shorewall diagnostics

[root@wishmacer andrzejl]# date > /var/log/shorewall.log
[root@wishmacer andrzejl]# date > /var/log/shorewall-init.log
[root@wishmacer andrzejl]# systemctl stop shorewall.service
[root@wishmacer andrzejl]# systemctl start shorewall.service
[root@wishmacer andrzejl]# cat /var/log/shorewall.log
Fri 14 Dec 13:11:49 GMT 2012
[root@wishmacer andrzejl]# cat /var/log/shorewall-init.log
Fri 14 Dec 13:11:56 GMT 2012
Dec 14 13:12:18 Stopping Shorewall....
Dec 14 13:12:18 Processing /etc/shorewall/stop ...
Dec 14 13:12:18 Processing /etc/shorewall/tcclear ...
Dec 14 13:12:18 Running /usr/sbin/iptables-restore...
Dec 14 13:12:18 IPv4 Forwarding Enabled
Dec 14 13:12:18 Processing /etc/shorewall/stopped ...
Dec 14 13:12:18 done.
Dec 14 13:12:24 Processing /etc/shorewall/params ...
Dec 14 13:12:24 Processing /etc/shorewall/shorewall.conf...
Dec 14 13:12:24 Loading Modules...
Dec 14 13:12:24 Compiling /etc/shorewall/zones...
Dec 14 13:12:24 Compiling /etc/shorewall/interfaces...
Dec 14 13:12:24    Interface "net eth0 -" Validated
Dec 14 13:12:24 Determining Hosts in Zones...
Dec 14 13:12:24    net (ipv4)
Dec 14 13:12:24       eth0:0.0.0.0/0
Dec 14 13:12:24    fw (firewall)
Dec 14 13:12:24 Locating Action Files...
Dec 14 13:12:24 Compiling /usr/share/shorewall/action.Drop for chain Drop...
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.Auth...
Dec 14 13:12:24     Rule "PARAM - - tcp 113" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.Auth
Dec 14 13:12:24 Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.AllowICMPs...
Dec 14 13:12:24     Rule "PARAM - - icmp fragmentation-needed" Compiled
Dec 14 13:12:24     Rule "PARAM - - icmp time-exceeded" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.AllowICMPs
Dec 14 13:12:24 Compiling /usr/share/shorewall/action.Invalid for chain Invalid...
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.SMB...
Dec 14 13:12:24     Rule "PARAM - - udp 135,445" Compiled
Dec 14 13:12:24     Rule " PARAM - - udp 137:139" Compiled
Dec 14 13:12:24     Rule "PARAM - - udp 1024: 137" Compiled
Dec 14 13:12:24     Rule "PARAM - - tcp 135,139,445" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.SMB
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.DropUPnP...
Dec 14 13:12:24     Rule "PARAM - - udp 1900" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.DropUPnP
Dec 14 13:12:24 Compiling /usr/share/shorewall/action.NotSyn for chain NotSyn...
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.DropDNSrep...
Dec 14 13:12:24     Rule "PARAM - - udp - 53" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.DropDNSrep
Dec 14 13:12:24 Compiling /usr/share/shorewall/action.Reject for chain Reject...
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.Auth...
Dec 14 13:12:24     Rule "PARAM - - tcp 113" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.Auth
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.AllowICMPs...
Dec 14 13:12:24     Rule "PARAM - - icmp fragmentation-needed" Compiled
Dec 14 13:12:24     Rule "PARAM - - icmp time-exceeded" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.AllowICMPs
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.SMB...
Dec 14 13:12:24     Rule "PARAM - - udp 135,445" Compiled
Dec 14 13:12:24     Rule " PARAM - - udp 137:139" Compiled
Dec 14 13:12:24     Rule "PARAM - - udp 1024: 137" Compiled
Dec 14 13:12:24     Rule "PARAM - - tcp 135,139,445" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.SMB
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.DropUPnP...
Dec 14 13:12:24     Rule "PARAM - - udp 1900" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.DropUPnP
Dec 14 13:12:24 ..Expanding Macro /usr/share/shorewall/macro.DropDNSrep...
Dec 14 13:12:24     Rule "PARAM - - udp - 53" Compiled
Dec 14 13:12:24 ..End Macro /usr/share/shorewall/macro.DropDNSrep
Dec 14 13:12:24 Compiling /etc/shorewall/policy...
Dec 14 13:12:24    Policy for fw to net is ACCEPT using chain fw2net
Dec 14 13:12:24    Policy for net to fw is DROP using chain net2all
Dec 14 13:12:24    Policy for net to fw is REJECT using chain all2all
Dec 14 13:12:24    Policy for fw to net is REJECT using chain all2all
Dec 14 13:12:24 Running /etc/shorewall/initdone...
Dec 14 13:12:24 Compiling Kernel Route Filtering...
Dec 14 13:12:24 Compiling Martian Logging...
Dec 14 13:12:24 Compiling /etc/shorewall/tcrules...
Dec 14 13:12:24 Compiling MAC Filtration -- Phase 1...
Dec 14 13:12:24    Chain eth0_iop deleted
Dec 14 13:12:24    Chain eth0_fop deleted
Dec 14 13:12:24 Compiling /etc/shorewall/rules...
Dec 14 13:12:24     Rule "ACCEPT net fw tcp 50505 -" Compiled
Dec 14 13:12:24 Compiling /etc/shorewall/conntrack...
Dec 14 13:12:24    Conntrack rule "CT:helper:amanda:PO - - udp 10080" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:amanda:PO - - udp 10080" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:ftp:PO - - tcp 21" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:ftp:PO - - tcp 21" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:irc:PO - - tcp 6667" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:irc:PO - - tcp 6667" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:netbios-ns:PO - - udp 137" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:netbios-ns:PO - - udp 137" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:pptp:PO - - tcp 1723" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:pptp:PO - - tcp 1723" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:sane:PO - - tcp 6566" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:sane:PO - - tcp 6566" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:sip:PO - - udp 5060" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:sip:PO - - udp 5060" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:snmp:PO - - udp 161" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:snmp:PO - - udp 161" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:tftp:PO - - udp 69" Compiled
Dec 14 13:12:24    Conntrack rule "CT:helper:tftp:PO - - udp 69" Compiled
Dec 14 13:12:24 Compiling MAC Filtration -- Phase 2...
Dec 14 13:12:24 Applying Policies...
Dec 14 13:12:24    Policy DROP from net to fw using chain net2fw
Dec 14 13:12:24    Policy ACCEPT from fw to net using chain fw2net
Dec 14 13:12:24 Generating Rule Matrix...
Dec 14 13:12:24    Handling complex zones...
Dec 14 13:12:24    Entering main matrix-generation loop...
Dec 14 13:12:24    Chain eth0_in deleted
Dec 14 13:12:24    Finishing matrix...
Dec 14 13:12:24    Chain eth0_fwd deleted
Dec 14 13:12:24 Creating iptables-restore input...
Dec 14 13:12:24 Shorewall configuration compiled to /var/lib/shorewall/.start
Dec 14 13:12:24 Starting Shorewall....
Dec 14 13:12:24 Initializing...
Dec 14 13:12:25 Processing /etc/shorewall/init ...
Dec 14 13:12:25 Processing /etc/shorewall/tcclear ...
Dec 14 13:12:25 Setting up Route Filtering...
Dec 14 13:12:25 Setting up Martian Logging...
Dec 14 13:12:25 Setting up Proxy ARP...
Dec 14 13:12:25 Disabling Kernel Automatic Helper Association
Dec 14 13:12:25 Preparing iptables-restore input...
Dec 14 13:12:25 Running /usr/sbin/iptables-restore...
Dec 14 13:12:25 IPv4 Forwarding Enabled
Dec 14 13:12:25 Processing /etc/shorewall/start ...
Dec 14 13:12:25 Processing /etc/shorewall/started ...
Dec 14 13:12:25 done.
[root@wishmacer andrzejl]# systemctl status shorewall.service
shorewall.service - Shorewall IPv4 firewall
          Loaded: loaded (/usr/lib/systemd/system/shorewall.service; enabled)
          Active: active (exited) since Fri, 2012-12-14 13:12:25 GMT; 43s ago
         Process: 2750 ExecStop=/usr/sbin/shorewall $OPTIONS stop (code=exited, status=0/SUCCESS)
         Process: 2817 ExecStart=/usr/sbin/shorewall $OPTIONS start (code=exited, status=0/SUCCESS)
          CGroup: name=systemd:/system/shorewall.service

Dec 14 13:12:25 wishmacer.loc shorewall[2817]: Setting up Route Filtering...
Dec 14 13:12:25 wishmacer.loc shorewall[2817]: Setting up Martian Logging...
Dec 14 13:12:25 wishmacer.loc shorewall[2817]: Setting up Proxy ARP...
Dec 14 13:12:25 wishmacer.loc shorewall[2817]: Preparing iptables-restore input...
Dec 14 13:12:25 wishmacer.loc shorewall[2817]: Running /usr/sbin/iptables-restore...
Dec 14 13:12:25 wishmacer.loc shorewall[2817]: IPv4 Forwarding Enabled
Dec 14 13:12:25 wishmacer.loc shorewall[2817]: Processing /etc/shorewall/start ...
Dec 14 13:12:25 wishmacer.loc shorewall[2817]: Processing /etc/shorewall/started ...
Dec 14 13:12:25 wishmacer.loc logger[3111]: Shorewall started
Dec 14 13:12:25 wishmacer.loc shorewall[2817]: done.
Dec 14 13:12:25 wishmacer.loc systemd[1]: Started Shorewall IPv4 firewall.
[root@wishmacer andrzejl]#