Shorewall 5.1.12.2 Dump at akacja - Wed Jul  4 09:05:23 CEST 2018

Shorewall is running
State:Started Wed Jul  4 09:02:35 CEST 2018 from /etc/shorewall/ (/var/lib/shorewall/firewall compiled Wed Jun 27 08:22:57 CEST 2018 by Shorewall version 5.1.12.2)

Counters reset Wed Jul  4 09:04:47 CEST 2018

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   24  4757 net-fw     all  --  enp1s0 *       0.0.0.0/0            0.0.0.0/0           
  117 12903 enp3s0f1_in  all  --  enp3s0f1 *       0.0.0.0/0            0.0.0.0/0           
   15  1440 wlp4s0_in  all  --  wlp4s0 *       0.0.0.0/0            0.0.0.0/0           
    0     0 tun0_in    all  --  tun0   *       0.0.0.0/0            0.0.0.0/0           
 1236  190K ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "INPUT REJECT "
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   63 60840 net_frwd   all  --  enp1s0 *       0.0.0.0/0            0.0.0.0/0           
   93 13739 enp3s0f1_fwd  all  --  enp3s0f1 *       0.0.0.0/0            0.0.0.0/0           
    0     0 wlp4s0_fwd  all  --  wlp4s0 *       0.0.0.0/0            0.0.0.0/0           
    0     0 road_frwd  all  --  tun0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "FORWARD REJECT "
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   30  2617 ACCEPT     all  --  *      enp1s0  0.0.0.0/0            0.0.0.0/0           
  122  211K ACCEPT     all  --  *      enp3s0f1  0.0.0.0/0            0.0.0.0/0           
   15  1440 ACCEPT     all  --  *      wlp4s0  0.0.0.0/0            0.0.0.0/0           
    0     0 fw-road    all  --  *      tun0    0.0.0.0/0            0.0.0.0/0           
 1236  190K ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "OUTPUT REJECT "
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain dynamic (8 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain enp3s0f1_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   17   856 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   92 13707 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   93 13739 loc_frwd   all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain enp3s0f1_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   28  2479 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    1   328 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:67:68
   94 10680 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
  116 12575 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw-road (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "fw-road REJECT "
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc_frwd (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   93 13739 ACCEPT     all  --  *      enp1s0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      enp3s0f1  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      wlp4s0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      tun0    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (7 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 4 level 6 prefix "logflags DROP "
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10   913 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   10   913 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    5   264 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   14  3844 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1194
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
    0     0 DROP       icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Ping */
    4   212 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6535
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:6534
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 1007,2225
    4   601 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    2   100 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "net-fw DROP "
    2   100 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-loc (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   63 60840 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "net-loc DROP "
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net-road (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "net-road DROP "
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
   63 60840 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   63 60840 net-loc    all  --  *      enp3s0f1  0.0.0.0/0            0.0.0.0/0           
    0     0 net-loc    all  --  *      wlp4s0  0.0.0.0/0            0.0.0.0/0           
    0     0 net-road   all  --  *      tun0    0.0.0.0/0            0.0.0.0/0           

Chain reject (7 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match src-type BROADCAST
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with tcp-reset
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-port-unreachable
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-unreachable
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibited

Chain road-net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type ANYCAST
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "road-net REJECT "
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain road_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 road-net   all  --  *      enp1s0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      enp3s0f1  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      wlp4s0  0.0.0.0/0            0.0.0.0/0           

Chain sha-lh-d66458093e05171f95e1 (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain sha-rh-380da843e7c12084235b (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0            recent: SET name: %CURRENTTIME side: source mask: 255.255.255.255

Chain smurflog (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "smurfs DROP "
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain smurfs (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 smurflog   all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  ADDRTYPE match src-type BROADCAST
    0     0 smurflog   all  --  *      *       224.0.0.0/4          0.0.0.0/0           [goto] 

Chain tcpflags (8 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x3F/0x29
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x3F/0x00
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x06/0x06
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x05/0x05
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x03/0x03
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp flags:0x19/0x09
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto]  tcp spt:0 flags:0x17/0x02

Chain tun0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain wlp4s0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 wlp4s0_mac  all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate NEW,UNTRACKED
    0     0 loc_frwd   all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain wlp4s0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   15  1440 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID,NEW,UNTRACKED
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:67:68
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   15  1440 wlp4s0_mac  all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate NEW,UNTRACKED
   15  1440 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain wlp4s0_mac (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            MAC E0:B9:A5:34:57:83
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            MAC 34:23:BA:C4:3C:78
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            MAC 20:E0:16:01:0C:78
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            MAC 10:AE:60:7B:F3:D0
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            MAC E8:DE:27:1D:95:A3
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            MAC 60:12:8B:65:32:7B
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            MAC 24:92:0E:CC:D8:CC
   15  1440 RETURN     all  --  *      *       10.10.11.1           0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
    0     0 RETURN     all  --  *      *       10.10.11.1           224.0.0.0/4         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "wlp4s0_mac REJECT "
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Log (/var/log/syslog)

Jul  4 09:02:59 net-fw DROP IN=enp1s0 OUT= SRC=46.174.58.224 DST=192.168.15.145 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=3633 DF PROTO=TCP SPT=45391 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 
Jul  4 09:03:00 net-fw DROP IN=enp1s0 OUT= SRC=185.208.208.198 DST=192.168.15.145 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=38521 PROTO=TCP SPT=44954 DPT=14802 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul  4 09:03:04 net-fw DROP IN=enp1s0 OUT= SRC=92.63.193.154 DST=192.168.15.145 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=5755 PROTO=TCP SPT=48801 DPT=7011 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul  4 09:03:06 net-fw DROP IN=enp1s0 OUT= SRC=46.174.238.135 DST=192.168.15.145 LEN=44 TOS=0x00 PREC=0x00 TTL=250 ID=25395 DF PROTO=TCP SPT=9726 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 
Jul  4 09:03:07 net-fw DROP IN=enp1s0 OUT= SRC=46.174.240.193 DST=192.168.15.145 LEN=44 TOS=0x00 PREC=0x00 TTL=249 ID=61191 DF PROTO=TCP SPT=44390 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 
Jul  4 09:03:14 net-fw DROP IN=enp1s0 OUT= SRC=37.49.231.12 DST=192.168.15.145 LEN=446 TOS=0x00 PREC=0x00 TTL=248 ID=39714 DF PROTO=UDP SPT=5097 DPT=5060 LEN=426 
Jul  4 09:03:21 net-fw DROP IN=enp1s0 OUT= SRC=172.217.20.206 DST=192.168.15.145 LEN=103 TOS=0x00 PREC=0x00 TTL=60 ID=55953 PROTO=TCP SPT=443 DPT=59575 WINDOW=278 RES=0x00 ACK PSH URGP=0 
Jul  4 09:03:22 net-fw DROP IN=enp1s0 OUT= SRC=24.91.227.46 DST=192.168.15.145 LEN=427 TOS=0x00 PREC=0x00 TTL=115 ID=22194 DF PROTO=TCP SPT=8999 DPT=49178 WINDOW=259 RES=0x00 ACK PSH URGP=0 
Jul  4 09:03:23 net-fw DROP IN=enp1s0 OUT= SRC=185.222.210.30 DST=192.168.15.145 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=12980 PROTO=TCP SPT=49056 DPT=6824 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul  4 09:03:32 net-fw DROP IN=enp1s0 OUT= SRC=46.174.208.142 DST=192.168.15.145 LEN=154 TOS=0x00 PREC=0x00 TTL=63 ID=0 PROTO=UDP SPT=5678 DPT=5678 LEN=134 
Jul  4 09:03:40 net-fw DROP IN=enp1s0 OUT= SRC=141.212.122.79 DST=192.168.15.145 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=41127 DPT=102 WINDOW=65535 RES=0x00 SYN URGP=0 
Jul  4 09:03:51 net-fw DROP IN=enp1s0 OUT= SRC=60.191.0.243 DST=192.168.15.145 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=9447 DF PROTO=TCP SPT=16063 DPT=8080 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul  4 09:03:53 net-fw DROP IN=enp1s0 OUT= SRC=185.29.84.84 DST=192.168.15.145 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=23756 PROTO=UDP SPT=57514 DPT=6535 LEN=28 
Jul  4 09:03:59 net-fw DROP IN=enp1s0 OUT= SRC=185.29.84.84 DST=192.168.15.145 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=23760 PROTO=UDP SPT=57514 DPT=6535 LEN=28 
Jul  4 09:04:06 net-fw DROP IN=enp1s0 OUT= SRC=185.29.84.84 DST=192.168.15.145 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=23764 PROTO=UDP SPT=57514 DPT=6535 LEN=28 
Jul  4 09:04:11 net-fw DROP IN=enp1s0 OUT= SRC=185.29.84.84 DST=192.168.15.145 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=23767 PROTO=UDP SPT=57514 DPT=6535 LEN=28 
Jul  4 09:04:13 net-fw DROP IN=enp1s0 OUT= SRC=185.29.84.84 DST=192.168.15.145 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=23769 PROTO=UDP SPT=57514 DPT=6535 LEN=28 
Jul  4 09:04:32 net-fw DROP IN=enp1s0 OUT= SRC=46.174.208.142 DST=192.168.15.145 LEN=154 TOS=0x00 PREC=0x00 TTL=63 ID=0 PROTO=UDP SPT=5678 DPT=5678 LEN=134 
Jul  4 09:04:58 net-fw DROP IN=enp1s0 OUT= SRC=128.127.83.95 DST=192.168.15.145 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=28561 PROTO=UDP SPT=8999 DPT=6535 LEN=28 
Jul  4 09:05:06 net-fw DROP IN=enp1s0 OUT= SRC=60.191.0.243 DST=192.168.15.145 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=9562 DF PROTO=TCP SPT=16063 DPT=9050 WINDOW=8192 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 29 packets, 1871 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  enp3s0f1 *       0.0.0.0/0            46.174.211.152       tcp dpt:2225 /* SSH */ to:10.10.10.1
    0     0 DNAT       tcp  --  wlp4s0 *       0.0.0.0/0            46.174.211.152       tcp dpt:2225 /* SSH */ to:10.10.10.1

Chain INPUT (policy ACCEPT 17 packets, 1251 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 25 packets, 2048 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 25 packets, 2048 bytes)
 pkts bytes target     prot opt in     out     source               destination         
   32  2370 enp1s0_masq  all  --  *      enp1s0  0.0.0.0/0            0.0.0.0/0           

Chain enp1s0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10   520 SNAT       all  --  *      *       10.10.10.0/24        0.0.0.0/0            to:192.168.15.145
    0     0 SNAT       all  --  *      *       10.10.11.0/24        0.0.0.0/0            to:192.168.15.145

Mangle Table

Chain PREROUTING (policy ACCEPT 1548 packets, 283K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 1392 packets, 209K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 156 packets, 74579 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  156 74579 MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            MARK and 0xffffff00

Chain OUTPUT (policy ACCEPT 1403 packets, 405K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 1593 packets, 483K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 1548 packets, 283K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:10080 CT helper amanda
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 flags:0x17/0x02 CT helper ftp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1719 CT helper RAS
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6667 flags:0x17/0x02 CT helper irc
   30  2880 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:137 CT helper netbios-ns
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1723 flags:0x17/0x02 CT helper pptp
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6566 flags:0x17/0x02 CT helper sane
    1    32 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:5060 CT helper sip
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161 CT helper snmp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:69 CT helper tftp

Chain OUTPUT (policy ACCEPT 1403 packets, 405K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:10080 CT helper amanda
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 flags:0x17/0x02 CT helper ftp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:1719 CT helper RAS
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6667 flags:0x17/0x02 CT helper irc
   30  2880 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:137 CT helper netbios-ns
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1723 flags:0x17/0x02 CT helper pptp
    0     0 CT         tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:6566 flags:0x17/0x02 CT helper sane
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:5060 CT helper sip
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161 CT helper snmp
    0     0 CT         udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:69 CT helper tftp

Conntrack Table (77 out of 262144)

udp      17 23 src=192.168.15.145 dst=216.239.34.10 sport=65485 dport=53 src=216.239.34.10 dst=192.168.15.145 sport=53 dport=65485 mark=0 use=1
udp      17 23 src=192.168.15.145 dst=216.239.32.10 sport=47700 dport=53 src=216.239.32.10 dst=192.168.15.145 sport=53 dport=47700 mark=0 use=1
tcp      6 4 TIME_WAIT src=10.10.10.13 dst=172.217.20.206 sport=59570 dport=443 src=172.217.20.206 dst=192.168.15.145 sport=443 dport=59570 [ASSURED] mark=0 use=1
tcp      6 90 TIME_WAIT src=10.10.10.13 dst=10.10.10.1 sport=59599 dport=3483 src=10.10.10.1 dst=10.10.10.13 sport=3483 dport=59599 [ASSURED] mark=0 use=1
udp      17 14 src=192.168.15.145 dst=216.239.38.10 sport=35060 dport=53 [UNREPLIED] src=216.239.38.10 dst=192.168.15.145 sport=53 dport=35060 mark=0 use=1
udp      17 27 src=192.168.15.145 dst=192.168.15.255 sport=138 dport=138 [UNREPLIED] src=192.168.15.255 dst=192.168.15.145 sport=138 dport=138 mark=0 use=1
udp      17 18 src=192.168.15.145 dst=192.41.162.30 sport=42065 dport=53 src=192.41.162.30 dst=192.168.15.145 sport=53 dport=42065 mark=0 use=1
udp      17 18 src=10.10.10.13 dst=10.10.10.1 sport=61709 dport=53 src=10.10.10.1 dst=10.10.10.13 sport=53 dport=61709 mark=0 use=1
udp      17 19 src=192.168.15.145 dst=216.239.34.10 sport=38995 dport=53 src=216.239.34.10 dst=192.168.15.145 sport=53 dport=38995 mark=0 use=1
tcp      6 114 SYN_SENT src=10.10.10.13 dst=172.217.16.14 sport=59625 dport=443 [UNREPLIED] src=172.217.16.14 dst=192.168.15.145 sport=443 dport=59625 mark=0 use=1
tcp      6 299 ESTABLISHED src=10.10.10.13 dst=172.217.16.14 sport=59633 dport=443 src=172.217.16.14 dst=192.168.15.145 sport=443 dport=59633 [ASSURED] mark=0 use=1
udp      17 18 src=10.10.10.13 dst=10.10.10.1 sport=55232 dport=53 src=10.10.10.1 dst=10.10.10.13 sport=53 dport=55232 mark=0 use=1
tcp      6 112 SYN_SENT src=10.10.10.13 dst=172.217.16.10 sport=59628 dport=443 [UNREPLIED] src=172.217.16.10 dst=192.168.15.145 sport=443 dport=59628 mark=0 use=1
udp      17 47 src=127.0.0.1 dst=127.0.0.1 sport=33571 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=33571 [ASSURED] mark=0 use=1
udp      17 26 src=127.0.0.1 dst=127.0.0.1 sport=45837 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=45837 [ASSURED] mark=0 use=1
tcp      6 113 SYN_SENT src=10.10.10.13 dst=172.217.16.14 sport=59624 dport=443 [UNREPLIED] src=172.217.16.14 dst=192.168.15.145 sport=443 dport=59624 mark=0 use=1
udp      17 79 src=127.0.0.1 dst=127.0.0.1 sport=57413 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=57413 [ASSURED] mark=0 use=1
udp      17 18 src=192.168.15.145 dst=192.5.6.30 sport=30906 dport=53 src=192.5.6.30 dst=192.168.15.145 sport=53 dport=30906 mark=0 use=1
udp      17 14 src=192.168.15.145 dst=216.239.36.10 sport=35821 dport=53 [UNREPLIED] src=216.239.36.10 dst=192.168.15.145 sport=53 dport=35821 mark=0 use=1
udp      17 175 src=127.0.0.1 dst=127.0.0.1 sport=38338 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=38338 [ASSURED] mark=0 use=1
udp      17 23 src=192.168.15.145 dst=216.239.34.10 sport=7168 dport=53 [UNREPLIED] src=216.239.34.10 dst=192.168.15.145 sport=53 dport=7168 mark=0 use=1
tcp      6 115 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59629 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59629 [ASSURED] mark=0 use=2
udp      17 14 src=192.168.15.145 dst=216.239.38.10 sport=49498 dport=53 [UNREPLIED] src=216.239.38.10 dst=192.168.15.145 sport=53 dport=49498 mark=0 use=1
udp      17 138 src=10.10.10.13 dst=10.10.10.1 sport=49307 dport=53 src=10.10.10.1 dst=10.10.10.13 sport=53 dport=49307 [ASSURED] mark=0 use=1
udp      17 19 src=192.168.15.145 dst=91.189.91.157 sport=50141 dport=123 src=91.189.91.157 dst=192.168.15.145 sport=123 dport=50141 mark=0 use=1
tcp      6 431991 ESTABLISHED src=127.0.0.1 dst=127.0.0.1 sport=50744 dport=3306 src=127.0.0.1 dst=127.0.0.1 sport=3306 dport=50744 [ASSURED] mark=0 use=1
udp      17 22 src=192.168.15.145 dst=216.239.34.10 sport=13070 dport=53 [UNREPLIED] src=216.239.34.10 dst=192.168.15.145 sport=53 dport=13070 mark=0 use=1
udp      17 131 src=127.0.0.1 dst=127.0.0.1 sport=53782 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=53782 [ASSURED] mark=0 use=1
tcp      6 111 SYN_SENT src=10.10.10.13 dst=172.217.16.10 sport=59627 dport=443 [UNREPLIED] src=172.217.16.10 dst=192.168.15.145 sport=443 dport=59627 mark=0 use=1
udp      17 22 src=192.168.15.145 dst=216.239.38.10 sport=11054 dport=53 src=216.239.38.10 dst=192.168.15.145 sport=53 dport=11054 mark=0 use=1
tcp      6 67 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59616 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59616 [ASSURED] mark=0 use=1
tcp      6 65 SYN_SENT src=10.10.10.13 dst=172.217.20.206 sport=59614 dport=443 [UNREPLIED] src=172.217.20.206 dst=192.168.15.145 sport=443 dport=59614 mark=0 use=1
udp      17 14 src=192.168.15.145 dst=216.239.36.10 sport=36155 dport=53 src=216.239.36.10 dst=192.168.15.145 sport=53 dport=36155 mark=0 use=1
tcp      6 26 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59609 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59609 [ASSURED] mark=0 use=1
tcp      6 86 TIME_WAIT src=192.168.15.145 dst=83.24.1.166 sport=42810 dport=53495 src=83.24.1.166 dst=192.168.15.145 sport=53495 dport=42810 [ASSURED] mark=0 use=1
udp      17 41 src=127.0.0.1 dst=127.0.0.1 sport=32871 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=32871 [ASSURED] mark=0 use=1
tcp      6 299 ESTABLISHED src=10.10.10.13 dst=10.10.10.1 sport=59598 dport=2225 src=10.10.10.1 dst=10.10.10.13 sport=2225 dport=59598 [ASSURED] mark=0 use=1
tcp      6 70 SYN_SENT src=10.10.10.13 dst=172.217.20.206 sport=59618 dport=443 [UNREPLIED] src=172.217.20.206 dst=192.168.15.145 sport=443 dport=59618 mark=0 use=1
tcp      6 431993 ESTABLISHED src=10.10.10.13 dst=108.177.14.189 sport=59632 dport=443 src=108.177.14.189 dst=192.168.15.145 sport=443 dport=59632 [ASSURED] mark=0 use=1
udp      17 29 src=10.10.10.13 dst=10.10.10.1 sport=54580 dport=53 src=10.10.10.1 dst=10.10.10.13 sport=53 dport=54580 mark=0 use=1
udp      17 14 src=10.10.10.13 dst=10.10.10.1 sport=59277 dport=53 src=10.10.10.1 dst=10.10.10.13 sport=53 dport=59277 mark=0 use=1
udp      17 14 src=192.168.15.145 dst=216.239.34.10 sport=59029 dport=53 src=216.239.34.10 dst=192.168.15.145 sport=53 dport=59029 mark=0 use=1
udp      17 19 src=192.168.15.145 dst=216.239.32.10 sport=7380 dport=53 [UNREPLIED] src=216.239.32.10 dst=192.168.15.145 sport=53 dport=7380 mark=0 use=1
tcp      6 114 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59626 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59626 [ASSURED] mark=0 use=1
udp      17 18 src=192.168.15.145 dst=216.239.38.10 sport=34299 dport=53 src=216.239.38.10 dst=192.168.15.145 sport=53 dport=34299 mark=0 use=1
tcp      6 26 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59608 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59608 [ASSURED] mark=0 use=1
udp      17 23 src=10.10.10.13 dst=10.10.10.1 sport=64264 dport=53 src=10.10.10.1 dst=10.10.10.13 sport=53 dport=64264 mark=0 use=1
tcp      6 431845 ESTABLISHED src=10.10.11.10 dst=64.233.161.188 sport=41086 dport=5228 src=64.233.161.188 dst=192.168.15.145 sport=5228 dport=41086 [ASSURED] mark=0 use=1
udp      17 18 src=192.168.15.145 dst=216.239.32.10 sport=47048 dport=53 [UNREPLIED] src=216.239.32.10 dst=192.168.15.145 sport=53 dport=47048 mark=0 use=1
tcp      6 431981 ESTABLISHED src=127.0.0.1 dst=127.0.0.1 sport=50742 dport=3306 src=127.0.0.1 dst=127.0.0.1 sport=3306 dport=50742 [ASSURED] mark=0 use=1
tcp      6 90 TIME_WAIT src=10.10.10.13 dst=192.168.15.145 sport=59605 dport=9000 src=192.168.15.145 dst=10.10.10.13 sport=9000 dport=59605 [ASSURED] mark=0 use=1
udp      17 21 src=10.10.10.13 dst=10.10.10.1 sport=68 dport=67 src=10.10.10.1 dst=10.10.10.13 sport=67 dport=68 mark=0 use=1
udp      17 3582 src=10.10.10.12 dst=82.177.59.132 sport=5060 dport=5060 [UNREPLIED] src=82.177.59.132 dst=192.168.15.145 sport=5060 dport=5060 mark=0 helper=sip use=1
tcp      6 57 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59613 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59613 [ASSURED] mark=0 use=1
tcp      6 115 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59631 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59631 [ASSURED] mark=0 use=1
tcp      6 431992 ESTABLISHED src=127.0.0.1 dst=127.0.0.1 sport=38284 dport=8086 src=127.0.0.1 dst=127.0.0.1 sport=8086 dport=38284 [ASSURED] mark=0 use=1
tcp      6 431997 ESTABLISHED src=10.10.10.13 dst=10.10.10.1 sport=59623 dport=3483 src=10.10.10.1 dst=10.10.10.13 sport=3483 dport=59623 [ASSURED] mark=0 use=1
tcp      6 70 SYN_SENT src=10.10.10.13 dst=172.217.20.206 sport=59617 dport=443 [UNREPLIED] src=172.217.20.206 dst=192.168.15.145 sport=443 dport=59617 mark=0 use=1
tcp      6 431999 ESTABLISHED src=10.10.10.13 dst=52.200.99.248 sport=59611 dport=443 src=52.200.99.248 dst=192.168.15.145 sport=443 dport=59611 [ASSURED] mark=0 use=1
tcp      6 431998 ESTABLISHED src=10.10.10.13 dst=192.168.15.145 sport=59622 dport=9000 src=192.168.15.145 dst=10.10.10.13 sport=9000 dport=59622 [ASSURED] mark=0 use=1
udp      17 19 src=192.168.15.145 dst=216.239.36.10 sport=58225 dport=53 src=216.239.36.10 dst=192.168.15.145 sport=53 dport=58225 mark=0 use=1
udp      17 6 src=192.168.15.145 dst=255.255.255.255 sport=3483 dport=3483 [UNREPLIED] src=255.255.255.255 dst=192.168.15.145 sport=3483 dport=3483 mark=0 use=1
udp      17 14 src=192.168.15.145 dst=216.239.32.10 sport=65227 dport=53 src=216.239.32.10 dst=192.168.15.145 sport=53 dport=65227 mark=0 use=1
udp      17 14 src=192.168.15.145 dst=216.239.32.10 sport=11790 dport=53 src=216.239.32.10 dst=192.168.15.145 sport=53 dport=11790 mark=0 use=1
udp      17 14 src=10.10.10.13 dst=10.10.10.1 sport=51440 dport=53 src=10.10.10.1 dst=10.10.10.13 sport=53 dport=51440 mark=0 use=2
tcp      6 65 SYN_SENT src=10.10.10.13 dst=172.217.20.206 sport=59615 dport=443 [UNREPLIED] src=172.217.20.206 dst=192.168.15.145 sport=443 dport=59615 mark=0 use=1
tcp      6 26 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59610 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59610 [ASSURED] mark=0 use=1
udp      17 18 src=192.168.15.145 dst=192.52.178.30 sport=41511 dport=53 src=192.52.178.30 dst=192.168.15.145 sport=53 dport=41511 mark=0 use=1
udp      17 18 src=10.10.10.13 dst=10.10.10.1 sport=49385 dport=53 src=10.10.10.1 dst=10.10.10.13 sport=53 dport=49385 mark=0 use=1
tcp      6 115 TIME_WAIT src=10.10.10.13 dst=70.90.191.125 sport=59630 dport=80 src=70.90.191.125 dst=192.168.15.145 sport=80 dport=59630 [ASSURED] mark=0 use=1
tcp      6 431854 ESTABLISHED src=10.10.11.10 dst=172.217.20.206 sport=36688 dport=80 src=172.217.20.206 dst=192.168.15.145 sport=80 dport=36688 [ASSURED] mark=0 use=1
tcp      6 431958 ESTABLISHED src=10.10.10.13 dst=172.217.16.4 sport=59606 dport=443 src=172.217.16.4 dst=192.168.15.145 sport=443 dport=59606 [ASSURED] mark=0 use=1
udp      17 159 src=127.0.0.1 dst=127.0.0.1 sport=47749 dport=53 src=127.0.0.1 dst=127.0.0.1 sport=53 dport=47749 [ASSURED] mark=0 use=1
tcp      6 431842 ESTABLISHED src=10.10.10.13 dst=10.10.10.1 sport=59603 dport=2225 src=10.10.10.1 dst=10.10.10.13 sport=2225 dport=59603 [ASSURED] mark=0 use=1

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    inet 192.168.15.145/24 brd 192.168.15.255 scope global enp1s0
       valid_lft forever preferred_lft forever
4: enp3s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    inet 10.10.10.1/24 brd 10.10.10.255 scope global enp3s0f1
       valid_lft forever preferred_lft forever
5: wlp4s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    inet 10.10.11.1/24 brd 10.10.11.255 scope global wlp4s0
       valid_lft forever preferred_lft forever
6: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 100
    inet 10.8.0.1 peer 10.8.0.2/32 scope global tun0
       valid_lft forever preferred_lft forever

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    1510866    7191     0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    1510866    7191     0       0       0       0       
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 70:85:c2:3d:6b:ba brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    1831287    6647     0       3       0       3       
    TX: bytes  packets  errors  dropped carrier collsns 
    1246554    9357     0       0       0       0       
3: enp3s0f0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether a0:36:9f:a2:b9:0e brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       
4: enp3s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether a0:36:9f:a2:b9:0f brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    143110     1102     0       0       0       6       
    TX: bytes  packets  errors  dropped carrier collsns 
    1466366    1703     0       0       0       0       
5: wlp4s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 18:f4:6a:30:ae:50 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    30719      173      0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    143954     209      0       0       0       0       
6: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN mode DEFAULT group default qlen 100
    link/none 
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0       
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0       

Bridges

bridge name	bridge id		STP enabled	interfaces

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

local 192.168.15.145 dev enp1s0 proto kernel scope host src 192.168.15.145
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
local 10.8.0.1 dev tun0 proto kernel scope host src 10.8.0.1
local 10.10.11.1 dev wlp4s0 proto kernel scope host src 10.10.11.1
local 10.10.10.1 dev enp3s0f1 proto kernel scope host src 10.10.10.1
broadcast 192.168.15.255 dev enp1s0 proto kernel scope link src 192.168.15.145
broadcast 192.168.15.0 dev enp1s0 proto kernel scope link src 192.168.15.145
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
broadcast 10.10.11.255 dev wlp4s0 proto kernel scope link src 10.10.11.1
broadcast 10.10.11.0 dev wlp4s0 proto kernel scope link src 10.10.11.1
broadcast 10.10.10.255 dev enp3s0f1 proto kernel scope link src 10.10.10.1
broadcast 10.10.10.0 dev enp3s0f1 proto kernel scope link src 10.10.10.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1

Table main:

10.8.0.2 dev tun0 proto kernel scope link src 10.8.0.1
192.168.15.0/24 dev enp1s0 proto kernel scope link src 192.168.15.145
10.8.0.0/24 via 10.8.0.2 dev tun0
10.10.11.0/24 dev wlp4s0 proto kernel scope link src 10.10.11.1
10.10.10.0/24 dev enp3s0f1 proto kernel scope link src 10.10.10.1
default via 192.168.15.1 dev enp1s0 proto static

Per-IP Counters

   iptaccount is not installed

NF Accounting

No NF Accounting defined (nfacct not found)

Events


PFKEY SPD


PFKEY SAD


/proc

   /proc/version = Linux version 4.15.0-24-generic (buildd@lgw01-amd64-056) (gcc version 7.3.0 (Ubuntu 7.3.0-16ubuntu3)) #26-Ubuntu SMP Wed Jun 13 08:44:47 UTC 2018
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 1
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/enp1s0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/enp1s0/arp_filter = 0
   /proc/sys/net/ipv4/conf/enp1s0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/enp1s0/rp_filter = 1
   /proc/sys/net/ipv4/conf/enp1s0/log_martians = 1
   /proc/sys/net/ipv4/conf/enp3s0f0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/enp3s0f0/arp_filter = 0
   /proc/sys/net/ipv4/conf/enp3s0f0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/enp3s0f0/rp_filter = 1
   /proc/sys/net/ipv4/conf/enp3s0f0/log_martians = 1
   /proc/sys/net/ipv4/conf/enp3s0f1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/enp3s0f1/arp_filter = 0
   /proc/sys/net/ipv4/conf/enp3s0f1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/enp3s0f1/rp_filter = 1
   /proc/sys/net/ipv4/conf/enp3s0f1/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 1
   /proc/sys/net/ipv4/conf/lo/log_martians = 1
   /proc/sys/net/ipv4/conf/tun0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/tun0/arp_filter = 0
   /proc/sys/net/ipv4/conf/tun0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/tun0/rp_filter = 1
   /proc/sys/net/ipv4/conf/tun0/log_martians = 1
   /proc/sys/net/ipv4/conf/wlp4s0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/wlp4s0/arp_filter = 0
   /proc/sys/net/ipv4/conf/wlp4s0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/wlp4s0/rp_filter = 1
   /proc/sys/net/ipv4/conf/wlp4s0/log_martians = 1

ARP

? (10.10.10.12) at 7c:2f:80:0f:b7:b9 [ether] on enp3s0f1
? (10.10.11.10) at 34:23:ba:c4:3c:78 [ether] on wlp4s0
? (10.10.10.13) at f4:6d:04:63:aa:64 [ether] on enp3s0f1
? (192.168.15.1) at 00:27:22:35:40:df [ether] on enp1s0

Modules

iptable_filter         16384  1
iptable_mangle         16384  1
iptable_nat            16384  1
iptable_raw            16384  1
ip_tables              28672  4 iptable_mangle,iptable_filter,iptable_raw,iptable_nat
ipt_REJECT             16384  4
nf_conntrack          131072  27 nf_nat_pptp,nf_conntrack_sip,nf_conntrack_snmp,nf_conntrack_irc,xt_nat,nf_nat_h323,nf_conntrack_ftp,nf_nat_snmp_basic,nf_nat_sip,nf_conntrack_ipv4,nf_conntrack_tftp,nf_nat_irc,nf_conntrack_pptp,nf_conntrack_amanda,nf_conntrack_broadcast,nf_nat_ftp,nf_conntrack_sane,nf_nat_amanda,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_proto_gre,xt_CT,nf_conntrack_h323,xt_conntrack,nf_nat_ipv4,nf_nat_tftp,nf_nat
nf_conntrack_amanda    16384  3 nf_nat_amanda
nf_conntrack_broadcast    16384  2 nf_conntrack_snmp,nf_conntrack_netbios_ns
nf_conntrack_ftp       20480  3 nf_nat_ftp
nf_conntrack_h323      73728  5 nf_nat_h323
nf_conntrack_ipv4      16384  47
nf_conntrack_irc       16384  3 nf_nat_irc
nf_conntrack_netbios_ns    16384  2
nf_conntrack_netlink    40960  0
nf_conntrack_pptp      16384  3 nf_nat_pptp
nf_conntrack_proto_gre    16384  1 nf_conntrack_pptp
nf_conntrack_sane      16384  2
nf_conntrack_sip       28672  3 nf_nat_sip
nf_conntrack_snmp      16384  3 nf_nat_snmp_basic
nf_conntrack_tftp      16384  3 nf_nat_tftp
nf_defrag_ipv4         16384  1 nf_conntrack_ipv4
nf_log_common          16384  1 nf_log_ipv4
nf_log_ipv4            16384  11
nf_nat                 32768  10 nf_nat_pptp,nf_nat_proto_gre,xt_nat,nf_nat_h323,nf_nat_sip,nf_nat_irc,nf_nat_ftp,nf_nat_amanda,nf_nat_ipv4,nf_nat_tftp
nf_nat_amanda          16384  0
nf_nat_ftp             16384  0
nf_nat_h323            20480  0
nf_nat_ipv4            16384  1 iptable_nat
nf_nat_irc             16384  0
nf_nat_pptp            16384  0
nf_nat_proto_gre       16384  1 nf_nat_pptp
nf_nat_sip             20480  0
nf_nat_snmp_basic      20480  0
nf_nat_tftp            16384  0
nf_reject_ipv4         16384  1 ipt_REJECT
xt_addrtype            16384  27
xt_comment             16384  3
xt_conntrack           16384  20
xt_CT                  16384  22
xt_hashlimit           20480  11
xt_LOG                 16384  11
xt_mac                 16384  7
xt_mark                16384  1
xt_multiport           16384  1
xt_nat                 16384  4
xt_NFLOG               16384  0
xt_recent              20480  1
xt_tcpudp              16384  36

Shorewall has detected the following iptables/netfilter capabilities:
   ACCOUNT Target (ACCOUNT_TARGET): Not available
   Address Type Match (ADDRTYPE): Available
   Amanda Helper: Available
   Arptables JF (ARPTABLESJF): Not available
   AUDIT Target (AUDIT_TARGET): Available
   Basic Ematch (BASIC_EMATCH): Available
   Basic Filter (BASIC_FILTER): Available
   Capabilities Version (CAPVERSION): 50112
   Checksum Target (CHECKSUM_TARGET): Available
   CLASSIFY Target (CLASSIFY_TARGET): Available
   Comments (COMMENTS): Available
   Condition Match (CONDITION_MATCH): Not available
   Connection Tracking Match (CONNTRACK_MATCH): Available
   Connlimit Match (CONNLIMIT_MATCH): Available
   Connmark Match (CONNMARK_MATCH): Available
   CONNMARK Target (CONNMARK): Available
   CT Target (CT_TARGET): Available
   DSCP Match (DSCP_MATCH): Available
   DSCP Target (DSCP_TARGET): Available
   Enhanced Multi-port Match (EMULIPORT): Available
   Extended Connection Tracking Match Support (NEW_CONNTRACK_MATCH): Available
   Extended Connmark Match (XCONNMARK_MATCH): Available
   Extended CONNMARK Target (XCONNMARK): Available
   Extended MARK Target 2 (EXMARK): Available
   Extended MARK Target (XMARK): Available
   Extended Multi-port Match (XMULIPORT): Available
   Extended REJECT (ENHANCED_REJECT): Available
   FLOW Classifier (FLOW_FILTER): Available
   FTP-0 Helper: Not available
   FTP Helper: Available
   fwmark route mask (FWMARK_RT_MASK): Available
   Geo IP Match (GEOIP_MATCH): Not available
   Goto Support (GOTO_TARGET): Available
   H323 Helper: Available
   Hashlimit Match (HASHLIMIT_MATCH): Available
   Header Match (HEADER_MATCH): Not available
   Helper Match (HELPER_MATCH): Available
   Iface Match (IFACE_MATCH): Not available
   IMQ Target (IMQ_TARGET): Not available
   INPUT chain in nat table (NAT_INPUT_CHAIN): Available
   IPMARK Target (IPMARK_TARGET): Not available
   IPP2P Match (IPP2P_MATCH): Not available
   IP range Match(IPRANGE_MATCH): Available
   Ipset Match (IPSET_MATCH): Not available
   ipset V5 (IPSET_V5): Not available
   iptables-restore --wait option (RESTORE_WAIT_OPTION): Not available
   iptables -S (IPTABLES_S): Available
   iptables --wait option (WAIT_OPTION): Available
   IRC-0 Helper: Not available
   IRC Helper: Available
   Kernel Version (KERNELVERSION): 41500
   LOGMARK Target (LOGMARK_TARGET): Not available
   LOG Target (LOG_TARGET): Available
   Mangle FORWARD Chain (MANGLE_FORWARD): Available
   Mark in the filter table (MARK_ANYWHERE): Available
   MARK Target (MARK): Available
   MASQUERADE Target (MASQUERADE_TGT): Available
   Multi-port Match (MULTIPORT): Available
   NAT (NAT_ENABLED): Available
   Netbios_ns Helper: Available
   NETMAP Target (NETMAP_TARGET): Available
   New tos Match (NEW_TOS_MATCH): Available
   NFAcct Match: Not available
   --nflog-size support (NFLOG_SIZE): Available
   NFLOG Target (NFLOG_TARGET): Available
   NFQUEUE CPU Fanout (CPU_FANOUT): Available
   NFQUEUE Target (NFQUEUE_TARGET): Available
   Owner Match (OWNER_MATCH): Available
   Owner Name Match (OWNER_NAME_MATCH): Available
   Packet length Match (LENGTH_MATCH): Available
   Packet Mangling (MANGLE_ENABLED): Available
   Packet Type Match (USEPKTTYPE): Available
   Persistent SNAT (PERSISTENT_SNAT): Available
   Physdev-is-bridged Support (PHYSDEV_BRIDGE): Available
   Physdev Match (PHYSDEV_MATCH): Available
   Policy Match (POLICY_MATCH): Available
   PPTP Helper: Available
   Raw Table (RAW_TABLE): Available
   Realm Match (REALM_MATCH): Available
   Recent Match "--reap" option (REAP_OPTION): Available
   Recent Match (RECENT_MATCH): Available
   Repeat match (KLUDGEFREE): Available
   RPFilter Match (RPFILTER_MATCH): Available
   SANE-0 Helper: Not available
   SANE Helper: Available
   SIP-0 Helper: Not available
   SIP Helper: Available
   SNMP Helper: Available
   Statistic Match (STATISTIC_MATCH): Available
   TARPIT Target (TARPIT_TARGET): Not available
   TCPMSS Match (TCPMSS_MATCH): Available
   TCPMSS Target (TCPMSS_TARGET): Available
   TFTP-0 Helper: Not available
   TFTP Helper: Available
   Time Match (TIME_MATCH): Available
   TPROXY Target (TPROXY_TARGET): Available
   UDPLITE Port Redirection (UDPLITEREDIRECT): Not available
   ULOG Target (ULOG_TARGET): Not available

Netid State       Recv-Q  Send-Q     Local Address:Port     Peer Address:Port                                                                                   
udp   UNCONN      0       0                0.0.0.0:3483          0.0.0.0:*       users:(("squeezeboxserve",pid=2936,fd=8))                                      
udp   UNCONN      27648   0                0.0.0.0:53            0.0.0.0:*       users:(("unbound",pid=1369,fd=3))                                              
udp   UNCONN      8960    0                0.0.0.0:67            0.0.0.0:*       users:(("dhcpd",pid=2336,fd=8))                                                
udp   UNCONN      15360   0           10.10.11.255:137           0.0.0.0:*       users:(("nmbd",pid=1075,fd=27))                                                
udp   UNCONN      0       0             10.10.11.1:137           0.0.0.0:*       users:(("nmbd",pid=1075,fd=26))                                                
udp   UNCONN      15360   0           10.10.10.255:137           0.0.0.0:*       users:(("nmbd",pid=1075,fd=23))                                                
udp   UNCONN      0       0             10.10.10.1:137           0.0.0.0:*       users:(("nmbd",pid=1075,fd=22))                                                
udp   UNCONN      13824   0         192.168.15.255:137           0.0.0.0:*       users:(("nmbd",pid=1075,fd=18))                                                
udp   UNCONN      0       0         192.168.15.145:137           0.0.0.0:*       users:(("nmbd",pid=1075,fd=17))                                                
udp   UNCONN      44544   0                0.0.0.0:137           0.0.0.0:*       users:(("nmbd",pid=1075,fd=15))                                                
udp   UNCONN      1280    0           10.10.11.255:138           0.0.0.0:*       users:(("nmbd",pid=1075,fd=29))                                                
udp   UNCONN      0       0             10.10.11.1:138           0.0.0.0:*       users:(("nmbd",pid=1075,fd=28))                                                
udp   UNCONN      1280    0           10.10.10.255:138           0.0.0.0:*       users:(("nmbd",pid=1075,fd=25))                                                
udp   UNCONN      0       0             10.10.10.1:138           0.0.0.0:*       users:(("nmbd",pid=1075,fd=24))                                                
udp   UNCONN      1280    0         192.168.15.255:138           0.0.0.0:*       users:(("nmbd",pid=1075,fd=20))                                                
udp   UNCONN      0       0         192.168.15.145:138           0.0.0.0:*       users:(("nmbd",pid=1075,fd=19))                                                
udp   UNCONN      3840    0                0.0.0.0:138           0.0.0.0:*       users:(("nmbd",pid=1075,fd=16))                                                
udp   UNCONN      0       0              127.0.0.1:161           0.0.0.0:*       users:(("snmpd",pid=1146,fd=9))                                                
udp   UNCONN      0       0                0.0.0.0:16876         0.0.0.0:*       users:(("dhcpd",pid=2336,fd=20))                                               
udp   UNCONN      0       0                0.0.0.0:49648         0.0.0.0:*       users:(("snmpd",pid=1146,fd=10))                                               
udp   UNCONN      0       0                0.0.0.0:538           0.0.0.0:*       users:(("gdomap",pid=1178,fd=4))                                               
udp   UNCONN      0       0                0.0.0.0:1194          0.0.0.0:*       users:(("openvpn",pid=1127,fd=7))                                              
udp   UNCONN      0       0                0.0.0.0:58584         0.0.0.0:*       users:(("avahi-daemon",pid=1022,fd=13))                                        
udp   UNCONN      36352   0                0.0.0.0:5353          0.0.0.0:*       users:(("avahi-daemon",pid=1022,fd=12))                                        
udp   UNCONN      4864    0                0.0.0.0:38338         0.0.0.0:*       users:(("squeezeboxserve",pid=2936,fd=29))                                     
tcp   LISTEN      0       128              0.0.0.0:9090          0.0.0.0:*       users:(("squeezeboxserve",pid=2936,fd=23))                                     
tcp   LISTEN      0       128              0.0.0.0:9000          0.0.0.0:*       users:(("squeezeboxserve",pid=2936,fd=26))                                     
tcp   LISTEN      0       128              0.0.0.0:5001          0.0.0.0:*       users:(("apache2",pid=1630,fd=5),("apache2",pid=1629,fd=5),("apache2",pid=1627,fd=5),("apache2",pid=1625,fd=5),("apache2",pid=1624,fd=5),("apache2",pid=1570,fd=5),("apache2",pid=1566,fd=5))
tcp   LISTEN      0       80             127.0.0.1:3306          0.0.0.0:*       users:(("mysqld",pid=1441,fd=19))                                              
tcp   LISTEN      0       50               0.0.0.0:139           0.0.0.0:*       users:(("smbd",pid=1466,fd=34))                                                
tcp   LISTEN      0       128              0.0.0.0:1007          0.0.0.0:*       users:(("apache2",pid=1630,fd=4),("apache2",pid=1629,fd=4),("apache2",pid=1627,fd=4),("apache2",pid=1625,fd=4),("apache2",pid=1624,fd=4),("apache2",pid=1570,fd=4),("apache2",pid=1566,fd=4))
tcp   LISTEN      0       128              0.0.0.0:80            0.0.0.0:*       users:(("apache2",pid=1630,fd=3),("apache2",pid=1629,fd=3),("apache2",pid=1627,fd=3),("apache2",pid=1625,fd=3),("apache2",pid=1624,fd=3),("apache2",pid=1570,fd=3),("apache2",pid=1566,fd=3))
tcp   LISTEN      0       128              0.0.0.0:2225          0.0.0.0:*       users:(("sshd",pid=1316,fd=3))                                                 
tcp   LISTEN      0       128              0.0.0.0:53            0.0.0.0:*       users:(("unbound",pid=1369,fd=4))                                              
tcp   LISTEN      0       128              0.0.0.0:8086          0.0.0.0:*       users:(("influxd",pid=1125,fd=31))                                             
tcp   LISTEN      0       128              0.0.0.0:3000          0.0.0.0:*       users:(("grafana-server",pid=1700,fd=7))                                       
tcp   LISTEN      0       128            127.0.0.1:8088          0.0.0.0:*       users:(("influxd",pid=1125,fd=3))                                              
tcp   LISTEN      0       128            127.0.0.1:8953          0.0.0.0:*       users:(("unbound",pid=1369,fd=5))                                              
tcp   LISTEN      0       16               0.0.0.0:538           0.0.0.0:*       users:(("gdomap",pid=1178,fd=5))                                               
tcp   LISTEN      0       128              0.0.0.0:3483          0.0.0.0:*       users:(("squeezeboxserve",pid=2936,fd=9))                                      
tcp   LISTEN      0       50               0.0.0.0:445           0.0.0.0:*       users:(("smbd",pid=1466,fd=33))                                                
tcp   ESTAB       0       0              127.0.0.1:3306        127.0.0.1:50744   users:(("mysqld",pid=1441,fd=61))                                              
tcp   TIME-WAIT   0       0             10.10.10.1:3483      10.10.10.13:59599                                                                                  
tcp   TIME-WAIT   0       0         192.168.15.145:9000      10.10.10.13:59605                                                                                  
tcp   LAST-ACK    0       536       192.168.15.145:47884    193.106.84.7:51413                                                                                  
tcp   LAST-ACK    0       229       192.168.15.145:48484    193.106.84.7:51413                                                                                  
tcp   FIN-WAIT-1  0       213       192.168.15.145:42810     83.24.1.166:53495                                                                                  
tcp   ESTAB       0       0         192.168.15.145:9000      10.10.10.13:59622   users:(("squeezeboxserve",pid=2936,fd=27))                                     
tcp   ESTAB       0       0             10.10.10.1:3483      10.10.10.13:59623   users:(("squeezeboxserve",pid=2936,fd=28))                                     
tcp   LAST-ACK    0       128       192.168.15.145:48040    193.106.84.7:51413                                                                                  
tcp   ESTAB       0       0              127.0.0.1:3306        127.0.0.1:50742   users:(("mysqld",pid=1441,fd=4))                                               
tcp   ESTAB       0       0              127.0.0.1:8086        127.0.0.1:38284   users:(("influxd",pid=1125,fd=59))                                             
tcp   ESTAB       0       0              127.0.0.1:50742       127.0.0.1:3306    users:(("grafana-server",pid=1700,fd=5))                                       
tcp   LAST-ACK    0       511       192.168.15.145:48508    193.106.84.7:51413                                                                                  
tcp   ESTAB       0       0             10.10.10.1:2225      10.10.10.13:59598   users:(("sshd",pid=2323,fd=3),("sshd",pid=2116,fd=3))                          
tcp   ESTAB       0       0              127.0.0.1:50744       127.0.0.1:3306    users:(("grafana-server",pid=1700,fd=6))                                       
tcp   ESTAB       0       0              127.0.0.1:38284       127.0.0.1:8086    users:(("telegraf",pid=1132,fd=3))                                             
tcp   ESTAB       0       0             10.10.10.1:2225      10.10.10.13:59603   users:(("sshd",pid=2467,fd=3),("sshd",pid=2373,fd=3))                          

Traffic Control

Device lo:
qdisc noqueue 0: root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device enp1s0:
qdisc fq_codel 0: root refcnt 2 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn 
 Sent 1239399 bytes 9358 pkt (dropped 0, overlimits 0 requeues 7) 
 backlog 0b 0p requeues 7
  maxpacket 652 drop_overlimit 0 new_flow_count 3 ecn_mark 0
  new_flows_len 0 old_flows_len 0


Device enp3s0f1:
qdisc mq 0: root 
 Sent 1466366 bytes 1703 pkt (dropped 0, overlimits 0 requeues 4) 
 backlog 0b 0p requeues 4
qdisc fq_codel 0: parent :4 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn 
 Sent 1025716 bytes 787 pkt (dropped 0, overlimits 0 requeues 1) 
 backlog 0b 0p requeues 1
  maxpacket 0 drop_overlimit 0 new_flow_count 0 ecn_mark 0
  new_flows_len 0 old_flows_len 0
qdisc fq_codel 0: parent :3 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn 
 Sent 176281 bytes 532 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
  maxpacket 0 drop_overlimit 0 new_flow_count 0 ecn_mark 0
  new_flows_len 0 old_flows_len 0
qdisc fq_codel 0: parent :2 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn 
 Sent 234964 bytes 238 pkt (dropped 0, overlimits 0 requeues 2) 
 backlog 0b 0p requeues 2
  maxpacket 0 drop_overlimit 0 new_flow_count 0 ecn_mark 0
  new_flows_len 0 old_flows_len 0
qdisc fq_codel 0: parent :1 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn 
 Sent 29405 bytes 146 pkt (dropped 0, overlimits 0 requeues 1) 
 backlog 0b 0p requeues 1
  maxpacket 0 drop_overlimit 0 new_flow_count 0 ecn_mark 0
  new_flows_len 0 old_flows_len 0

class mq :1 root 
 Sent 29405 bytes 146 pkt (dropped 0, overlimits 0 requeues 1) 
 backlog 0b 0p requeues 1
class mq :2 root 
 Sent 234964 bytes 238 pkt (dropped 0, overlimits 0 requeues 2) 
 backlog 0b 0p requeues 2
class mq :3 root 
 Sent 176281 bytes 532 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :4 root 
 Sent 1025716 bytes 787 pkt (dropped 0, overlimits 0 requeues 1) 
 backlog 0b 0p requeues 1
class mq :5 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :6 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :7 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
class mq :8 root 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0

Device wlp4s0:
qdisc noqueue 0: root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0


Device tun0:
qdisc fq_codel 0: root refcnt 2 limit 10240p flows 1024 quantum 1500 target 5.0ms interval 100.0ms memory_limit 32Mb ecn 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
  maxpacket 0 drop_overlimit 0 new_flow_count 0 ecn_mark 0
  new_flows_len 0 old_flows_len 0



TC Filters

Device lo:

Device enp1s0:

Device enp3s0f1:

Device wlp4s0:

Device tun0:

