[prev in list] [next in list] [prev in thread] [next in thread]
List: freebsd-ipfw
Subject: PARENT dynamic rules
From: Patrick Tracanelli <eksffa () freebsdbrasil ! com ! br>
Date: 2003-01-22 16:59:11
[Download RAW message or body]
Hello there.
I am in the process of rewriting some set of firewall rules from IPFW1 to IPFW2, but \
i am getting a little bit confused by how the dynamic rules work now. I usually see \
PARENT, LIMIT and STATE labeled dynamic rules what i think is great for user level \
understanding of that is going on. I believe the PARENT and LIMIT rules work \
together, and for sure (i dont know the code deeply) they are responsible for solving \
the annoying "count" problems that used to happen on LIMIT rules (IPFW1).
But the PARENT rules doesnt seem to expire. I believe that they are PARENT rule \
created by every host connection to count the number of (child?) rules. I could see \
that PARENT 0 mean 1 rule by this src or dst address, PARENT 1 for 2 rules and on and \
on... in a certain moment the LIMIT rules are created (i would like to know exactly \
when too).
But what i really care the most is those PARENT not expiring. \
net.inet.ip.fw.dyn_count shows me the number of dyn rules active, that are relatively \
equiv. to the number of PARENT rules. I would like to understand it to decide about \
the racional number of max dyn rules i will allow...
The relevant part of my "ipfw -dea list" follows (little bit extense):
[some rules before]
00415 44 57336 deny log ip from { 10.0.0.0/8 or 192.168.0.0/16 or \
172.16.0.0/12 or 255.255.255.255 or 0.0.0.0 or 0.0.0.0/8 or 169.254.0.0/16 or \
224.0.0.0/4 or 240.0.0.0/4 } to any in via xl1 00705 0 0 deny log \
ip from any to { 10.0.0.0/8 or dst-ip 192.168.0.0/16 or dst-ip 172.16.0.0/12 or \
dst-ip 255.255.255.255 or dst-ip 0.0.0.0 or dst-ip 0.0.0.0/8 or dst-ip 169.254.0.0/16 \
or dst-ip 224.0.0.0/4 or dst-ip 240.0.0.0/4 } out via xl1 00805 0 0 \
allow gre from 200.187.144.243 to any via xl1 00810 0 0 allow gre \
from any to 200.187.144.243 via xl1 00900 0 0 check-state
00905 88 6560 allow icmp from 200.187.144.240/29 to any icmptypes \
0,3,8,11 in via xl0 keep-state 00910 267 34169 deny log icmp from any to \
any
01005 5026 512672 allow udp from any to { 200.187.144.243 or dst-ip \
200.187.144.246 } dst-port 53 in via xl1 limit src-addr 15 03005 0 \
0 deny log udp from any to 200.187.144.241 in via xl0 03010 22470 2695460 \
allow udp from 200.187.144.246 to any dst-port 53 in via xl0 keep-state 03015 \
680 51680 allow udp from 200.187.144.240/29 123 to 143.107.151.2 dst-port 123 in \
via xl0 keep-state 04005 72 7523 allow udp from 200.187.144.241 to \
200.187.144.246 dst-port 53 out via xl0 keep-state 30005 71838 7509388 allow \
tcp from 200.203.206.9 to { 200.187.144.243 or dst-ip 200.187.144.246 } dst-port 22 \
in via xl1 setup keep-state 30010 0 0 allow log tcp from any to \
200.187.144.246 dst-port 1723 in via xl1 setup limit src-addr 3 30015 209450 \
126520958 allow tcp from any to 200.187.144.243 dst-port 25,110,143 in via xl1 setup \
limit src-addr 10 30020 1547330 449685324 allow tcp from any to 200.187.144.243 \
dst-port 80 in via xl1 setup limit src-addr 15 30025 154 34692 allow tcp \
from any to 200.187.144.244 dst-port 21,20,80,443 in via xl1 setup limit src-addr 10 \
30035 4574 3121652 allow tcp from any 20 to 200.187.144.240/29 dst-port \
1024-65535 in via xl1 setup keep-state 32005 1621 209550 allow log tcp from \
200.187.144.246 to 200.187.144.241 dst-port 22 in via xl0 setup keep-state 32010 \
0 0 deny log tcp from any to 200.187.144.241 in via xl0 32015 684761 \
361115320 allow tcp from 200.187.144.246 to any dst-port 20,21,22,25,80,110,143,443 \
in via xl0 setup keep-state
[other rules]
65001 103980 49506837 deny log ip from any to any
65535 6 434 deny ip from any to any
## Dynamic rules (515):
01005 0 0 (0s) PARENT 0 udp 200.202.11.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 193.194.133.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.194.240.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 163.185.18.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.157.52.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.240.0.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.174.171.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 148.177.88.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.17.209.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.163.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.63.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.202.17.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.246.143.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.135.35.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.103.225.1 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.195.199.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.183.15.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 199.202.55.2 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 138.121.23.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.240.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.194.240.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.170.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.149.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 204.101.251.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.9.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.240.0.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.173.115.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.120.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 148.177.2.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 195.25.12.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.140.240.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.176.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.255.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 202.144.78.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 170.66.1.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 65.203.232.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.39.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.199.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 80.15.238.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 64.37.246.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 213.61.6.2 0 <-> 0.0.0.0 0
30020 0 0 (0s) PARENT 4 tcp 200.222.81.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 143.166.224.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 213.158.0.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.170.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.225.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.202.7.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.184.26.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 170.66.1.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.149.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.160.2.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 193.194.133.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.161.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.14.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.9.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.229.135.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.218.161.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.161.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.5.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.11.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.219.150.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.170.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.149.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.182.104.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.44.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.194.70.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.219.150.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.170.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.140.200.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.228.85.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 193.194.133.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.223.0.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 204.176.88.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 68.46.192.6 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 198.5.148.6 0 <-> 0.0.0.0 0
30020 511 30710 (176s) LIMIT tcp 200.181.178.85 21489 <-> 200.187.144.243 \
80 01005 0 0 (0s) PARENT 0 udp 200.193.55.7 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.192.7 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 211.66.88.8 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.191.8 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.189.8 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.206.9 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.131.9 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.8.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.240.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.184.26.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.2.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.192.208.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.230.199.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.190.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.73.83.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.73.84.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.204.0.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 64.14.117.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.190.77.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.8.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.153.60.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.183.132.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.189.161.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.192.100.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.210.249.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.160.16.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.177.96.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.2.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.44.32.12 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.199.12 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.0.96.12 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.160.16.13 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.192.208.13 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 168.126.63.13 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.2.13 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 208.185.54.14 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.2.14 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 61.9.208.15 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.190.77.15 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.100.16 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.176.3.18 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.225.93.18 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.176.3.19 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.196.89.19 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.176.3.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.240.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.208.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.173.114.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.201.164.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.192.161.20 0 <-> 0.0.0.0 0
32015 35 11686 (176s) STATE tcp 200.187.144.246 2344 <-> 200.215.181.155 \
80 01005 0 0 (0s) PARENT 0 udp 200.192.140.21 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.19.74.21 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 199.67.138.21 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.230.128.21 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.199.201.23 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.63.24 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 1 tcp 200.194.242.26 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.226.139.26 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.205.123.27 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.196.234.27 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.63.29 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.196.66.30 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.204.76.31 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.84.236.33 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.189.112.33 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.17.34 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.193.137.34 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.189.233.34 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.129.35 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.1.35 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.136.224.35 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.150.146.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.56.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.178.0.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.186.153.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.136.224.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.214.239.38 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.186.153.38 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 2 tcp 200.189.234.40 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.172.41 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.42.41 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 194.239.10.41 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.56.43 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.1.44 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 159.124.4.45 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.131.45 0 <-> 0.0.0.0 0
32025 1695 75410 (36s) STATE tcp 200.187.144.244 1697 <-> 207.46.106.61 \
1863 01005 0 0 (0s) PARENT 0 udp 200.197.200.47 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.192.6.48 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.48 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.194.242.49 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.49 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.168.32.49 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 12.107.122.50 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.230.199.50 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.50 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.162.192.50 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.162.192.51 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.51 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.53 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.54 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.55 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.56 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.245.207.57 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.225.52.57 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.57 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.58 0 <-> 0.0.0.0 0
32015 625 460414 (1s) STATE tcp 200.187.144.246 2487 <-> 200.155.1.42 80
01005 0 0 (0s) PARENT 0 udp 66.218.71.59 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 207.69.200.60 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.4.16.60 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.4.14.61 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 207.68.162.61 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.4.16.61 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.174.86.62 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.217.65 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.219.184.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.156.198.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 62.4.74.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.64.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.174.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 211.13.227.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.124.186.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 213.41.76.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.224.140.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.184.42.67 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.199.252.68 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.207.71 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.29.72 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.179.72 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.68.75 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 196.27.25.75 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.202.193.76 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.246.143.77 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 208.184.139.82 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.64.83 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.178.85 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.77.85 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 196.27.25.85 0 <-> 0.0.0.0 0
30005 673 136592 (300s) STATE tcp 200.203.206.9 3263 <-> 200.187.144.246 \
22 01005 0 0 (0s) PARENT 0 udp 66.111.46.90 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 65535 udp 200.222.80.90 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 210.100.220.90 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.222.80.91 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.225.91 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 66.218.66.92 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.225.92 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.194.132.93 0 <-> 0.0.0.0 0
30020 129 6732 (156s) LIMIT tcp 200.181.178.85 22423 <-> 200.187.144.243 \
80 01005 0 0 (0s) PARENT 0 udp 200.30.0.97 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.28.12.98 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 211.169.245.98 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.225.157.99 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.221.11.100 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.221.11.101 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.178.102 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.221.11.102 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.119.175.103 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.41.192.103 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.221.11.103 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.225.157.104 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.103.142.109 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.211.224.110 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.251.233.114 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.161.30.118 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.187.232.120 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.193.144.121 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.83.129 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 200.244.136.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.248.206.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.40.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.173.130 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 200.183.8.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 202.130.158.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 208.254.75.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.252.48.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 208.184.39.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.219.179.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.35.7.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.28.34.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 63.218.7.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 66.28.255.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.216.25.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.2.131 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.6.131 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.172.132 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.212.171.132 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.140.232.133 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 1 tcp 200.162.4.134 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 200.162.4.134 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.121.96.134 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.188.134 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 62.42.230.135 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.204.0.138 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.90.139 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.89.139 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.5.139 0 <-> 0.0.0.0 0
32025 9 1070 (300s) STATE tcp 200.187.144.244 4398 <-> 193.206.158.6 \
80 01005 0 0 (0s) PARENT 0 udp 200.32.96.140 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 212.62.17.145 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.219.165.147 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.190.99.147 0 <-> 0.0.0.0 0
30015 0 0 (19s) PARENT 1 tcp 200.183.200.149 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 198.81.9.149 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.162.4.150 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.225.157.150 0 <-> 0.0.0.0 0
30020 21 4414 (131s) LIMIT tcp 200.171.14.187 1664 <-> 200.187.144.243 \
80 30025 0 0 (0s) PARENT 0 tcp 200.161.145.152 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.247.217.154 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 204.176.177.155 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.211.8.160 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 130.54.210.161 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.28.47.162 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.223.209.163 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.186.163 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 2 tcp 200.194.134.165 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.194.134.167 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.251.232.167 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.247.247.171 0 <-> 0.0.0.0 0
32025 91 79746 (282s) STATE tcp 200.187.144.244 4392 <-> 131.252.208.32 \
80 01005 0 0 (0s) PARENT 0 udp 216.136.172.176 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.136.172.179 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.194.134.183 0 <-> 0.0.0.0 0
30020 0 0 (0s) PARENT 5 tcp 200.171.14.187 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.171.14.187 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.123.77.194 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.158.108.194 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.218.13.194 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.252.68.196 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.15.251.198 0 <-> 0.0.0.0 0
03010 3 397 (10s) STATE udp 200.187.144.246 1024 <-> 131.154.1.11 53
01005 0 0 (0s) PARENT 0 udp 205.138.3.200 0 <-> 0.0.0.0 0
30015 251 63044 (121s) LIMIT tcp 200.194.242.26 1338 <-> 200.187.144.243 \
25 30015 0 0 (0s) PARENT 4 tcp 200.103.136.202 0 <-> 0.0.0.0 0
03010 3 397 (9s) STATE udp 200.187.144.246 1024 <-> 193.205.245.8 53
01005 0 0 (0s) PARENT 0 udp 200.176.115.203 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 194.196.15.207 0 <-> 0.0.0.0 0
03010 3 869 (8s) STATE udp 200.187.144.246 1024 <-> 192.36.148.17 53
01005 0 0 (0s) PARENT 0 udp 66.187.233.210 0 <-> 0.0.0.0 0
32005 395 66466 (300s) STATE tcp 200.187.144.246 2504 <-> 200.187.144.241 \
22 03010 7 739 (9s) STATE udp 200.187.144.246 1024 <-> 192.106.1.31 \
53 03010 3 390 (9s) STATE udp 200.187.144.246 1024 <-> 192.12.94.30 \
53 01005 0 0 (0s) PARENT 0 udp 200.253.253.222 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.13.223 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 80.200.104.225 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.205.181.226 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.28.86.226 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.237.238.228 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 206.64.119.229 0 <-> 0.0.0.0 0
30015 41 16220 (300s) LIMIT tcp 200.183.200.149 59028 <-> \
200.187.144.243 25 32025 35 15568 (296s) STATE tcp 200.187.144.244 4396 \
<-> 216.239.37.101 80 01005 0 0 (0s) PARENT 0 udp 216.46.98.240 0 \
<-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 194.73.82.242 0 <-> \
0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 206.99.44.245 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.212.171.245 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.16.246 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.140.237.246 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.247.217.248 0 <-> 0.0.0.0 0
32025 29 16794 (293s) STATE tcp 200.187.144.244 4395 <-> 130.94.185.117 \
80 01005 0 0 (0s) PARENT 0 udp 210.0.128.250 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 192.138.110.250 0 <-> 0.0.0.0 0
32025 81 72132 (291s) STATE tcp 200.187.144.244 4394 <-> 130.94.185.117 \
80 01005 0 0 (0s) PARENT 0 udp 143.166.82.251 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.204.183.252 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 1 tcp 192.138.110.252 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 143.166.82.252 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.152.37.252 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.246.0.252 0 <-> 0.0.0.0 0
30020 587 53450 (171s) LIMIT tcp 200.181.178.85 21003 <-> 200.187.144.243 \
80 01005 0 0 (0s) PARENT 1 udp 192.138.110.253 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 192.138.110.254 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.47.254 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 206.99.44.254 0 <-> 0.0.0.0 0
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic