API tools faq
paste
rdwatson

Untitled

rdwatson
Sep 8th, 2012
346
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 49.00 KB | None | 0 0
raw download clone embed print report
  1. Shorewall 4.4.26.1 Dump at server - Sat Sep 8 16:40:45 PDT 2012
  2.  
  3. Counters reset Sat Sep 8 16:36:13 PDT 2012
  4.  
  5. Chain INPUT (policy DROP 0 packets, 0 bytes)
  6. pkts bytes target prot opt in out source destination
  7. 646 86173 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  8. 327 70342 net2fw all -- eth0 * 0.0.0.0/0 0.0.0.0/0
  9. 871 70491 loc2fw all -- eth1 * 0.0.0.0/0 0.0.0.0/0
  10. 210 23514 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  11. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  12. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:INPUT:REJECT:"
  13. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  14.  
  15. Chain FORWARD (policy DROP 0 packets, 0 bytes)
  16. pkts bytes target prot opt in out source destination
  17. 6 312 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcpflags: 0x06/0x02 TCPMSS clamp to PMTU
  18. 158 18603 net2loc all -- eth0 eth1 0.0.0.0/0 0.0.0.0/0
  19. 160 50895 loc2net all -- eth1 eth0 0.0.0.0/0 0.0.0.0/0
  20. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  21. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:FORWARD:REJECT:"
  22. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  23.  
  24. Chain OUTPUT (policy DROP 0 packets, 0 bytes)
  25. pkts bytes target prot opt in out source destination
  26. 157 74672 fw2net all -- * eth0 0.0.0.0/0 0.0.0.0/0
  27. 684 338K fw2loc all -- * eth1 0.0.0.0/0 0.0.0.0/0
  28. 213 24000 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
  29. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  30. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:OUTPUT:REJECT:"
  31. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  32.  
  33. Chain %Invalid (2 references)
  34. pkts bytes target prot opt in out source destination
  35. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  36.  
  37. Chain Broadcast (2 references)
  38. pkts bytes target prot opt in out source destination
  39. 33 46599 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
  40. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
  41. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
  42. 0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/4
  43.  
  44. Chain Drop (2 references)
  45. pkts bytes target prot opt in out source destination
  46. 87 49407 all -- * * 0.0.0.0/0 0.0.0.0/0
  47. 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 /* Auth */
  48. 87 49407 Broadcast all -- * * 0.0.0.0/0 0.0.0.0/0
  49. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 code 4 /* Needed ICMP types */
  50. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 /* Needed ICMP types */
  51. 54 2808 Invalid all -- * * 0.0.0.0/0 0.0.0.0/0
  52. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  53. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  54. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  55. 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  56. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 /* UPnP */
  57. 54 2808 NotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
  58. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 /* Late DNS Replies */
  59.  
  60. Chain Invalid (2 references)
  61. pkts bytes target prot opt in out source destination
  62. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  63.  
  64. Chain NotSyn (2 references)
  65. pkts bytes target prot opt in out source destination
  66. 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcpflags:! 0x17/0x02
  67.  
  68. Chain Reject (6 references)
  69. pkts bytes target prot opt in out source destination
  70. 335 20001 all -- * * 0.0.0.0/0 0.0.0.0/0
  71. 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 /* Auth */
  72. 335 20001 Broadcast all -- * * 0.0.0.0/0 0.0.0.0/0
  73. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 code 4 /* Needed ICMP types */
  74. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 /* Needed ICMP types */
  75. 335 20001 Invalid all -- * * 0.0.0.0/0 0.0.0.0/0
  76. 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  77. 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  78. 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  79. 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  80. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 /* UPnP */
  81. 108 5472 NotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
  82. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 /* Late DNS Replies */
  83.  
  84. Chain dynamic (5 references)
  85. pkts bytes target prot opt in out source destination
  86.  
  87. Chain fw2loc (1 references)
  88. pkts bytes target prot opt in out source destination
  89. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68
  90. 680 338K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  91. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 code 4 /* Needed ICMP types */
  92. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 /* Needed ICMP types */
  93. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  94. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  95. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  96. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  97. 4 304 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 /* NTP */
  98. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1935 /* RTMP */
  99. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9418 /* Git */
  100. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
  101. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  102. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:fw2loc:REJECT:"
  103. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  104.  
  105. Chain fw2net (1 references)
  106. pkts bytes target prot opt in out source destination
  107. 149 74094 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  108. 1 60 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
  109. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 code 4 /* Needed ICMP types */
  110. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 /* Needed ICMP types */
  111. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  112. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  113. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  114. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  115. 6 456 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 /* NTP */
  116. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1935 /* RTMP */
  117. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9418 /* Git */
  118. 1 62 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 /* DNS */
  119. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 /* DNS */
  120. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
  121. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  122. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:fw2net:REJECT:"
  123. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  124.  
  125. Chain loc2fw (1 references)
  126. pkts bytes target prot opt in out source destination
  127. 449 29888 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  128. 449 29888 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  129. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68
  130. 509 43729 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
  131. 422 40603 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  132. 1 52 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 ctorigdstport 80
  133. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 code 4 /* Needed ICMP types */
  134. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 /* Needed ICMP types */
  135. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  136. 89 8491 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  137. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  138. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  139. 2 104 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 /* SSH */
  140. 4 304 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 /* NTP */
  141. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306 /* MySQL */
  142. 18 936 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10000 /* Webmin */
  143. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1935 /* RTMP */
  144. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9418 /* Git */
  145. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 /* SSH */
  146. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 /* Ping */
  147. 335 20001 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  148. 335 20001 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:loc2fw:REJECT:"
  149. 335 20001 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  150.  
  151. Chain loc2net (1 references)
  152. pkts bytes target prot opt in out source destination
  153. 56 11133 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  154. 56 11133 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  155. 85 32354 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
  156. 104 39762 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  157. 56 11133 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  158.  
  159. Chain logdrop (0 references)
  160. pkts bytes target prot opt in out source destination
  161. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  162.  
  163. Chain logflags (5 references)
  164. pkts bytes target prot opt in out source destination
  165. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 4 level 6 prefix "Shorewall:logflags:DROP:"
  166. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  167.  
  168. Chain logreject (0 references)
  169. pkts bytes target prot opt in out source destination
  170. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
  171.  
  172. Chain net2fw (1 references)
  173. pkts bytes target prot opt in out source destination
  174. 179 55139 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  175. 179 55139 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  176. 199 17418 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
  177. 148 15203 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  178. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 code 4 /* Needed ICMP types */
  179. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 /* Needed ICMP types */
  180. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  181. 47 3968 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  182. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  183. 4 208 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  184. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 /* SSH */
  185. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 /* NTP */
  186. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306 /* MySQL */
  187. 5 260 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10000 /* Webmin */
  188. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1935 /* RTMP */
  189. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9418 /* Git */
  190. 123 50703 %Invalid all -- * * 0.0.0.0/0 0.0.0.0/0
  191. 36 1296 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 /* Ping */
  192. 87 49407 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  193. 54 2808 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:net2fw:DROP:"
  194. 54 2808 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  195.  
  196. Chain net2loc (1 references)
  197. pkts bytes target prot opt in out source destination
  198. 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  199. 0 0 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  200. 95 14100 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
  201. 158 18603 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  202. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 code 4 /* Needed ICMP types */
  203. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 /* Needed ICMP types */
  204. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  205. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  206. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  207. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  208. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 /* NTP */
  209. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1935 /* RTMP */
  210. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9418 /* Git */
  211. 0 0 %Invalid all -- * * 0.0.0.0/0 0.0.0.0/0
  212. 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  213. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:net2loc:DROP:"
  214. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  215.  
  216. Chain reject (13 references)
  217. pkts bytes target prot opt in out source destination
  218. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match src-type BROADCAST
  219. 0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0
  220. 0 0 DROP 2 -- * * 0.0.0.0/0 0.0.0.0/0
  221. 108 5472 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
  222. 227 14529 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  223. 0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable
  224. 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  225.  
  226. Chain shorewall (0 references)
  227. pkts bytes target prot opt in out source destination
  228.  
  229. Chain smurflog (2 references)
  230. pkts bytes target prot opt in out source destination
  231. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Shorewall:smurfs:DROP:"
  232. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  233.  
  234. Chain smurfs (4 references)
  235. pkts bytes target prot opt in out source destination
  236. 0 0 RETURN all -- * * 0.0.0.0 0.0.0.0/0
  237. 0 0 smurflog all -- * * 0.0.0.0/0 0.0.0.0/0 [goto] ADDRTYPE match src-type BROADCAST
  238. 0 0 smurflog all -- * * 224.0.0.0/4 0.0.0.0/0 [goto]
  239.  
  240. Chain tcpflags (4 references)
  241. pkts bytes target prot opt in out source destination
  242. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcpflags: 0x3F/0x29
  243. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcpflags: 0x3F/0x00
  244. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcpflags: 0x06/0x06
  245. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcpflags: 0x03/0x03
  246. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp spt:0flags: 0x17/0x02
  247.  
  248. Log (/var/log/shorewall/xmessages)
  249.  
  250.  
  251. NAT Table
  252.  
  253. Chain PREROUTING (policy ACCEPT 646 packets, 94468 bytes)
  254. pkts bytes target prot opt in out source destination
  255. 647 94520 dnat all -- * * 0.0.0.0/0 0.0.0.0/0
  256.  
  257. Chain INPUT (policy ACCEPT 40 packets, 2815 bytes)
  258. pkts bytes target prot opt in out source destination
  259.  
  260. Chain OUTPUT (policy ACCEPT 30 packets, 2028 bytes)
  261. pkts bytes target prot opt in out source destination
  262.  
  263. Chain POSTROUTING (policy ACCEPT 130 packets, 5770 bytes)
  264. pkts bytes target prot opt in out source destination
  265. 50 9573 eth0_masq all -- * eth0 0.0.0.0/0 0.0.0.0/0
  266.  
  267. Chain dnat (1 references)
  268. pkts bytes target prot opt in out source destination
  269. 402 30724 loc_dnat all -- eth1 * 0.0.0.0/0 0.0.0.0/0
  270.  
  271. Chain eth0_masq (1 references)
  272. pkts bytes target prot opt in out source destination
  273. 0 0 MASQUERADE all -- * * 10.0.0.0/8 0.0.0.0/0
  274. 0 0 MASQUERADE all -- * * 169.254.0.0/16 0.0.0.0/0
  275. 0 0 MASQUERADE all -- * * 172.16.0.0/12 0.0.0.0/0
  276. 50 9573 MASQUERADE all -- * * 192.168.0.0/16 0.0.0.0/0
  277.  
  278. Chain loc_dnat (1 references)
  279. pkts bytes target prot opt in out source destination
  280. 1 52 REDIRECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 redir ports 8080
  281.  
  282. Mangle Table
  283.  
  284. Chain PREROUTING (policy ACCEPT 272 packets, 44374 bytes)
  285. pkts bytes target prot opt in out source destination
  286. 1835 246K tcpre all -- * * 0.0.0.0/0 0.0.0.0/0
  287.  
  288. Chain INPUT (policy ACCEPT 208 packets, 23289 bytes)
  289. pkts bytes target prot opt in out source destination
  290. 1410 164K tcin all -- * * 0.0.0.0/0 0.0.0.0/0
  291.  
  292. Chain FORWARD (policy ACCEPT 32 packets, 13353 bytes)
  293. pkts bytes target prot opt in out source destination
  294. 318 69498 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 MARK and 0xffffff00
  295. 318 69498 tcfor all -- * * 0.0.0.0/0 0.0.0.0/0
  296.  
  297. Chain OUTPUT (policy ACCEPT 165 packets, 129K bytes)
  298. pkts bytes target prot opt in out source destination
  299. 1058 442K tcout all -- * * 0.0.0.0/0 0.0.0.0/0
  300.  
  301. Chain POSTROUTING (policy ACCEPT 198 packets, 143K bytes)
  302. pkts bytes target prot opt in out source destination
  303. 1380 511K tcpost all -- * * 0.0.0.0/0 0.0.0.0/0
  304.  
  305. Chain tcfor (1 references)
  306. pkts bytes target prot opt in out source destination
  307.  
  308. Chain tcin (1 references)
  309. pkts bytes target prot opt in out source destination
  310.  
  311. Chain tcout (1 references)
  312. pkts bytes target prot opt in out source destination
  313.  
  314. Chain tcpost (1 references)
  315. pkts bytes target prot opt in out source destination
  316.  
  317. Chain tcpre (1 references)
  318. pkts bytes target prot opt in out source destination
  319.  
  320. Raw Table
  321.  
  322. Chain PREROUTING (policy ACCEPT 1837 packets, 246K bytes)
  323. pkts bytes target prot opt in out source destination
  324.  
  325. Chain OUTPUT (policy ACCEPT 1062 packets, 447K bytes)
  326. pkts bytes target prot opt in out source destination
  327.  
  328. Conntrack Table (24 out of 65536)
  329.  
  330. tcp 6 431973 ESTABLISHED src=192.168.2.52 dst=192.168.2.1 sport=50861 dport=22 src=192.168.2.1 dst=192.168.2.52 sport=22 dport=50861 [ASSURED] mark=0 use=2
  331. tcp 6 431964 ESTABLISHED src=192.168.2.52 dst=74.125.224.214 sport=50835 dport=443 src=74.125.224.214 dst=192.168.1.2 sport=443 dport=50835 [ASSURED] mark=0 use=2
  332. tcp 6 431955 ESTABLISHED src=192.168.2.1 dst=192.168.2.1 sport=37709 dport=389 src=192.168.2.1 dst=192.168.2.1 sport=389 dport=37709 [ASSURED] mark=0 use=2
  333. tcp 6 428606 ESTABLISHED src=192.168.2.52 dst=192.168.2.1 sport=49872 dport=22 src=192.168.2.1 dst=192.168.2.52 sport=22 dport=49872 [ASSURED] mark=0 use=2
  334. tcp 6 428622 ESTABLISHED src=192.168.2.52 dst=192.168.2.1 sport=49838 dport=22 src=192.168.2.1 dst=192.168.2.52 sport=22 dport=49838 [ASSURED] mark=0 use=2
  335. udp 17 10 src=192.168.2.1 dst=192.168.2.255 sport=123 dport=123 [UNREPLIED] src=192.168.2.255 dst=192.168.2.1 sport=123 dport=123 mark=0 use=2
  336. tcp 6 431999 ESTABLISHED src=192.168.2.52 dst=192.168.1.2 sport=50882 dport=10000 src=192.168.1.2 dst=192.168.2.52 sport=10000 dport=50882 [ASSURED] mark=0 use=2
  337. udp 17 27 src=127.0.0.1 dst=127.0.0.1 sport=45094 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=45094 mark=0 use=2
  338. tcp 6 431949 ESTABLISHED src=192.168.2.1 dst=192.168.2.1 sport=37706 dport=389 src=192.168.2.1 dst=192.168.2.1 sport=389 dport=37706 [ASSURED] mark=0 use=2
  339. udp 17 122 src=192.168.1.2 dst=91.189.94.4 sport=123 dport=123 src=91.189.94.4 dst=192.168.1.2 sport=123 dport=123 [ASSURED] mark=0 use=2
  340. unknown 41 325 src=192.168.2.52 dst=64.74.223.44 [UNREPLIED] src=64.74.223.44 dst=192.168.1.2 mark=0 use=2
  341. tcp 6 431997 ESTABLISHED src=192.168.2.52 dst=192.168.2.1 sport=50854 dport=22 src=192.168.2.1 dst=192.168.2.52 sport=22 dport=50854 [ASSURED] mark=0 use=2
  342. tcp 6 299 ESTABLISHED src=192.168.2.52 dst=192.168.1.2 sport=50883 dport=10000 src=192.168.1.2 dst=192.168.2.52 sport=10000 dport=50883 [ASSURED] mark=0 use=2
  343. tcp 6 431955 ESTABLISHED src=192.168.2.1 dst=192.168.2.1 sport=37708 dport=389 src=192.168.2.1 dst=192.168.2.1 sport=389 dport=37708 [ASSURED] mark=0 use=2
  344. tcp 6 431949 ESTABLISHED src=192.168.2.1 dst=192.168.2.1 sport=37705 dport=389 src=192.168.2.1 dst=192.168.2.1 sport=389 dport=37705 [ASSURED] mark=0 use=2
  345. udp 17 13 src=192.168.1.2 dst=184.22.97.162 sport=123 dport=123 src=184.22.97.162 dst=192.168.1.2 sport=123 dport=123 mark=0 use=2
  346. tcp 6 431984 ESTABLISHED src=192.168.2.52 dst=157.56.52.26 sport=50838 dport=40015 src=157.56.52.26 dst=192.168.1.2 sport=40015 dport=50838 [ASSURED] mark=0 use=2
  347. udp 17 7 src=127.0.0.1 dst=127.0.0.1 sport=49035 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=49035 mark=0 use=2
  348. udp 17 158 src=192.168.2.52 dst=192.168.2.1 sport=137 dport=137 src=192.168.2.1 dst=192.168.2.52 sport=137 dport=137 [ASSURED] mark=0 use=2
  349. udp 17 4 src=192.168.1.2 dst=173.230.144.79 sport=123 dport=123 src=173.230.144.79 dst=192.168.1.2 sport=123 dport=123 mark=0 use=2
  350. udp 17 8 src=127.0.0.1 dst=127.0.0.1 sport=44913 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=44913 mark=0 use=2
  351. udp 17 21 src=192.168.2.52 dst=192.168.2.255 sport=137 dport=137 [UNREPLIED] src=192.168.2.255 dst=192.168.2.52 sport=137 dport=137 mark=0 use=2
  352. tcp 6 431949 ESTABLISHED src=192.168.2.1 dst=192.168.2.1 sport=37707 dport=389 src=192.168.2.1 dst=192.168.2.1 sport=389 dport=37707 [ASSURED] mark=0 use=2
  353. udp 17 101 src=192.168.1.2 dst=69.64.72.238 sport=123 dport=123 src=69.64.72.238 dst=192.168.1.2 sport=123 dport=123 [ASSURED] mark=0 use=2
  354.  
  355. IP Configuration
  356.  
  357. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
  358. inet 127.0.0.1/8 scope host lo
  359. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  360. inet 192.168.1.2/24 brd 192.168.1.255 scope global eth0
  361. 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  362. inet 192.168.2.1/24 brd 192.168.2.255 scope global eth1
  363.  
  364. IP Stats
  365.  
  366. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
  367. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  368. RX: bytes packets errors dropped overrun mcast
  369. 3321519 14789 0 0 0 0
  370. TX: bytes packets errors dropped carrier collsns
  371. 3321519 14789 0 0 0 0
  372. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  373. link/ether 00:25:90:7b:4b:0a brd ff:ff:ff:ff:ff:ff
  374. RX: bytes packets errors dropped overrun mcast
  375. 29077041 37678 0 0 0 6345
  376. TX: bytes packets errors dropped carrier collsns
  377. 4036438 15720 0 0 0 0
  378. 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  379. link/ether 00:25:90:7b:4b:0b brd ff:ff:ff:ff:ff:ff
  380. RX: bytes packets errors dropped overrun mcast
  381. 2373994 13923 1 0 0 0
  382. TX: bytes packets errors dropped carrier collsns
  383. 8911864 15401 0 0 0 0
  384.  
  385. Per-IP Counters
  386.  
  387. iptaccount is not installed
  388.  
  389. /proc
  390.  
  391. /proc/version = Linux version 3.2.0-30-generic (buildd@batsu) (gcc version 4.6.3 (Ubuntu/Linaro 4.6.3-1ubuntu5) ) #48-Ubuntu SMP Fri Aug 24 16:52:48 UTC 2012
  392. /proc/sys/net/ipv4/ip_forward = 1
  393. /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
  394. /proc/sys/net/ipv4/conf/all/proxy_arp = 0
  395. /proc/sys/net/ipv4/conf/all/arp_filter = 0
  396. /proc/sys/net/ipv4/conf/all/arp_ignore = 0
  397. /proc/sys/net/ipv4/conf/all/rp_filter = 0
  398. /proc/sys/net/ipv4/conf/all/log_martians = 0
  399. /proc/sys/net/ipv4/conf/default/proxy_arp = 0
  400. /proc/sys/net/ipv4/conf/default/arp_filter = 0
  401. /proc/sys/net/ipv4/conf/default/arp_ignore = 0
  402. /proc/sys/net/ipv4/conf/default/rp_filter = 0
  403. /proc/sys/net/ipv4/conf/default/log_martians = 1
  404. /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
  405. /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
  406. /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
  407. /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
  408. /proc/sys/net/ipv4/conf/eth0/log_martians = 1
  409. /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
  410. /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
  411. /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
  412. /proc/sys/net/ipv4/conf/eth1/rp_filter = 1
  413. /proc/sys/net/ipv4/conf/eth1/log_martians = 1
  414. /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
  415. /proc/sys/net/ipv4/conf/lo/arp_filter = 0
  416. /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
  417. /proc/sys/net/ipv4/conf/lo/rp_filter = 0
  418. /proc/sys/net/ipv4/conf/lo/log_martians = 1
  419.  
  420. Routing Rules
  421.  
  422. 0: from all lookup local
  423. 32766: from all lookup main
  424. 32767: from all lookup default
  425.  
  426. Table :
  427.  
  428. Command line is not complete. Try option "help"
  429.  
  430. ARP
  431.  
  432. ? (192.168.1.146) at 64:80:99:43:2f:d4 [ether] on eth0
  433. ? (192.168.1.1) at 00:26:62:6a:20:a2 [ether] on eth0
  434. ? (192.168.1.14) at <incomplete> on eth0
  435. ? (192.168.2.52) at d0:67:e5:3c:48:79 [ether] on eth1
  436. ? (192.168.1.15) at 78:dd:08:c6:f4:8d [ether] on eth0
  437.  
  438. Modules
  439.  
  440. ip_tables 27473 4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
  441. ipt_LOG 12919 10
  442. ipt_MASQUERADE 12759 4
  443. ipt_REDIRECT 12549 1
  444. ipt_REJECT 12576 4
  445. iptable_filter 12810 1
  446. iptable_mangle 12734 1
  447. iptable_nat 13229 1
  448. iptable_raw 12678 0
  449. nf_conntrack 81926 27 ipt_MASQUERADE,iptable_nat,xt_conntrack,nf_nat_tftp,nf_nat_snmp_basic,nf_conntrack_snmp,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_nat,nf_conntrack_ipv4,nf_conntrack_amanda,nf_conntrack_sane,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_broadcast,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp
  450. nf_conntrack_amanda 13084 1 nf_nat_amanda
  451. nf_conntrack_broadcast 12589 2 nf_conntrack_snmp,nf_conntrack_netbios_ns
  452. nf_conntrack_ftp 13452 1 nf_nat_ftp
  453. nf_conntrack_h323 62913 1 nf_nat_h323
  454. nf_conntrack_ipv4 19716 21 iptable_nat,nf_nat
  455. nf_conntrack_irc 13383 1 nf_nat_irc
  456. nf_conntrack_netbios_ns 12665 0
  457. nf_conntrack_netlink 26609 0
  458. nf_conntrack_pptp 13830 1 nf_nat_pptp
  459. nf_conntrack_proto_gre 13656 1 nf_conntrack_pptp
  460. nf_conntrack_proto_sctp 13295 0
  461. nf_conntrack_sane 12856 0
  462. nf_conntrack_sip 29730 1 nf_nat_sip
  463. nf_conntrack_snmp 12857 1 nf_nat_snmp_basic
  464. nf_conntrack_tftp 12953 1 nf_nat_tftp
  465. nf_defrag_ipv4 12729 1 nf_conntrack_ipv4
  466. nf_nat 25891 11 ipt_REDIRECT,ipt_MASQUERADE,iptable_nat,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda
  467. nf_nat_amanda 12491 0
  468. nf_nat_ftp 12704 0
  469. nf_nat_h323 17002 0
  470. nf_nat_irc 12643 0
  471. nf_nat_pptp 12629 0
  472. nf_nat_proto_gre 12767 1 nf_nat_pptp
  473. nf_nat_sip 17086 0
  474. nf_nat_snmp_basic 17599 0
  475. nf_nat_tftp 12489 0
  476. xt_TCPMSS 12707 1
  477. xt_addrtype 12713 5
  478. xt_comment 12504 74
  479. xt_conntrack 12760 18
  480. xt_mark 12563 1
  481. xt_multiport 12597 14
  482. xt_tcpudp 12603 56
  483.  
  484. Shorewall has detected the following iptables/netfilter capabilities:
  485. NAT: Available
  486. Packet Mangling: Available
  487. Multi-port Match: Available
  488. Extended Multi-port Match: Available
  489. Connection Tracking Match: Available
  490. Extended Connection Tracking Match Support: Available
  491. Packet Type Match: Available
  492. Policy Match: Available
  493. Physdev Match: Available
  494. Physdev-is-bridged Support: Available
  495. Packet length Match: Available
  496. IP range Match: Available
  497. Recent Match: Available
  498. Owner Match: Available
  499. CONNMARK Target: Available
  500. Extended CONNMARK Target: Available
  501. Connmark Match: Available
  502. Extended Connmark Match: Available
  503. Raw Table: Available
  504. Rawpost Table: Not available
  505. IPP2P Match: Not available
  506. CLASSIFY Target: Available
  507. Extended REJECT: Available
  508. Repeat match: Available
  509. MARK Target: Available
  510. Extended MARK Target: Available
  511. Extended MARK Target 2: Available
  512. Mangle FORWARD Chain: Available
  513. Comments: Available
  514. Address Type Match: Available
  515. TCPMSS Match: Available
  516. Hashlimit Match: Available
  517. NFQUEUE Target: Available
  518. Realm Match: Available
  519. Helper Match: Available
  520. Connlimit Match: Available
  521. Time Match: Available
  522. Goto Support: Available
  523. LOGMARK Target: Not available
  524. IPMARK Target: Not available
  525. LOG Target: Available
  526. ULOG Target: Available
  527. NFLOG Target: Available
  528. Persistent SNAT: Available
  529. TPROXY Target: Available
  530. FLOW Classifier: Available
  531. fwmark route mask: Available
  532. Mark in any table: Available
  533. Header Match: Not available
  534. ACCOUNT Target: Not available
  535. AUDIT Target: Available
  536. ipset V5: Not available
  537. Condition Match: Not available
  538. iptables -S: Available
  539. Basic Filter: Available
  540.  
  541. Active Internet connections (servers and established)
  542. Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
  543. tcp 0 0 0.0.0.0:6666 0.0.0.0:* LISTEN 2071/crtmpserver
  544. tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 1457/mysqld
  545. tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 1101/smbd
  546. tcp 0 0 0.0.0.0:749 0.0.0.0:* LISTEN 1531/kadmind
  547. tcp 0 0 0.0.0.0:9999 0.0.0.0:* LISTEN 2071/crtmpserver
  548. tcp 0 0 0.0.0.0:1935 0.0.0.0:* LISTEN 2071/crtmpserver
  549. tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 612/rpcbind
  550. tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN 2406/perl
  551. tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 2338/apache2
  552. tcp 0 0 192.168.2.1:8080 0.0.0.0:* LISTEN 2100/dansguardian
  553. tcp 0 0 0.0.0.0:464 0.0.0.0:* LISTEN 1531/kadmind
  554. tcp 0 0 0.0.0.0:56625 0.0.0.0:* LISTEN 2169/rpc.mountd
  555. tcp 0 0 0.0.0.0:8081 0.0.0.0:* LISTEN 2071/crtmpserver
  556. tcp 0 0 0.0.0.0:8082 0.0.0.0:* LISTEN 2071/crtmpserver
  557. tcp 0 0 0.0.0.0:50612 0.0.0.0:* LISTEN 2169/rpc.mountd
  558. tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 1446/dnsmasq
  559. tcp 0 0 192.168.2.1:53 0.0.0.0:* LISTEN 1446/dnsmasq
  560. tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1108/sshd
  561. tcp 0 0 0.0.0.0:47511 0.0.0.0:* LISTEN 1129/rpc.statd
  562. tcp 0 0 0.0.0.0:3128 0.0.0.0:* LISTEN 7635/squid3
  563. tcp 0 0 0.0.0.0:38521 0.0.0.0:* LISTEN 2169/rpc.mountd
  564. tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN 1101/smbd
  565. tcp 0 0 0.0.0.0:34718 0.0.0.0:* LISTEN -
  566. tcp 0 0 0.0.0.0:2049 0.0.0.0:* LISTEN -
  567. tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 1550/slapd
  568. tcp 0 0 192.168.2.1:389 192.168.2.1:37708 ESTABLISHED 1550/slapd
  569. tcp 0 0 192.168.2.1:37708 192.168.2.1:389 ESTABLISHED 2225/nslcd
  570. tcp 0 0 192.168.2.1:37706 192.168.2.1:389 ESTABLISHED 2225/nslcd
  571. tcp 0 0 192.168.2.1:389 192.168.2.1:37709 ESTABLISHED 1550/slapd
  572. tcp 0 0 192.168.2.1:37705 192.168.2.1:389 ESTABLISHED 2225/nslcd
  573. tcp 0 0 192.168.2.1:37709 192.168.2.1:389 ESTABLISHED 2225/nslcd
  574. tcp 0 0 192.168.2.1:22 192.168.2.52:50854 ESTABLISHED 9232/sshd: root@not
  575. tcp 0 0 192.168.2.1:389 192.168.2.1:37706 ESTABLISHED 1550/slapd
  576. tcp 0 0 192.168.1.2:10000 192.168.2.52:50882 ESTABLISHED 9824/perl
  577. tcp 0 0 192.168.2.1:22 192.168.2.52:50861 ESTABLISHED 9458/2
  578. tcp 0 1242 192.168.1.2:10000 192.168.2.52:50883 ESTABLISHED 9825/dump.cgi
  579. tcp 0 0 192.168.2.1:37707 192.168.2.1:389 ESTABLISHED 2225/nslcd
  580. tcp 0 0 192.168.2.1:389 192.168.2.1:37707 ESTABLISHED 1550/slapd
  581. tcp 0 0 192.168.2.1:22 192.168.2.52:49872 ESTABLISHED 3663/sshd: root@not
  582. tcp 0 0 192.168.2.1:389 192.168.2.1:37705 ESTABLISHED 1550/slapd
  583. tcp 0 0 192.168.2.1:22 192.168.2.52:49838 ESTABLISHED 3415/sshd: root@not
  584. tcp6 0 0 :::58312 :::* LISTEN -
  585. tcp6 0 0 :::52234 :::* LISTEN 2169/rpc.mountd
  586. tcp6 0 0 :::56171 :::* LISTEN 2169/rpc.mountd
  587. tcp6 0 0 :::34379 :::* LISTEN 1129/rpc.statd
  588. tcp6 0 0 :::749 :::* LISTEN 1531/kadmind
  589. tcp6 0 0 :::111 :::* LISTEN 612/rpcbind
  590. tcp6 0 0 :::464 :::* LISTEN 1531/kadmind
  591. tcp6 0 0 :::48241 :::* LISTEN 2169/rpc.mountd
  592. tcp6 0 0 ::1:53 :::* LISTEN 1446/dnsmasq
  593. tcp6 0 0 fe80::225:90ff:fe7b::53 :::* LISTEN 1446/dnsmasq
  594. tcp6 0 0 :::22 :::* LISTEN 1108/sshd
  595. tcp6 0 0 :::2049 :::* LISTEN -
  596. tcp6 0 0 :::389 :::* LISTEN 1550/slapd
  597. udp 0 0 127.0.0.1:53 0.0.0.0:* 1446/dnsmasq
  598. udp 0 0 192.168.2.1:53 0.0.0.0:* 1446/dnsmasq
  599. udp 0 0 0.0.0.0:67 0.0.0.0:* 1446/dnsmasq
  600. udp 0 0 0.0.0.0:88 0.0.0.0:* 1535/krb5kdc
  601. udp 0 0 0.0.0.0:111 0.0.0.0:* 612/rpcbind
  602. udp 0 0 192.168.2.1:123 0.0.0.0:* 2404/ntpd
  603. udp 0 0 192.168.1.2:123 0.0.0.0:* 2404/ntpd
  604. udp 0 0 127.0.0.1:123 0.0.0.0:* 2404/ntpd
  605. udp 0 0 0.0.0.0:123 0.0.0.0:* 2404/ntpd
  606. udp 0 0 192.168.1.255:137 0.0.0.0:* 1170/nmbd
  607. udp 0 0 192.168.1.2:137 0.0.0.0:* 1170/nmbd
  608. udp 0 0 192.168.2.255:137 0.0.0.0:* 1170/nmbd
  609. udp 0 0 192.168.2.1:137 0.0.0.0:* 1170/nmbd
  610. udp 0 0 0.0.0.0:137 0.0.0.0:* 1170/nmbd
  611. udp 0 0 192.168.1.255:138 0.0.0.0:* 1170/nmbd
  612. udp 0 0 192.168.1.2:138 0.0.0.0:* 1170/nmbd
  613. udp 0 0 192.168.2.255:138 0.0.0.0:* 1170/nmbd
  614. udp 0 0 192.168.2.1:138 0.0.0.0:* 1170/nmbd
  615. udp 0 0 0.0.0.0:138 0.0.0.0:* 1170/nmbd
  616. udp 0 0 0.0.0.0:464 0.0.0.0:* 1531/kadmind
  617. udp 0 0 0.0.0.0:750 0.0.0.0:* 1535/krb5kdc
  618. udp 0 0 0.0.0.0:785 0.0.0.0:* 612/rpcbind
  619. udp 0 0 127.0.0.1:881 0.0.0.0:* 1129/rpc.statd
  620. udp 0 0 0.0.0.0:2049 0.0.0.0:* -
  621. udp 0 0 0.0.0.0:51267 0.0.0.0:* 7635/squid3
  622. udp 0 0 0.0.0.0:35476 0.0.0.0:* -
  623. udp 0 0 0.0.0.0:54940 0.0.0.0:* 2169/rpc.mountd
  624. udp 0 0 0.0.0.0:58319 0.0.0.0:* 2169/rpc.mountd
  625. udp 0 0 0.0.0.0:58576 0.0.0.0:* 2169/rpc.mountd
  626. udp 0 0 0.0.0.0:10000 0.0.0.0:* 2406/perl
  627. udp 0 0 127.0.0.1:10001 0.0.0.0:* 2071/crtmpserver
  628. udp 0 0 127.0.0.1:10002 0.0.0.0:* 2071/crtmpserver
  629. udp 0 0 127.0.0.1:10003 0.0.0.0:* 2071/crtmpserver
  630. udp 0 0 127.0.0.1:10004 0.0.0.0:* 2071/crtmpserver
  631. udp 0 0 127.0.0.1:10005 0.0.0.0:* 2071/crtmpserver
  632. udp 0 0 127.0.0.1:10006 0.0.0.0:* 2071/crtmpserver
  633. udp 0 0 127.0.0.1:10007 0.0.0.0:* 2071/crtmpserver
  634. udp 0 0 127.0.0.1:10008 0.0.0.0:* 2071/crtmpserver
  635. udp 0 0 127.0.0.1:10011 0.0.0.0:* 2071/crtmpserver
  636. udp 0 0 127.0.0.1:10012 0.0.0.0:* 2071/crtmpserver
  637. udp 0 0 127.0.0.1:10013 0.0.0.0:* 2071/crtmpserver
  638. udp 0 0 127.0.0.1:10014 0.0.0.0:* 2071/crtmpserver
  639. udp 0 0 127.0.0.1:10015 0.0.0.0:* 2071/crtmpserver
  640. udp 0 0 127.0.0.1:10016 0.0.0.0:* 2071/crtmpserver
  641. udp 0 0 127.0.0.1:10017 0.0.0.0:* 2071/crtmpserver
  642. udp 0 0 127.0.0.1:10018 0.0.0.0:* 2071/crtmpserver
  643. udp 0 0 0.0.0.0:44129 0.0.0.0:* 1129/rpc.statd
  644. udp6 0 0 ::1:53 :::* 1446/dnsmasq
  645. udp6 0 0 fe80::225:90ff:fe7b::53 :::* 1446/dnsmasq
  646. udp6 0 0 fe80::225:90ff:fe7b::88 :::* 1535/krb5kdc
  647. udp6 0 0 fe80::225:90ff:fe7b::88 :::* 1535/krb5kdc
  648. udp6 0 0 :::111 :::* 612/rpcbind
  649. udp6 0 0 ::1:123 :::* 2404/ntpd
  650. udp6 0 0 fe80::225:90ff:fe7b:123 :::* 2404/ntpd
  651. udp6 0 0 fe80::225:90ff:fe7b:123 :::* 2404/ntpd
  652. udp6 0 0 :::123 :::* 2404/ntpd
  653. udp6 0 0 fe80::225:90ff:fe7b:464 :::* 1531/kadmind
  654. udp6 0 0 fe80::225:90ff:fe7b:464 :::* 1531/kadmind
  655. udp6 0 0 fe80::225:90ff:fe7b:750 :::* 1535/krb5kdc
  656. udp6 0 0 fe80::225:90ff:fe7b:750 :::* 1535/krb5kdc
  657. udp6 0 0 :::785 :::* 612/rpcbind
  658. udp6 0 0 :::2049 :::* -
  659. udp6 0 0 :::55724 :::* 2169/rpc.mountd
  660. udp6 0 0 :::55848 :::* 7635/squid3
  661. udp6 0 0 :::41732 :::* -
  662. udp6 0 0 :::42974 :::* 1129/rpc.statd
  663. udp6 0 0 :::44853 :::* 2169/rpc.mountd
  664. udp6 0 0 :::46721 :::* 2169/rpc.mountd
  665.  
  666. Traffic Control
  667.  
  668. Device eth0:
  669. qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
  670. Sent 3908045 bytes 15634 pkt (dropped 0, overlimits 0 requeues 0)
  671. backlog 0b 0p requeues 0
  672.  
  673.  
  674. Device eth1:
  675. qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
  676. Sent 8776907 bytes 15465 pkt (dropped 0, overlimits 0 requeues 0)
  677. backlog 0b 0p requeues 0
  678.  
  679.  
  680.  
  681. TC Filters
  682.  
  683. Device eth0:
  684.  
  685. Device eth1:
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!