 use=1
udp      17 179 src=68.106.255.123 dst=98.251.254.126 sport=53160 dport=1194 packets=5348 bytes=808534 src=98.251.254.126 dst=68.106.255.123 sport=1194 dport=53160 packets=54853 bytes=10731434 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430273 ESTABLISHED src=192.168.168.144 dst=198.160.97.56 sport=3372 dport=443 packets=17 bytes=3736 src=198.160.97.56 dst=68.106.255.123 sport=443 dport=3372 packets=11 bytes=4179 [ASSURED] mark=0 secmark=0 use=1
tcp      6 51 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40148 dport=8888 packets=19 bytes=4033 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40148 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.138 sport=47870 dport=49153 packets=7 bytes=708 src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=47870 packets=6 bytes=2243 [ASSURED] mark=0 secmark=0 use=1
tcp      6 1 TIME_WAIT src=192.168.168.55 dst=69.58.188.38 sport=53619 dport=443 packets=9 bytes=1794 src=69.58.188.38 dst=68.106.255.123 sport=443 dport=53619 packets=9 bytes=941 [ASSURED] mark=0 secmark=0 use=1
tcp      6 61 TIME_WAIT src=192.168.168.55 dst=69.58.188.38 sport=53622 dport=443 packets=9 bytes=1873 src=69.58.188.38 dst=68.106.255.123 sport=443 dport=53622 packets=11 bytes=5474 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430286 ESTABLISHED src=192.168.168.144 dst=198.160.97.56 sport=3374 dport=443 packets=141 bytes=37930 src=198.160.97.56 dst=68.106.255.123 sport=443 dport=3374 packets=71 bytes=6579 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431992 ESTABLISHED src=192.168.168.67 dst=74.125.224.150 sport=53379 dport=443 packets=4462 bytes=851088 src=74.125.224.150 dst=68.106.255.123 sport=443 dport=53379 packets=4312 bytes=852930 [ASSURED] mark=0 secmark=0 use=1
udp      17 25 src=192.168.222.109 dst=255.255.255.255 sport=68 dport=67 packets=1 bytes=328 [UNREPLIED] src=255.255.255.255 dst=192.168.222.109 sport=67 dport=68 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 179 src=192.168.168.142 dst=38.104.224.170 sport=53392 dport=4365 packets=3772 bytes=2620333 src=38.104.224.170 dst=68.106.255.123 sport=4365 dport=53392 packets=3824 bytes=408678 [ASSURED] mark=0 secmark=0 use=1
tcp      6 70 TIME_WAIT src=192.168.168.1 dst=192.168.168.138 sport=47873 dport=49153 packets=7 bytes=708 src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=47873 packets=6 bytes=2243 [ASSURED] mark=0 secmark=0 use=1
udp      17 5 src=192.168.168.55 dst=255.255.255.255 sport=17500 dport=17500 packets=2 bytes=410 [UNREPLIED] src=255.255.255.255 dst=192.168.168.55 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431962 ESTABLISHED src=192.168.168.55 dst=74.125.127.125 sport=49343 dport=5222 packets=787 bytes=32154 src=74.125.127.125 dst=68.106.255.123 sport=5222 dport=49343 packets=787 bytes=43749 [ASSURED] mark=0 secmark=0 use=1
udp      17 18 src=192.168.168.142 dst=192.168.168.1 sport=39232 dport=53 packets=1 bytes=72 src=192.168.168.1 dst=192.168.168.142 sport=53 dport=39232 packets=1 bytes=134 mark=0 secmark=0 use=1
tcp      6 70 TIME_WAIT src=192.168.168.1 dst=192.168.168.138 sport=47872 dport=49153 packets=7 bytes=708 src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=47872 packets=6 bytes=2243 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431939 ESTABLISHED src=192.168.168.133 dst=74.125.224.98 sport=35437 dport=80 packets=5 bytes=1102 src=74.125.224.98 dst=68.106.255.123 sport=80 dport=35437 packets=4 bytes=682 [ASSURED] mark=0 secmark=0 use=1
tcp      6 51 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40178 dport=8888 packets=16 bytes=3849 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40178 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431993 ESTABLISHED src=192.168.168.55 dst=66.220.145.46 sport=53248 dport=443 packets=147 bytes=75622 src=66.220.145.46 dst=68.106.255.123 sport=443 dport=53248 packets=217 bytes=50452 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431993 ESTABLISHED src=192.168.168.137 dst=193.182.8.13 sport=44816 dport=4070 packets=1429 bytes=81701 src=193.182.8.13 dst=68.106.255.123 sport=4070 dport=44816 packets=864 bytes=57214 [ASSURED] mark=0 secmark=0 use=1
udp      17 19 src=192.168.222.108 dst=192.168.222.255 sport=137 dport=137 packets=18 bytes=1404 [UNREPLIED] src=192.168.222.255 dst=192.168.222.108 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 29 src=192.168.222.109 dst=192.168.222.255 sport=137 dport=137 packets=17 bytes=1326 [UNREPLIED] src=192.168.222.255 dst=192.168.222.109 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 59 TIME_WAIT src=192.168.168.1 dst=192.168.168.1 sport=50032 dport=53 packets=6 bytes=369 src=192.168.168.1 dst=192.168.168.1 sport=53 dport=50032 packets=4 bytes=823 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431975 ESTABLISHED src=192.168.168.67 dst=69.171.227.67 sport=60771 dport=80 packets=1683 bytes=808659 src=69.171.227.67 dst=68.106.255.123 sport=80 dport=60771 packets=2570 bytes=479690 [ASSURED] mark=0 secmark=0 use=1
tcp      6 70 TIME_WAIT src=192.168.168.1 dst=192.168.168.138 sport=47874 dport=49153 packets=7 bytes=708 src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=47874 packets=6 bytes=2243 [ASSURED] mark=0 secmark=0 use=1
tcp      6 116 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40235 dport=8888 packets=13 bytes=3019 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40235 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
udp      17 1 src=192.168.168.1 dst=192.168.168.255 sport=2190 dport=2190 packets=1 bytes=206 [UNREPLIED] src=192.168.168.255 dst=192.168.168.1 sport=2190 dport=2190 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 10 src=192.168.168.60 dst=192.168.168.1 sport=32769 dport=53 packets=2 bytes=128 src=192.168.168.1 dst=192.168.168.60 sport=53 dport=32769 packets=2 bytes=205 [ASSURED] mark=0 secmark=0 use=1
tcp      6 81 TIME_WAIT src=192.168.168.55 dst=69.171.224.12 sport=53585 dport=443 packets=16 bytes=1972 src=69.171.224.12 dst=68.106.255.123 sport=443 dport=53585 packets=18 bytes=8911 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430276 ESTABLISHED src=192.168.168.144 dst=198.160.97.56 sport=3388 dport=443 packets=13 bytes=2716 src=198.160.97.56 dst=68.106.255.123 sport=443 dport=3388 packets=9 bytes=4099 [ASSURED] mark=0 secmark=0 use=1
udp      17 14 src=0.0.0.0 dst=255.255.255.255 sport=68 dport=67 packets=2 bytes=656 [UNREPLIED] src=255.255.255.255 dst=0.0.0.0 sport=67 dport=68 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 62 TIME_WAIT src=192.168.168.5 dst=184.72.222.133 sport=51793 dport=80 packets=24 bytes=2072 src=184.72.222.133 dst=68.106.255.123 sport=80 dport=51793 packets=31 bytes=41984 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.8 sport=45443 dport=1780 packets=8 bytes=759 src=192.168.168.8 dst=192.168.168.1 sport=1780 dport=45443 packets=7 bytes=4202 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430276 ESTABLISHED src=192.168.168.144 dst=198.160.97.56 sport=3383 dport=443 packets=16 bytes=3042 src=198.160.97.56 dst=68.106.255.123 sport=443 dport=3383 packets=11 bytes=4179 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.8 sport=45448 dport=1780 packets=7 bytes=1188 src=192.168.168.8 dst=192.168.168.1 sport=1780 dport=45448 packets=6 bytes=925 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430701 ESTABLISHED src=192.168.168.148 dst=199.167.177.36 sport=60913 dport=1237 packets=8 bytes=688 src=199.167.177.36 dst=68.106.255.123 sport=1237 dport=60913 packets=10 bytes=636 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431968 ESTABLISHED src=192.168.168.55 dst=74.125.227.81 sport=53624 dport=443 packets=10 bytes=1194 src=74.125.227.81 dst=68.106.255.123 sport=443 dport=53624 packets=11 bytes=3598 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431704 ESTABLISHED src=192.168.168.55 dst=192.168.168.1 sport=53590 dport=993 packets=15 bytes=1418 src=192.168.168.1 dst=192.168.168.55 sport=993 dport=53590 packets=14 bytes=8090 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430275 ESTABLISHED src=192.168.168.144 dst=198.160.97.56 sport=3385 dport=443 packets=13 bytes=2764 src=198.160.97.56 dst=68.106.255.123 sport=443 dport=3385 packets=10 bytes=4139 [ASSURED] mark=0 secmark=0 use=1
udp      17 18 src=192.168.168.67 dst=192.168.168.1 sport=137 dport=137 packets=5 bytes=480 src=192.168.168.1 dst=192.168.168.67 sport=137 dport=137 packets=5 bytes=450 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431961 ESTABLISHED src=192.168.168.67 dst=74.125.227.148 sport=42751 dport=443 packets=3507 bytes=263169 src=74.125.227.148 dst=68.106.255.123 sport=443 dport=42751 packets=3328 bytes=1818541 [ASSURED] mark=0 secmark=0 use=1
tcp      6 118 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40239 dport=8888 packets=9 bytes=2133 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40239 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
unknown  2 570 src=192.168.222.127 dst=224.0.0.251 packets=3 bytes=96 [UNREPLIED] src=224.0.0.251 dst=192.168.222.127 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 9 CLOSE src=192.168.168.1 dst=192.168.168.137 sport=40224 dport=8888 packets=14 bytes=3400 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40224 packets=2 bytes=100 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431001 ESTABLISHED src=192.168.168.133 dst=74.125.127.188 sport=37100 dport=5228 packets=40 bytes=2580 src=74.125.127.188 dst=68.106.255.123 sport=5228 dport=37100 packets=20 bytes=1540 [ASSURED] mark=0 secmark=0 use=1
udp      17 18 src=192.168.168.142 dst=192.168.168.1 sport=58524 dport=53 packets=1 bytes=72 src=192.168.168.1 dst=192.168.168.142 sport=53 dport=58524 packets=1 bytes=134 mark=0 secmark=0 use=1
tcp      6 96 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=46997 dport=49152 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49152 dport=46997 packets=6 bytes=2375 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.138 sport=47867 dport=49153 packets=7 bytes=708 src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=47867 packets=6 bytes=2243 [ASSURED] mark=0 secmark=0 use=1
tcp      6 398474 ESTABLISHED src=192.168.168.67 dst=91.189.89.114 sport=53978 dport=443 packets=3 bytes=378 [UNREPLIED] src=91.189.89.114 dst=68.106.255.123 sport=443 dport=53978 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 22 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40174 dport=8888 packets=16 bytes=3849 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40174 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
udp      17 119 src=192.168.168.1 dst=192.168.168.1 sport=30394 dport=53 packets=6 bytes=451 src=192.168.168.1 dst=192.168.168.1 sport=53 dport=30394 packets=6 bytes=771 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.138 sport=47869 dport=49153 packets=7 bytes=708 src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=47869 packets=6 bytes=2243 [ASSURED] mark=0 secmark=0 use=1
udp      17 7 src=192.168.168.1 dst=192.168.168.138 sport=1900 dport=49153 packets=57 bytes=22120 [UNREPLIED] src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=1900 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 25 src=192.168.222.108 dst=192.168.222.255 sport=55653 dport=31077 packets=1589 bytes=54026 [UNREPLIED] src=192.168.222.255 dst=192.168.222.108 sport=31077 dport=55653 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 68 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=40038 dport=49153 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49153 dport=40038 packets=6 bytes=2261 [ASSURED] mark=0 secmark=0 use=1
tcp      6 59 TIME_WAIT src=192.168.168.1 dst=192.168.168.1 sport=50034 dport=53 packets=6 bytes=369 src=192.168.168.1 dst=192.168.168.1 sport=53 dport=50034 packets=4 bytes=823 [ASSURED] mark=0 secmark=0 use=1
tcp      6 91 TIME_WAIT src=192.168.168.55 dst=69.58.188.38 sport=53623 dport=443 packets=8 bytes=1742 src=69.58.188.38 dst=68.106.255.123 sport=443 dport=53623 packets=8 bytes=704 [ASSURED] mark=0 secmark=0 use=1
unknown  2 68 src=192.168.222.1 dst=224.0.0.251 packets=2 bytes=64 [UNREPLIED] src=224.0.0.251 dst=192.168.222.1 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431999 ESTABLISHED src=192.168.168.1 dst=192.168.168.137 sport=40241 dport=8888 packets=5 bytes=1255 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40241 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 59 TIME_WAIT src=192.168.168.1 dst=192.168.168.1 sport=50029 dport=53 packets=6 bytes=369 src=192.168.168.1 dst=192.168.168.1 sport=53 dport=50029 packets=4 bytes=823 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.138 sport=47868 dport=49153 packets=7 bytes=708 src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=47868 packets=6 bytes=2243 [ASSURED] mark=0 secmark=0 use=1
tcp      6 68 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=40041 dport=49153 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49153 dport=40041 packets=6 bytes=2261 [ASSURED] mark=0 secmark=0 use=1
udp      17 23 src=192.168.168.140 dst=239.255.255.250 sport=49169 dport=1900 packets=1 bytes=166 [UNREPLIED] src=239.255.255.250 dst=192.168.168.140 sport=1900 dport=49169 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 109 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40233 dport=8888 packets=12 bytes=2959 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40233 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 100 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40218 dport=8888 packets=15 bytes=3464 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40218 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 56 CLOSE_WAIT src=192.168.168.55 dst=69.58.188.38 sport=53625 dport=443 packets=8 bytes=1754 src=69.58.188.38 dst=68.106.255.123 sport=443 dport=53625 packets=8 bytes=901 [ASSURED] mark=0 secmark=0 use=1
tcp      6 2 CLOSE src=192.168.168.1 dst=192.168.168.137 sport=40222 dport=8888 packets=14 bytes=3400 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40222 packets=2 bytes=100 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.8 sport=45444 dport=1780 packets=7 bytes=1188 src=192.168.168.8 dst=192.168.168.1 sport=1780 dport=45444 packets=6 bytes=925 [ASSURED] mark=0 secmark=0 use=1
tcp      6 96 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=47002 dport=49152 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49152 dport=47002 packets=6 bytes=2375 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431974 ESTABLISHED src=192.168.168.67 dst=91.189.89.76 sport=60050 dport=443 packets=483 bytes=51245 src=91.189.89.76 dst=68.106.255.123 sport=443 dport=60050 packets=687 bytes=63836 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431835 ESTABLISHED src=68.106.255.123 dst=209.208.241.80 sport=59930 dport=443 packets=891 bytes=78846 src=209.208.241.80 dst=68.106.255.123 sport=443 dport=59930 packets=1135 bytes=182668 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431995 ESTABLISHED src=192.168.168.55 dst=192.168.168.1 sport=49822 dport=139 packets=46617 bytes=5533562 src=192.168.168.1 dst=192.168.168.55 sport=139 dport=49822 packets=38613 bytes=6875884 [ASSURED] mark=0 secmark=0 use=1
tcp      6 415002 ESTABLISHED src=192.168.168.68 dst=199.167.177.38 sport=37265 dport=1227 packets=44 bytes=2048 src=199.167.177.38 dst=68.106.255.123 sport=1227 dport=37265 packets=45 bytes=1990 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430272 ESTABLISHED src=192.168.168.144 dst=198.160.97.56 sport=3369 dport=443 packets=13 bytes=2716 src=198.160.97.56 dst=68.106.255.123 sport=443 dport=3369 packets=10 bytes=4139 [ASSURED] mark=0 secmark=0 use=1
tcp      6 96 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=46999 dport=49152 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49152 dport=46999 packets=6 bytes=2375 [ASSURED] mark=0 secmark=0 use=1
udp      17 22 src=68.106.255.123 dst=68.2.16.25 sport=57322 dport=53 packets=1 bytes=101 src=68.2.16.25 dst=68.106.255.123 sport=53 dport=57322 packets=1 bytes=445 mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.8 sport=45445 dport=1780 packets=8 bytes=759 src=192.168.168.8 dst=192.168.168.1 sport=1780 dport=45445 packets=7 bytes=4202 [ASSURED] mark=0 secmark=0 use=1
tcp      6 68 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=40039 dport=49153 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49153 dport=40039 packets=6 bytes=2261 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431986 ESTABLISHED src=192.168.168.55 dst=69.171.234.96 sport=52668 dport=443 packets=676 bytes=453979 src=69.171.234.96 dst=68.106.255.123 sport=443 dport=52668 packets=602 bytes=259916 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.8 sport=45446 dport=1780 packets=7 bytes=1188 src=192.168.168.8 dst=192.168.168.1 sport=1780 dport=45446 packets=6 bytes=925 [ASSURED] mark=0 secmark=0 use=1
tcp      6 31 TIME_WAIT src=192.168.168.55 dst=69.58.188.38 sport=53620 dport=443 packets=9 bytes=2049 src=69.58.188.38 dst=68.106.255.123 sport=443 dport=53620 packets=11 bytes=5309 [ASSURED] mark=0 secmark=0 use=1
unknown  2 321 src=192.168.222.109 dst=224.0.0.251 packets=1 bytes=32 [UNREPLIED] src=224.0.0.251 dst=192.168.222.109 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 95 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=46995 dport=49152 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49152 dport=46995 packets=6 bytes=2375 [ASSURED] mark=0 secmark=0 use=1
udp      17 15 src=192.168.222.108 dst=255.255.255.255 sport=68 dport=67 packets=1 bytes=328 [UNREPLIED] src=255.255.255.255 dst=192.168.222.108 sport=67 dport=68 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 96 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=46998 dport=49152 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49152 dport=46998 packets=6 bytes=2375 [ASSURED] mark=0 secmark=0 use=1
udp      17 7 src=192.168.222.90 dst=192.168.222.255 sport=631 dport=631 packets=1 bytes=227 [UNREPLIED] src=192.168.222.255 dst=192.168.222.90 sport=631 dport=631 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 5 src=192.168.168.55 dst=192.168.168.255 sport=17500 dport=17500 packets=1 bytes=205 [UNREPLIED] src=192.168.168.255 dst=192.168.168.55 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
udp      17 22 src=192.168.168.5 dst=192.168.168.1 sport=17505 dport=53 packets=1 bytes=62 src=192.168.168.1 dst=192.168.168.5 sport=53 dport=17505 packets=1 bytes=461 mark=0 secmark=0 use=1
tcp      6 60 TIME_WAIT src=192.168.168.5 dst=107.22.221.74 sport=60725 dport=80 packets=8 bytes=641 src=107.22.221.74 dst=68.106.255.123 sport=80 dport=60725 packets=7 bytes=4055 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431990 ESTABLISHED src=192.168.168.55 dst=208.96.4.161 sport=49817 dport=85 packets=3367 bytes=141966 src=208.96.4.161 dst=68.106.255.123 sport=85 dport=49817 packets=1694 bytes=104184 [ASSURED] mark=0 secmark=0 use=1
tcp      6 111 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40234 dport=8888 packets=12 bytes=2959 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40234 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 70 TIME_WAIT src=192.168.168.1 dst=192.168.168.138 sport=47871 dport=49153 packets=7 bytes=708 src=192.168.168.138 dst=192.168.168.1 sport=49153 dport=47871 packets=6 bytes=2243 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431995 ESTABLISHED src=192.168.168.55 dst=74.125.224.53 sport=53621 dport=443 packets=15 bytes=2701 src=74.125.224.53 dst=68.106.255.123 sport=443 dport=53621 packets=12 bytes=2111 [ASSURED] mark=0 secmark=0 use=1
udp      17 25 src=192.168.222.117 dst=224.0.0.251 sport=5353 dport=5353 packets=14 bytes=3066 [UNREPLIED] src=224.0.0.251 dst=192.168.222.117 sport=5353 dport=5353 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 59 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=52694 dport=783 packets=7 bytes=5170 src=127.0.0.1 dst=127.0.0.1 sport=783 dport=52694 packets=6 bytes=5365 [ASSURED] mark=0 secmark=0 use=1
tcp      6 430276 ESTABLISHED src=192.168.168.144 dst=198.160.97.56 sport=3377 dport=443 packets=42 bytes=7869 src=198.160.97.56 dst=68.106.255.123 sport=443 dport=3377 packets=23 bytes=4659 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431955 ESTABLISHED src=192.168.168.55 dst=199.47.219.147 sport=49809 dport=80 packets=679 bytes=240927 src=199.47.219.147 dst=68.106.255.123 sport=80 dport=49809 packets=1218 bytes=157560 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431553 ESTABLISHED src=108.121.115.246 dst=68.106.255.123 sport=40240 dport=993 packets=18 bytes=1501 src=68.106.255.123 dst=108.121.115.246 sport=993 dport=40240 packets=12 bytes=2915 [ASSURED] mark=0 secmark=0 use=1
udp      17 7 src=10.0.0.1 dst=10.0.0.255 sport=631 dport=631 packets=1 bytes=221 [UNREPLIED] src=10.0.0.255 dst=10.0.0.1 sport=631 dport=631 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 431782 ESTABLISHED src=98.165.173.1 dst=68.106.255.123 sport=55617 dport=4242 packets=261 bytes=13190 src=68.106.255.123 dst=98.165.173.1 sport=4242 dport=55617 packets=375 bytes=18019 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.8 sport=45449 dport=1780 packets=8 bytes=759 src=192.168.168.8 dst=192.168.168.1 sport=1780 dport=45449 packets=7 bytes=4202 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=40043 dport=49153 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49153 dport=40043 packets=6 bytes=2261 [ASSURED] mark=0 secmark=0 use=1
udp      17 7 src=192.168.168.1 dst=192.168.168.255 sport=631 dport=631 packets=1 bytes=226 [UNREPLIED] src=192.168.168.255 dst=192.168.168.1 sport=631 dport=631 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 96 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=46996 dport=49152 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49152 dport=46996 packets=6 bytes=2375 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.8 sport=45450 dport=1780 packets=7 bytes=1188 src=192.168.168.8 dst=192.168.168.1 sport=1780 dport=45450 packets=6 bytes=925 [ASSURED] mark=0 secmark=0 use=1
udp      17 11 src=192.168.168.55 dst=239.255.255.250 sport=1900 dport=1900 packets=18 bytes=9165 [UNREPLIED] src=239.255.255.250 dst=192.168.168.55 sport=1900 dport=1900 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 118 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40237 dport=8888 packets=11 bytes=2578 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40237 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 20 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40173 dport=8888 packets=16 bytes=3849 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40173 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
unknown  2 587 src=192.168.222.117 dst=224.0.0.251 packets=12 bytes=384 [UNREPLIED] src=224.0.0.251 dst=192.168.222.117 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 119 TIME_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40238 dport=8888 packets=11 bytes=2574 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40238 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 119 FIN_WAIT src=192.168.168.1 dst=192.168.168.137 sport=40240 dport=8888 packets=7 bytes=1688 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40240 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
tcp      6 431997 ESTABLISHED src=192.168.168.144 dst=198.160.103.229 sport=3441 dport=443 packets=2640 bytes=490820 src=198.160.103.229 dst=68.106.255.123 sport=443 dport=3441 packets=2895 bytes=1534321 [ASSURED] mark=0 secmark=0 use=1
tcp      6 113 TIME_WAIT src=192.168.168.5 dst=107.22.195.81 sport=46580 dport=80 packets=10 bytes=775 src=107.22.195.81 dst=68.106.255.123 sport=80 dport=46580 packets=9 bytes=8322 [ASSURED] mark=0 secmark=0 use=1
tcp      6 4 CLOSE src=192.168.168.1 dst=192.168.168.137 sport=40223 dport=8888 packets=13 bytes=3340 src=192.168.168.137 dst=192.168.168.1 sport=8888 dport=40223 packets=2 bytes=100 [ASSURED] mark=0 secmark=0 use=1
tcp      6 68 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=40040 dport=49153 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49153 dport=40040 packets=6 bytes=2261 [ASSURED] mark=0 secmark=0 use=1
udp      17 1 src=192.168.168.137 dst=239.255.255.250 sport=1900 dport=1900 packets=13524 bytes=4943022 [UNREPLIED] src=239.255.255.250 dst=192.168.168.137 sport=1900 dport=1900 packets=0 bytes=0 mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.8 sport=45447 dport=1780 packets=8 bytes=759 src=192.168.168.8 dst=192.168.168.1 sport=1780 dport=45447 packets=7 bytes=4202 [ASSURED] mark=0 secmark=0 use=1
tcp      6 69 TIME_WAIT src=192.168.168.1 dst=192.168.168.140 sport=40042 dport=49153 packets=7 bytes=708 src=192.168.168.140 dst=192.168.168.1 sport=49153 dport=40042 packets=6 bytes=2261 [ASSURED] mark=0 secmark=0 use=1
tcp      6 61 TIME_WAIT src=192.168.168.5 dst=184.72.222.133 sport=51792 dport=80 packets=5 bytes=742 src=184.72.222.133 dst=68.106.255.123 sport=80 dport=51792 packets=5 bytes=776 [ASSURED] mark=0 secmark=0 use=1
udp      17 11 src=192.168.168.7 dst=239.255.255.250 sport=1900 dport=1900 packets=13 bytes=4625 [UNREPLIED] src=239.255.255.250 dst=192.168.168.7 sport=1900 dport=1900 packets=0 bytes=0 mark=0 secmark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 192.168.168.1/24 brd 192.168.168.255 scope global eth0
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 10.0.0.1/24 brd 10.0.0.255 scope global eth1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 68.106.255.123/24 brd 68.106.255.255 scope global eth2
6: vmnet8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    inet 172.16.20.1/24 brd 172.16.20.255 scope global vmnet8
7: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 100
    inet 172.16.99.1 peer 172.16.99.2/32 scope global tun0
8: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 100
    inet 192.168.222.90/24 brd 192.168.222.255 scope global tap0

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    1183876145 920444   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    1183876145 920444   0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:26:18:78:3c:1f brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    73209730   344122   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    188892337  456163   0       0       0       0      
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:0f:b5:f5:f9:ac brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    1355468    15131    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    2036232    15572    0       0       0       0      
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:0f:b5:f5:fa:71 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    159911033  633500   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    42585552   190536   0       0       0       0      
5: sit0: <NOARP> mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
6: vmnet8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:50:56:c0:00:08 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          6        0       0       0       0      
7: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 100
    link/[65534] 
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    652964     1670     0       0       0       0      
8: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 100
    link/ether d6:de:38:d8:d9:6c brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    7569370    54374    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    474741     1907     0       0       0       0      

Per-IP Counters

   iptaccount is not installed

PFKEY SPD

No SPD entries.

PFKEY SAD

No SAD entries.

/proc

   /proc/version = Linux version 2.6.18-308.1.1.el5.centos.plus (mockbuild@builder10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-52)) #1 SMP Wed Mar 7 13:53:20 EST 2012
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 0
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 0
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/log_martians = 0
   /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth2/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth2/log_martians = 0
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 0
   /proc/sys/net/ipv4/conf/lo/log_martians = 0
   /proc/sys/net/ipv4/conf/tap0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/tap0/arp_filter = 0
   /proc/sys/net/ipv4/conf/tap0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/tap0/rp_filter = 0
   /proc/sys/net/ipv4/conf/tap0/log_martians = 0
   /proc/sys/net/ipv4/conf/tun0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/tun0/arp_filter = 0
   /proc/sys/net/ipv4/conf/tun0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/tun0/rp_filter = 0
   /proc/sys/net/ipv4/conf/tun0/log_martians = 0
   /proc/sys/net/ipv4/conf/vmnet8/proxy_arp = 0
   /proc/sys/net/ipv4/conf/vmnet8/arp_filter = 0
   /proc/sys/net/ipv4/conf/vmnet8/arp_ignore = 0
   /proc/sys/net/ipv4/conf/vmnet8/rp_filter = 0
   /proc/sys/net/ipv4/conf/vmnet8/log_martians = 0

Routing Rules

0:	from all lookup 255 
32766:	from all lookup main 
32767:	from all lookup default 

Table 255:

local 68.106.255.123 dev eth2 proto kernel scope host src 68.106.255.123
local 192.168.222.90 dev tap0 proto kernel scope host src 192.168.222.90
local 192.168.168.1 dev eth0 proto kernel scope host src 192.168.168.1
local 172.16.99.1 dev tun0 proto kernel scope host src 172.16.99.1
local 172.16.20.1 dev vmnet8 proto kernel scope host src 172.16.20.1
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
local 10.0.0.1 dev eth1 proto kernel scope host src 10.0.0.1
broadcast 68.106.255.255 dev eth2 proto kernel scope link src 68.106.255.123
broadcast 68.106.255.0 dev eth2 proto kernel scope link src 68.106.255.123
broadcast 192.168.222.255 dev tap0 proto kernel scope link src 192.168.222.90
broadcast 192.168.222.0 dev tap0 proto kernel scope link src 192.168.222.90
broadcast 192.168.168.255 dev eth0 proto kernel scope link src 192.168.168.1
broadcast 192.168.168.0 dev eth0 proto kernel scope link src 192.168.168.1
broadcast 172.16.20.255 dev vmnet8 proto kernel scope link src 172.16.20.1
broadcast 172.16.20.0 dev vmnet8 proto kernel scope link src 172.16.20.1
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
broadcast 10.0.0.255 dev eth1 proto kernel scope link src 10.0.0.1
broadcast 10.0.0.0 dev eth1 proto kernel scope link src 10.0.0.1

Table default:


Table main:

unreachable 192.168.0.0/16
unreachable 172.16.0.0/12
unreachable 10.0.0.0/8
172.16.99.2 dev tun0 proto kernel scope link src 172.16.99.1
68.106.255.0/24 dev eth2 proto kernel scope link src 68.106.255.123
192.168.222.0/24 dev tap0 proto kernel scope link src 192.168.222.90
192.168.168.0/24 dev eth0 proto kernel scope link src 192.168.168.1
172.16.99.0/24 via 172.16.99.2 dev tun0
172.16.20.0/24 dev vmnet8 proto kernel scope link src 172.16.20.1
10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.1
169.254.0.0/16 dev eth2 scope link
default via 68.106.255.1 dev eth2

ARP

? (192.168.168.60) at <incomplete> on eth0
? (192.168.168.8) at 30:46:9A:4C:8E:D6 [ether] on eth0
? (192.168.168.55) at 00:1F:D0:AD:5B:EC [ether] on eth0
? (192.168.168.137) at 30:46:9A:4C:8E:D6 [ether] on eth0
? (192.168.168.67) at 30:46:9A:4C:8E:D6 [ether] on eth0
? (192.168.168.140) at 30:46:9A:4C:8E:D6 [ether] on eth0
? (10.0.0.103) at 00:18:61:01:EF:47 [ether] on eth1
? (192.168.168.133) at 30:46:9A:62:0B:38 [ether] on eth0
? (192.168.168.138) at 30:46:9A:62:0B:38 [ether] on eth0
? (192.168.168.142) at 00:25:31:01:D0:BD [ether] on eth0
? (192.168.168.144) at C0:3F:0E:D9:62:E0 [ether] on eth0
? (192.168.222.109) at 00:16:44:9D:16:8D [ether] on tap0
? (192.168.168.5) at C4:3D:C7:98:68:7B [ether] on eth0
? (68.106.255.1) at 00:14:F1:E5:95:31 [ether] on eth2
? (192.168.168.7) at C0:3F:0E:D9:62:E0 [ether] on eth0

Modules

ip_conntrack           91749  25 xt_connlimit,ipt_MASQUERADE,ip_nat_tftp,ip_nat_snmp_basic,ip_nat_sip,ip_nat_pptp,ip_nat_irc,ip_nat_h323,ip_nat_ftp,ip_nat_amanda,ip_conntrack_tftp,ip_conntrack_sip,ip_conntrack_pptp,ip_conntrack_netbios_ns,ip_conntrack_irc,ip_conntrack_h323,ip_conntrack_ftp,ip_conntrack_amanda,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,ip_nat
ip_conntrack_amanda    38345  1 ip_nat_amanda
ip_conntrack_ftp       41361  1 ip_nat_ftp
ip_conntrack_h323      88065  1 ip_nat_h323
ip_conntrack_irc       40465  1 ip_nat_irc
ip_conntrack_netbios_ns    36033  0 
ip_conntrack_pptp      45665  1 ip_nat_pptp
ip_conntrack_sip       41745  1 ip_nat_sip
ip_conntrack_tftp      37913  1 ip_nat_tftp
ip_nat                 52973  12 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ip_nat_tftp,ip_nat_sip,ip_nat_pptp,ip_nat_irc,ip_nat_h323,ip_nat_ftp,ip_nat_amanda,iptable_nat
ip_nat_amanda          35393  0 
ip_nat_ftp             36545  0 
ip_nat_h323            40769  0 
ip_nat_irc             35777  0 
ip_nat_pptp            39237  0 
ip_nat_sip             37313  0 
ip_nat_snmp_basic      43461  0 
ip_nat_tftp            34881  0 
iptable_filter         36161  1 
iptable_mangle         36033  1 
iptable_nat            40517  1 
iptable_raw            35137  0 
ip_tables              55457  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_addrtype           34881  5 
ipt_ah                 35009  0 
ipt_CLUSTERIP          42185  0 
ipt_dscp               34753  0 
ipt_DSCP               35265  0 
ipt_ecn                35265  0 
ipt_ECN                36161  0 
ipt_hashlimit          42577  0 
ipt_iprange            34881  0 
ipt_LOG                39617  3 
ipt_MASQUERADE         36801  3 
ipt_NETMAP             35009  0 
ipt_owner              35009  0 
ipt_recent             42969  0 
ipt_REDIRECT           35009  0 
ipt_REJECT             38849  4 
ipt_SAME               35393  0 
ipt_TCPMSS             37313  0 
ipt_tos                34753  0 
ipt_TOS                35265  0 
ipt_ttl                34881  0 
ipt_TTL                35393  0 
ipt_ULOG               42569  21 
xt_CLASSIFY            35009  0 
xt_comment             35009  31 
xt_connlimit           37321  0 
xt_connmark            35393  0 
xt_CONNMARK            35649  0 
xt_conntrack           35649  70 
xt_dccp                36425  0 
xt_DSCP                35521  0 
xt_helper              35649  0 
xt_length              35137  0 
xt_limit               35905  0 
xt_mac                 35009  0 
xt_mark                35265  0 
xt_MARK                35649  1 
xt_multiport           36417  4 
xt_NFQUEUE             35137  0 
xt_physdev             36049  0 
xt_pkttype             35009  0 
xt_policy              36545  0 
xt_realm               34753  0 
xt_state               35265  0 
xt_statistic           35521  0 
xt_tcpmss              35393  0 
xt_tcpudp              36289  90 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Not available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   Rawpost Table: Not available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Not available
   MARK Target: Available
   Extended MARK Target: Available
   Extended MARK Target 2: Not available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   Old Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Not available
   Goto Support: Available
   LOGMARK Target: Not available
   IPMARK Target: Not available
   LOG Target: Available
   ULOG Target: Available
   NFLOG Target: Not available
   Persistent SNAT: Not available
   TPROXY Target: Not available
   FLOW Classifier: Not available
   fwmark route mask: Not available
   Mark in any table: Not available
   Header Match: Not available
   ACCOUNT Target: Not available
   AUDIT Target: Not available
   ipset V5: Not available
   Condition Match: Not available
   Statistic Match: Available
   IMQ Target: Not available
   iptables -S: Not available
   Basic Filter: Available
   CT Target: Not available

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
tcp        0      0 0.0.0.0:8000                0.0.0.0:*                   LISTEN      5751/lighttpd       
tcp        0      0 0.0.0.0:993                 0.0.0.0:*                   LISTEN      5445/cyrus-master   
tcp        0      0 0.0.0.0:995                 0.0.0.0:*                   LISTEN      5445/cyrus-master   
tcp        0      0 0.0.0.0:8200                0.0.0.0:*                   LISTEN      6405/minidlna       
tcp        0      0 0.0.0.0:30888               0.0.0.0:*                   LISTEN      6372/tvmobilisvcd   
tcp        0      0 0.0.0.0:3689                0.0.0.0:*                   LISTEN      6421/mt-daapd       
tcp        0      0 192.168.168.1:139           0.0.0.0:*                   LISTEN      5867/smbd           
tcp        0      0 192.168.222.90:139          0.0.0.0:*                   LISTEN      5867/smbd           
tcp        0      0 127.0.0.1:139               0.0.0.0:*                   LISTEN      5867/smbd           
tcp        0      0 0.0.0.0:587                 0.0.0.0:*                   LISTEN      5692/master         
tcp        0      0 0.0.0.0:11211               0.0.0.0:*                   LISTEN      3783/memcached      
tcp        0      0 0.0.0.0:9101                0.0.0.0:*                   LISTEN      6143/bacula-dir     
tcp        0      0 127.0.0.1:5901              0.0.0.0:*                   LISTEN      5999/Xvnc           
tcp        0      0 0.0.0.0:9102                0.0.0.0:*                   LISTEN      5853/bacula-fd      
tcp        0      0 0.0.0.0:110                 0.0.0.0:*                   LISTEN      5445/cyrus-master   
tcp        0      0 0.0.0.0:9103                0.0.0.0:*                   LISTEN      5787/bacula-sd      
tcp        0      0 127.0.0.1:783               0.0.0.0:*                   LISTEN      5535/spamd.pid      
tcp        0      0 0.0.0.0:143                 0.0.0.0:*                   LISTEN      5445/cyrus-master   
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      2721/portmap        
tcp        0      0 0.0.0.0:10000               0.0.0.0:*                   LISTEN      6509/perl           
tcp        0      0 127.0.0.1:2000              0.0.0.0:*                   LISTEN      5445/cyrus-master   
tcp        0      0 192.168.168.1:2000          0.0.0.0:*                   LISTEN      5445/cyrus-master   
tcp        0      0 0.0.0.0:6001                0.0.0.0:*                   LISTEN      5999/Xvnc           
tcp        0      0 0.0.0.0:4242                0.0.0.0:*                   LISTEN      3771/java           
tcp        0      0 127.0.0.1:4243              0.0.0.0:*                   LISTEN      3771/java           
tcp        0      0 192.168.222.90:53           0.0.0.0:*                   LISTEN      2697/named          
tcp        0      0 172.16.99.1:53              0.0.0.0:*                   LISTEN      2697/named          
tcp        0      0 172.16.20.1:53              0.0.0.0:*                   LISTEN      2697/named          
tcp        0      0 0.0.0.0:21                  0.0.0.0:*                   LISTEN      3834/xinetd         
tcp        0      0 68.106.255.123:53           0.0.0.0:*                   LISTEN      2697/named          
tcp        0      0 10.0.0.1:53                 0.0.0.0:*                   LISTEN      2697/named          
tcp        0      0 192.168.168.1:53            0.0.0.0:*                   LISTEN      2697/named          
tcp        0      0 127.0.0.1:53                0.0.0.0:*                   LISTEN      2697/named          
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      3803/sshd           
tcp        0      0 0.0.0.0:631                 0.0.0.0:*                   LISTEN      3815/cupsd          
tcp        0      0 0.0.0.0:1400                0.0.0.0:*                   LISTEN      5763/xbmsd          
tcp        0      0 127.0.0.1:953               0.0.0.0:*                   LISTEN      2697/named          
tcp        0      0 127.0.0.1:6010              0.0.0.0:*                   LISTEN      6544/sshd           
tcp        0      0 192.168.168.1:445           0.0.0.0:*                   LISTEN      5867/smbd           
tcp        0      0 192.168.222.90:445          0.0.0.0:*                   LISTEN      5867/smbd           
tcp        0      0 127.0.0.1:445               0.0.0.0:*                   LISTEN      5867/smbd           
tcp        0      0 0.0.0.0:2525                0.0.0.0:*                   LISTEN      5692/master         
tcp        0      0 192.168.168.1:993           192.168.168.55:53590        ESTABLISHED 27379/imapd         
tcp        0      0 192.168.168.1:22            192.168.168.55:49841        ESTABLISHED 6542/sshd           
tcp        0      0 192.168.168.1:139           192.168.168.55:49822        ESTABLISHED 5936/smbd           
tcp        0    330 192.168.168.1:40187         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    330 192.168.168.1:40218         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    330 192.168.168.1:40239         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    330 192.168.168.1:40238         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    330 192.168.168.1:40237         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    330 192.168.168.1:40236         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    330 192.168.168.1:40235         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    330 192.168.168.1:40234         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    330 192.168.168.1:40233         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0    329 192.168.168.1:40241         192.168.168.137:8888        ESTABLISHED 6372/tvmobilisvcd   
tcp        0    330 192.168.168.1:40240         192.168.168.137:8888        FIN_WAIT1   -                   
tcp        0      0 68.106.255.123:4242         98.165.173.1:55617          ESTABLISHED 3771/java           
tcp        0      0 68.106.255.123:993          108.121.115.246:40240       ESTABLISHED 6825/imapd          
tcp        0      0 192.168.168.1:45450         192.168.168.8:1780          TIME_WAIT   -                   
tcp        0      0 192.168.168.1:45448         192.168.168.8:1780          TIME_WAIT   -                   
tcp        0      0 192.168.168.1:45446         192.168.168.8:1780          TIME_WAIT   -                   
tcp        0      0 192.168.168.1:45444         192.168.168.8:1780          TIME_WAIT   -                   
tcp        0      0 68.106.255.123:993          108.121.115.246:49297       ESTABLISHED 6805/imapd          
tcp        0      0 68.106.255.123:59930        209.208.241.80:443          ESTABLISHED 3771/java           
tcp        0      0 :::993                      :::*                        LISTEN      5445/cyrus-master   
tcp        0      0 :::995                      :::*                        LISTEN      5445/cyrus-master   
tcp        0      0 :::3306                     :::*                        LISTEN      4415/mysqld         
tcp        0      0 :::587                      :::*                        LISTEN      5692/master         
tcp        0      0 :::11211                    :::*                        LISTEN      3783/memcached      
tcp        0      0 :::110                      :::*                        LISTEN      5445/cyrus-master   
tcp        0      0 :::143                      :::*                        LISTEN      5445/cyrus-master   
tcp        0      0 :::80                       :::*                        LISTEN      5737/httpd          
tcp        0      0 :::6001                     :::*                        LISTEN      5999/Xvnc           
tcp        0      0 :::22                       :::*                        LISTEN      3803/sshd           
tcp        0      0 :::631                      :::*                        LISTEN      3815/cupsd          
tcp        0      0 ::1:6010                    :::*                        LISTEN      6544/sshd           
tcp        0      0 :::443                      :::*                        LISTEN      5737/httpd          
tcp        0      0 :::1115                     :::*                        LISTEN      5737/httpd          
tcp        0      0 :::2525                     :::*                        LISTEN      5692/master         
udp        0      0 192.168.168.1:137           0.0.0.0:*                               5870/nmbd           
udp        0      0 192.168.222.90:137          0.0.0.0:*                               5870/nmbd           
udp        0      0 0.0.0.0:137                 0.0.0.0:*                               5870/nmbd           
udp        0      0 192.168.168.1:138           0.0.0.0:*                               5870/nmbd           
udp        0      0 192.168.222.90:138          0.0.0.0:*                               5870/nmbd           
udp        0      0 0.0.0.0:138                 0.0.0.0:*                               5870/nmbd           
udp        0      0 0.0.0.0:2190                0.0.0.0:*                               6405/minidlna       
udp        0      0 0.0.0.0:10000               0.0.0.0:*                               6509/perl           
udp        0      0 0.0.0.0:34323               0.0.0.0:*                               6233/avahi-daemon   
udp        0      0 0.0.0.0:53160               0.0.0.0:*                               5514/openvpn        
udp        0      0 0.0.0.0:1194                0.0.0.0:*                               5510/openvpn        
udp        0      0 192.168.222.90:53           0.0.0.0:*                               2697/named          
udp        0      0 172.16.99.1:53              0.0.0.0:*                               2697/named          
udp        0      0 172.16.20.1:53              0.0.0.0:*                               2697/named          
udp        0      0 0.0.0.0:40501               0.0.0.0:*                               6372/tvmobilisvcd   
udp        0      0 0.0.0.0:50869               0.0.0.0:*                               6372/tvmobilisvcd   
udp        0      0 68.106.255.123:53           0.0.0.0:*                               2697/named          
udp        0      0 10.0.0.1:53                 0.0.0.0:*                               2697/named          
udp        0      0 192.168.168.1:53            0.0.0.0:*                               2697/named          
udp        0      0 127.0.0.1:53                0.0.0.0:*                               2697/named          
udp        0      0 0.0.0.0:67                  0.0.0.0:*                               5476/dhcpd          
udp        0      0 0.0.0.0:56260               0.0.0.0:*                               6372/tvmobilisvcd   
udp        0      0 0.0.0.0:68                  0.0.0.0:*                               2564/dhclient       
udp        0      0 0.0.0.0:11211               0.0.0.0:*                               3783/memcached      
udp        0      0 0.0.0.0:44505               0.0.0.0:*                               6372/tvmobilisvcd   
udp        0      0 192.168.168.1:59491         0.0.0.0:*                               6405/minidlna       
udp        0      0 0.0.0.0:5353                0.0.0.0:*                               6233/avahi-daemon   
udp        0      0 0.0.0.0:1900                0.0.0.0:*                               6372/tvmobilisvcd   
udp        0      0 0.0.0.0:1900                0.0.0.0:*                               6372/tvmobilisvcd   
udp        0      0 0.0.0.0:1900                0.0.0.0:*                               6372/tvmobilisvcd   
udp        0      0 0.0.0.0:1900                0.0.0.0:*                               6372/tvmobilisvcd   
udp        0      0 0.0.0.0:1900                0.0.0.0:*                               6405/minidlna       
udp        0      0 0.0.0.0:111                 0.0.0.0:*                               2721/portmap        
udp        0      0 0.0.0.0:631                 0.0.0.0:*                               3815/cupsd          
udp        0      0 0.0.0.0:1400                0.0.0.0:*                               5763/xbmsd          
udp        0      0 172.16.20.1:123             0.0.0.0:*                               3851/ntpd           
udp        0      0 68.106.255.123:123          0.0.0.0:*                               3851/ntpd           
udp        0      0 10.0.0.1:123                0.0.0.0:*                               3851/ntpd           
udp        0      0 192.168.168.1:123           0.0.0.0:*                               3851/ntpd           
udp        0      0 127.0.0.1:123               0.0.0.0:*                               3851/ntpd           
udp        0      0 0.0.0.0:123                 0.0.0.0:*                               3851/ntpd           
udp        0      0 :::35864                    :::*                                    6233/avahi-daemon   
udp        0      0 :::11211                    :::*                                    3783/memcached      
udp        0      0 :::5353                     :::*                                    6233/avahi-daemon   
udp        0      0 fe80::20f:b5ff:fef5:fa71:123 :::*                                    3851/ntpd           
udp        0      0 fe80::20f:b5ff:fef5:f9ac:123 :::*                                    3851/ntpd           
udp        0      0 ::1:123                     :::*                                    3851/ntpd           
udp        0      0 fe80::250:56ff:fec0:8:123   :::*                                    3851/ntpd           
udp        0      0 fe80::226:18ff:fe78:3c1f:123 :::*                                    3851/ntpd           
udp        0      0 :::123                      :::*                                    3851/ntpd           

Traffic Control

Device eth0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 188893650 bytes 456170 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth1:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 2036232 bytes 15572 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth2:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 42585607 bytes 190537 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device vmnet8:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 468 bytes 6 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device tun0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 652964 bytes 1670 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device tap0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 474741 bytes 1907 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 



TC Filters

Device eth0:

Device eth1:

Device eth2:

Device vmnet8:

Device tun0:

Device tap0:

