m0n0wall: status

m0n0wall: status
Fri Jun 22 05:08:38 CDT 2007

Note: make sure to remove any sensitive information (passwords, maybe also IP addresses) before posting information from this page in public places (like mailing lists)!
Passwords in config.xml have been automatically removed.

This status page includes the following information:

System uptime
Interfaces
Routing tables
ipfw show
ipnat -lv
ipfstat -v
ipfstat -nio
unparsed ipnat rules
unparsed ipfilter rules
unparsed ipfw rules
resolv.conf
Processes
dhcpd.conf
ez-ipupdate.cache
df
racoon.conf
SPD
SAD
last 200 system log entries
last 50 filter log entries
ls /conf
ls /var/run
config.xml

System uptime

5:08AM up 9 mins, 0 users, load averages: 0.00, 0.01, 0.00

Interfaces

rl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500 options=40<POLLING> ether 00:c0:49:a7:22:92 media: Ethernet autoselect (100baseTX <full-duplex>) status: active rl1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 options=40<POLLING> ether 00:c0:49:a7:24:3f media: Ethernet autoselect (100baseTX <full-duplex>) status: active sis0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500 options=40<POLLING> inet 192.168.0.110 netmask 0xffffff00 broadcast 192.168.0.255 ether 00:d0:09:45:0d:d3 media: Ethernet autoselect (100baseTX <full-duplex>) status: active lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384 inet 127.0.0.1 netmask 0xff000000 ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1492 inet 200.x.x.x --> 200.38.193.226 netmask 0xffffffff

Routing tables

Routing tables Internet: Destination Gateway Flags Refs Use Netif Expire default 200.38.193.226 UGSc 3 781 ng0 127.0.0.1 127.0.0.1 UH 1 148 lo0 192.168.0 link#3 UC 3 0 sis0 192.168.0.1 00:17:08:3d:a5:e3 UHLW 2 1330 sis0 691 192.168.0.103 00:0c:29:e2:81:46 UHLW 1 781 sis0 721 192.168.0.106 00:17:08:3e:57:e0 UHLW 0 464 sis0 948 200.38.193.226 200.x.x.x UH 4 0 ng0 200.x.x.x lo0 UHS 0 0 lo0

ipfw show

ipfw: getsockopt(IP_FW_GET): Protocol not available

ipnat -lv

List of active MAP/Redirect filters: map ng0 192.168.0.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp map ng0 192.168.0.0/24 -> 0.0.0.0/32 portmap tcp/udp auto map ng0 192.168.0.0/24 -> 0.0.0.0/32 rdr ng0 0.0.0.0/0 port 25 -> 192.168.0.103 port 25 tcp rdr ng0 0.0.0.0/0 port 80 -> 192.168.0.103 port 80 tcp rdr ng0 0.0.0.0/0 port 110 -> 192.168.0.103 port 110 tcp rdr ng0 0.0.0.0/0 port 53 -> 192.168.0.103 port 53 udp rdr ng0 0.0.0.0/0 port 143 -> 192.168.0.103 port 143 tcp List of active sessions: RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 18663] age 1183 use 0 sumd 0x252a/0x252a pr 17 bkt 1204/155 flags 2 drop 0/0 ifp ng0 bytes 142 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 18339] age 1194 use 0 sumd 0x252a/0x252a pr 17 bkt 171/1169 flags 2 drop 0/0 ifp ng0 bytes 213 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 17995] age 1200 use 0 sumd 0x252a/0x252a pr 17 bkt 159/1157 flags 2 drop 0/0 ifp ng0 bytes 486 pkts 7 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 17623] age 1186 use 0 sumd 0x252a/0x252a pr 17 bkt 1198/149 flags 2 drop 0/0 ifp ng0 bytes 355 pkts 5 MAP 192.168.0.1 4621 <- -> 200.x.x.x 1361 [216.115.220.254 443] age 405 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1080/638 flags 1 drop 0/0 ifp ng0 bytes 625 pkts 10 MAP 192.168.0.1 4620 <- -> 200.x.x.x 1360 [216.115.220.254 443] age 400 use 0 sumd 0xce7f/0xce7f pr 6 bkt 824/382 flags 1 drop 0/0 ifp ng0 bytes 625 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [194.200.199.193 53] age 1189 use 0 sumd 0x252a/0x252a pr 17 bkt 1048/2046 flags 2 drop 0/0 ifp ng0 bytes 540 pkts 9 MAP 192.168.0.1 4619 <- -> 200.x.x.x 1359 [216.115.220.254 443] age 395 use 0 sumd 0xce7f/0xce7f pr 6 bkt 568/126 flags 1 drop 0/0 ifp ng0 bytes 625 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 17311] age 1176 use 0 sumd 0x252a/0x252a pr 17 bkt 1190/141 flags 2 drop 0/0 ifp ng0 bytes 355 pkts 5 MAP 192.168.0.1 4618 <- -> 200.x.x.x 1358 [64.74.80.187 443] age 393 use 0 sumd 0xce7f/0xce7f pr 6 bkt 962/520 flags 1 drop 0/0 ifp ng0 bytes 701 pkts 12 MAP 192.168.0.1 4617 <- -> 200.x.x.x 1357 [216.115.220.254 443] age 390 use 0 sumd 0xce7f/0xce7f pr 6 bkt 56/1661 flags 1 drop 0/0 ifp ng0 bytes 625 pkts 10 MAP 192.168.0.1 4616 <- -> 200.x.x.x 1356 [64.74.80.187 443] age 387 use 0 sumd 0xce7f/0xce7f pr 6 bkt 450/8 flags 1 drop 0/0 ifp ng0 bytes 661 pkts 11 MAP 192.168.0.1 4615 <- -> 200.x.x.x 1355 [64.74.80.187 443] age 382 use 0 sumd 0xce7f/0xce7f pr 6 bkt 194/1799 flags 1 drop 0/0 ifp ng0 bytes 621 pkts 10 MAP 192.168.0.1 4614 <- -> 200.x.x.x 1354 [64.74.80.187 443] age 377 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1985/1543 flags 1 drop 0/0 ifp ng0 bytes 621 pkts 10 MAP 192.168.0.1 4613 <- -> 200.x.x.x 1353 [216.115.209.254 443] age 372 use 0 sumd 0xce7f/0xce7f pr 6 bkt 551/109 flags 1 drop 0/0 ifp ng0 bytes 621 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 53560] age 1089 use 0 sumd 0x252a/0x252a pr 17 bkt 756/1754 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 MAP 192.168.0.1 4612 <- -> 200.x.x.x 1352 [216.115.209.254 443] age 368 use 0 sumd 0xce7f/0xce7f pr 6 bkt 295/1900 flags 1 drop 0/0 ifp ng0 bytes 621 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 8146] age 1083 use 0 sumd 0x252a/0x252a pr 17 bkt 1109/60 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 MAP 192.168.0.1 4611 <- -> 200.x.x.x 1351 [216.219.113.250 443] age 362 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1567/1125 flags 1 drop 0/0 ifp ng0 bytes 665 pkts 11 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 7706] age 1081 use 0 sumd 0x252a/0x252a pr 17 bkt 1085/36 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 MAP 192.168.0.1 4610 <- -> 200.x.x.x 1350 [216.115.209.254 443] age 363 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1830/1388 flags 1 drop 0/0 ifp ng0 bytes 661 pkts 11 MAP 192.168.0.1 4609 <- -> 200.x.x.x 1349 [216.219.113.250 443] age 357 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1055/613 flags 1 drop 0/0 ifp ng0 bytes 625 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [80.168.69.20 1849] age 1128 use 0 sumd 0x252a/0x252a pr 17 bkt 1846/797 flags 2 drop 0/0 ifp ng0 bytes 273 pkts 4 MAP 192.168.0.1 4608 <- -> 200.x.x.x 1348 [216.115.209.254 443] age 355 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1318/876 flags 1 drop 0/0 ifp ng0 bytes 621 pkts 10 MAP 192.168.0.1 4607 <- -> 200.x.x.x 1347 [216.219.113.250 443] age 353 use 0 sumd 0xce7f/0xce7f pr 6 bkt 574/101 flags 1 drop 0/0 ifp ng0 bytes 625 pkts 10 MAP 192.168.0.1 4606 <- -> 200.x.x.x 1346 [216.219.113.250 443] age 348 use 0 sumd 0xce7f/0xce7f pr 6 bkt 318/1892 flags 1 drop 0/0 ifp ng0 bytes 665 pkts 11 MAP 192.168.0.1 4605 <- -> 200.x.x.x 1345 [64.74.80.187 443] age 373 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1759/1286 flags 1 drop 0/0 ifp ng0 bytes 661 pkts 11 MAP 192.168.0.1 4604 <- -> 200.x.x.x 1344 [216.115.209.254 443] age 350 use 0 sumd 0xce7f/0xce7f pr 6 bkt 325/1899 flags 1 drop 0/0 ifp ng0 bytes 661 pkts 11 MAP 192.168.0.1 4603 <- -> 200.x.x.x 1343 [216.115.220.254 443] age 385 use 0 sumd 0xce7f/0xce7f pr 6 bkt 597/124 flags 1 drop 0/0 ifp ng0 bytes 740 pkts 8 MAP 192.168.0.1 4602 <- -> 200.x.x.x 1342 [216.219.113.250 443] age 343 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1341/868 flags 1 drop 0/0 ifp ng0 bytes 625 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.252.22.37 10053] age 1124 use 0 sumd 0x252a/0x252a pr 17 bkt 1901/852 flags 2 drop 0/0 ifp ng0 bytes 213 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [143.97.143.33 49839] age 1133 use 0 sumd 0x252a/0x252a pr 17 bkt 1378/329 flags 2 drop 0/0 ifp ng0 bytes 251 pkts 4 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [143.97.143.238 32899] age 1151 use 0 sumd 0x252a/0x252a pr 17 bkt 489/1487 flags 2 drop 0/0 ifp ng0 bytes 1212 pkts 18 MAP 192.168.0.1 4601 <- -> 200.x.x.x 1341 [200.57.146.66 110] age 341 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1764/268 flags 1 drop 0/0 ifp ng0 bytes 17658 pkts 43 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 1291] age 1041 use 0 sumd 0x252a/0x252a pr 17 bkt 1314/265 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [212.188.141.13 1038] age 1103 use 0 sumd 0x252a/0x252a pr 17 bkt 1549/500 flags 2 drop 0/0 ifp ng0 bytes 213 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [143.97.143.239 32959] age 1131 use 0 sumd 0x252a/0x252a pr 17 bkt 1526/477 flags 2 drop 0/0 ifp ng0 bytes 1152 pkts 17 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [217.71.192.2 1027] age 1077 use 0 sumd 0x252a/0x252a pr 17 bkt 1866/817 flags 2 drop 0/0 ifp ng0 bytes 540 pkts 9 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 18382] age 1035 use 0 sumd 0x252a/0x252a pr 17 bkt 125/1123 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 22208] age 1033 use 0 sumd 0x252a/0x252a pr 17 bkt 650/1648 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 31758] age 1027 use 0 sumd 0x252a/0x252a pr 17 bkt 154/1152 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [209.244.7.41 52916] age 1113 use 0 sumd 0x252a/0x252a pr 17 bkt 1145/96 flags 2 drop 0/0 ifp ng0 bytes 606 pkts 9 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 45991] age 1021 use 0 sumd 0x252a/0x252a pr 17 bkt 484/1482 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 5848] age 1019 use 0 sumd 0x252a/0x252a pr 17 bkt 589/1587 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 16706] age 1018 use 0 sumd 0x252a/0x252a pr 17 bkt 1125/76 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.8.69.7 4820] age 1101 use 0 sumd 0x252a/0x252a pr 17 bkt 604/1602 flags 2 drop 0/0 ifp ng0 bytes 606 pkts 9 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 22807] age 1015 use 0 sumd 0x252a/0x252a pr 17 bkt 376/1374 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.255.54.14 55131] age 1014 use 0 sumd 0x252a/0x252a pr 17 bkt 1575/526 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 5742] age 1013 use 0 sumd 0x252a/0x252a pr 17 bkt 64/1062 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 34591] age 1012 use 0 sumd 0x252a/0x252a pr 17 bkt 423/1421 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 40404] age 1011 use 0 sumd 0x252a/0x252a pr 17 bkt 1747/698 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 61534] age 1010 use 0 sumd 0x252a/0x252a pr 17 bkt 280/1278 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 34122] age 1009 use 0 sumd 0x252a/0x252a pr 17 bkt 1194/145 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [82.150.128.36 2271] age 1031 use 0 sumd 0x252a/0x252a pr 17 bkt 1724/675 flags 2 drop 0/0 ifp ng0 bytes 180 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 51976] age 1007 use 0 sumd 0x252a/0x252a pr 17 bkt 744/1742 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 59481] age 1007 use 0 sumd 0x252a/0x252a pr 17 bkt 1039/2037 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 40234] age 1005 use 0 sumd 0x252a/0x252a pr 17 bkt 1214/165 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 8928] age 1005 use 0 sumd 0x252a/0x252a pr 17 bkt 602/1600 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.81.45.2 4187] age 1003 use 0 sumd 0x252a/0x252a pr 17 bkt 1335/286 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.255.54.14 54825] age 998 use 0 sumd 0x252a/0x252a pr 17 bkt 1056/7 flags 2 drop 0/0 ifp ng0 bytes 131 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.252.22.159 1035] age 1159 use 0 sumd 0x252a/0x252a pr 17 bkt 1055/6 flags 2 drop 0/0 ifp ng0 bytes 1081 pkts 16 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [82.150.130.46 1067] age 1020 use 0 sumd 0x252a/0x252a pr 17 bkt 830/1828 flags 2 drop 0/0 ifp ng0 bytes 180 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.252.22.159 6519] age 1162 use 0 sumd 0x252a/0x252a pr 17 bkt 66/1064 flags 2 drop 0/0 ifp ng0 bytes 1152 pkts 17 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [91.121.0.250 32768] age 1025 use 0 sumd 0x252a/0x252a pr 17 bkt 1053/4 flags 2 drop 0/0 ifp ng0 bytes 273 pkts 4 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [84.9.158.41 28036] age 995 use 0 sumd 0x252a/0x252a pr 17 bkt 1212/163 flags 2 drop 0/0 ifp ng0 bytes 180 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [91.121.1.140 60062] age 1052 use 0 sumd 0x252a/0x252a pr 17 bkt 1079/1053 flags 2 drop 0/0 ifp ng0 bytes 546 pkts 8 MAP 192.168.0.1 4600 <- -> 200.x.x.x 1340 [69.93.0.234 80] age 232 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1009/536 flags 1 drop 0/0 ifp ng0 bytes 6173 pkts 13 MAP 192.168.0.1 4599 <- -> 200.x.x.x 1339 [69.93.0.234 80] age 232 use 0 sumd 0xce7f/0xce7f pr 6 bkt 753/280 flags 1 drop 0/0 ifp ng0 bytes 6024 pkts 13 MAP 192.168.0.1 4598 <- -> 200.x.x.x 1338 [69.93.0.234 80] age 232 use 0 sumd 0xce7f/0xce7f pr 6 bkt 497/24 flags 1 drop 0/0 ifp ng0 bytes 6958 pkts 15 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 12455] age 995 use 0 sumd 0x252a/0x252a pr 17 bkt 1172/123 flags 2 drop 0/0 ifp ng0 bytes 213 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.255.54.14 54194] age 950 use 0 sumd 0x252a/0x252a pr 17 bkt 1326/277 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 110 <- -> 200.x.x.x 110 [69.93.0.234 57537] age 228 use 0 sumd 0x252a/0x252a pr 6 bkt 545/1543 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 110 <- -> 200.x.x.x 110 [69.93.0.234 57527] age 226 use 0 sumd 0x252a/0x252a pr 6 bkt 32/1030 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 110 <- -> 200.x.x.x 110 [69.93.0.234 57518] age 224 use 0 sumd 0x252a/0x252a pr 6 bkt 1822/773 flags 1 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 80 <- -> 200.x.x.x 80 [69.93.0.234 57505] age 222 use 0 sumd 0x252a/0x252a pr 6 bkt 1049/0 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 25 <- -> 200.x.x.x 25 [69.93.0.234 57502] age 222 use 0 sumd 0x252a/0x252a pr 6 bkt 530/1528 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 143 <- -> 200.x.x.x 143 [69.93.0.234 57500] age 222 use 0 sumd 0x252a/0x252a pr 6 bkt 1568/519 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 80 <- -> 200.x.x.x 80 [69.93.0.234 57495] age 220 use 0 sumd 0x252a/0x252a pr 6 bkt 536/1534 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 25 <- -> 200.x.x.x 25 [69.93.0.234 57492] age 220 use 0 sumd 0x252a/0x252a pr 6 bkt 17/1015 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 143 <- -> 200.x.x.x 143 [69.93.0.234 57490] age 220 use 0 sumd 0x252a/0x252a pr 6 bkt 1055/6 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 12113] age 996 use 0 sumd 0x252a/0x252a pr 17 bkt 1672/623 flags 2 drop 0/0 ifp ng0 bytes 273 pkts 4 RDR 192.168.0.103 80 <- -> 200.x.x.x 80 [69.93.0.234 57484] age 218 use 0 sumd 0x252a/0x252a pr 6 bkt 1814/765 flags 1 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 25 <- -> 200.x.x.x 25 [69.93.0.234 57481] age 218 use 0 sumd 0x252a/0x252a pr 6 bkt 1295/246 flags 1 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 143 <- -> 200.x.x.x 143 [69.93.0.234 57479] age 218 use 0 sumd 0x252a/0x252a pr 6 bkt 286/1284 flags 1 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 25 <- -> 200.x.x.x 25 [69.93.0.234 57476] age 216 use 0 sumd 0x252a/0x252a pr 6 bkt 15/1013 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 143 <- -> 200.x.x.x 143 [69.93.0.234 57478] age 216 use 0 sumd 0x252a/0x252a pr 6 bkt 30/1028 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 80 <- -> 200.x.x.x 80 [69.93.0.234 57473] age 216 use 0 sumd 0x252a/0x252a pr 6 bkt 1045/2043 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 143 <- -> 200.x.x.x 143 [69.93.0.234 57469] age 214 use 0 sumd 0x252a/0x252a pr 6 bkt 1820/771 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 25 <- -> 200.x.x.x 25 [69.93.0.234 57467] age 214 use 0 sumd 0x252a/0x252a pr 6 bkt 1805/756 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 80 <- -> 200.x.x.x 80 [69.93.0.234 57464] age 214 use 0 sumd 0x252a/0x252a pr 6 bkt 788/1786 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.255.54.14 54009] age 958 use 0 sumd 0x252a/0x252a pr 17 bkt 1078/29 flags 2 drop 0/0 ifp ng0 bytes 191 pkts 3 RDR 192.168.0.103 143 <- -> 200.x.x.x 143 [69.93.0.234 57460] age 212 use 0 sumd 0x252a/0x252a pr 6 bkt 1563/514 flags 1 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 25 <- -> 200.x.x.x 25 [69.93.0.234 57458] age 212 use 0 sumd 0x252a/0x252a pr 6 bkt 1548/499 flags 1 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 80 <- -> 200.x.x.x 80 [69.93.0.234 57455] age 212 use 0 sumd 0x252a/0x252a pr 6 bkt 531/1529 flags 1 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 110 <- -> 200.x.x.x 110 [69.93.0.234 57442] age 210 use 0 sumd 0x252a/0x252a pr 6 bkt 789/1787 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 11840] age 1022 use 0 sumd 0x252a/0x252a pr 17 bkt 1413/364 flags 2 drop 0/0 ifp ng0 bytes 606 pkts 9 RDR 192.168.0.103 110 <- -> 200.x.x.x 110 [69.93.0.234 57432] age 208 use 0 sumd 0x252a/0x252a pr 6 bkt 276/1274 flags 1 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.255.54.14 53911] age 934 use 0 sumd 0x252a/0x252a pr 17 bkt 554/1552 flags 2 drop 0/0 ifp ng0 bytes 131 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [213.190.40.38 42221] age 999 use 0 sumd 0x252a/0x252a pr 17 bkt 1390/341 flags 2 drop 0/0 ifp ng0 bytes 300 pkts 5 RDR 192.168.0.103 110 <- -> 200.x.x.x 110 [69.93.0.234 57422] age 206 use 0 sumd 0x252a/0x252a pr 6 bkt 1810/761 flags 1 drop 0/0 ifp ng0 bytes 120 pkts 2 MAP 192.168.0.1 4597 <- -> 200.x.x.x 1337 [69.93.0.234 80] age 231 use 0 sumd 0xce7f/0xce7f pr 6 bkt 241/1815 flags 1 drop 0/0 ifp ng0 bytes 92738 pkts 102 MAP 192.168.0.106 1224 <- -> 200.x.x.x 27952 [128.177.0.41 80] age 202 use 0 sumd 0x433b/0x433b pr 6 bkt 1561/580 flags 1 drop 0/0 ifp ng0 bytes 1581 pkts 11 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 11359] age 1000 use 0 sumd 0x252a/0x252a pr 17 bkt 1159/110 flags 2 drop 0/0 ifp ng0 bytes 426 pkts 6 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 11053] age 988 use 0 sumd 0x252a/0x252a pr 17 bkt 640/1638 flags 2 drop 0/0 ifp ng0 bytes 426 pkts 6 MAP 192.168.0.106 1222 <- -> 200.x.x.x 27950 [128.177.0.41 80] age 189 use 0 sumd 0x433b/0x433b pr 6 bkt 1049/68 flags 1 drop 0/0 ifp ng0 bytes 1590 pkts 11 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.255.54.14 53280] age 910 use 0 sumd 0x252a/0x252a pr 17 bkt 793/1791 flags 2 drop 0/0 ifp ng0 bytes 191 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.170.125.5 32831] age 1124 use 0 sumd 0x252a/0x252a pr 17 bkt 585/1583 flags 2 drop 0/0 ifp ng0 bytes 1397 pkts 21 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.170.127.228 53] age 957 use 0 sumd 0x252a/0x252a pr 17 bkt 354/1352 flags 2 drop 0/0 ifp ng0 bytes 382 pkts 6 MAP 192.168.0.106 1220 <- -> 200.x.x.x 27948 [128.177.0.41 80] age 150 use 0 sumd 0x433b/0x433b pr 6 bkt 537/1603 flags 1 drop 0/0 ifp ng0 bytes 8030 pkts 15 MAP 192.168.0.106 1218 <- -> 200.x.x.x 27946 [128.177.0.38 80] age 160 use 0 sumd 0x433b/0x433b pr 6 bkt 7/1073 flags 1 drop 0/0 ifp ng0 bytes 5964 pkts 17 MAP 192.168.0.106 1216 <- -> 200.x.x.x 27944 [128.177.0.38 80] age 148 use 0 sumd 0x433b/0x433b pr 6 bkt 1542/561 flags 1 drop 0/0 ifp ng0 bytes 3202 pkts 13 MAP 192.168.0.106 1214 <- -> 200.x.x.x 27942 [65.55.195.250 443] age 145 use 0 sumd 0x433b/0x433b pr 6 bkt 587/1653 flags 1 drop 0/0 ifp ng0 bytes 6816 pkts 15 MAP 192.168.0.106 1213 <- -> 200.x.x.x 27941 [64.34.199.116 80] age 144 use 0 sumd 0x433b/0x433b pr 6 bkt 724/766 flags 1 drop 0/0 ifp ng0 bytes 2173 pkts 11 MAP 192.168.0.106 1211 <- -> 200.x.x.x 27939 [64.34.199.116 80] age 143 use 0 sumd 0x433b/0x433b pr 6 bkt 212/254 flags 1 drop 0/0 ifp ng0 bytes 5015 pkts 12 MAP 192.168.0.106 1209 <- -> 200.x.x.x 27937 [128.177.0.41 80] age 141 use 0 sumd 0x433b/0x433b pr 6 bkt 1815/834 flags 1 drop 0/0 ifp ng0 bytes 9594 pkts 16 MAP 192.168.0.106 1207 <- -> 200.x.x.x 27935 [128.177.0.37 80] age 160 use 0 sumd 0x433b/0x433b pr 6 bkt 1279/298 flags 1 drop 0/0 ifp ng0 bytes 3358 pkts 14 MAP 192.168.0.106 1201 <- -> 200.x.x.x 27929 [64.34.199.116 80] age 137 use 0 sumd 0x433b/0x433b pr 6 bkt 1746/1788 flags 1 drop 0/0 ifp ng0 bytes 2174 pkts 11 MAP 192.168.0.106 1199 <- -> 200.x.x.x 27927 [64.34.199.116 80] age 136 use 0 sumd 0x433b/0x433b pr 6 bkt 1234/1276 flags 1 drop 0/0 ifp ng0 bytes 1327 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [199.230.26.19 53] age 876 use 0 sumd 0x252a/0x252a pr 17 bkt 411/1409 flags 2 drop 0/0 ifp ng0 bytes 273 pkts 4 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [217.156.98.2 56784] age 875 use 0 sumd 0x252a/0x252a pr 17 bkt 171/1169 flags 2 drop 0/0 ifp ng0 bytes 273 pkts 4 MAP 192.168.0.1 4589 <- -> 200.x.x.x 1329 [64.74.197.73 80] age 102 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1813/317 flags 1 drop 0/0 ifp ng0 bytes 1278 pkts 10 MAP 192.168.0.1 4588 <- -> 200.x.x.x 1328 [69.20.37.40 80] age 102 use 0 sumd 0xce7f/0xce7f pr 6 bkt 327/878 flags 1 drop 0/0 ifp ng0 bytes 1807 pkts 11 MAP 192.168.0.1 4587 <- -> 200.x.x.x 1327 [64.74.197.73 80] age 101 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1301/1852 flags 1 drop 0/0 ifp ng0 bytes 2010 pkts 10 MAP 192.168.0.1 4586 <- -> 200.x.x.x 1326 [69.20.37.136 80] age 112 use 0 sumd 0xce7f/0xce7f pr 6 bkt 391/1965 flags 1 drop 0/0 ifp ng0 bytes 29216 pkts 40 MAP 192.168.0.1 4585 <- -> 200.x.x.x 1325 [69.20.37.40 80] age 97 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1606/110 flags 1 drop 0/0 ifp ng0 bytes 1811 pkts 11 MAP 192.168.0.1 4584 <- -> 200.x.x.x 1324 [64.74.197.73 80] age 97 use 0 sumd 0xce7f/0xce7f pr 6 bkt 533/1084 flags 1 drop 0/0 ifp ng0 bytes 1275 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.255.54.14 52223] age 840 use 0 sumd 0x252a/0x252a pr 17 bkt 560/1558 flags 2 drop 0/0 ifp ng0 bytes 191 pkts 3 MAP 192.168.0.1 4583 <- -> 200.x.x.x 1323 [64.74.197.73 80] age 96 use 0 sumd 0xce7f/0xce7f pr 6 bkt 277/828 flags 1 drop 0/0 ifp ng0 bytes 1952 pkts 9 MAP 192.168.0.1 4582 <- -> 200.x.x.x 1322 [209.85.147.99 80] age 222 use 0 sumd 0xce7f/0xce7f pr 6 bkt 739/266 flags 1 drop 0/0 ifp ng0 bytes 2200 pkts 10 MAP 192.168.0.1 4581 <- -> 200.x.x.x 1321 [74.53.59.227 80] age 222 use 0 sumd 0xce7f/0xce7f pr 6 bkt 980/507 flags 1 drop 0/0 ifp ng0 bytes 1140 pkts 7 MAP 192.168.0.1 4580 <- -> 200.x.x.x 1320 [74.53.59.226 80] age 222 use 0 sumd 0xce7f/0xce7f pr 6 bkt 718/245 flags 1 drop 0/0 ifp ng0 bytes 5790 pkts 17 MAP 192.168.0.1 4579 <- -> 200.x.x.x 1319 [74.53.59.226 80] age 222 use 0 sumd 0xce7f/0xce7f pr 6 bkt 462/2036 flags 1 drop 0/0 ifp ng0 bytes 6711 pkts 19 MAP 192.168.0.1 4578 <- -> 200.x.x.x 1318 [74.53.59.227 80] age 222 use 0 sumd 0xce7f/0xce7f pr 6 bkt 212/1786 flags 1 drop 0/0 ifp ng0 bytes 3901 pkts 13 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [74.53.59.133 1028] age 814 use 0 sumd 0x252a/0x252a pr 17 bkt 2007/1981 flags 2 drop 0/0 ifp ng0 bytes 64 pkts 1 MAP 192.168.0.1 4577 <- -> 200.x.x.x 1317 [74.53.59.165 80] age 101 use 0 sumd 0xce7f/0xce7f pr 6 bkt 1631/1158 flags 1 drop 0/0 ifp ng0 bytes 11962 pkts 25 MAP 192.168.0.1 3651 <- -> 200.x.x.x 1399 [200.33.146.161 53] age 817 use 0 sumd 0xd26f/0xd26f pr 17 bkt 506/66 flags 2 drop 0/0 ifp ng0 bytes 1002 pkts 12 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [199.230.26.137 53] age 909 use 0 sumd 0x252a/0x252a pr 17 bkt 1119/1093 flags 2 drop 0/0 ifp ng0 bytes 546 pkts 8 MAP 192.168.0.106 1197 <- -> 200.x.x.x 27925 [208.185.211.84 80] age 57 use 0 sumd 0x433b/0x433b pr 6 bkt 1022/41 flags 1 drop 0/0 ifp ng0 bytes 8007 pkts 15 MAP 192.168.0.106 1195 <- -> 200.x.x.x 27923 [128.177.0.38 80] age 56 use 0 sumd 0x433b/0x433b pr 6 bkt 260/1326 flags 1 drop 0/0 ifp ng0 bytes 1866 pkts 10 MAP 192.168.0.106 1193 <- -> 200.x.x.x 27921 [128.177.0.38 80] age 55 use 0 sumd 0x433b/0x433b pr 6 bkt 1795/814 flags 1 drop 0/0 ifp ng0 bytes 1995 pkts 10 MAP 192.168.0.106 1191 <- -> 200.x.x.x 27919 [128.177.0.38 80] age 55 use 0 sumd 0x433b/0x433b pr 6 bkt 1283/302 flags 1 drop 0/0 ifp ng0 bytes 3201 pkts 13 MAP 192.168.0.106 1189 <- -> 200.x.x.x 27917 [128.177.0.37 80] age 67 use 0 sumd 0x433b/0x433b pr 6 bkt 765/1831 flags 1 drop 0/0 ifp ng0 bytes 1594 pkts 11 MAP 192.168.0.106 1187 <- -> 200.x.x.x 27915 [65.55.195.250 443] age 52 use 0 sumd 0x433b/0x433b pr 6 bkt 1863/882 flags 1 drop 0/0 ifp ng0 bytes 6816 pkts 15 MAP 192.168.0.106 1186 <- -> 200.x.x.x 27914 [64.34.199.116 80] age 51 use 0 sumd 0x433b/0x433b pr 6 bkt 2000/2042 flags 1 drop 0/0 ifp ng0 bytes 2173 pkts 11 MAP 192.168.0.106 1184 <- -> 200.x.x.x 27912 [64.34.199.116 80] age 51 use 0 sumd 0x433b/0x433b pr 6 bkt 1488/1530 flags 1 drop 0/0 ifp ng0 bytes 4485 pkts 12 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.175.244.180 29445] age 756 use 0 sumd 0x252a/0x252a pr 17 bkt 930/1928 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.175.244.180 39642] age 752 use 0 sumd 0x252a/0x252a pr 17 bkt 228/1226 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.175.244.180 28461] age 749 use 0 sumd 0x252a/0x252a pr 17 bkt 931/1929 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 55243] age 762 use 0 sumd 0x252a/0x252a pr 17 bkt 320/1318 flags 2 drop 0/0 ifp ng0 bytes 273 pkts 4 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 54861] age 784 use 0 sumd 0x252a/0x252a pr 17 bkt 815/1813 flags 2 drop 0/0 ifp ng0 bytes 486 pkts 7 MAP 192.168.0.106 1182 <- -> 200.x.x.x 27910 [128.177.0.41 80] age 9 use 0 sumd 0x433b/0x433b pr 6 bkt 1044/63 flags 1 drop 0/0 ifp ng0 bytes 9625 pkts 18 MAP 192.168.0.106 1176 <- -> 200.x.x.x 27904 [209.85.197.99 80] age 273 use 0 sumd 0x433b/0x433b pr 6 bkt 164/206 flags 1 drop 0/0 ifp ng0 bytes 12868 pkts 29 MAP 192.168.0.106 1174 <- -> 200.x.x.x 27902 [200.52.193.197 80] age 273 use 0 sumd 0x433b/0x433b pr 6 bkt 800/1897 flags 1 drop 0/0 ifp ng0 bytes 6891 pkts 27 MAP 192.168.0.106 1168 <- -> 200.x.x.x 27896 [200.52.193.197 80] age 272 use 0 sumd 0x433b/0x433b pr 6 bkt 1311/361 flags 1 drop 0/0 ifp ng0 bytes 160383 pkts 183 MAP 192.168.0.106 1166 <- -> 200.x.x.x 27894 [72.14.255.167 80] age 273 use 0 sumd 0x433b/0x433b pr 6 bkt 1924/974 flags 1 drop 0/0 ifp ng0 bytes 17086 pkts 34 MAP 192.168.0.106 1164 <- -> 200.x.x.x 27892 [72.14.255.167 80] age 273 use 0 sumd 0x433b/0x433b pr 6 bkt 1412/462 flags 1 drop 0/0 ifp ng0 bytes 12279 pkts 25 MAP 192.168.0.106 1157 <- -> 200.x.x.x 27885 [209.85.173.147 80] age 107 use 0 sumd 0x433b/0x433b pr 6 bkt 577/650 flags 1 drop 0/0 ifp ng0 bytes 1126 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 54484] age 772 use 0 sumd 0x252a/0x252a pr 17 bkt 574/1572 flags 2 drop 0/0 ifp ng0 bytes 486 pkts 7 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 54197] age 762 use 0 sumd 0x252a/0x252a pr 17 bkt 825/1823 flags 2 drop 0/0 ifp ng0 bytes 486 pkts 7 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.238.24.204 32831] age 672 use 0 sumd 0x252a/0x252a pr 17 bkt 1039/2037 flags 2 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [213.251.132.250 47788] age 698 use 0 sumd 0x252a/0x252a pr 17 bkt 962/1960 flags 2 drop 0/0 ifp ng0 bytes 213 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 21142] age 663 use 0 sumd 0x252a/0x252a pr 17 bkt 742/1740 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.238.24.194 32784] age 662 use 0 sumd 0x252a/0x252a pr 17 bkt 1229/180 flags 2 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 40736] age 659 use 0 sumd 0x252a/0x252a pr 17 bkt 1316/267 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 24685] age 657 use 0 sumd 0x252a/0x252a pr 17 bkt 495/1493 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 57879] age 656 use 0 sumd 0x252a/0x252a pr 17 bkt 1126/77 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 45860] age 655 use 0 sumd 0x252a/0x252a pr 17 bkt 313/1311 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 41710] age 653 use 0 sumd 0x252a/0x252a pr 17 bkt 851/1849 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 11539] age 649 use 0 sumd 0x252a/0x252a pr 17 bkt 1986/937 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 17860] age 647 use 0 sumd 0x252a/0x252a pr 17 bkt 241/1239 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 52241] age 646 use 0 sumd 0x252a/0x252a pr 17 bkt 1633/584 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 51460] age 645 use 0 sumd 0x252a/0x252a pr 17 bkt 349/1347 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.238.7.101 32769] age 671 use 0 sumd 0x252a/0x252a pr 17 bkt 1133/1107 flags 2 drop 0/0 ifp ng0 bytes 213 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 61066] age 641 use 0 sumd 0x252a/0x252a pr 17 bkt 1920/871 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 21843] age 637 use 0 sumd 0x252a/0x252a pr 17 bkt 2016/967 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 8622] age 635 use 0 sumd 0x252a/0x252a pr 17 bkt 696/1694 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 27094] age 634 use 0 sumd 0x252a/0x252a pr 17 bkt 773/1771 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 38453] age 633 use 0 sumd 0x252a/0x252a pr 17 bkt 542/1540 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.23.10.52 38803] age 809 use 0 sumd 0x252a/0x252a pr 17 bkt 1621/572 flags 2 drop 0/0 ifp ng0 bytes 453 pkts 7 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 32887] age 631 use 0 sumd 0x252a/0x252a pr 17 bkt 1058/9 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 62184] age 627 use 0 sumd 0x252a/0x252a pr 17 bkt 1442/393 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 34816] age 625 use 0 sumd 0x252a/0x252a pr 17 bkt 1307/258 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 7072] age 624 use 0 sumd 0x252a/0x252a pr 17 bkt 1218/169 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 40835] age 623 use 0 sumd 0x252a/0x252a pr 17 bkt 67/1065 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.238.7.102 32769] age 651 use 0 sumd 0x252a/0x252a pr 17 bkt 1139/1113 flags 2 drop 0/0 ifp ng0 bytes 213 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 52633] age 613 use 0 sumd 0x252a/0x252a pr 17 bkt 1633/584 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 12588] age 613 use 0 sumd 0x252a/0x252a pr 17 bkt 202/1200 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.23.10.52 5] age 707 use 0 sumd 0x252a/0x252a pr 17 bkt 1964/915 flags 2 drop 0/0 ifp ng0 bytes 975 pkts 14 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.238.7.103 32771] age 612 use 0 sumd 0x252a/0x252a pr 17 bkt 1657/1631 flags 2 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 11801] age 609 use 0 sumd 0x252a/0x252a pr 17 bkt 1476/427 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 34112] age 609 use 0 sumd 0x252a/0x252a pr 17 bkt 1294/245 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 43620] age 607 use 0 sumd 0x252a/0x252a pr 17 bkt 330/1328 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 56975] age 607 use 0 sumd 0x252a/0x252a pr 17 bkt 1137/88 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 54502] age 606 use 0 sumd 0x252a/0x252a pr 17 bkt 900/1898 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 28646] age 606 use 0 sumd 0x252a/0x252a pr 17 bkt 781/1779 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 32863] age 605 use 0 sumd 0x252a/0x252a pr 17 bkt 1055/6 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 4888] age 605 use 0 sumd 0x252a/0x252a pr 17 bkt 1175/126 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [80.243.160.1 20692] age 605 use 0 sumd 0x252a/0x252a pr 17 bkt 1601/552 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [62.42.63.50 28007] age 696 use 0 sumd 0x252a/0x252a pr 17 bkt 1804/755 flags 2 drop 0/0 ifp ng0 bytes 546 pkts 8 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [62.42.230.5 2730] age 652 use 0 sumd 0x252a/0x252a pr 17 bkt 2039/990 flags 2 drop 0/0 ifp ng0 bytes 273 pkts 4 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 44118] age 595 use 0 sumd 0x252a/0x252a pr 17 bkt 824/1822 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.23.10.52 53] age 689 use 0 sumd 0x252a/0x252a pr 17 bkt 1970/921 flags 2 drop 0/0 ifp ng0 bytes 975 pkts 14 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 24210] age 591 use 0 sumd 0x252a/0x252a pr 17 bkt 1777/728 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 24895] age 589 use 0 sumd 0x252a/0x252a pr 17 bkt 1002/2000 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 63983] age 588 use 0 sumd 0x252a/0x252a pr 17 bkt 1176/127 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.14 21529] age 587 use 0 sumd 0x252a/0x252a pr 17 bkt 1496/447 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 59235] age 585 use 0 sumd 0x252a/0x252a pr 17 bkt 135/1133 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 17750] age 581 use 0 sumd 0x252a/0x252a pr 17 bkt 739/1737 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 8859] age 579 use 0 sumd 0x252a/0x252a pr 17 bkt 1992/943 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 2041] age 578 use 0 sumd 0x252a/0x252a pr 17 bkt 1465/416 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [208.69.32.17 61837] age 577 use 0 sumd 0x252a/0x252a pr 17 bkt 662/1660 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.88 60100] age 549 use 0 sumd 0x252a/0x252a pr 17 bkt 1448/399 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.88 4925] age 542 use 0 sumd 0x252a/0x252a pr 17 bkt 1472/423 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [212.33.32.160 32789] age 597 use 0 sumd 0x252a/0x252a pr 17 bkt 1389/340 flags 2 drop 0/0 ifp ng0 bytes 355 pkts 5 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.88 52147] age 527 use 0 sumd 0x252a/0x252a pr 17 bkt 1159/110 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.88 34280] age 521 use 0 sumd 0x252a/0x252a pr 17 bkt 328/1326 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.88 3027] age 520 use 0 sumd 0x252a/0x252a pr 17 bkt 971/1969 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.88 45238] age 519 use 0 sumd 0x252a/0x252a pr 17 bkt 1900/851 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.89 49649] age 519 use 0 sumd 0x252a/0x252a pr 17 bkt 651/1649 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 48978] age 574 use 0 sumd 0x252a/0x252a pr 17 bkt 25/1023 flags 2 drop 0/0 ifp ng0 bytes 333 pkts 5 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.88 15712] age 514 use 0 sumd 0x252a/0x252a pr 17 bkt 239/1237 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.88 49676] age 512 use 0 sumd 0x252a/0x252a pr 17 bkt 1385/336 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [80.243.161.1 32832] age 597 use 0 sumd 0x252a/0x252a pr 17 bkt 655/1653 flags 2 drop 0/0 ifp ng0 bytes 426 pkts 6 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.89 8099] age 509 use 0 sumd 0x252a/0x252a pr 17 bkt 991/1989 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 48504] age 582 use 0 sumd 0x252a/0x252a pr 17 bkt 1563/514 flags 2 drop 0/0 ifp ng0 bytes 546 pkts 8 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.89 58973] age 497 use 0 sumd 0x252a/0x252a pr 17 bkt 1693/644 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.231.236.91 9316] age 492 use 0 sumd 0x252a/0x252a pr 17 bkt 724/1722 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.89 35949] age 491 use 0 sumd 0x252a/0x252a pr 17 bkt 1605/556 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 48149] age 570 use 0 sumd 0x252a/0x252a pr 17 bkt 782/1780 flags 2 drop 0/0 ifp ng0 bytes 546 pkts 8 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.89 33392] age 489 use 0 sumd 0x252a/0x252a pr 17 bkt 316/1314 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.90 58919] age 489 use 0 sumd 0x252a/0x252a pr 17 bkt 205/1203 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.89 47132] age 487 use 0 sumd 0x252a/0x252a pr 17 bkt 1383/334 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.231.236.91 15518] age 486 use 0 sumd 0x252a/0x252a pr 17 bkt 1267/218 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.231.236.91 53051] age 484 use 0 sumd 0x252a/0x252a pr 17 bkt 634/1632 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.90 16959] age 482 use 0 sumd 0x252a/0x252a pr 17 bkt 44/1042 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.89 38561] age 481 use 0 sumd 0x252a/0x252a pr 17 bkt 598/1596 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 47875] age 554 use 0 sumd 0x252a/0x252a pr 17 bkt 267/1265 flags 2 drop 0/0 ifp ng0 bytes 546 pkts 8 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.18.89 9209] age 479 use 0 sumd 0x252a/0x252a pr 17 bkt 494/1492 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.196.12.12 20218] age 470 use 0 sumd 0x252a/0x252a pr 17 bkt 443/1441 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.196.12.12 3024] age 468 use 0 sumd 0x252a/0x252a pr 17 bkt 1906/857 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.231.236.91 26363] age 468 use 0 sumd 0x252a/0x252a pr 17 bkt 553/1551 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.90 47134] age 467 use 0 sumd 0x252a/0x252a pr 17 bkt 1949/900 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [82.76.213.37 53] age 500 use 0 sumd 0x252a/0x252a pr 17 bkt 649/1647 flags 2 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.231.236.91 22808] age 462 use 0 sumd 0x252a/0x252a pr 17 bkt 1791/742 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.90 3694] age 461 use 0 sumd 0x252a/0x252a pr 17 bkt 1789/740 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.90 23175] age 460 use 0 sumd 0x252a/0x252a pr 17 bkt 77/1075 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.231.236.91 18487] age 460 use 0 sumd 0x252a/0x252a pr 17 bkt 1522/473 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.90 53183] age 459 use 0 sumd 0x252a/0x252a pr 17 bkt 201/1199 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.91 20781] age 458 use 0 sumd 0x252a/0x252a pr 17 bkt 1598/549 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [82.76.213.37 1190] age 478 use 0 sumd 0x252a/0x252a pr 17 bkt 923/1921 flags 2 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.231.236.91 33686] age 457 use 0 sumd 0x252a/0x252a pr 17 bkt 1337/288 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [81.196.12.12 59484] age 456 use 0 sumd 0x252a/0x252a pr 17 bkt 1089/40 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.231.236.91 29255] age 455 use 0 sumd 0x252a/0x252a pr 17 bkt 1566/517 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.90 57510] age 454 use 0 sumd 0x252a/0x252a pr 17 bkt 2006/957 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.90 19867] age 452 use 0 sumd 0x252a/0x252a pr 17 bkt 1090/41 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.91 8639] age 452 use 0 sumd 0x252a/0x252a pr 17 bkt 33/1031 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.233.184.133 12850] age 499 use 0 sumd 0x252a/0x252a pr 17 bkt 406/380 flags 2 drop 0/0 ifp ng0 bytes 353 pkts 5 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.28.75.220 1024] age 602 use 0 sumd 0x252a/0x252a pr 17 bkt 978/1976 flags 2 drop 0/0 ifp ng0 bytes 726 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.91 22275] age 436 use 0 sumd 0x252a/0x252a pr 17 bkt 1087/38 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 9345] age 435 use 0 sumd 0x252a/0x252a pr 17 bkt 91/1089 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.28.75.220 1] age 592 use 0 sumd 0x252a/0x252a pr 17 bkt 1230/181 flags 2 drop 0/0 ifp ng0 bytes 726 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.91 1770] age 430 use 0 sumd 0x252a/0x252a pr 17 bkt 779/1777 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.91 15194] age 430 use 0 sumd 0x252a/0x252a pr 17 bkt 814/1812 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.91 36612] age 428 use 0 sumd 0x252a/0x252a pr 17 bkt 1399/350 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.89 59489] age 428 use 0 sumd 0x252a/0x252a pr 17 bkt 720/1718 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 12991] age 425 use 0 sumd 0x252a/0x252a pr 17 bkt 1648/599 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.91 37077] age 424 use 0 sumd 0x252a/0x252a pr 17 bkt 1682/633 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.28.91.230 1026] age 583 use 0 sumd 0x252a/0x252a pr 17 bkt 271/1269 flags 2 drop 0/0 ifp ng0 bytes 726 pkts 10 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.91 18141] age 422 use 0 sumd 0x252a/0x252a pr 17 bkt 1609/560 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.233.184.133 10899] age 478 use 0 sumd 0x252a/0x252a pr 17 bkt 666/640 flags 2 drop 0/0 ifp ng0 bytes 333 pkts 5 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.89 35943] age 421 use 0 sumd 0x252a/0x252a pr 17 bkt 117/1115 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [82.179.198.122 34939] age 467 use 0 sumd 0x252a/0x252a pr 17 bkt 1883/1857 flags 2 drop 0/0 ifp ng0 bytes 382 pkts 6 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 9495] age 415 use 0 sumd 0x252a/0x252a pr 17 bkt 1614/565 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [64.233.184.133 10177] age 469 use 0 sumd 0x252a/0x252a pr 17 bkt 157/131 flags 2 drop 0/0 ifp ng0 bytes 353 pkts 5 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 9700] age 413 use 0 sumd 0x252a/0x252a pr 17 bkt 872/1870 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 9272] age 407 use 0 sumd 0x252a/0x252a pr 17 bkt 1873/824 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 9946] age 407 use 0 sumd 0x252a/0x252a pr 17 bkt 360/1358 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.89 46468] age 406 use 0 sumd 0x252a/0x252a pr 17 bkt 1441/392 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 10514] age 405 use 0 sumd 0x252a/0x252a pr 17 bkt 338/1336 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 11844] age 403 use 0 sumd 0x252a/0x252a pr 17 bkt 861/1859 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [217.237.151.203 32783] age 402 use 0 sumd 0x252a/0x252a pr 17 bkt 748/1746 flags 2 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [209.244.5.114 61431] age 441 use 0 sumd 0x252a/0x252a pr 17 bkt 249/223 flags 2 drop 0/0 ifp ng0 bytes 142 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.89 31137] age 400 use 0 sumd 0x252a/0x252a pr 17 bkt 617/1615 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.89 33626] age 399 use 0 sumd 0x252a/0x252a pr 17 bkt 874/1872 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.89 9380] age 398 use 0 sumd 0x252a/0x252a pr 17 bkt 1300/251 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 9446] age 397 use 0 sumd 0x252a/0x252a pr 17 bkt 1383/334 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 10559] age 395 use 0 sumd 0x252a/0x252a pr 17 bkt 1623/574 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.89 26921] age 393 use 0 sumd 0x252a/0x252a pr 17 bkt 586/1584 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 7622] age 393 use 0 sumd 0x252a/0x252a pr 17 bkt 1372/323 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [209.244.5.115 63335] age 433 use 0 sumd 0x252a/0x252a pr 17 bkt 245/219 flags 2 drop 0/0 ifp ng0 bytes 142 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.186.19.89 16348] age 391 use 0 sumd 0x252a/0x252a pr 17 bkt 1334/285 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [217.237.151.204 32787] age 391 use 0 sumd 0x252a/0x252a pr 17 bkt 1778/729 flags 2 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 8246] age 387 use 0 sumd 0x252a/0x252a pr 17 bkt 1357/308 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [217.237.151.202 33037] age 387 use 0 sumd 0x252a/0x252a pr 17 bkt 231/1229 flags 2 drop 0/0 ifp ng0 bytes 120 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 11415] age 385 use 0 sumd 0x252a/0x252a pr 17 bkt 1637/588 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 10772] age 385 use 0 sumd 0x252a/0x252a pr 17 bkt 851/1849 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 9434] age 379 use 0 sumd 0x252a/0x252a pr 17 bkt 358/1356 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [63.251.135.89 9024] age 377 use 0 sumd 0x252a/0x252a pr 17 bkt 1873/824 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [65.55.238.58 52459] age 367 use 0 sumd 0x252a/0x252a pr 17 bkt 390/1388 flags 2 drop 0/0 ifp ng0 bytes 64 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [65.55.238.60 14579] age 375 use 0 sumd 0x252a/0x252a pr 17 bkt 255/1253 flags 2 drop 0/0 ifp ng0 bytes 192 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 42801] age 362 use 0 sumd 0x252a/0x252a pr 17 bkt 1788/739 flags 2 drop 0/0 ifp ng0 bytes 202 pkts 3 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60798] age 300 use 0 sumd 0x252a/0x252a pr 17 bkt 1705/656 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 42346] age 388 use 0 sumd 0x252a/0x252a pr 17 bkt 2/1000 flags 2 drop 0/0 ifp ng0 bytes 606 pkts 9 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [207.249.90.253 32769] age 704 use 0 sumd 0x252a/0x252a pr 17 bkt 1693/644 flags 2 drop 0/0 ifp ng0 bytes 906 pkts 14 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60797] age 292 use 0 sumd 0x252a/0x252a pr 17 bkt 1449/400 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 42023] age 376 use 0 sumd 0x252a/0x252a pr 17 bkt 1272/223 flags 2 drop 0/0 ifp ng0 bytes 606 pkts 9 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60796] age 286 use 0 sumd 0x252a/0x252a pr 17 bkt 1193/144 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [207.249.66.253 48992] age 654 use 0 sumd 0x252a/0x252a pr 17 bkt 360/1358 flags 2 drop 0/0 ifp ng0 bytes 846 pkts 13 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60795] age 281 use 0 sumd 0x252a/0x252a pr 17 bkt 937/1935 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.113.57.20 41819] age 366 use 0 sumd 0x252a/0x252a pr 17 bkt 254/1252 flags 2 drop 0/0 ifp ng0 bytes 535 pkts 8 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60794] age 277 use 0 sumd 0x252a/0x252a pr 17 bkt 681/1679 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60793] age 276 use 0 sumd 0x252a/0x252a pr 17 bkt 425/1423 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [212.204.192.12 53] age 274 use 0 sumd 0x252a/0x252a pr 17 bkt 1692/643 flags 2 drop 0/0 ifp ng0 bytes 71 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60792] age 271 use 0 sumd 0x252a/0x252a pr 17 bkt 169/1167 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60791] age 271 use 0 sumd 0x252a/0x252a pr 17 bkt 1960/911 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60788] age 270 use 0 sumd 0x252a/0x252a pr 17 bkt 1192/143 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60787] age 264 use 0 sumd 0x252a/0x252a pr 17 bkt 936/1934 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60786] age 264 use 0 sumd 0x252a/0x252a pr 17 bkt 680/1678 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60038] age 259 use 0 sumd 0x252a/0x252a pr 17 bkt 1703/654 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60783] age 259 use 0 sumd 0x252a/0x252a pr 17 bkt 1959/910 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60782] age 258 use 0 sumd 0x252a/0x252a pr 17 bkt 1703/654 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60779] age 253 use 0 sumd 0x252a/0x252a pr 17 bkt 935/1933 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [207.249.66.231 1024] age 499 use 0 sumd 0x252a/0x252a pr 17 bkt 29/1027 flags 2 drop 0/0 ifp ng0 bytes 1140 pkts 19 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60778] age 252 use 0 sumd 0x252a/0x252a pr 17 bkt 679/1677 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60776] age 249 use 0 sumd 0x252a/0x252a pr 17 bkt 167/1165 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [193.252.22.159 36977] age 278 use 0 sumd 0x252a/0x252a pr 17 bkt 696/1694 flags 2 drop 0/0 ifp ng0 bytes 142 pkts 2 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60775] age 247 use 0 sumd 0x252a/0x252a pr 17 bkt 1958/909 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [195.242.208.40 34626] age 517 use 0 sumd 0x252a/0x252a pr 17 bkt 1476/427 flags 2 drop 0/0 ifp ng0 bytes 3140 pkts 44 MAP 192.168.0.106 1035 <- -> 200.x.x.x 27763 [200.33.146.161 53] age 245 use 0 sumd 0x433b/0x433b pr 17 bkt 95/1192 flags 2 drop 0/0 ifp ng0 bytes 204 pkts 2 MAP 192.168.0.106 1035 <- -> 200.x.x.x 27763 [200.33.146.153 53] age 776 use 0 sumd 0x433b/0x433b pr 17 bkt 47/1144 flags 2 drop 0/0 ifp ng0 bytes 1084 pkts 12 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [62.241.162.12 13027] age 244 use 0 sumd 0x252a/0x252a pr 17 bkt 949/1947 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [83.118.176.168 60765] age 243 use 0 sumd 0x252a/0x252a pr 17 bkt 1445/396 flags 2 drop 0/0 ifp ng0 bytes 60 pkts 1 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [200.56.233.11 32835] age 502 use 0 sumd 0x252a/0x252a pr 17 bkt 162/1160 flags 2 drop 0/0 ifp ng0 bytes 786 pkts 12 RDR 192.168.0.103 53 <- -> 200.x.x.x 53 [200.56.224.11 32876] age 502 use 0 sumd 0x252a/0x252a pr 17 bkt 2038/989 flags 2 drop 0/0 ifp ng0 bytes 1002 pkts 14 List of active host mappings: 192.168.0.1 -> 0.0.0.0 (use = 39 hv = 217) 192.168.0.106 -> 0.0.0.0 (use = 20 hv = 637) 192.168.0.106 -> 0.0.0.0 (use = 7 hv = 637) 192.168.0.106 -> 0.0.0.0 (use = 2 hv = 637)

ipfstat -v

opts 0x40 name /dev/ipl IPv6 packets: in 0 out 0 input packets: blocked 290 passed 4185 nomatch 0 counted 0 short 0 output packets: blocked 0 passed 3780 nomatch 0 counted 0 short 0 input packets logged: blocked 290 passed 0 output packets logged: blocked 0 passed 0 packets logged: input 0 output 0 log failures: input 0 output 0 fragment state(in): kept 0 lost 0 not fragmented 0 fragment state(out): kept 0 lost 0 not fragmented 0 packet state(in): kept 420 lost 0 packet state(out): kept 197 lost 0 ICMP replies: 0 TCP RSTs sent: 0 Invalid source(in): 0 Result cache hits(in): 29 (out): 0 IN Pullups succeeded: 0 failed: 0 OUT Pullups succeeded: 0 failed: 0 Fastroute successes: 0 failures: 0 TCP cksum fails(in): 0 (out): 0 Packet log flags set: (0) none

ipfstat -nio

@1 pass out quick on lo0 from any to any @2 pass out quick on sis0 proto udp from 192.168.0.110/32 port = 67 to any port = 68 @3 pass out quick on rl0 proto udp from 192.168.0.110/32 port = 67 to any port = 68 @4 pass out quick on ng0 proto udp from any port = 68 to any port = 67 @5 pass out quick on sis0 from any to any keep state @6 pass out quick on ng0 from any to any keep state @7 pass out quick on rl0 from any to any keep state @8 block out log quick from any to any @1 pass in quick on lo0 from any to any @2 block in log quick from any to any with short @3 block in log quick from any to any with ipopt @4 pass in quick on sis0 proto udp from any port = 68 to 255.255.255.255/32 port = 67 @5 pass in quick on sis0 proto udp from any port = 68 to 192.168.0.110/32 port = 67 @6 pass in quick on rl0 proto udp from any port = 68 to 255.255.255.255/32 port = 67 @7 pass in quick on rl0 proto udp from any port = 68 to 192.168.0.110/32 port = 67 @8 block in log quick on ng0 from 192.168.0.0/24 to any @9 block in log quick on ng0 proto udp from any port = 67 to 192.168.0.0/24 port = 68 @10 pass in quick on ng0 proto udp from any port = 67 to any port = 68 @11 block in log quick on ng0 from 10.0.0.0/8 to any @12 block in log quick on ng0 from 127.0.0.0/8 to any @13 block in log quick on ng0 from 172.16.0.0/12 to any @14 block in log quick on ng0 from 192.168.0.0/16 to any @15 skip 1 in proto tcp from any to any flags S/FSRA @16 block in log quick proto tcp from any to any @17 block in log quick on sis0 from any to any head 100 @1 pass in quick from 192.168.0.0/24 to 192.168.0.110/32 keep state group 100 @2 pass in quick from 192.168.0.0/24 to any keep state group 100 @18 block in log quick on ng0 from any to any head 200 @1 pass in quick proto udp from any to 192.168.0.103/32 port = 53 keep state group 200 @2 pass in quick proto tcp from any to 192.168.0.103/32 port = 80 keep state group 200 @3 pass in quick proto tcp from any to 192.168.0.103/32 port = 25 keep state group 200 @4 pass in quick proto tcp from any to 192.168.0.103/32 port = 110 keep state group 200 @5 pass in quick proto tcp from any to 192.168.0.103/32 port = 143 keep state group 200 @19 block in log quick on rl0 from any to any head 300 @20 block in log quick from any to any

unparsed ipnat rules

map ng0 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp map ng0 192.168.0.0/24 -> 0/32 portmap tcp/udp auto map ng0 192.168.0.0/24 -> 0/32 rdr ng0 0/0 port 25 -> 192.168.0.103 port 25 tcp rdr ng0 0/0 port 80 -> 192.168.0.103 port 80 tcp rdr ng0 0/0 port 110 -> 192.168.0.103 port 110 tcp rdr ng0 0/0 port 53 -> 192.168.0.103 port 53 udp rdr ng0 0/0 port 143 -> 192.168.0.103 port 143 tcp

unparsed ipfilter rules

# loopback pass in quick on lo0 all pass out quick on lo0 all # block short packets block in log quick all with short # block IP options block in log quick all with ipopts # allow access to DHCP server on LAN pass in quick on sis0 proto udp from any port = 68 to 255.255.255.255 port = 67 pass in quick on sis0 proto udp from any port = 68 to 192.168.0.110 port = 67 pass out quick on sis0 proto udp from 192.168.0.110 port = 67 to any port = 68 # allow access to DHCP server on opt1 pass in quick on rl0 proto udp from any port = 68 to 255.255.255.255 port = 67 pass in quick on rl0 proto udp from any port = 68 to 192.168.0.110 port = 67 pass out quick on rl0 proto udp from 192.168.0.110 port = 67 to any port = 68 # WAN spoof check block in log quick on ng0 from 192.168.0.0/24 to any # allow our DHCP client out to the WAN # XXX - should be more restrictive # (not possible at the moment - need 'me' like in ipfw) pass out quick on ng0 proto udp from any port = 68 to any port = 67 block in log quick on ng0 proto udp from any port = 67 to 192.168.0.0/24 port = 68 pass in quick on ng0 proto udp from any port = 67 to any port = 68 # LAN/OPT spoof check (needs to be after DHCP because of broadcast addresses) # block anything from private networks on WAN interface block in log quick on ng0 from 10.0.0.0/8 to any block in log quick on ng0 from 127.0.0.0/8 to any block in log quick on ng0 from 172.16.0.0/12 to any block in log quick on ng0 from 192.168.0.0/16 to any # Block TCP packets that do not mark the start of a connection skip 1 in proto tcp all flags S/SAFR block in log quick proto tcp all #--------------------------------------------------------------------------- # group head 100 - LAN interface #--------------------------------------------------------------------------- block in log quick on sis0 all head 100 # let out anything from the firewall host itself and decrypted IPsec traffic pass out quick on sis0 all keep state #--------------------------------------------------------------------------- # group head 200 - WAN interface #--------------------------------------------------------------------------- block in log quick on ng0 all head 200 # let out anything from the firewall host itself and decrypted IPsec traffic pass out quick on ng0 all keep state #--------------------------------------------------------------------------- # group head 300 - opt1 interface #--------------------------------------------------------------------------- block in log quick on rl0 all head 300 # let out anything from the firewall host itself and decrypted IPsec traffic pass out quick on rl0 all keep state # make sure the user cannot lock himself out of the webGUI pass in quick from 192.168.0.0/24 to 192.168.0.110 keep state group 100 # User-defined rules follow pass in quick proto udp from any to 192.168.0.103 port = 53 keep state group 200 pass in quick proto tcp from any to 192.168.0.103 port = 80 keep state group 200 pass in quick proto tcp from any to 192.168.0.103 port = 25 keep state group 200 pass in quick proto tcp from any to 192.168.0.103 port = 110 keep state group 200 pass in quick proto tcp from any to 192.168.0.103 port = 143 keep state group 200 pass in quick from 192.168.0.0/24 to any keep state group 100 #--------------------------------------------------------------------------- # default rules (just to be sure) #--------------------------------------------------------------------------- block in log quick all block out log quick all

unparsed ipfw rules

add 50000 set 4 pass all from 192.168.0.110 to any add 50001 set 4 pass all from any to 192.168.0.110

resolv.conf

domain akbmono.net.mx nameserver 200.33.146.153 nameserver 200.33.146.161

Processes

USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND root 382 3.0 5.9 7348 6740 ?? SN 5:08AM 0:00.23 /usr/local/bin/php status.php root 404 0.0 0.8 1332 876 ?? SN 5:08AM 0:00.00 sh -c ps xauww 2>&1 root 383 0.0 1.1 2256 1268 ?? S 5:08AM 0:00.03 /usr/local/sbin/mini_httpd -c **.php|**.cgi -u root -maxproc 16 -i /var/run/mini_httpd.pid root 240 0.0 0.7 1104 788 ?? I 5:00AM 0:00.01 /usr/local/bin/msntp -r -P no -l /var/run/msntp.pid -x 300 pool.ntp.org root 123 0.0 0.8 1336 888 ?? I 5:00AM 0:00.01 /bin/sh /etc/rc.initial console root 107 0.0 0.7 1332 840 con- I 5:00AM 0:00.05 /bin/sh /usr/local/bin/runmsntp.sh /var/run/runmsntp.pid /var/run/msntp.pid 300 pool.ntp.org root 103 0.0 1.3 1836 1504 ?? Is 5:00AM 0:00.00 /usr/local/sbin/dhcpd -cf /var/etc/dhcpd.conf sis0 nobody 101 0.0 0.7 1020 788 ?? I 5:00AM 0:00.01 /usr/local/sbin/dnsmasq root 96 0.0 1.1 2248 1224 ?? Ss 5:00AM 0:00.02 /usr/local/sbin/mini_httpd -c **.php|**.cgi -u root -maxproc 16 -i /var/run/mini_httpd.pid root 93 0.0 0.6 1004 708 ?? Ss 5:00AM 0:00.05 /usr/sbin/syslogd -ss root 88 0.0 1.1 1456 1224 ?? Ss 5:00AM 0:00.05 /sbin/ipmon -sD root 73 0.0 1.1 2256 1288 ?? Ss 5:00AM 0:00.03 /usr/local/sbin/mpd -b -d /var/etc -p /var/run/mpd.pid pppoe root 9 0.0 0.0 0 0 ?? DL 5:00AM 0:00.00 (vnlru) root 8 0.0 0.0 0 0 ?? DL 5:00AM 0:00.01 (syncer) root 7 0.0 0.0 0 0 ?? DL 5:00AM 0:00.00 (bufdaemon) root 6 0.0 0.0 0 0 ?? DL 5:00AM 0:00.00 (pagedaemon) root 5 0.0 0.0 0 0 ?? DL 5:00AM 0:00.00 (usbtask) root 4 0.0 0.0 0 0 ?? DL 5:00AM 0:00.00 (usb0) root 3 0.0 0.0 0 0 ?? DL 5:00AM 0:00.00 (taskqueue) root 2 0.0 0.0 0 0 ?? DL 5:00AM 0:00.00 (cryptoret) root 1 0.0 0.6 1060 696 ?? ILs 5:00AM 0:00.01 /sbin/init -- root 405 0.0 0.6 1080 640 ?? RN 5:08AM 0:00.00 ps xauww root 0 0.0 0.0 0 0 ?? DLs 5:00AM 0:00.00 (swapper)

dhcpd.conf

option domain-name "akbmono.net.mx"; default-lease-time 7200; max-lease-time 86400; authoritative; log-facility local7; ddns-update-style none; subnet 192.168.0.0 netmask 255.255.255.0 { pool { range 192.168.0.0 192.168.0.255; } option routers 192.168.0.110; option domain-name-servers 192.168.0.110; }

ez-ipupdate.cache

cat: /conf/ez-ipupdate.cache: No such file or directory

df

Filesystem 512-blocks Used Avail Capacity Mounted on /dev/md0c 21758 21640 118 99% / procfs 8 8 0 100% /proc /dev/ad0a 13822 11122 2700 80% /cf

racoon.conf

cat: /var/etc/racoon.conf: No such file or directory

SPD

No SPD entries.

SAD

No SAD entries.

last 200 system log entries

Jun 22 05:00:04 m0n0wall /kernel: Copyright (c) 1992-2005 The FreeBSD Project. Jun 22 05:00:04 m0n0wall /kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 Jun 22 05:00:04 m0n0wall /kernel: The Regents of the University of California. All rights reserved. Jun 22 05:00:04 m0n0wall /kernel: FreeBSD 4.11-RELEASE-p16 #0: Sun Apr 2 09:52:18 CEST 2006 Jun 22 05:00:04 m0n0wall /kernel: root@fb411.neon1.net:/usr/src/sys/compile/M0N0WALL_GENERIC Jun 22 05:00:04 m0n0wall /kernel: Timecounter "i8254" frequency 1193182 Hz Jun 22 05:00:04 m0n0wall /kernel: CPU: AMD Athlon(tm) Processor (648.74-MHz 686-class CPU) Jun 22 05:00:04 m0n0wall /kernel: Origin = "AuthenticAMD" Id = 0x621 Stepping = 1 Jun 22 05:00:04 m0n0wall /kernel: Features=0x183f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR> Jun 22 05:00:04 m0n0wall /kernel: AMD Features=0xc0400000<AMIE,DSP,3DNow!> Jun 22 05:00:04 m0n0wall /kernel: real memory = 134217728 (131072K bytes) Jun 22 05:00:04 m0n0wall /kernel: avail memory = 113967104 (111296K bytes) Jun 22 05:00:04 m0n0wall /kernel: Preloaded elf kernel "kernel" at 0xc1006000. Jun 22 05:00:04 m0n0wall /kernel: Preloaded mfs_root "/mfsroot" at 0xc100609c. Jun 22 05:00:04 m0n0wall /kernel: Pentium Pro MTRR support enabled Jun 22 05:00:04 m0n0wall /kernel: md0: Preloaded image </mfsroot> 11534336 bytes at 0xc0504e1c Jun 22 05:00:04 m0n0wall /kernel: md1: Malloc disk Jun 22 05:00:04 m0n0wall /kernel: Using $PIR table, 8 entries at 0xc00f7c00 Jun 22 05:00:04 m0n0wall /kernel: npx0: <math processor> on motherboard Jun 22 05:00:04 m0n0wall /kernel: npx0: INT 16 interface Jun 22 05:00:04 m0n0wall /kernel: pcib0: <AMD-751 host to PCI bridge> on motherboard Jun 22 05:00:04 m0n0wall /kernel: pci0: <PCI bus> on pcib0 Jun 22 05:00:04 m0n0wall /kernel: pcib1: <AMD-751 PCI-PCI (1x/2x AGP) bridge> at device 1.0 on pci0 Jun 22 05:00:04 m0n0wall /kernel: pci1: <PCI bus> on pcib1 Jun 22 05:00:04 m0n0wall /kernel: pci1: <SiS 6326 SVGA controller> at 5.0 Jun 22 05:00:04 m0n0wall /kernel: isab0: <PCI to ISA bridge (vendor=1022 device=7408)> at device 7.0 on pci0 Jun 22 05:00:04 m0n0wall /kernel: isa0: <ISA bus> on isab0 Jun 22 05:00:04 m0n0wall /kernel: atapci0: <AMD 756 ATA66 controller> port 0xf000-0xf00f at device 7.1 on pci0 Jun 22 05:00:04 m0n0wall /kernel: ata0: at 0x1f0 irq 14 on atapci0 Jun 22 05:00:04 m0n0wall /kernel: ata1: at 0x170 irq 15 on atapci0 Jun 22 05:00:04 m0n0wall /kernel: chip1: <PCI to Other bridge (vendor=1022 device=740b)> at device 7.3 on pci0 Jun 22 05:00:04 m0n0wall /kernel: ohci0: <AMD-756 USB Controller> mem 0xeffff000-0xefffffff irq 10 at device 7.4 on pci0 Jun 22 05:00:04 m0n0wall /kernel: usb0: OHCI version 1.0, legacy support Jun 22 05:00:04 m0n0wall /kernel: usb0: <AMD-756 USB Controller> on ohci0 Jun 22 05:00:04 m0n0wall /kernel: usb0: USB revision 1.0 Jun 22 05:00:04 m0n0wall /kernel: uhub0: AMD OHCI root hub, class 9/0, rev 1.00/1.00, addr 1 Jun 22 05:00:04 m0n0wall /kernel: uhub0: 4 ports with 4 removable, self powered Jun 22 05:00:04 m0n0wall /kernel: rl0: <RealTek 8139 10/100BaseTX> port 0xd800-0xd8ff mem 0xefffef00-0xefffefff irq 11 at device 10.0 on pci0 Jun 22 05:00:04 m0n0wall /kernel: rl0: Ethernet address: 00:c0:49:a7:22:92 Jun 22 05:00:04 m0n0wall /kernel: miibus0: <MII bus> on rl0 Jun 22 05:00:04 m0n0wall /kernel: rlphy0: <RealTek internal media interface> on miibus0 Jun 22 05:00:04 m0n0wall /kernel: rlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto Jun 22 05:00:04 m0n0wall /kernel: rl1: <RealTek 8139 10/100BaseTX> port 0xd400-0xd4ff mem 0xefffee00-0xefffeeff irq 12 at device 12.0 on pci0 Jun 22 05:00:04 m0n0wall /kernel: rl1: Ethernet address: 00:c0:49:a7:24:3f Jun 22 05:00:04 m0n0wall /kernel: miibus1: <MII bus> on rl1 Jun 22 05:00:04 m0n0wall /kernel: rlphy1: <RealTek internal media interface> on miibus1 Jun 22 05:00:04 m0n0wall /kernel: rlphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto Jun 22 05:00:04 m0n0wall /kernel: sis0: <SiS 900 10/100BaseTX> port 0xd000-0xd0ff mem 0xefffd000-0xefffdfff irq 10 at device 14.0 on pci0 Jun 22 05:00:04 m0n0wall /kernel: sis0: Ethernet address: 00:d0:09:45:0d:d3 Jun 22 05:00:04 m0n0wall /kernel: miibus2: <MII bus> on sis0 Jun 22 05:00:04 m0n0wall /kernel: ukphy0: <Generic IEEE 802.3u media interface> on miibus2 Jun 22 05:00:04 m0n0wall /kernel: ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto Jun 22 05:00:04 m0n0wall /kernel: pci0: <unknown card> (vendor=0x13f6, dev=0x0111) at 15.0 irq 12 Jun 22 05:00:04 m0n0wall /kernel: pci0: <unknown card> (vendor=0x13f6, dev=0x0211) at 15.1 irq 11 Jun 22 05:00:04 m0n0wall /kernel: orm0: <Option ROMs> at iomem 0xc0000-0xc7fff,0xc8000-0xcffff,0xe0000-0xe3fff on isa0 Jun 22 05:00:04 m0n0wall /kernel: pmtimer0 on isa0 Jun 22 05:00:04 m0n0wall /kernel: fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 Jun 22 05:00:04 m0n0wall /kernel: fdc0: FIFO enabled, 8 bytes threshold Jun 22 05:00:04 m0n0wall /kernel: atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0 Jun 22 05:00:04 m0n0wall /kernel: atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0 Jun 22 05:00:04 m0n0wall /kernel: kbd0 at atkbd0 Jun 22 05:00:04 m0n0wall /kernel: vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Jun 22 05:00:04 m0n0wall /kernel: sc0: <System console> at flags 0x100 on isa0 Jun 22 05:00:04 m0n0wall /kernel: sc0: VGA <16 virtual consoles, flags=0x300> Jun 22 05:00:04 m0n0wall /kernel: sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 Jun 22 05:00:04 m0n0wall /kernel: sio0: type 16550A Jun 22 05:00:04 m0n0wall /kernel: sio1 at port 0x2f8-0x2ff irq 3 on isa0 Jun 22 05:00:04 m0n0wall /kernel: sio1: type 16550A Jun 22 05:00:04 m0n0wall /kernel: BRIDGE 020214 loaded Jun 22 05:00:04 m0n0wall /kernel: IPsec: Initialized Security Association Processing. Jun 22 05:00:04 m0n0wall /kernel: IP Filter: v3.4.35 initialized. Default = block all, Logging = enabled Jun 22 05:00:04 m0n0wall /kernel: ad0: 4121MB <Maxtor 90432D2> [8374/16/63] at ata0-master PIO4 Jun 22 05:00:04 m0n0wall /kernel: Mounting root from ufs:/dev/md0c Jun 22 05:00:04 m0n0wall dnsmasq[101]: started, version 2.27 cachesize 150 Jun 22 05:00:04 m0n0wall dnsmasq[101]: compile time options: IPv6 GNU-getopt ISC-leasefile no-DBus no-I18N Jun 22 05:00:04 m0n0wall dhcpd: Internet Systems Consortium DHCP Server V3.0.3 Jun 22 05:00:04 m0n0wall dnsmasq[101]: setting --bind-interfaces option because of OS limitations Jun 22 05:00:04 m0n0wall dnsmasq[101]: setting --bind-interfaces option because of OS limitations Jun 22 05:00:04 m0n0wall dhcpd: Copyright 2004-2005 Internet Systems Consortium. Jun 22 05:00:04 m0n0wall dnsmasq[101]: read /etc/hosts - 4 addresses Jun 22 05:00:04 m0n0wall dhcpd: All rights reserved. Jun 22 05:00:04 m0n0wall dnsmasq[101]: reading /etc/resolv.conf Jun 22 05:00:04 m0n0wall dhcpd: For info, please visit http://www.isc.org/sw/dhcp/ Jun 22 05:00:13 m0n0wall mpd: [pppoe] PPPoE connection timeout after 9 seconds Jun 22 05:00:13 m0n0wall mpd: [pppoe] device: DOWN event in state OPENING Jun 22 05:00:13 m0n0wall mpd: [pppoe] device is now in state DOWN Jun 22 05:00:13 m0n0wall mpd: [pppoe] link: DOWN event Jun 22 05:00:13 m0n0wall mpd: [pppoe] LCP: Down event Jun 22 05:00:13 m0n0wall mpd: [pppoe] device: OPEN event in state DOWN Jun 22 05:00:13 m0n0wall mpd: [pppoe] pausing 4 seconds before open Jun 22 05:00:13 m0n0wall mpd: [pppoe] device is now in state DOWN Jun 22 05:00:17 m0n0wall mpd: [pppoe] device: OPEN event in state DOWN Jun 22 05:00:17 m0n0wall mpd: [pppoe] pausing 2 seconds before open Jun 22 05:00:17 m0n0wall mpd: [pppoe] device is now in state DOWN Jun 22 05:00:19 m0n0wall mpd: [pppoe] device: OPEN event in state DOWN Jun 22 05:00:19 m0n0wall mpd: [pppoe] device is now in state OPENING Jun 22 05:00:28 m0n0wall mpd: [pppoe] PPPoE connection timeout after 9 seconds Jun 22 05:00:28 m0n0wall mpd: [pppoe] device: DOWN event in state OPENING Jun 22 05:00:28 m0n0wall mpd: [pppoe] device is now in state DOWN Jun 22 05:00:28 m0n0wall mpd: [pppoe] link: DOWN event Jun 22 05:00:28 m0n0wall mpd: [pppoe] LCP: Down event Jun 22 05:00:28 m0n0wall mpd: [pppoe] device: OPEN event in state DOWN Jun 22 05:00:28 m0n0wall mpd: [pppoe] pausing 6 seconds before open Jun 22 05:00:28 m0n0wall mpd: [pppoe] device is now in state DOWN Jun 22 05:00:34 m0n0wall mpd: [pppoe] device: OPEN event in state DOWN Jun 22 05:00:34 m0n0wall mpd: [pppoe] device is now in state OPENING Jun 22 05:00:36 m0n0wall mpd: [pppoe] rec'd ACNAME "dsl-mex-urraza-" Jun 22 05:00:36 m0n0wall mpd: [pppoe] rec'd proto LCP while dead Jun 22 05:00:36 m0n0wall mpd: [pppoe] PPPoE connection successful Jun 22 05:00:36 m0n0wall mpd: [pppoe] device: UP event in state OPENING Jun 22 05:00:36 m0n0wall mpd: [pppoe] device is now in state UP Jun 22 05:00:36 m0n0wall mpd: [pppoe] link: UP event Jun 22 05:00:36 m0n0wall mpd: [pppoe] link: origination is local Jun 22 05:00:36 m0n0wall mpd: [pppoe] LCP: Up event Jun 22 05:00:36 m0n0wall mpd: [pppoe] LCP: state change Starting --> Req-Sent Jun 22 05:00:36 m0n0wall mpd: [pppoe] LCP: phase shift DEAD --> ESTABLISH Jun 22 05:00:36 m0n0wall mpd: [pppoe] LCP: SendConfigReq #1 Jun 22 05:00:36 m0n0wall mpd: MRU 1492 Jun 22 05:00:36 m0n0wall mpd: MAGICNUM 2fa08d5b Jun 22 05:00:36 m0n0wall mpd: [pppoe] LCP: rec'd Configure Ack #1 link 0 (Req-Sent) Jun 22 05:00:36 m0n0wall mpd: MRU 1492 Jun 22 05:00:36 m0n0wall mpd: MAGICNUM 2fa08d5b Jun 22 05:00:36 m0n0wall mpd: [pppoe] LCP: state change Req-Sent --> Ack-Rcvd Jun 22 05:00:38 m0n0wall mpd: [pppoe] LCP: rec'd Configure Request #2 link 0 (Ack-Rcvd) Jun 22 05:00:38 m0n0wall mpd: MRU 1492 Jun 22 05:00:38 m0n0wall mpd: AUTHPROTO PAP Jun 22 05:00:38 m0n0wall mpd: MAGICNUM fb7707c7 Jun 22 05:00:38 m0n0wall mpd: [pppoe] LCP: SendConfigAck #2 Jun 22 05:00:38 m0n0wall mpd: MRU 1492 Jun 22 05:00:38 m0n0wall mpd: AUTHPROTO PAP Jun 22 05:00:38 m0n0wall mpd: MAGICNUM fb7707c7 Jun 22 05:00:38 m0n0wall mpd: [pppoe] LCP: state change Ack-Rcvd --> Opened Jun 22 05:00:38 m0n0wall mpd: [pppoe] LCP: phase shift ESTABLISH --> AUTHENTICATE Jun 22 05:00:38 m0n0wall mpd: [pppoe] LCP: auth: peer wants PAP, I want nothing Jun 22 05:00:38 m0n0wall mpd: [pppoe] PAP: using authname "akbalroot" Jun 22 05:00:38 m0n0wall mpd: [pppoe] PAP: sending REQUEST Jun 22 05:00:38 m0n0wall mpd: [pppoe] LCP: LayerUp Jun 22 05:00:38 m0n0wall mpd: [pppoe] PAP: rec'd ACK #1 Jun 22 05:00:38 m0n0wall mpd: [pppoe] LCP: authorization successful Jun 22 05:00:38 m0n0wall mpd: [pppoe] LCP: phase shift AUTHENTICATE --> NETWORK Jun 22 05:00:38 m0n0wall mpd: [pppoe] setting interface ng0 MTU to 1492 bytes Jun 22 05:00:38 m0n0wall mpd: [pppoe] up: 1 link, total bandwidth 64000 bps Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: Up event Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: state change Starting --> Req-Sent Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: SendConfigReq #1 Jun 22 05:00:38 m0n0wall mpd: IPADDR 0.0.0.0 Jun 22 05:00:38 m0n0wall mpd: COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Jun 22 05:00:38 m0n0wall mpd: PRIDNS 0.0.0.0 Jun 22 05:00:38 m0n0wall mpd: SECDNS 0.0.0.0 Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: rec'd Configure Request #1 link 0 (Req-Sent) Jun 22 05:00:38 m0n0wall mpd: IPADDR 200.38.193.226 Jun 22 05:00:38 m0n0wall mpd: 200.38.193.226 is OK Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: SendConfigAck #1 Jun 22 05:00:38 m0n0wall mpd: IPADDR 200.38.193.226 Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: state change Req-Sent --> Ack-Sent Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: rec'd Configure Reject #1 link 0 (Ack-Sent) Jun 22 05:00:38 m0n0wall mpd: COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: SendConfigReq #2 Jun 22 05:00:38 m0n0wall mpd: IPADDR 0.0.0.0 Jun 22 05:00:38 m0n0wall mpd: PRIDNS 0.0.0.0 Jun 22 05:00:38 m0n0wall mpd: SECDNS 0.0.0.0 Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: rec'd Configure Nak #2 link 0 (Ack-Sent) Jun 22 05:00:38 m0n0wall mpd: IPADDR 200.x.x.x Jun 22 05:00:38 m0n0wall mpd: 200.x.x.x is OK Jun 22 05:00:38 m0n0wall mpd: PRIDNS 200.33.146.153 Jun 22 05:00:38 m0n0wall mpd: SECDNS 200.33.146.161 Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: SendConfigReq #3 Jun 22 05:00:38 m0n0wall mpd: IPADDR 200.x.x.x Jun 22 05:00:38 m0n0wall mpd: PRIDNS 200.33.146.153 Jun 22 05:00:38 m0n0wall mpd: SECDNS 200.33.146.161 Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: rec'd Configure Ack #3 link 0 (Ack-Sent) Jun 22 05:00:38 m0n0wall mpd: IPADDR 200.x.x.x Jun 22 05:00:38 m0n0wall mpd: PRIDNS 200.33.146.153 Jun 22 05:00:38 m0n0wall mpd: SECDNS 200.33.146.161 Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: state change Ack-Sent --> Opened Jun 22 05:00:38 m0n0wall mpd: [pppoe] IPCP: LayerUp Jun 22 05:00:38 m0n0wall mpd: 200.x.x.x -> 200.38.193.226 Jun 22 05:00:38 m0n0wall mpd: [pppoe] IFACE: Up event Jun 22 05:00:38 m0n0wall mpd: [pppoe] setting interface ng0 MTU to 1492 bytes Jun 22 05:00:38 m0n0wall mpd: [pppoe] exec: /sbin/ifconfig ng0 200.x.x.x 200.38.193.226 netmask 0xffffffff -link0 Jun 22 05:00:38 m0n0wall mpd: [pppoe] exec: /sbin/route add 200.x.x.x -iface lo0 Jun 22 05:00:38 m0n0wall mpd: [pppoe] exec: /sbin/route add 0.0.0.0 200.38.193.226 Jun 22 05:00:38 m0n0wall mpd: [pppoe] exec: /usr/local/sbin/ppp-linkup ng0 inet 200.x.x.x 200.38.193.226 akbalroot dns1 200.33.146.153 dns2 200.33.146.161 Jun 22 05:00:38 m0n0wall mpd: [pppoe] IFACE: Up event Jun 22 05:06:16 m0n0wall /kernel: pid 372 (php), uid 0 on /: file system full Jun 22 05:06:16 m0n0wall /kernel: pid 372 (php), uid 0: exited on signal 10 Jun 22 05:08:16 m0n0wall /kernel: pid 377 (php), uid 0 on /: file system full Jun 22 05:08:16 m0n0wall /kernel: pid 377 (php), uid 0: exited on signal 11

last 50 filter log entries

Jun 22 05:06:31 m0n0wall ipmon[88]: 05:06:30.273297 ng0 @0:18 b 69.93.0.234,57513 -> 200.x.x.x,23 PR tcp len 20 60 -S IN Jun 22 05:06:31 m0n0wall ipmon[88]: 05:06:30.273309 ng0 @0:18 b 69.93.0.234,57514 -> 200.x.x.x,1080 PR tcp len 20 60 -S IN Jun 22 05:06:31 m0n0wall ipmon[88]: 05:06:30.275196 ng0 @0:18 b 69.93.0.234,57515 -> 200.x.x.x,5000 PR tcp len 20 60 -S IN Jun 22 05:06:31 m0n0wall ipmon[88]: 05:06:30.275209 ng0 @0:18 b 69.93.0.234,57516 -> 200.x.x.x,135 PR tcp len 20 60 -S IN Jun 22 05:06:31 m0n0wall ipmon[88]: 05:06:30.275220 ng0 @0:18 b 69.93.0.234,57517 -> 200.x.x.x,21 PR tcp len 20 60 -S IN Jun 22 05:06:31 m0n0wall ipmon[88]: 05:06:30.648536 rl0 @0:19 b 192.168.0.102,137 -> 192.168.0.255,137 PR udp len 20 78 IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.306193 ng0 @0:18 b 69.93.0.234,57519 -> 200.x.x.x,139 PR tcp len 20 60 -S IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.306208 ng0 @0:18 b 69.93.0.234,57520 -> 200.x.x.x,20 PR tcp len 20 60 -S IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.306221 ng0 @0:18 b 69.93.0.234,57521 -> 200.x.x.x,53 PR tcp len 20 60 -S IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.306233 ng0 @0:18 b 69.93.0.234,57522 -> 200.x.x.x,23 PR tcp len 20 60 -S IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.308180 ng0 @0:18 b 69.93.0.234,57523 -> 200.x.x.x,1080 PR tcp len 20 60 -S IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.308191 ng0 @0:18 b 69.93.0.234,57524 -> 200.x.x.x,5000 PR tcp len 20 60 -S IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.308203 ng0 @0:18 b 69.93.0.234,57525 -> 200.x.x.x,135 PR tcp len 20 60 -S IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.310046 ng0 @0:18 b 69.93.0.234,57526 -> 200.x.x.x,21 PR tcp len 20 60 -S IN Jun 22 05:06:32 m0n0wall ipmon[88]: 05:06:31.433589 rl0 @0:19 b 192.168.0.102,137 -> 192.168.0.255,137 PR udp len 20 78 IN Jun 22 05:06:33 m0n0wall ipmon[88]: 05:06:32.311530 ng0 @0:18 b 69.93.0.234,57529 -> 200.x.x.x,139 PR tcp len 20 60 -S IN Jun 22 05:06:33 m0n0wall ipmon[88]: 05:06:32.311544 ng0 @0:18 b 69.93.0.234,57530 -> 200.x.x.x,20 PR tcp len 20 60 -S IN Jun 22 05:06:33 m0n0wall ipmon[88]: 05:06:32.311556 ng0 @0:18 b 69.93.0.234,57531 -> 200.x.x.x,53 PR tcp len 20 60 -S IN Jun 22 05:06:33 m0n0wall ipmon[88]: 05:06:32.313549 ng0 @0:18 b 69.93.0.234,57532 -> 200.x.x.x,23 PR tcp len 20 60 -S IN Jun 22 05:06:33 m0n0wall ipmon[88]: 05:06:32.313562 ng0 @0:18 b 69.93.0.234,57533 -> 200.x.x.x,1080 PR tcp len 20 60 -S IN Jun 22 05:06:33 m0n0wall ipmon[88]: 05:06:32.313573 ng0 @0:18 b 69.93.0.234,57534 -> 200.x.x.x,5000 PR tcp len 20 60 -S IN Jun 22 05:06:33 m0n0wall ipmon[88]: 05:06:32.315501 ng0 @0:18 b 69.93.0.234,57535 -> 200.x.x.x,135 PR tcp len 20 60 -S IN Jun 22 05:06:33 m0n0wall ipmon[88]: 05:06:32.315564 ng0 @0:18 b 69.93.0.234,57536 -> 200.x.x.x,21 PR tcp len 20 60 -S IN Jun 22 05:06:34 m0n0wall ipmon[88]: 05:06:33.271555 ng0 @0:18 b 69.93.0.234,57510 -> 200.x.x.x,139 PR tcp len 20 60 -S IN Jun 22 05:06:34 m0n0wall ipmon[88]: 05:06:33.271568 ng0 @0:18 b 69.93.0.234,57511 -> 200.x.x.x,20 PR tcp len 20 60 -S IN Jun 22 05:06:34 m0n0wall ipmon[88]: 05:06:33.271580 ng0 @0:18 b 69.93.0.234,57512 -> 200.x.x.x,53 PR tcp len 20 60 -S IN Jun 22 05:06:34 m0n0wall ipmon[88]: 05:06:33.273764 ng0 @0:18 b 69.93.0.234,57513 -> 200.x.x.x,23 PR tcp len 20 60 -S IN Jun 22 05:06:34 m0n0wall ipmon[88]: 05:06:33.273776 ng0 @0:18 b 69.93.0.234,57514 -> 200.x.x.x,1080 PR tcp len 20 60 -S IN Jun 22 05:06:34 m0n0wall ipmon[88]: 05:06:33.275459 ng0 @0:18 b 69.93.0.234,57515 -> 200.x.x.x,5000 PR tcp len 20 60 -S IN Jun 22 05:06:34 m0n0wall ipmon[88]: 05:06:33.275471 ng0 @0:18 b 69.93.0.234,57516 -> 200.x.x.x,135 PR tcp len 20 60 -S IN Jun 22 05:06:34 m0n0wall ipmon[88]: 05:06:33.275546 ng0 @0:18 b 69.93.0.234,57517 -> 200.x.x.x,21 PR tcp len 20 60 -S IN Jun 22 05:07:05 m0n0wall ipmon[88]: 05:07:04.315926 rl0 @0:19 b 192.168.0.102,137 -> 192.168.0.255,137 PR udp len 20 78 IN Jun 22 05:07:06 m0n0wall ipmon[88]: 05:07:05.116730 2x rl0 @0:19 b 192.168.0.102,137 -> 192.168.0.255,137 PR udp len 20 78 IN Jun 22 05:07:29 m0n0wall ipmon[88]: 05:07:28.334796 rl0 @0:19 b 192.168.0.101,138 -> 192.168.0.255,138 PR udp len 20 242 IN Jun 22 05:08:02 m0n0wall ipmon[88]: 05:08:01.755614 ng0 @0:18 b 200.67.116.1,2651 -> 200.x.x.x,445 PR tcp len 20 48 -S IN Jun 22 05:08:05 m0n0wall ipmon[88]: 05:08:04.759814 ng0 @0:18 b 200.67.116.1,2651 -> 200.x.x.x,445 PR tcp len 20 48 -S IN Jun 22 05:08:12 m0n0wall ipmon[88]: 05:08:11.981413 rl0 @0:19 b 192.168.0.102,137 -> 192.168.0.255,137 PR udp len 20 78 IN Jun 22 05:08:13 m0n0wall ipmon[88]: 05:08:12.826802 rl0 @0:19 b 192.168.0.102,137 -> 192.168.0.255,137 PR udp len 20 78 IN Jun 22 05:08:14 m0n0wall ipmon[88]: 05:08:13.604270 rl0 @0:19 b 192.168.0.102,137 -> 192.168.0.255,137 PR udp len 20 78 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.050413 rl0 @0:19 b 192.168.0.250,1466 -> 239.255.255.250,1900 PR udp len 20 314 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.051349 rl0 @0:19 b 192.168.0.250,1467 -> 239.255.255.250,1900 PR udp len 20 323 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.052264 rl0 @0:19 b 192.168.0.250,1468 -> 239.255.255.250,1900 PR udp len 20 386 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.053765 rl0 @0:19 b 192.168.0.250,1469 -> 239.255.255.250,1900 PR udp len 20 378 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.056156 rl0 @0:19 b 192.168.0.250,1470 -> 239.255.255.250,1900 PR udp len 20 323 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.057092 rl0 @0:19 b 192.168.0.250,1471 -> 239.255.255.250,1900 PR udp len 20 362 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.058734 rl0 @0:19 b 192.168.0.250,1472 -> 239.255.255.250,1900 PR udp len 20 394 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.060731 rl0 @0:19 b 192.168.0.250,1473 -> 239.255.255.250,1900 PR udp len 20 323 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.061673 rl0 @0:19 b 192.168.0.250,1474 -> 239.255.255.250,1900 PR udp len 20 382 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.063243 rl0 @0:19 b 192.168.0.250,1475 -> 239.255.255.250,1900 PR udp len 20 388 IN Jun 22 05:08:30 m0n0wall ipmon[88]: 05:08:30.064672 rl0 @0:19 b 192.168.0.250,1476 -> 239.255.255.250,1900 PR udp len 20 376 IN

ls /conf

config.xml

ls /var/run

dev.db dhcpd.pid dnsmasq.pid htpasswd ipmon.pid ld-elf.so.hints log mini_httpd.pid mpd.pid msntp.pid runmsntp.pid syslog.pid utmp

config.xml

<?xml version="1.0"?> <m0n0wall> <version>1.6</version> <lastchange>1182506591</lastchange> <system> <hostname>m0n0wall</hostname> <domain>akbmono.net.mx</domain> <dnsallowoverride/> <username>admin</username> <password>xxxxx</password> <timezone>America/Mexico_City</timezone> <time-update-interval>300</time-update-interval> <timeservers>pool.ntp.org</timeservers> <webgui> <protocol>http</protocol> <port/> <certificate/> <private-key/> </webgui> <harddiskstandby/> </system> <interfaces> <lan> <if>sis0</if> <ipaddr>192.168.0.110</ipaddr> <subnet>24</subnet> <media/> <mediaopt/> </lan> <wan> <if>rl1</if> <mtu/> <blockpriv/> <media/> <mediaopt/> <spoofmac/> <ipaddr>pppoe</ipaddr> </wan> <opt1> <if>rl0</if> <descr>DMZ</descr> <ipaddr>192.168.1.1</ipaddr> <subnet>24</subnet> <bridge>lan</bridge> <enable/> </opt1> </interfaces> <staticroutes/> <pppoe> <username>akbalroot</username> <password>xxxxx</password> <provider/> <timeout/> </pppoe> <pptp/> <bigpond/> <dyndns> <type>dyndns</type> <username/> <password/> <host/> <mx/> <server/> <port/> </dyndns> <dnsupdate/> <dhcpd> <lan> <enable/> <range> <from>192.168.0.0</from> <to>192.168.0.255</to> </range> </lan> </dhcpd> <pptpd> <mode/> <redir/> <localip/> <remoteip/> </pptpd> <dnsmasq> <enable/> </dnsmasq> <snmpd> <syslocation/> <syscontact/> <rocommunity>public</rocommunity> </snmpd> <diag> <ipv6nat> <ipaddr/> </ipv6nat> </diag> <bridge> <filteringbridge/> </bridge> <syslog> <nentries>50</nentries> <remoteserver/> <resolve/> </syslog> <nat> <rule> <protocol>tcp</protocol> <external-port>25</external-port> <target>192.168.0.103</target> <local-port>25</local-port> <interface>wan</interface> <descr>SMTP Akbal</descr> </rule> <rule> <protocol>tcp</protocol> <external-port>80</external-port> <target>192.168.0.103</target> <local-port>80</local-port> <interface>wan</interface> <descr>Web Akbal</descr> </rule> <rule> <protocol>tcp</protocol> <external-port>110</external-port> <target>192.168.0.103</target> <local-port>110</local-port> <interface>wan</interface> <descr>POP3 Akbal</descr> </rule> <rule> <protocol>udp</protocol> <external-port>53</external-port> <target>192.168.0.103</target> <local-port>53</local-port> <interface>wan</interface> <descr>DNS Akbal</descr> </rule> <rule> <protocol>tcp</protocol> <external-port>143</external-port> <target>192.168.0.103</target> <local-port>143</local-port> <interface>wan</interface> <descr>IMAP Akbal</descr> </rule> </nat> <filter> <rule> <interface>wan</interface> <protocol>udp</protocol> <source> <any/> </source> <destination> <address>192.168.0.103</address> <port>53</port> </destination> <descr>NAT DNS Akbal</descr> </rule> <rule> <interface>wan</interface> <protocol>tcp</protocol> <source> <any/> </source> <destination> <address>192.168.0.103</address> <port>80</port> </destination> <descr>NAT Web Akbal</descr> </rule> <rule> <interface>wan</interface> <protocol>tcp</protocol> <source> <any/> </source> <destination> <address>192.168.0.103</address> <port>25</port> </destination> <descr>NAT SMTP Akbal</descr> </rule> <rule> <interface>wan</interface> <protocol>tcp</protocol> <source> <any/> </source> <destination> <address>192.168.0.103</address> <port>110</port> </destination> <descr>NAT POP3 Akbal</descr> </rule> <rule> <interface>wan</interface> <protocol>tcp</protocol> <source> <any/> </source> <destination> <address>192.168.0.103</address> <port>143</port> </destination> <descr>NAT IMAP Akbal</descr> </rule> <rule> <type>pass</type> <descr>Default LAN -> any</descr> <interface>lan</interface> <source> <network>lan</network> </source> <destination> <any/> </destination> </rule> <tcpidletimeout/> </filter> <shaper/> <ipsec/> <aliases/> <proxyarp/> <wol/> <vlans/> </m0n0wall>