DenebaShorewall6Configuration

Enter a topic name to show or a new topic name to create; then press Enter
Shorewall6 4.6.4.3 Dump at deneba - Mon Aug 17 12:34:55 EDT 2015
   Shorewall 4.6.4.3
Shorewall6 is running
State:Started (Fri Aug 14 16:58:48 EDT 2015) from /etc/shorewall6/ (/var/lib/shorewall6/firewall compiled by Shorewall version 4.6.4.3)
Counters reset Fri Aug 14 16:58:48 EDT 2015
Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
49781   54M net-fw     all      he-ipv6 *       ::/0		 ::/0		
54436 9892K loc-fw     all      eth0   *       ::/0		 ::/0		
 6762  570K dmz-fw     all      eth1   *       ::/0		 ::/0		
    0     0 ACCEPT     all      lo     *       ::/0		 ::/0		
    0     0 Reject     all      *      *       ::/0		 ::/0		
    0     0 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:INPUT:REJECT:"
    0     0 reject     all      *      *       ::/0		 ::/0		[goto] 
Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
1022K  760M net_frwd   all      he-ipv6 *       ::/0		 ::/0		
 719K  119M loc_frwd   all      eth0   *       ::/0		 ::/0		
91632   12M dmz_frwd   all      eth1   *       ::/0		 ::/0		
    0     0 Reject     all      *      *       ::/0		 ::/0		
    0     0 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:FORWARD:REJECT:"
    0     0 reject     all      *      *       ::/0		 ::/0		[goto] 
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
43438 7611K fw-net     all      *      he-ipv6  ::/0		 ::/0		
34226 2657K fw-loc     all      *      eth0    ::/0		 ::/0		
12517  983K fw-dmz     all      *      eth1    ::/0		 ::/0		
    0     0 ACCEPT     all      *      lo      ::/0		 ::/0		
    0     0 Reject     all      *      *       ::/0		 ::/0		
    0     0 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:OUTPUT:REJECT:"
    0     0 reject     all      *      *       ::/0		 ::/0		[goto] 
Chain AllowICMPs (2 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 1 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 2 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 3 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 4 /* Needed ICMP types (RFC4890) */
    3   160 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 133 /* Needed ICMP types (RFC4890) */
 1331  181K ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 134 /* Needed ICMP types (RFC4890) */
  171 12312 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 135 /* Needed ICMP types (RFC4890) */
 5285  381K ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 136 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 137 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 141 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 142 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       fe80::/10	    ::/0		 ipv6-icmptype 130 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       fe80::/10	    ::/0		 ipv6-icmptype 131 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       fe80::/10	    ::/0		 ipv6-icmptype 132 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       fe80::/10	    ::/0		 ipv6-icmptype 143 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 148 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 149 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       fe80::/10	    ::/0		 ipv6-icmptype 151 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       fe80::/10	    ::/0		 ipv6-icmptype 152 /* Needed ICMP types (RFC4890) */
    0     0 ACCEPT     icmpv6    *      *       fe80::/10	    ::/0		 ipv6-icmptype 153 /* Needed ICMP types (RFC4890) */
Chain Broadcast (2 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 DROP       all      *      *       ::/0		 2001:470:1c:80b::   
    0     0 DROP       all      *      *       ::/0		 2001:470:1c:80b:ffff:ffff:ffff:ff80/121 
    0     0 DROP       all      *      *       ::/0		 2001:470:1d:80b::   
    0     0 DROP       all      *      *       ::/0		 2001:470:1d:80b:ffff:ffff:ffff:ff80/121 
    0     0 DROP       all      *      *       ::/0		 2001:470:b0ad:1::   
    0     0 DROP       all      *      *       ::/0		 2001:470:b0ad:1:ffff:ffff:ffff:ff80/121 
    3   264 DROP       all      *      *       ::/0		 ff00::/8	    
Chain Drop (3 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 reject     tcp      *      *       ::/0		 ::/0		 tcp dpt:113 /* Auth */
   38  4944 AllowICMPs  icmpv6    *      *       ::/0		 ::/0		
   62 15183 Broadcast  all      *      *       ::/0		 ::/0		
    0     0 DROP       all      *      *       ::/0		 ::/0		 ctstate INVALID
    0     0 DROP       udp      *      *       ::/0		 ::/0		 multiport dports 135,445 /* SMB */
    0     0 DROP       udp      *      *       ::/0		 ::/0		 udp dpts:137:139 /* SMB */
    0     0 DROP       udp      *      *       ::/0		 ::/0		 udp spt:137 dpts:1024:65535 /* SMB */
    0     0 DROP       tcp      *      *       ::/0		 ::/0		 multiport dports 135,139,445 /* SMB */
   45 13727 DROP       tcp      *      *       ::/0		 ::/0		 tcp flags:!0x17/0x02
    0     0 DROP       udp      *      *       ::/0		 ::/0		 udp spt:53 /* Late DNS Replies */
Chain Reject (6 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 reject     tcp      *      *       ::/0		 ::/0		 tcp dpt:113 /* Auth */
 6759  570K AllowICMPs  icmpv6    *      *       ::/0		 ::/0		
    3   264 Broadcast  all      *      *       ::/0		 ::/0		
    0     0 DROP       all      *      *       ::/0		 ::/0		 ctstate INVALID
    0     0 reject     udp      *      *       ::/0		 ::/0		 multiport dports 135,445 /* SMB */
    0     0 reject     udp      *      *       ::/0		 ::/0		 udp dpts:137:139 /* SMB */
    0     0 reject     udp      *      *       ::/0		 ::/0		 udp spt:137 dpts:1024:65535 /* SMB */
    0     0 reject     tcp      *      *       ::/0		 ::/0		 multiport dports 135,139,445 /* SMB */
    0     0 DROP       tcp      *      *       ::/0		 ::/0		 tcp flags:!0x17/0x02
    0     0 DROP       udp      *      *       ::/0		 ::/0		 udp spt:53 /* Late DNS Replies */
Chain dmz-fw (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
 6762  570K dynamic    all      *      *       ::/0		 ::/0		 ctstate INVALID,NEW,UNTRACKED
    0     0 tcpflags   tcp      *      *       ::/0		 ::/0		
    0     0 ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 128 /* Ping */
 6762  570K Reject     all      *      *       ::/0		 ::/0		
    0     0 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:dmz-fw:REJECT:"
    0     0 reject     all      *      *       ::/0		 ::/0		[goto] 
Chain dmz-loc (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
 3194 2826K ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 128 /* Ping */
    0     0 Reject     all      *      *       ::/0		 ::/0		
    0     0 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:dmz-loc:REJECT:"
    0     0 reject     all      *      *       ::/0		 ::/0		[goto] 
Chain dmz-net (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
74745 7470K ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
 1178 84816 ACCEPT     tcp      *      *       ::/0		 ::/0		 multiport dports 80,443
11967 1015K ACCEPT     udp      *      *       ::/0		 ::/0		 udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp      *      *       ::/0		 ::/0		 tcp dpt:53 /* DNS */
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 128 /* Ping */
  548  645K ACCEPT     all      *      *       ::/0		 ::/0		
Chain dmz_frwd (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 sfilter    all      *      eth1    ::/0		 ::/0		[goto] 
13693 1744K dynamic    all      *      *       ::/0		 ::/0		 ctstate INVALID,NEW,UNTRACKED
79101   10M tcpflags   tcp      *      *       ::/0		 ::/0		
88438 9214K dmz-net    all      *      he-ipv6  ::/0		 ::/0		
 3194 2826K dmz-loc    all      *      eth0    ::/0		 ::/0		
Chain dynamic (6 references)
 pkts bytes target     prot opt in     out     source	       destination	 
Chain fw-dmz (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
12517  983K ACCEPT     icmpv6    *      *       ::/0		 ::/0		
    0     0 Reject     all      *      *       ::/0		 ::/0		
    0     0 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:fw-dmz:REJECT:"
    0     0 reject     all      *      *       ::/0		 ::/0		[goto] 
Chain fw-loc (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
 2050  284K ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
32176 2373K ACCEPT     icmpv6    *      *       ::/0		 ::/0		
    0     0 ACCEPT     all      *      *       ::/0		 ::/0		
Chain fw-net (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
42430 7529K ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
    6   584 ACCEPT     udp      *      *       ::/0		 ::/0		 udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp      *      *       ::/0		 ::/0		 tcp dpt:53 /* DNS */
   31  4216 ACCEPT     icmpv6    *      *       ::/0		 ::/0		
  971 77600 ACCEPT     all      *      *       ::/0		 ::/0		
Chain loc-dmz (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
 2616  897K ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
   48  3608 ACCEPT     tcp      *      *       ::/0		 2001:470:1d:80b:5de1:bbf:c278:b3b7  multiport dports 80,443
    0     0 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 128 /* Ping */
 2093  189K ACCEPT     all      *      *       ::/0		 ::/0		
Chain loc-fw (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
54433 9892K dynamic    all      *      *       ::/0		 ::/0		 ctstate INVALID,NEW,UNTRACKED
    0     0 tcpflags   tcp      *      *       ::/0		 ::/0		
    3   240 ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
    1    80 ACCEPT     icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 128 /* Ping */
54432 9892K ACCEPT     all      *      *       ::/0		 ::/0		
Chain loc-net (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
 678K  111M ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
16599 1444K ACCEPT     udp      *      *       ::/0		 ::/0		 udp dpt:53 /* DNS */
    0     0 ACCEPT     tcp      *      *       ::/0		 ::/0		 tcp dpt:53 /* DNS */
19308 5414K ACCEPT     all      *      *       ::/0		 ::/0		
Chain loc_frwd (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
   16  1068 sfilter    all      *      eth0    ::/0		 ::/0		[goto] 
38055 7051K dynamic    all      *      *       ::/0		 ::/0		 ctstate INVALID,NEW,UNTRACKED
 695K  113M tcpflags   tcp      *      *       ::/0		 ::/0		
 714K  118M loc-net    all      *      he-ipv6  ::/0		 ::/0		
 4757 1090K loc-dmz    all      *      eth1    ::/0		 ::/0		
Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 DROP       all      *      *       ::/0		 ::/0		
Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    7   572 LOG	all      *      *       ::/0		 ::/0		 LOG flags 4 level 6 prefix "Shorewall:logflags:DROP:"
    7   572 DROP       all      *      *       ::/0		 ::/0		
Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 reject     all      *      *       ::/0		 ::/0		
Chain net-dmz (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
 143K  135M ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
    0     0 DROP       tcp      *      *       ::/0		 ::/0		 ctstate INVALID
    7   560 ACCEPT     tcp      *      *       ::/0		 2001:470:1d:80b:5de1:bbf:c278:b3b7  multiport dports 80,443
    0     0 Drop       all      *      *       ::/0		 ::/0		
    0     0 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:net-dmz:DROP:"
    0     0 DROP       all      *      *       ::/0		 ::/0		
Chain net-fw (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
  142 15660 dynamic    all      *      *       ::/0		 ::/0		 ctstate INVALID,NEW,UNTRACKED
  142 15660 smurfs     all      *      *       ::/0		 ::/0		 ctstate INVALID,NEW,UNTRACKED
49737   54M tcpflags   tcp      *      *       ::/0		 ::/0		
49639   54M ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
   92  9780 DROP       tcp      *      *       ::/0		 ::/0		 ctstate INVALID
    9   936 DROP       icmpv6    *      *       ::/0		 ::/0		 ipv6-icmptype 128 /* Ping */
   41  4944 Drop       all      *      *       ::/0		 ::/0		
   10   728 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:net-fw:DROP:"
   10   728 DROP       all      *      *       ::/0		 ::/0		
Chain net-loc (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
 877K  626M ACCEPT     all      *      *       ::/0		 ::/0		 ctstate RELATED,ESTABLISHED
 3095  186K DROP       tcp      *      *       ::/0		 ::/0		 ctstate INVALID
   52 14455 Drop       all      *      *       ::/0		 ::/0		
    7   728 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:net-loc:DROP:"
    7   728 DROP       all      *      *       ::/0		 ::/0		
Chain net_frwd (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 sfilter    all      *      he-ipv6  ::/0		 ::/0		[goto] 
 3154  201K dynamic    all      *      *       ::/0		 ::/0		 ctstate INVALID,NEW,UNTRACKED
 3154  201K smurfs     all      *      *       ::/0		 ::/0		 ctstate INVALID,NEW,UNTRACKED
 994K  755M tcpflags   tcp      *      *       ::/0		 ::/0		
 880K  626M net-loc    all      *      eth0    ::/0		 ::/0		
 143K  135M net-dmz    all      *      eth1    ::/0		 ::/0		
Chain reject (13 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 DROP       all      *      *       ::/0		 2001:470:1c:80b::   
    0     0 DROP       all      *      *       ::/0		 2001:470:1c:80b:ffff:ffff:ffff:ff80/121 
    0     0 DROP       all      *      *       ::/0		 2001:470:1d:80b::   
    0     0 DROP       all      *      *       ::/0		 2001:470:1d:80b:ffff:ffff:ffff:ff80/121 
    0     0 DROP       all      *      *       ::/0		 2001:470:b0ad:1::   
    0     0 DROP       all      *      *       ::/0		 2001:470:b0ad:1:ffff:ffff:ffff:ff80/121 
    0     0 DROP       all      *      *       ff00::/8	     ::/0		
    0     0 DROP       2	*      *       ::/0		 ::/0		
    0     0 REJECT     tcp      *      *       ::/0		 ::/0		 reject-with tcp-reset
    0     0 REJECT     udp      *      *       ::/0		 ::/0		 reject-with icmp6-port-unreachable
    0     0 REJECT     icmpv6    *      *       ::/0		 ::/0		 reject-with icmp6-addr-unreachable
    0     0 REJECT     all      *      *       ::/0		 ::/0		 reject-with icmp6-adm-prohibited
Chain sfilter (3 references)
 pkts bytes target     prot opt in     out     source	       destination	 
   16  1068 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:sfilter:DROP:"
   16  1068 DROP       all      *      *       ::/0		 ::/0		
Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0	    all      *      *       ::/0		 ::/0		 recent: SET name: %CURRENTTIME side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
Chain smurflog (7 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 LOG	all      *      *       ::/0		 ::/0		 LOG flags 0 level 6 prefix "Shorewall:smurfs:DROP:"
    0     0 DROP       all      *      *       ::/0		 ::/0		
Chain smurfs (2 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 smurflog   all      *      *       2001:470:1c:80b::    ::/0		[goto] 
    0     0 smurflog   all      *      *       2001:470:1c:80b:ffff:ffff:ffff:ff80/121  ::/0		[goto] 
    0     0 smurflog   all      *      *       2001:470:1d:80b::    ::/0		[goto] 
    0     0 smurflog   all      *      *       2001:470:1d:80b:ffff:ffff:ffff:ff80/121  ::/0		[goto] 
    0     0 smurflog   all      *      *       2001:470:b0ad:1::    ::/0		[goto] 
    0     0 smurflog   all      *      *       2001:470:b0ad:1:ffff:ffff:ffff:ff80/121  ::/0		[goto] 
    0     0 smurflog   all      *      *       ff00::/8	     ::/0		[goto] 
Chain tcpflags (6 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 logflags   tcp      *      *       ::/0		 ::/0		[goto]  tcp flags:0x3F/0x29
    0     0 logflags   tcp      *      *       ::/0		 ::/0		[goto]  tcp flags:0x3F/0x00
    0     0 logflags   tcp      *      *       ::/0		 ::/0		[goto]  tcp flags:0x06/0x06
    7   572 logflags   tcp      *      *       ::/0		 ::/0		[goto]  tcp flags:0x03/0x03
    0     0 logflags   tcp      *      *       ::/0		 ::/0		[goto]  tcp spt:0 flags:0x17/0x02
Log (/var/log/messages)
Aug 16 18:17:53 net-fw:DROP:IN=he-ipv6 OUT= SRC=2607:f298:4:148::a0e:421d DST=2001:470:1c:80b::2 LEN=72 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=40713 DPT=80 WINDOW=14400 RES=0x00 SYN URGP=0 
Aug 16 18:17:54 net-fw:DROP:IN=he-ipv6 OUT= SRC=2607:f298:4:148::a0e:421d DST=2001:470:1c:80b::2 LEN=72 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=40713 DPT=80 WINDOW=14400 RES=0x00 SYN URGP=0 
Aug 16 18:25:37 net-fw:DROP:IN=he-ipv6 OUT= SRC=2a01:4f8:141:3c8::2 DST=2001:470:1c:80b::2 LEN=80 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=44136 DPT=80 WINDOW=14400 RES=0x00 SYN URGP=0 
Aug 16 18:25:38 net-fw:DROP:IN=he-ipv6 OUT= SRC=2a01:4f8:141:3c8::2 DST=2001:470:1c:80b::2 LEN=80 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=44136 DPT=80 WINDOW=14400 RES=0x00 SYN URGP=0 
Aug 17 09:35:59 net-loc:DROP:IN=he-ipv6 OUT=eth0 SRC=2002:4e2f:a938:525a:6b37:b82a:3afa:875f DST=2001:470:b0ad:1:c4ab:6da:c4c1:6cd LEN=104 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=65320 SEQ=51148 
Aug 17 09:36:12 net-loc:DROP:IN=he-ipv6 OUT=eth0 SRC=2002:4e2f:a938:525a:6b37:b82a:3afa:875f DST=2001:470:b0ad:1:c4ab:6da:c4c1:6cd LEN=104 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=114 SEQ=24311 
Aug 17 09:36:38 net-loc:DROP:IN=he-ipv6 OUT=eth0 SRC=2002:4e2f:a938:525a:6b37:b82a:3afa:875f DST=2001:470:b0ad:1:c4ab:6da:c4c1:6cd LEN=104 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=491 SEQ=13437 
Aug 17 09:36:52 net-loc:DROP:IN=he-ipv6 OUT=eth0 SRC=2002:4e2f:a938:525a:6b37:b82a:3afa:875f DST=2001:470:b0ad:1:c4ab:6da:c4c1:6cd LEN=104 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=566 SEQ=65295 
Aug 17 09:37:2 net-loc:DROP:IN=he-ipv6 OUT=eth0 SRC=2002:4e2f:a938:525a:6b37:b82a:3afa:875f DST=2001:470:b0ad:1:c4ab:6da:c4c1:6cd LEN=104 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=925 SEQ=48890 
Aug 17 09:37:12 net-loc:DROP:IN=he-ipv6 OUT=eth0 SRC=2002:4e2f:a938:525a:6b37:b82a:3afa:875f DST=2001:470:b0ad:1:c4ab:6da:c4c1:6cd LEN=104 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=1153 SEQ=26907 
Aug 17 09:37:22 net-loc:DROP:IN=he-ipv6 OUT=eth0 SRC=2002:4e2f:a938:525a:6b37:b82a:3afa:875f DST=2001:470:b0ad:1:c4ab:6da:c4c1:6cd LEN=104 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=1502 SEQ=26664 
Aug 17 10:7:59 net-fw:DROP:IN=he-ipv6 OUT= SRC=2804:14d:4cd1:12eb:3c59:346c:6c18:3dc1 DST=2001:470:1c:80b::2 LEN=72 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=64237 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Aug 17 10:8:2 net-fw:DROP:IN=he-ipv6 OUT= SRC=2804:14d:4cd1:12eb:3c59:346c:6c18:3dc1 DST=2001:470:1c:80b::2 LEN=72 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=64237 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Aug 17 10:8:8 net-fw:DROP:IN=he-ipv6 OUT= SRC=2804:14d:4cd1:12eb:3c59:346c:6c18:3dc1 DST=2001:470:1c:80b::2 LEN=68 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=64237 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Aug 17 10:8:21 net-fw:DROP:IN=he-ipv6 OUT= SRC=2804:14d:4cd1:12eb:3c59:346c:6c18:3dc1 DST=2001:470:1c:80b::2 LEN=72 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=64237 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Aug 17 10:8:24 net-fw:DROP:IN=he-ipv6 OUT= SRC=2804:14d:4cd1:12eb:3c59:346c:6c18:3dc1 DST=2001:470:1c:80b::2 LEN=72 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=64237 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Aug 17 10:8:30 net-fw:DROP:IN=he-ipv6 OUT= SRC=2804:14d:4cd1:12eb:3c59:346c:6c18:3dc1 DST=2001:470:1c:80b::2 LEN=68 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=64237 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
NAT Table
Chain PREROUTING (policy ACCEPT 20118 packets, 2165K bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
Chain INPUT (policy ACCEPT 131 packets, 29837 bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
Chain OUTPUT (policy ACCEPT 156 packets, 12480 bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
Chain POSTROUTING (policy ACCEPT 3663 packets, 368K bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
Mangle Table
Chain PREROUTING (policy ACCEPT 152K packets, 69M bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
2238K  987M tcpre      all      *      *       ::/0		 ::/0		
Chain INPUT (policy ACCEPT 15994 packets, 10M bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
 111K   65M tcin       all      *      *       ::/0		 ::/0		
Chain FORWARD (policy ACCEPT 118K packets, 57M bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
1833K  891M MARK       all      *      *       ::/0		 ::/0		 MARK and 0xffffff00
1833K  891M tcfor      all      *      *       ::/0		 ::/0		
Chain OUTPUT (policy ACCEPT 11224 packets, 2235K bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
90181   11M tcout      all      *      *       ::/0		 ::/0		
Chain POSTROUTING (policy ACCEPT 130K packets, 59M bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
1923K  902M tcpost     all      *      *       ::/0		 ::/0		
Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
Chain tcin (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
Raw Table
Chain PREROUTING (policy ACCEPT 152K packets, 69M bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
1072K  814M net_ctrk   all      he-ipv6 *       ::/0		 ::/0		
 808K  137M loc_ctrk   all      eth0   *       ::/0		 ::/0		
 358K   36M dmz_ctrk   all      eth1   *       ::/0		 ::/0		
Chain OUTPUT (policy ACCEPT 11224 packets, 2235K bytes)
 pkts bytes target     prot opt in     out     source	       destination	 
90181   11M fw_ctrk    all      *      *       ::/0		 ::/0		
Chain dmz_ctrk (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:10080 CT helper amanda
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:21 CT helper ftp
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:1719 CT helper RAS
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:1720 CT helper Q.931
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:6566 CT helper sane
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:5060 CT helper sip
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:69 CT helper tftp
Chain fw_ctrk (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:10080 CT helper amanda
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:21 CT helper ftp
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:1719 CT helper RAS
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:1720 CT helper Q.931
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:6566 CT helper sane
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:5060 CT helper sip
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:69 CT helper tftp
Chain loc_ctrk (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:10080 CT helper amanda
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:21 CT helper ftp
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:1719 CT helper RAS
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:1720 CT helper Q.931
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:6566 CT helper sane
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:5060 CT helper sip
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:69 CT helper tftp
Chain net_ctrk (1 references)
 pkts bytes target     prot opt in     out     source	       destination	 
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:10080 CT helper amanda
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:21 CT helper ftp
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:1719 CT helper RAS
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:1720 CT helper Q.931
    0     0 CT	 tcp      *      *       ::/0		 ::/0		 tcp dpt:6566 CT helper sane
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:5060 CT helper sip
    0     0 CT	 udp      *      *       ::/0		 ::/0		 udp dpt:69 CT helper tftp
Conntrack Table (245 out of 65536)
ipv6     10 udp      17 15 src=fe80:0000:0000:0000:0226:bbff:fe5a:5c30 dst=ff02:0000:0000:0000:0000:0000:0000:00fb sport=5353 dport=5353 [UNREPLIED] src=ff02:0000:0000:0000:0000:0000:0000:00fb dst=fe80:0000:0000:0000:0226:bbff:fe5a:5c30 sport=5353 dport=5353 mark=0 zone=0 use=2
ipv6     10 tcp      6 105 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1009 sport=59725 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1009 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59725 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431973 ESTABLISHED src=2001:0470:001c:080b:0000:0000:0000:0002 dst=2607:f8b0:400b:080a:0000:0000:0000:1016 sport=43524 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1016 dst=2001:0470:001c:080b:0000:0000:0000:0002 sport=443 dport=43524 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431992 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1005 sport=59453 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1005 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59453 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431983 ESTABLISHED src=2001:0470:001c:080b:0000:0000:0000:0002 dst=2607:f8b0:400b:080a:0000:0000:0000:1005 sport=47257 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1005 dst=2001:0470:001c:080b:0000:0000:0000:0002 sport=443 dport=47257 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 54 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:101f sport=59692 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:101f dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59692 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431986 ESTABLISHED src=2001:0470:001c:080b:0000:0000:0000:0002 dst=2607:f8b0:4001:0c1a:0000:0000:0000:00bd sport=50205 dport=443 src=2607:f8b0:4001:0c1a:0000:0000:0000:00bd dst=2001:0470:001c:080b:0000:0000:0000:0002 sport=443 dport=50205 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 42 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2606:2800:011f:179a:1972:2405:035b:0459 sport=59716 dport=80 src=2606:2800:011f:179a:1972:2405:035b:0459 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=80 dport=59716 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 74 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1009 sport=59723 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1009 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59723 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 44 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1009 sport=59720 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1009 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59720 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 50 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:100e sport=59690 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:100e dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59690 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431992 ESTABLISHED src=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c dst=2a01:0111:f004:00b1:0000:0000:0000:0101 sport=56799 dport=443 src=2a01:0111:f004:00b1:0000:0000:0000:0101 dst=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c sport=443 dport=56799 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431994 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:100e sport=59709 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:100e dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59709 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 65 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1001 sport=59693 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1001 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59693 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431990 ESTABLISHED src=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c dst=2607:f8b0:400b:080a:0000:0000:0000:1002 sport=57157 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1002 dst=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c sport=443 dport=57157 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431973 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:4001:0c0e:0000:0000:0000:007d sport=56741 dport=5222 src=2607:f8b0:4001:0c0e:0000:0000:0000:007d dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=5222 dport=56741 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431993 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:100e sport=59708 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:100e dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59708 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431993 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1005 sport=59454 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1005 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59454 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431983 ESTABLISHED src=2001:0470:001c:080b:0000:0000:0000:0002 dst=2607:f8b0:400b:080a:0000:0000:0000:1000 sport=51177 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1000 dst=2001:0470:001c:080b:0000:0000:0000:0002 sport=443 dport=51177 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 6 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:4001:0c1b:0000:0000:0000:005f sport=59685 dport=443 src=2607:f8b0:4001:0c1b:0000:0000:0000:005f dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59685 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 7 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1017 sport=59686 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1017 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59686 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431997 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1005 sport=59701 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1005 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59701 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 48 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1003 sport=59691 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1003 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59691 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431996 ESTABLISHED src=2001:0470:001c:080b:0000:0000:0000:0002 dst=2607:f8b0:400b:080a:0000:0000:0000:1000 sport=51185 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1000 dst=2001:0470:001c:080b:0000:0000:0000:0002 sport=443 dport=51185 [ASSURED] mark=0 zone=0 use=2
ipv6     10 udp      17 25 src=fe80:0000:0000:0000:0873:7786:93b4:f137 dst=ff02:0000:0000:0000:0000:0000:0000:00fb sport=5353 dport=5353 [UNREPLIED] src=ff02:0000:0000:0000:0000:0000:0000:00fb dst=fe80:0000:0000:0000:0873:7786:93b4:f137 sport=5353 dport=5353 mark=0 zone=0 use=2
ipv6     10 tcp      6 431969 ESTABLISHED src=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c dst=2607:f8b0:4001:0c09:0000:0000:0000:007d sport=56766 dport=5222 src=2607:f8b0:4001:0c09:0000:0000:0000:007d dst=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c sport=5222 dport=56766 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431959 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1015 sport=59724 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1015 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59724 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431990 ESTABLISHED src=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c dst=2607:f8b0:400b:080a:0000:0000:0000:1002 sport=57156 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1002 dst=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c sport=443 dport=57156 [ASSURED] mark=0 zone=0 use=2
ipv6     10 udp      17 25 src=fe80:0000:0000:0000:e5b6:2d69:3897:336a dst=ff02:0000:0000:0000:0000:0000:0000:00fb sport=5353 dport=5353 [UNREPLIED] src=ff02:0000:0000:0000:0000:0000:0000:00fb dst=fe80:0000:0000:0000:e5b6:2d69:3897:336a sport=5353 dport=5353 mark=0 zone=0 use=2
ipv6     10 tcp      6 13 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1009 sport=59711 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1009 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59711 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431989 ESTABLISHED src=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c dst=2607:f8b0:4001:0c08:0000:0000:0000:00bc sport=56772 dport=443 src=2607:f8b0:4001:0c08:0000:0000:0000:00bc dst=2001:0470:b0ad:0001:f1e8:7065:0d9c:500c sport=443 dport=56772 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 429911 ESTABLISHED src=2001:0470:b0ad:0001:b49d:3ccc:c047:11a4 dst=2607:f8b0:4001:0c1b:0000:0000:0000:00bc sport=49681 dport=5228 src=2607:f8b0:4001:0c1b:0000:0000:0000:00bc dst=2001:0470:b0ad:0001:b49d:3ccc:c047:11a4 sport=5228 dport=49681 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 18 TIME_WAIT src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1015 sport=59688 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1015 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59688 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431991 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:4001:0c07:0000:0000:0000:00bc sport=56728 dport=443 src=2607:f8b0:4001:0c07:0000:0000:0000:00bc dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=56728 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431980 ESTABLISHED src=2001:0470:b0ad:0001:990e:8d8e:f696:abbd dst=2607:f8b0:4001:0c09:0000:0000:0000:007d sport=56931 dport=5222 src=2607:f8b0:4001:0c09:0000:0000:0000:007d dst=2001:0470:b0ad:0001:990e:8d8e:f696:abbd sport=5222 dport=56931 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431988 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:4001:0c1b:0000:0000:0000:00bd sport=59463 dport=443 src=2607:f8b0:4001:0c1b:0000:0000:0000:00bd dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59463 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431966 ESTABLISHED src=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd dst=2607:f8b0:400b:080a:0000:0000:0000:1005 sport=59700 dport=443 src=2607:f8b0:400b:080a:0000:0000:0000:1005 dst=2001:0470:b0ad:0001:c4ab:06da:c4c1:06cd sport=443 dport=59700 [ASSURED] mark=0 zone=0 use=2
ipv6     10 tcp      6 431971 ESTABLISHED src=2001:0470:001d:080b:5de1:0bbf:c278:b3b7 dst=2607:f8b0:4001:0c06:0000:0000:0000:007d sport=49194 dport=5222 src=2607:f8b0:4001:0c06:0000:0000:0000:007d dst=2001:0470:001d:080b:5de1:0bbf:c278:b3b7 sport=5222 dport=49194 [ASSURED] mark=0 zone=0 use=2
IP Configuration
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qlen 1000
    inet6 2001:470:b0ad:1:20a:5eff:fe77:b576/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::20a:5eff:fe77:b576/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
    inet6 2001:470:1d:80b:20a:5eff:fe77:b573/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::20a:5eff:fe77:b573/64 scope link 
       valid_lft forever preferred_lft forever
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
    inet6 fe80::20c:6eff:fe06:c191/64 scope link 
       valid_lft forever preferred_lft forever
6: he-@@InterWiki("NONE", "ipv6", "ipv6")@@: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 
    inet6 2001:470:1c:80b::2/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::d072:9426/64 scope link 
       valid_lft forever preferred_lft forever
IP Stats
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    38011743   166158   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    38011743   166158   0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:5e:77:b5:76 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    511285324  3880947  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    3414120584 4080198  0       0       0       0      
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:5e:77:b5:73 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    159612713  1110798  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    364879137  441785   0       0       0       0      
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:0c:6e:06:c1:91 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    3804454097 3984574  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    508388814  3289892  0       0       0       0      
5: @@InterWiki("NONE", "sit0", "sit0")@@: <NOARP> mtu 1480 qdisc noop state DOWN mode DEFAULT group default 
    link/sit 0.0.0.0 brd 0.0.0.0
    RX: bytes  packets  errors  dropped overrun mcast   
    0	  0	0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0	  0	0       0       0       0      
6: he-@@InterWiki("NONE", "ipv6", "ipv6")@@: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN mode DEFAULT group default 
    link/sit 208.114.148.38 peer 216.66.38.58
    RX: bytes  packets  errors  dropped overrun mcast   
    859086191  1202579  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    156282401  971862   365     0       365     0      
Routing Rules
0:	from all lookup local 
32766:	from all lookup main 
Table local:
local fe80::d072:9426 dev lo proto none metric 0
local fe80::20c:6eff:fe06:c191 dev lo proto none metric 0
local fe80::20a:5eff:fe77:b576 dev lo proto none metric 0
local fe80::20a:5eff:fe77:b573 dev lo proto none metric 0
local fe80:: dev lo proto none metric 0
local fe80:: dev lo proto none metric 0
local fe80:: dev lo proto none metric 0
local fe80:: dev lo proto none metric 0
local ::1 dev lo proto none metric 0
local ::1 dev lo proto kernel metric 256
local 2001:470:b0ad:1:: dev lo proto none metric 0
local 2001:470:b0ad:1:20a:5eff:fe77:b576 dev lo proto none metric 0
local 2001:470:1d:80b:: dev lo proto none metric 0
local 2001:470:1d:80b:20a:5eff:fe77:b573 dev lo proto none metric 0
local 2001:470:1c:80b::2 dev lo proto none metric 0
local 2001:470:1c:80b:: dev lo proto none metric 0
ff00::/8 dev he-ipv6 metric 256
ff00::/8 dev eth2 metric 256
ff00::/8 dev eth1 metric 256 mtu 1500
ff00::/8 dev eth0 metric 256 mtu 1500
Table main:
2001:470:1c:80b::1 dev he-ipv6 metric 1024
fe80::/64 dev he-ipv6 proto kernel metric 256
fe80::/64 dev eth2 proto kernel metric 256
fe80::/64 dev eth1 proto kernel metric 256 mtu 1500
fe80::/64 dev eth0 proto kernel metric 256 mtu 1500
2001:470:b0ad:1::/64 dev eth0 proto kernel metric 256
2001:470:1d:80b::/64 dev eth1 proto kernel metric 256
2001:470:1c:80b::/64 dev he-ipv6 proto kernel metric 256
default via 2001:470:1c:80b::1 dev he-ipv6 metric 1024
NF Accounting

Events

/proc
   /proc/version = Linux version 3.16.0-4-686-pae (debian-kernel@lists.debian.org) (gcc version 4.8.4 (Debian 4.8.4-1) ) #1 SMP Debian 3.16.7-ckt11-1+deb8u3 (2015-08-04)
   /proc/sys/net/ipv6/conf/all/forwarding = 1
   /proc/sys/net/ipv6/conf/all/proxy_ndp = 0
   /proc/sys/net/ipv6/conf/default/forwarding = 1
   /proc/sys/net/ipv6/conf/default/proxy_ndp = 0
   /proc/sys/net/ipv6/conf/eth0/forwarding = 1
   /proc/sys/net/ipv6/conf/eth0/proxy_ndp = 0
   /proc/sys/net/ipv6/conf/eth1/forwarding = 1
   /proc/sys/net/ipv6/conf/eth1/proxy_ndp = 0
   /proc/sys/net/ipv6/conf/eth2/forwarding = 1
   /proc/sys/net/ipv6/conf/eth2/proxy_ndp = 0
   /proc/sys/net/ipv6/conf/he-ipv6/forwarding = 1
   /proc/sys/net/ipv6/conf/he-ipv6/proxy_ndp = 0
   /proc/sys/net/ipv6/conf/lo/forwarding = 1
   /proc/sys/net/ipv6/conf/lo/proxy_ndp = 0
   /proc/sys/net/ipv6/conf/sit0/forwarding = 1
   /proc/sys/net/ipv6/conf/sit0/proxy_ndp = 0
Neighbors
2001:470:1d:80b:5de1:bbf:c278:b3b7 dev eth1 lladdr 00:17:31:e9:15:87 STALE
fe80::20a:5eff:fe77:b576 dev eth0 lladdr 00:0a:5e:77:b5:76 router STALE
2001:470:b0ad:1:c4ab:6da:c4c1:6cd dev eth0 lladdr 00:1f:d0:d6:d8:6c REACHABLE
fe80::873:7786:93b4:f137 dev eth0 lladdr 98:d6:bb:26:42:b2 STALE
2001:470:b0ad:1:f1e8:7065:d9c:500c dev eth0 lladdr 6c:f0:49:0b:60:ab REACHABLE
fe80::74fa:82e:1f69:5d03 dev eth0 lladdr 74:e5:43:93:44:56 STALE
fe80::1c0e:3735:2394:5e99 dev eth0 lladdr c8:f6:50:0f:aa:cf STALE
fe80::77:74fc:d170:8ec2 dev eth0 lladdr 48:d7:05:45:a3:58 STALE
fe80::226:bbff:fe5a:5c30 dev eth0 lladdr 00:26:bb:5a:5c:30 STALE
2001:470:b0ad:1:8d74:c6ff:a791:169a dev eth0 lladdr 00:26:bb:5a:5c:30 STALE
fe80::20a:5eff:fe77:b573 dev eth1 lladdr 00:0a:5e:77:b5:73 router STALE
2001:470:b0ad:1:990e:8d8e:f696:abbd dev eth0 lladdr 40:3c:fc:00:04:7a REACHABLE
2001:470:b0ad:1:b49d:3ccc:c047:11a4 dev eth0  FAILED
fe80::423c:fcff:fe00:47a dev eth0 lladdr 40:3c:fc:00:04:7a REACHABLE
fe80::d9fd:a22c:2ac8:749c dev eth0 lladdr 6c:f0:49:0b:60:ab STALE
2001:470:b0ad:1:cc47:3a76:8f4b:a170 dev eth0 lladdr 48:d7:05:45:a3:58 STALE
fe80::5de1:bbf:c278:b3b7 dev eth1 lladdr 00:17:31:e9:15:87 STALE
2001:470:b0ad:1:1887:f3d4:9e13:834e dev eth0 lladdr c8:f6:50:0f:aa:cf STALE
Modules
ip6_tables	     16987  4 ip6table_filter,ip6table_mangle,ip6table_nat,ip6table_raw
ip6t_MASQUERADE	12538  0 
ip6t_REJECT	    12428  4 
ip6t_ipv6header	12440  0 
ip6t_rpfilter	  12428  0 
ip6table_filter	12492  1 
ip6table_mangle	12492  1 
ip6table_nat	   12577  0 
ip6table_raw	   12480  1 
nf_conntrack	   73472  37 nf_nat_ftp,nf_nat_irc,nf_nat_sip,nf_nat_amanda,xt_CT,nf_nat_snmp_basic,nf_conntrack_netbios_ns,nf_conntrack_proto_gre,xt_helper,
					ipt_MASQUERADE,nf_conntrack_proto_udplite,nf_nat,ip6t_MASQUERADE,xt_connlimit,nf_nat_h323,nf_nat_ipv4,nf_nat_ipv6,nf_nat_pptp,
					nf_nat_tftp,xt_conntrack,nf_conntrack_amanda,nf_conntrack_proto_sctp,nf_conntrack_netlink,ip6table_nat,nf_conntrack_broadcast,
					xt_connmark,nf_conntrack_ftp,nf_conntrack_irc,nf_conntrack_sip,iptable_nat,nf_conntrack_h323,nf_conntrack_ipv4,nf_conntrack_ipv6,
					nf_conntrack_pptp,nf_conntrack_sane,nf_conntrack_snmp,nf_conntrack_tftp
nf_conntrack_amanda    12405  7 nf_nat_amanda
nf_conntrack_broadcast    12349  2 nf_conntrack_netbios_ns,nf_conntrack_snmp
nf_conntrack_ftp       12599  7 nf_nat_ftp
nf_conntrack_h323      50162  13 nf_nat_h323
nf_conntrack_ipv4      18040  58 
nf_conntrack_ipv6      13357  54 
nf_conntrack_irc       12395  3 nf_nat_irc
nf_conntrack_netbios_ns    12413  2 
nf_conntrack_netlink    34893  0 
nf_conntrack_pptp      12555  3 nf_nat_pptp
nf_conntrack_proto_gre    12880  1 nf_conntrack_pptp
nf_conntrack_proto_sctp    17100  0 
nf_conntrack_proto_udplite    12811  0 
nf_conntrack_sane      12396  6 
nf_conntrack_sip       21677  7 nf_nat_sip
nf_conntrack_snmp      12411  3 nf_nat_snmp_basic
nf_conntrack_tftp      12401  7 nf_nat_tftp
nf_defrag_ipv4	 12443  2 xt_TPROXY,nf_conntrack_ipv4
nf_defrag_ipv6	 25046  2 xt_TPROXY,nf_conntrack_ipv6
nf_nat		 17863  15 nf_nat_ftp,nf_nat_irc,nf_nat_sip,nf_nat_amanda,ipt_MASQUERADE,nf_nat_proto_gre,ip6t_MASQUERADE,nf_nat_h323,nf_nat_ipv4,nf_nat_ipv6,
					nf_nat_pptp,nf_nat_tftp,xt_nat,ip6table_nat,iptable_nat
nf_nat_amanda	  12392  0 
nf_nat_ftp	     12420  0 
nf_nat_h323	    16815  0 
nf_nat_ipv4	    12800  1 iptable_nat
nf_nat_ipv6	    12808  1 ip6table_nat
nf_nat_irc	     12414  0 
nf_nat_pptp	    12506  0 
nf_nat_proto_gre       12469  1 nf_nat_pptp
nf_nat_sip	     16917  0 
nf_nat_snmp_basic      16794  0 
nf_nat_tftp	    12390  0 
x_tables	       17978  49 xt_physdev,xt_pkttype,ip6table_filter,xt_statistic,xt_DSCP,xt_dscp,xt_iprange,xt_mark,xt_time,xt_CT,xt_helper,ip6t_ipv6header,ip6table_mangle,
					ip6t_rpfilter,xt_length,xt_nfacct,xt_comment,ipt_ULOG,xt_policy,xt_CHECKSUM,xt_recent,ip_tables,xt_tcpmss,xt_tcpudp,ipt_MASQUERADE,xt_AUDIT,
					xt_NFQUEUE,xt_NFLOG,ip6t_MASQUERADE,xt_owner,xt_realm,ipt_rpfilter,xt_connlimit,xt_conntrack,xt_LOG,xt_nat,xt_hashlimit,xt_multiport,iptable_filter,
					ip6table_raw,xt_CLASSIFY,xt_TPROXY,xt_connmark,ipt_REJECT,iptable_mangle,ip6_tables,xt_addrtype,iptable_raw,ip6t_REJECT
xt_AUDIT	       12531  0 
xt_CHECKSUM	    12431  0 
xt_CLASSIFY	    12397  0 
xt_CT		  12730  50 
xt_DSCP		12491  0 
xt_LOG		 17011  31 
xt_NFLOG	       12422  0 
xt_NFQUEUE	     12518  0 
xt_TPROXY	      16687  0 
xt_addrtype	    12501  5 
xt_comment	     12395  80 
xt_connlimit	   12587  0 
xt_connmark	    12565  0 
xt_conntrack	   12601  60 
xt_dscp		12467  0 
xt_hashlimit	   17070  0 
xt_helper	      12459  0 
xt_iprange	     12424  0 
xt_length	      12420  0 
xt_mark		12413  2 
xt_multiport	   12470  18 
xt_nat		 12537  4 
xt_nfacct	      12464  0 
xt_owner	       12419  0 
xt_physdev	     12428  0 
xt_pkttype	     12395  0 
xt_policy	      12458  0 
xt_realm	       12391  0 
xt_recent	      17078  2 
xt_statistic	   12471  0 
xt_tcpmss	      12393  0 
xt_tcpudp	      12471  105 
xt_time		12419  0 
Shorewall6 has detected the following iptables/netfilter capabilities:
   ACCOUNT Target (ACCOUNT_TARGET): Not available
   AUDIT Target (AUDIT_TARGET): Available
   Address Type Match (ADDRTYPE): Not available
   Amanda Helper: Available
   Arptables JF: Not available
   Basic Ematch (BASIC_EMATCH): Available
   Basic Filter (BASIC_FILTER): Available
   CLASSIFY Target (CLASSIFY_TARGET): Available
   CONNMARK Target (CONNMARK): Available
   CT Target (CT_TARGET): Available
   Capabilities Version (CAPVERSION): 40600
   Checksum Target: Available
   Comments (COMMENTS): Available
   Condition Match (CONDITION_MATCH): Not available
   Connection Tracking Match (CONNTRACK_MATCH): Available
   Connlimit Match (CONNLIMIT_MATCH): Available
   Connmark Match (CONNMARK_MATCH): Available
   DSCP Match (DSCP_MATCH): Available
   DSCP Target (DSCP_TARGET): Available
   Enhanced Multi-port Match (EMULIPORT): Available
   Extended CONNMARK Target (XCONNMARK): Available
   Extended Connection Tracking Match Support (NEW_CONNTRACK_MATCH): Available
   Extended Connmark Match (XCONNMARK_MATCH): Available
   Extended MARK Target (XMARK): Available
   Extended MARK Target 2 (EXMARK): Available
   Extended Multi-port Match (XMULIPORT): Available
   Extended REJECT (ENHANCED_REJECT): Available
   FLOW Classifier (FLOW_FILTER): Available
   FTP Helper: Available
   FTP-0 Helper: Not available
   Geo IP match: Not available
   Goto Support (GOTO_TARGET): Available
   H323 Helper: Available
   Hashlimit Match (HASHLIMIT_MATCH): Available
   Header Match (HEADER_MATCH): Available
   Helper Match (HELPER_MATCH): Available
   IMQ Target (IMQ_TARGET): Not available
   IP range Match(IPRANGE_MATCH): Available
   IPMARK Target (IPMARK_TARGET): Not available
   IPP2P Match (IPP2P_MATCH): Not available
   IRC Helper: Not available
   IRC-0 Helper: Not available
   Kernel Version (KERNELVERSION): 31600
   LOG Target (LOG_TARGET): Available
   LOGMARK Target (LOGMARK_TARGET): Not available
   MARK Target (MARK): Available
   MASQUERADE Target: Available
   Mangle FORWARD Chain (MANGLE_FORWARD): Available
   Mark in the filter table (MARK_ANYWHERE): Available
   Multi-port Match (MULTIPORT): Available
   NAT (NAT_ENABLED): Available
   NFAcct match: Available
   NFLOG Target (NFLOG_TARGET): Available
   NFQUEUE Target (NFQUEUE_TARGET): Available
   Netbios_ns Helper: Not available
   New tos Match: Available
   Owner Match (OWNER_MATCH): Available
   Owner Name Match (OWNER_NAME_MATCH): Available
   PPTP Helper: Not available
   Packet Mangling (MANGLE_ENABLED): Available
   Packet Type Match (USEPKTTYPE): Available
   Packet length Match (LENGTH_MATCH): Available
   Persistent SNAT (PERSISTENT_SNAT): Available
   Physdev Match (PHYSDEV_MATCH): Available
   Physdev-is-bridged Support (PHYSDEV_BRIDGE): Available
   Policy Match (POLICY_MATCH): Available
   RPFilter match: Available
   Raw Table (RAW_TABLE): Available
   Rawpost Table (RAWPOST_TABLE): Not available
   Realm Match (REALM_MATCH): Not available
   Recent Match "--reap" option (REAP_OPTION): Available
   Recent Match (RECENT_MATCH): Available
   Repeat match (KLUDGEFREE): Available
   SANE Helper: Available
   SANE-0 Helper: Not available
   SIP Helper: Available
   SIP-0 Helper: Not available
   SNMP Helper: Not available
   Statistic Match (STATISTIC_MATCH): Available
   TCPMSS Match (TCPMSS_MATCH): Available
   TFTP Helper: Available
   TFTP-0 Helper: Not available
   TPROXY Target (TPROXY_TARGET): Available
   Time Match (TIME_MATCH): Available
   UDPLITE Port Redirection: Not available
   ULOG Target (ULOG_TARGET): Not available
   fwmark route mask (FWMARK_RT_MASK): Available
   ip6tables -S (IPTABLES_S): Available
   ipset V5 (IPSET_V5): Not available
Netid  State      Recv-Q Send-Q     Local Address:Port       Peer Address:Port 
udp    UNCONN     0      0		     :::111		  :::*      users:(("rpcbind",pid=728,fd=9))
udp    UNCONN     0      0		     :::45202		:::*      users:(("dhcpd",pid=1322,fd=21))
udp    UNCONN     0      0		     :::1194		 :::*      users:(("vpnserver",pid=26055,fd=58))
udp    UNCONN     0      0		    ::1:1194		 :::*      users:(("vpnserver",pid=26055,fd=57))
udp    UNCONN     0      0      fe80::20c:6eff:fe06:c191%eth2:1194		 :::*      users:(("vpnserver",pid=26055,fd=56))
udp    UNCONN     0      0      fe80::20a:5eff:fe77:b576%eth0:1194		 :::*      users:(("vpnserver",pid=26055,fd=55))
udp    UNCONN     0      0      fe80::20a:5eff:fe77:b573%eth1:1194		 :::*      users:(("vpnserver",pid=26055,fd=54))
udp    UNCONN     0      0      fe80::d072:9426%he-ipv6:1194		 :::*      users:(("vpnserver",pid=26055,fd=53))
udp    UNCONN     0      0	 2001:470:b0ad:1:20a:5eff:fe77:b576:1194		 :::*      users:(("vpnserver",pid=26055,fd=52))
udp    UNCONN     0      0	 2001:470:1d:80b:20a:5eff:fe77:b573:1194		 :::*      users:(("vpnserver",pid=26055,fd=51))
udp    UNCONN     0      0	 2001:470:1c:80b::2:1194		 :::*      users:(("vpnserver",pid=26055,fd=50))
udp    UNCONN     0      0		     :::44240		:::*      users:(("rpc.statd",pid=742,fd=10))
udp    UNCONN     0      0		     :::5353		 :::*      users:(("avahi-daemon",pid=1050,fd=13))
udp    UNCONN     0      0		     :::903		  :::*      users:(("rpcbind",pid=728,fd=10))
udp    UNCONN     0      0		     :::4500		 :::*      users:(("vpnserver",pid=26055,fd=108))
udp    UNCONN     0      0		    ::1:4500		 :::*      users:(("vpnserver",pid=26055,fd=104))
udp    UNCONN     0      0      fe80::20c:6eff:fe06:c191%eth2:4500		 :::*      users:(("vpnserver",pid=26055,fd=100))
udp    UNCONN     0      0      fe80::20a:5eff:fe77:b576%eth0:4500		 :::*      users:(("vpnserver",pid=26055,fd=96))
udp    UNCONN     0      0      fe80::20a:5eff:fe77:b573%eth1:4500		 :::*      users:(("vpnserver",pid=26055,fd=92))
udp    UNCONN     0      0      fe80::d072:9426%he-ipv6:4500		 :::*      users:(("vpnserver",pid=26055,fd=88))
udp    UNCONN     0      0	 2001:470:b0ad:1:20a:5eff:fe77:b576:4500		 :::*      users:(("vpnserver",pid=26055,fd=84))
udp    UNCONN     0      0	 2001:470:1d:80b:20a:5eff:fe77:b573:4500		 :::*      users:(("vpnserver",pid=26055,fd=80))
udp    UNCONN     0      0	 2001:470:1c:80b::2:4500		 :::*      users:(("vpnserver",pid=26055,fd=76))
udp    UNCONN     0      0		     :::42455		:::*      users:(("avahi-daemon",pid=1050,fd=15))
udp    UNCONN     0      0		     :::500		  :::*      users:(("vpnserver",pid=26055,fd=107))
udp    UNCONN     0      0		    ::1:500		  :::*      users:(("vpnserver",pid=26055,fd=103))
udp    UNCONN     0      0      fe80::20c:6eff:fe06:c191%eth2:500		  :::*      users:(("vpnserver",pid=26055,fd=99))
udp    UNCONN     0      0      fe80::20a:5eff:fe77:b576%eth0:500		  :::*      users:(("vpnserver",pid=26055,fd=95))
udp    UNCONN     0      0      fe80::20a:5eff:fe77:b573%eth1:500		  :::*      users:(("vpnserver",pid=26055,fd=91))
udp    UNCONN     0      0      fe80::d072:9426%he-ipv6:500		  :::*      users:(("vpnserver",pid=26055,fd=87))
udp    UNCONN     0      0	 2001:470:b0ad:1:20a:5eff:fe77:b576:500		  :::*      users:(("vpnserver",pid=26055,fd=83))
udp    UNCONN     0      0	 2001:470:1d:80b:20a:5eff:fe77:b573:500		  :::*      users:(("vpnserver",pid=26055,fd=79))
udp    UNCONN     0      0	 2001:470:1c:80b::2:500		  :::*      users:(("vpnserver",pid=26055,fd=75))
tcp    LISTEN     0      128		   :::111		  :::*      users:(("rpcbind",pid=728,fd=11))
tcp    LISTEN     0      128		   :::5555		 :::*      users:(("vpnserver",pid=26055,fd=36))
tcp    LISTEN     0      128		   :::39062		:::*      users:(("rpc.statd",pid=742,fd=11))
tcp    LISTEN     0      20		   ::1:25		   :::*      users:(("exim4",pid=1358,fd=5))
tcp    LISTEN     0      128		   :::992		  :::*      users:(("vpnserver",pid=26055,fd=28))
tcp    LISTEN     0      128		   :::1194		 :::*      users:(("vpnserver",pid=26055,fd=32))
tcp    ESTAB      0      0	 2001:470:1c:80b::2:51185  2607:f8b0:400b:80a::1000:443    users:(("x-www-browser",pid=3740,fd=58))
tcp    ESTAB      0      0	 2001:470:1c:80b::2:47257  2607:f8b0:400b:80a::1005:443    users:(("x-www-browser",pid=3740,fd=56))
tcp    ESTAB      0      0	 2001:470:1c:80b::2:43524  2607:f8b0:400b:80a::1016:443    users:(("x-www-browser",pid=3740,fd=57))
tcp    ESTAB      0      0	 2001:470:1c:80b::2:50205    2607:f8b0:4001:c1a::bd:443    users:(("x-www-browser",pid=3740,fd=61))
tcp    ESTAB      0      0	 2001:470:1c:80b::2:51177  2607:f8b0:400b:80a::1000:443    users:(("x-www-browser",pid=3740,fd=55))

shorewall6configfiles.zip as of 2015-08-17


Version: 1   Revised: 2015-08-17 13:33:28 Last Updated by: 2001:470:b0ad:1:c4ab:6da:c4c1:6cd Rename Show Links to Topic