admin@UniFiSecurityGateway:~$ show tech-support | no-more
----------------
Show Tech-Support
----------------
----------------
CONFIGURATION
----------------
----------------
EdgeOS Version and Package Changes
----------------
Version: v4.4.36
Build ID: 5146617
Build on: 12/05/18 04:49
Copyright: 2012-2018 Ubiquiti Networks, Inc.
HW model: UniFi-Gateway-3
HW S/N: fcecda48cf17
Uptime: 19:10:18 up 1:42, 1 user, load average: 0.06, 0.07, 0.12
----------------
UBNT offload
----------------
IP offload module : loaded
IPv4
forwarding: enabled
vlan : enabled
pppoe : enabled
gre : enabled
IPv6
forwarding: enabled
vlan : enabled
pppoe : disabled
IPSec offload module: loaded
Traffic Analysis :
IPv4
forwarding: enabled
vlan : enabled
pppoe : enabled
gre : enabled
export : disabled
dpi : enabled
IPSec offload module: loaded
----------------
Configuration File
----------------
firewall {
all-ping enable
broadcast-ping disable
group {
address-group authorized_guests {
description "authorized guests MAC addresses"
}
address-group guest_allow_addresses {
description "allow addresses for guests"
}
address-group guest_allow_dns_servers {
description "allow dns servers for guests"
}
address-group guest_portal_address {
description "guest portal address"
}
address-group guest_restricted_addresses {
address 192.168.0.0/16
address 172.16.0.0/12
address 10.0.0.0/8
description "restricted addresses for guests"
}
address-group unifi_controller_addresses {
address 192.168.1.4
}
ipv6-network-group corporate_networkv6 {
description "IPv6 corporate subnets"
}
ipv6-network-group guest_networkv6 {
description "IPv6 guest subnets"
}
network-group captive_portal_subnets {
description "captive portal subnets"
}
network-group corporate_network {
description "corporate subnets"
network 192.168.1.0/24
}
network-group guest_allow_subnets {
description "allow subnets for guests"
}
network-group guest_network {
description "guest subnets"
}
network-group guest_restricted_subnets {
description "restricted subnets for guests"
}
network-group remote_client_vpn_network {
description "remote client VPN subnets"
}
network-group remote_site_vpn_network {
description "remote site VPN subnets"
}
network-group remote_user_vpn_network {
description "Remote User VPN subnets"
}
port-group guest_portal_ports {
description "guest portal ports"
}
port-group guest_portal_redirector_ports {
description "guest portal redirector ports"
port 39080
port 39443
}
port-group unifi_controller_ports-tcp {
description "unifi tcp ports"
port 8080
}
port-group unifi_controller_ports-udp {
description "unifi udp ports"
port 3478
}
}
ipv6-name AUTHORIZED_GUESTSv6 {
default-action drop
description "authorization check packets from guest network"
}
ipv6-name GUESTv6_IN {
default-action accept
description "packets from guest network"
rule 3001 {
action drop
description "drop packets to intranet"
destination {
group {
ipv6-network-group corporate_networkv6
}
}
}
}
ipv6-name GUESTv6_LOCAL {
default-action drop
description "packets from guest network to gateway"
rule 3001 {
action accept
description "allow DNS"
destination {
port 53
}
protocol udp
}
rule 3002 {
action accept
description "allow ICMP"
protocol icmp
}
}
ipv6-name GUESTv6_OUT {
default-action accept
description "packets forward to guest network"
}
ipv6-name LANv6_IN {
default-action accept
description "packets from intranet"
}
ipv6-name LANv6_LOCAL {
default-action accept
description "packets from intranet to gateway"
}
ipv6-name LANv6_OUT {
default-action accept
description "packets forward to intranet"
}
ipv6-name WANv6_IN {
default-action drop
description "packets from internet to intranet"
rule 3001 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3002 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
}
ipv6-name WANv6_LOCAL {
default-action drop
description "packets from internet to gateway"
rule 3001 {
action accept
description "Allow neighbor advertisements"
icmpv6 {
type neighbor-advertisement
}
protocol ipv6-icmp
}
rule 3002 {
action accept
description "Allow neighbor solicitation"
icmpv6 {
type neighbor-solicitation
}
protocol ipv6-icmp
}
rule 3003 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3004 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
}
ipv6-name WANv6_OUT {
default-action accept
description "packets to internet"
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name AUTHORIZED_GUESTS {
default-action drop
description "authorization check packets from guest network"
}
name GUEST_IN {
default-action accept
description "packets from guest network"
rule 3001 {
action accept
description "allow DNS packets to external name servers"
destination {
port 53
}
protocol tcp_udp
}
rule 3002 {
action accept
description "allow packets to captive portal"
destination {
group {
network-group captive_portal_subnets
}
port 443
}
protocol tcp
}
rule 3003 {
action accept
description "allow packets to allow subnets"
destination {
group {
address-group guest_allow_addresses
}
}
}
rule 3004 {
action drop
description "drop packets to restricted subnets"
destination {
group {
address-group guest_restricted_addresses
}
}
}
rule 3005 {
action drop
description "drop packets to intranet"
destination {
group {
network-group corporate_network
}
}
}
rule 3006 {
action drop
description "drop packets to remote user"
destination {
group {
network-group remote_user_vpn_network
}
}
}
rule 3007 {
action drop
description "authorized guests white list"
destination {
group {
address-group authorized_guests
}
}
}
}
name GUEST_LOCAL {
default-action drop
description "packets from guest network to gateway"
rule 3001 {
action accept
description "allow DNS"
destination {
port 53
}
protocol tcp_udp
}
rule 3002 {
action accept
description "allow ICMP"
protocol icmp
}
rule 3003 {
action accept
description "allow to DHCP server"
destination {
port 67
}
protocol udp
source {
port 68
}
}
}
name GUEST_OUT {
default-action accept
description "packets forward to guest network"
}
name LAN_IN {
default-action accept
description "packets from intranet"
rule 6001 {
action accept
description "accounting defined network 192.168.1.0/24"
source {
address 192.168.1.0/24
}
}
}
name LAN_LOCAL {
default-action accept
description "packets from intranet to gateway"
}
name LAN_OUT {
default-action accept
description "packets forward to intranet"
rule 6001 {
action accept
description "accounting defined network 192.168.1.0/24"
destination {
address 192.168.1.0/24
}
}
}
name WAN_IN {
default-action drop
description "packets from internet to intranet"
rule 3001 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3002 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
rule 3003 {
action accept
description "PortForward [FTP]"
destination {
address 192.168.1.4
port 4020
}
protocol tcp_udp
}
rule 3004 {
action accept
description "PortForward [VMWare]"
destination {
address 192.168.1.3
port 443
}
protocol tcp
}
rule 3005 {
action accept
description "PortForward [VPN]"
destination {
address 192.168.1.3
port 17231
}
protocol tcp_udp
}
rule 3006 {
action accept
description "PortForward [Syncthing]"
destination {
address 192.168.1.3
port 10000
}
protocol tcp
}
rule 3007 {
action accept
description "PortForward [Raspbian SSH]"
destination {
address 192.168.1.50
port 22
}
protocol tcp
}
rule 3008 {
action accept
description "PortForward [Raspbian HTTP]"
destination {
address 192.168.1.50
port 80
}
protocol tcp
}
rule 3009 {
action accept
description "PortForward [Raspbian ZNC (IRC)]"
destination {
address 192.168.1.50
port 1025
}
protocol tcp
}
rule 3010 {
action accept
description "PortForward [qBittorrent WebUI]"
destination {
address 192.168.1.3
port 8888
}
protocol tcp
}
rule 3011 {
action accept
description "PortForward [Server Media Services (UDP)]"
destination {
address 192.168.1.3
port 1194
}
protocol udp
}
rule 3012 {
action accept
description "PortForward [Torrent Connection Ports]"
destination {
address 192.168.1.3
port 6883,51413
}
protocol tcp
}
rule 3013 {
action accept
description "PortForward [FTP Passive]"
destination {
address 192.168.1.4
port 9000-9010
}
protocol tcp_udp
}
rule 3014 {
action accept
description "PortForward [FTP (RL Project)]"
destination {
address 192.168.1.4
port 4030
}
protocol tcp
}
rule 3015 {
action accept
description "PortForward [RocketCenter Ubuntu SSH]"
destination {
address 192.168.1.22
port 22
}
protocol tcp
}
rule 3016 {
action accept
description "PortForward [RocketCenter Ubuntu WEB]"
destination {
address 192.168.1.22
port 80
}
protocol tcp
}
rule 3017 {
action accept
description "PortForward [RocketCenter Ubuntu TEST1]"
destination {
address 192.168.1.22
port 8070
}
protocol tcp
}
rule 3018 {
action accept
description "PortForward [RocketCenter Ubuntu TEST2]"
destination {
address 192.168.1.22
port 3306
}
protocol tcp
}
rule 3019 {
action accept
description "PortForward [Terraria Servers]"
destination {
address 192.168.1.4
port 7777-7779
}
protocol tcp
}
rule 3020 {
action accept
description "PortForward [Portal Knights Server]"
destination {
address 192.168.1.4
port 16365
}
protocol tcp
}
rule 3021 {
action accept
description "PortForward [Server Media Services (TCP)]"
destination {
address 192.168.1.3
port 943,8090-8091,9080,9443-9444,32400
}
protocol tcp
}
rule 3022 {
action accept
description "PortForward [NextCloud Syncing]"
destination {
address 192.168.1.3
port 8096
}
protocol tcp
}
rule 3023 {
action accept
description "PortForward [Server (NextCloud)]"
destination {
address 192.168.1.3
port 8096
}
protocol tcp
}
rule 3024 {
action accept
description "PortForward [MineCraft MineOS]"
destination {
address 192.168.1.3
port 25565,25566
}
protocol tcp
}
}
name WAN_LOCAL {
default-action drop
description "packets from internet to gateway"
rule 3001 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3002 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
}
name WAN_OUT {
default-action accept
description "packets to internet"
}
options {
mss-clamp {
interface-type pppoe
interface-type pptp
interface-type vti
mss 1452
}
mss-clamp6 {
interface-type pppoe
interface-type pptp
mss 1452
}
}
receive-redirects disable
send-redirects enable
source-validation strict
syn-cookies enable
}
interfaces {
ethernet eth0 {
address dhcp
description WAN
dhcp-options {
client-option "retry 60;"
default-route update
default-route-distance 1
name-server update
}
duplex auto
firewall {
in {
ipv6-name WANv6_IN
name WAN_IN
}
local {
ipv6-name WANv6_LOCAL
name WAN_LOCAL
}
out {
ipv6-name WANv6_OUT
name WAN_OUT
}
}
speed auto
}
ethernet eth1 {
address 192.168.1.1/24
description LAN
duplex auto
firewall {
in {
ipv6-name LANv6_IN
name LAN_IN
}
local {
ipv6-name LANv6_LOCAL
name LAN_LOCAL
}
out {
ipv6-name LANv6_OUT
name LAN_OUT
}
}
speed auto
}
ethernet eth2 {
disable
duplex auto
speed auto
}
loopback lo {
}
}
port-forward {
auto-firewall disable
hairpin-nat enable
lan-interface eth1
rule 3001 {
description FTP
forward-to {
address 192.168.1.4
}
original-port 4020
protocol tcp_udp
}
rule 3002 {
description VMWare
forward-to {
address 192.168.1.3
}
original-port 443
protocol tcp
}
rule 3003 {
description VPN
forward-to {
address 192.168.1.3
}
original-port 17231
protocol tcp_udp
}
rule 3004 {
description Syncthing
forward-to {
address 192.168.1.3
}
original-port 10000
protocol tcp
}
rule 3005 {
description "Raspbian SSH"
forward-to {
address 192.168.1.50
port 22
}
original-port 1001
protocol tcp
}
rule 3006 {
description "Raspbian HTTP"
forward-to {
address 192.168.1.50
port 80
}
original-port 1002
protocol tcp
}
rule 3007 {
description "Raspbian ZNC (IRC)"
forward-to {
address 192.168.1.50
port 1025
}
original-port 1003
protocol tcp
}
rule 3008 {
description "qBittorrent WebUI"
forward-to {
address 192.168.1.3
}
original-port 8888
protocol tcp
}
rule 3009 {
description "Server Media Services (UDP)"
forward-to {
address 192.168.1.3
}
original-port 1194
protocol udp
}
rule 3010 {
description "Torrent Connection Ports"
forward-to {
address 192.168.1.3
}
original-port 6883,51413
protocol tcp
}
rule 3011 {
description "FTP Passive"
forward-to {
address 192.168.1.4
}
original-port 9000-9010
protocol tcp_udp
}
rule 3012 {
description "FTP (RL Project)"
forward-to {
address 192.168.1.4
}
original-port 4030
protocol tcp
}
rule 3013 {
description "RocketCenter Ubuntu SSH"
forward-to {
address 192.168.1.22
port 22
}
original-port 19987
protocol tcp
}
rule 3014 {
description "RocketCenter Ubuntu WEB"
forward-to {
address 192.168.1.22
port 80
}
original-port 19999
protocol tcp
}
rule 3015 {
description "RocketCenter Ubuntu TEST1"
forward-to {
address 192.168.1.22
port 8070
}
original-port 21087
protocol tcp
}
rule 3016 {
description "RocketCenter Ubuntu TEST2"
forward-to {
address 192.168.1.22
port 3306
}
original-port 23306
protocol tcp
}
rule 3017 {
description "Terraria Servers"
forward-to {
address 192.168.1.4
}
original-port 7777-7779
protocol tcp
}
rule 3018 {
description "Portal Knights Server"
forward-to {
address 192.168.1.4
}
original-port 16365
protocol tcp
}
rule 3019 {
description "Server Media Services (TCP)"
forward-to {
address 192.168.1.3
}
original-port 943,8090-8091,9080,9443-9444,32400
protocol tcp
}
rule 3020 {
description "NextCloud Syncing"
forward-to {
address 192.168.1.3
}
original-port 8096
protocol tcp
}
rule 3021 {
description "Server (NextCloud)"
forward-to {
address 192.168.1.3
}
original-port 8096
protocol tcp
}
rule 3022 {
description "MineCraft MineOS"
forward-to {
address 192.168.1.3
}
original-port 25565,25566
protocol tcp
}
wan-interface eth0
}
service {
dhcp-server {
disabled false
global-parameters "class "denied" { match substring (hardware, 1, 6); deny booting; } subclass "denied" fc:ec:da:48:cf:17; subclass "denied" fc:ec:da:48:cf:18; subclass "denied" fc:ec:da:48:cf:19;"
hostfile-update enable
shared-network-name net_LAN_eth1_192.168.1.0-24 {
authoritative enable
description vlan1
subnet 192.168.1.0/24 {
default-router 192.168.1.1
dns-server 192.168.1.1
domain-name localdomain
lease 86400
start 192.168.1.6 {
stop 192.168.1.254
}
static-mapping 00-0c-43-f1-06-8d {
host-record disable
ip-address 192.168.1.69
mac-address 00:0c:43:f1:06:8d
}
static-mapping 00-1b-a9-bd-25-2d {
host-record disable
ip-address 192.168.1.18
mac-address 00:1b:a9:bd:25:2d
}
static-mapping 00-ee-22-aa-18-ba {
host-record disable
ip-address 192.168.1.51
mac-address 00:ee:22:aa:18:ba
}
static-mapping 7c-dd-90-a7-6f-56 {
host-record disable
ip-address 192.168.1.47
mac-address 7c:dd:90:a7:6f:56
}
static-mapping 34-d2-70-3b-3a-35 {
host-record disable
ip-address 192.168.1.34
mac-address 34:d2:70:3b:3a:35
}
static-mapping 34-d2-70-b3-96-88 {
host-record disable
ip-address 192.168.1.40
mac-address 34:d2:70:b3:96:88
}
static-mapping 52-54-00-eb-ad-bc {
host-record disable
ip-address 192.168.1.4
mac-address 52:54:00:eb:ad:bc
}
static-mapping 74-da-38-6c-7d-4e {
host-record disable
ip-address 192.168.1.49
mac-address 74:da:38:6c:7d:4e
}
static-mapping ac-1f-6b-15-ea-72 {
host-record disable
ip-address 192.168.1.3
mac-address ac:1f:6b:15:ea:72
}
static-mapping b8-27-eb-37-5b-f9 {
host-record disable
ip-address 192.168.1.50
mac-address b8:27:eb:37:5b:f9
}
static-mapping ba-2e-2c-0d-42-1f {
host-record disable
ip-address 192.168.1.13
mac-address ba:2e:2c:0d:42:1f
}
static-mapping d0-52-a8-63-4d-12 {
host-record disable
ip-address 192.168.1.48
mac-address d0:52:a8:63:4d:12
}
static-mapping dc-85-de-e8-bb-e4 {
host-record disable
ip-address 192.168.1.39
mac-address dc:85:de:e8:bb:e4
}
static-mapping ec-b5-fa-00-2c-0c {
host-record disable
ip-address 192.168.1.52
mac-address ec:b5:fa:00:2c:0c
}
}
}
static-arp disable
use-dnsmasq disable
}
dns {
forwarding {
cache-size 10000
except-interface eth0
options ptr-record=1.1.168.192.in-addr.arpa,UniFiSecurityGateway
options host-record=unifi,192.168.1.4
}
}
gui {
http-port 80
https-port 443
older-ciphers enable
}
lldp {
interface eth0 {
disable
}
}
nat {
rule 6001 {
description "MASQ corporate_network to WAN"
log disable
outbound-interface eth0
protocol all
source {
group {
network-group corporate_network
}
}
type masquerade
}
rule 6002 {
description "MASQ remote_user_vpn_network to WAN"
log disable
outbound-interface eth0
protocol all
source {
group {
network-group remote_user_vpn_network
}
}
type masquerade
}
rule 6003 {
description "MASQ guest_network to WAN"
log disable
outbound-interface eth0
protocol all
source {
group {
network-group guest_network
}
}
type masquerade
}
}
ssh {
port 22
protocol-version v2
}
}
system {
conntrack {
expect-table-size 2048
hash-size 32768
modules {
sip {
disable
}
}
table-size 262144
timeout {
icmp 30
other 600
tcp {
close 10
close-wait 60
established 7440
fin-wait 120
last-ack 30
syn-recv 60
syn-sent 120
time-wait 120
}
udp {
other 30
stream 180
}
}
}
domain-name localdomain
host-name UniFiSecurityGateway
ip {
override-hostname-ip 192.168.1.1
}
login {
user admin {
authentication {
encrypted-password
}
level admin
}
}
ntp {
server 0.ubnt.pool.ntp.org {
}
server 1.ubnt.pool.ntp.org {
}
server 2.ubnt.pool.ntp.org {
}
server 3.ubnt.pool.ntp.org {
}
}
offload {
ipsec enable
ipv4 {
forwarding enable
gre enable
pppoe enable
vlan enable
}
ipv6 {
forwarding enable
vlan enable
}
}
static-host-mapping {
host-name setup.ubnt.com {
alias setup
inet 192.168.1.1
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
}
time-zone America/New_York
traffic-analysis {
dpi enable
export disable
}
}
unifi {
mgmt {
cfgversion fb601e152367f410
}
}
/* Warning: Do not remove the following line. */
/* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */
/* Release version: v4.4.36.5146617.181205.0449 */
----------------
Running configuration
----------------
firewall {
all-ping enable
broadcast-ping disable
group {
address-group authorized_guests {
description "authorized guests MAC addresses"
}
address-group guest_allow_addresses {
description "allow addresses for guests"
}
address-group guest_allow_dns_servers {
description "allow dns servers for guests"
}
address-group guest_portal_address {
description "guest portal address"
}
address-group guest_restricted_addresses {
address 192.168.0.0/16
address 172.16.0.0/12
address 10.0.0.0/8
description "restricted addresses for guests"
}
address-group unifi_controller_addresses {
address 192.168.1.4
}
ipv6-network-group corporate_networkv6 {
description "IPv6 corporate subnets"
}
ipv6-network-group guest_networkv6 {
description "IPv6 guest subnets"
}
network-group captive_portal_subnets {
description "captive portal subnets"
}
network-group corporate_network {
description "corporate subnets"
network 192.168.1.0/24
}
network-group guest_allow_subnets {
description "allow subnets for guests"
}
network-group guest_network {
description "guest subnets"
}
network-group guest_restricted_subnets {
description "restricted subnets for guests"
}
network-group remote_client_vpn_network {
description "remote client VPN subnets"
}
network-group remote_site_vpn_network {
description "remote site VPN subnets"
}
network-group remote_user_vpn_network {
description "Remote User VPN subnets"
}
port-group guest_portal_ports {
description "guest portal ports"
}
port-group guest_portal_redirector_ports {
description "guest portal redirector ports"
port 39080
port 39443
}
port-group unifi_controller_ports-tcp {
description "unifi tcp ports"
port 8080
}
port-group unifi_controller_ports-udp {
description "unifi udp ports"
port 3478
}
}
ipv6-name AUTHORIZED_GUESTSv6 {
default-action drop
description "authorization check packets from guest network"
}
ipv6-name GUESTv6_IN {
default-action accept
description "packets from guest network"
rule 3001 {
action drop
description "drop packets to intranet"
destination {
group {
ipv6-network-group corporate_networkv6
}
}
}
}
ipv6-name GUESTv6_LOCAL {
default-action drop
description "packets from guest network to gateway"
rule 3001 {
action accept
description "allow DNS"
destination {
port 53
}
protocol udp
}
rule 3002 {
action accept
description "allow ICMP"
protocol icmp
}
}
ipv6-name GUESTv6_OUT {
default-action accept
description "packets forward to guest network"
}
ipv6-name LANv6_IN {
default-action accept
description "packets from intranet"
}
ipv6-name LANv6_LOCAL {
default-action accept
description "packets from intranet to gateway"
}
ipv6-name LANv6_OUT {
default-action accept
description "packets forward to intranet"
}
ipv6-name WANv6_IN {
default-action drop
description "packets from internet to intranet"
rule 3001 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3002 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
}
ipv6-name WANv6_LOCAL {
default-action drop
description "packets from internet to gateway"
rule 3001 {
action accept
description "Allow neighbor advertisements"
icmpv6 {
type neighbor-advertisement
}
protocol ipv6-icmp
}
rule 3002 {
action accept
description "Allow neighbor solicitation"
icmpv6 {
type neighbor-solicitation
}
protocol ipv6-icmp
}
rule 3003 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3004 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
}
ipv6-name WANv6_OUT {
default-action accept
description "packets to internet"
}
name AUTHORIZED_GUESTS {
default-action drop
description "authorization check packets from guest network"
}
name GUEST_IN {
default-action accept
description "packets from guest network"
rule 3001 {
action accept
description "allow DNS packets to external name servers"
destination {
port 53
}
protocol tcp_udp
}
rule 3002 {
action accept
description "allow packets to captive portal"
destination {
group {
network-group captive_portal_subnets
}
port 443
}
protocol tcp
}
rule 3003 {
action accept
description "allow packets to allow subnets"
destination {
group {
address-group guest_allow_addresses
}
}
}
rule 3004 {
action drop
description "drop packets to restricted subnets"
destination {
group {
address-group guest_restricted_addresses
}
}
}
rule 3005 {
action drop
description "drop packets to intranet"
destination {
group {
network-group corporate_network
}
}
}
rule 3006 {
action drop
description "drop packets to remote user"
destination {
group {
network-group remote_user_vpn_network
}
}
}
rule 3007 {
action drop
description "authorized guests white list"
destination {
group {
address-group authorized_guests
}
}
}
}
name GUEST_LOCAL {
default-action drop
description "packets from guest network to gateway"
rule 3001 {
action accept
description "allow DNS"
destination {
port 53
}
protocol tcp_udp
}
rule 3002 {
action accept
description "allow ICMP"
protocol icmp
}
rule 3003 {
action accept
description "allow to DHCP server"
destination {
port 67
}
protocol udp
source {
port 68
}
}
}
name GUEST_OUT {
default-action accept
description "packets forward to guest network"
}
name LAN_IN {
default-action accept
description "packets from intranet"
rule 6001 {
action accept
description "accounting defined network 192.168.1.0/24"
source {
address 192.168.1.0/24
}
}
}
name LAN_LOCAL {
default-action accept
description "packets from intranet to gateway"
}
name LAN_OUT {
default-action accept
description "packets forward to intranet"
rule 6001 {
action accept
description "accounting defined network 192.168.1.0/24"
destination {
address 192.168.1.0/24
}
}
}
name WAN_IN {
default-action drop
description "packets from internet to intranet"
rule 3001 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3002 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
rule 3003 {
action accept
description "PortForward [FTP]"
destination {
address 192.168.1.4
port 4020
}
protocol tcp_udp
}
rule 3004 {
action accept
description "PortForward [VMWare]"
destination {
address 192.168.1.3
port 443
}
protocol tcp
}
rule 3005 {
action accept
description "PortForward [VPN]"
destination {
address 192.168.1.3
port 17231
}
protocol tcp_udp
}
rule 3006 {
action accept
description "PortForward [Syncthing]"
destination {
address 192.168.1.3
port 10000
}
protocol tcp
}
rule 3007 {
action accept
description "PortForward [Raspbian SSH]"
destination {
address 192.168.1.50
port 22
}
protocol tcp
}
rule 3008 {
action accept
description "PortForward [Raspbian HTTP]"
destination {
address 192.168.1.50
port 80
}
protocol tcp
}
rule 3009 {
action accept
description "PortForward [Raspbian ZNC (IRC)]"
destination {
address 192.168.1.50
port 1025
}
protocol tcp
}
rule 3010 {
action accept
description "PortForward [qBittorrent WebUI]"
destination {
address 192.168.1.3
port 8888
}
protocol tcp
}
rule 3011 {
action accept
description "PortForward [Server Media Services (UDP)]"
destination {
address 192.168.1.3
port 1194
}
protocol udp
}
rule 3012 {
action accept
description "PortForward [Torrent Connection Ports]"
destination {
address 192.168.1.3
port 6883,51413
}
protocol tcp
}
rule 3013 {
action accept
description "PortForward [FTP Passive]"
destination {
address 192.168.1.4
port 9000-9010
}
protocol tcp_udp
}
rule 3014 {
action accept
description "PortForward [FTP (RL Project)]"
destination {
address 192.168.1.4
port 4030
}
protocol tcp
}
rule 3015 {
action accept
description "PortForward [RocketCenter Ubuntu SSH]"
destination {
address 192.168.1.22
port 22
}
protocol tcp
}
rule 3016 {
action accept
description "PortForward [RocketCenter Ubuntu WEB]"
destination {
address 192.168.1.22
port 80
}
protocol tcp
}
rule 3017 {
action accept
description "PortForward [RocketCenter Ubuntu TEST1]"
destination {
address 192.168.1.22
port 8070
}
protocol tcp
}
rule 3018 {
action accept
description "PortForward [RocketCenter Ubuntu TEST2]"
destination {
address 192.168.1.22
port 3306
}
protocol tcp
}
rule 3019 {
action accept
description "PortForward [Terraria Servers]"
destination {
address 192.168.1.4
port 7777-7779
}
protocol tcp
}
rule 3020 {
action accept
description "PortForward [Portal Knights Server]"
destination {
address 192.168.1.4
port 16365
}
protocol tcp
}
rule 3021 {
action accept
description "PortForward [Server Media Services (TCP)]"
destination {
address 192.168.1.3
port 943,8090-8091,9080,9443-9444,32400
}
protocol tcp
}
rule 3022 {
action accept
description "PortForward [NextCloud Syncing]"
destination {
address 192.168.1.3
port 8096
}
protocol tcp
}
rule 3023 {
action accept
description "PortForward [Server (NextCloud)]"
destination {
address 192.168.1.3
port 8096
}
protocol tcp
}
rule 3024 {
action accept
description "PortForward [MineCraft MineOS]"
destination {
address 192.168.1.3
port 25565,25566
}
protocol tcp
}
}
name WAN_LOCAL {
default-action drop
description "packets from internet to gateway"
rule 3001 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3002 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
}
name WAN_OUT {
default-action accept
description "packets to internet"
}
options {
mss-clamp {
interface-type pppoe
interface-type pptp
interface-type vti
mss 1452
}
mss-clamp6 {
interface-type pppoe
interface-type pptp
mss 1452
}
}
receive-redirects disable
send-redirects enable
source-validation strict
syn-cookies enable
}
interfaces {
ethernet eth0 {
address dhcp
description WAN
dhcp-options {
client-option "retry 60;"
default-route-distance 1
}
firewall {
in {
ipv6-name WANv6_IN
name WAN_IN
}
local {
ipv6-name WANv6_LOCAL
name WAN_LOCAL
}
out {
ipv6-name WANv6_OUT
name WAN_OUT
}
}
}
ethernet eth1 {
address 192.168.1.1/24
description LAN
firewall {
in {
ipv6-name LANv6_IN
name LAN_IN
}
local {
ipv6-name LANv6_LOCAL
name LAN_LOCAL
}
out {
ipv6-name LANv6_OUT
name LAN_OUT
}
}
}
ethernet eth2 {
disable
}
loopback lo {
}
}
port-forward {
auto-firewall disable
hairpin-nat enable
lan-interface eth1
rule 3001 {
description FTP
forward-to {
address 192.168.1.4
}
original-port 4020
protocol tcp_udp
}
rule 3002 {
description VMWare
forward-to {
address 192.168.1.3
}
original-port 443
protocol tcp
}
rule 3003 {
description VPN
forward-to {
address 192.168.1.3
}
original-port 17231
protocol tcp_udp
}
rule 3004 {
description Syncthing
forward-to {
address 192.168.1.3
}
original-port 10000
protocol tcp
}
rule 3005 {
description "Raspbian SSH"
forward-to {
address 192.168.1.50
port 22
}
original-port 1001
protocol tcp
}
rule 3006 {
description "Raspbian HTTP"
forward-to {
address 192.168.1.50
port 80
}
original-port 1002
protocol tcp
}
rule 3007 {
description "Raspbian ZNC (IRC)"
forward-to {
address 192.168.1.50
port 1025
}
original-port 1003
protocol tcp
}
rule 3008 {
description "qBittorrent WebUI"
forward-to {
address 192.168.1.3
}
original-port 8888
protocol tcp
}
rule 3009 {
description "Server Media Services (UDP)"
forward-to {
address 192.168.1.3
}
original-port 1194
protocol udp
}
rule 3010 {
description "Torrent Connection Ports"
forward-to {
address 192.168.1.3
}
original-port 6883,51413
protocol tcp
}
rule 3011 {
description "FTP Passive"
forward-to {
address 192.168.1.4
}
original-port 9000-9010
protocol tcp_udp
}
rule 3012 {
description "FTP (RL Project)"
forward-to {
address 192.168.1.4
}
original-port 4030
protocol tcp
}
rule 3013 {
description "RocketCenter Ubuntu SSH"
forward-to {
address 192.168.1.22
port 22
}
original-port 19987
protocol tcp
}
rule 3014 {
description "RocketCenter Ubuntu WEB"
forward-to {
address 192.168.1.22
port 80
}
original-port 19999
protocol tcp
}
rule 3015 {
description "RocketCenter Ubuntu TEST1"
forward-to {
address 192.168.1.22
port 8070
}
original-port 21087
protocol tcp
}
rule 3016 {
description "RocketCenter Ubuntu TEST2"
forward-to {
address 192.168.1.22
port 3306
}
original-port 23306
protocol tcp
}
rule 3017 {
description "Terraria Servers"
forward-to {
address 192.168.1.4
}
original-port 7777-7779
protocol tcp
}
rule 3018 {
description "Portal Knights Server"
forward-to {
address 192.168.1.4
}
original-port 16365
protocol tcp
}
rule 3019 {
description "Server Media Services (TCP)"
forward-to {
address 192.168.1.3
}
original-port 943,8090-8091,9080,9443-9444,32400
protocol tcp
}
rule 3020 {
description "NextCloud Syncing"
forward-to {
address 192.168.1.3
}
original-port 8096
protocol tcp
}
rule 3021 {
description "Server (NextCloud)"
forward-to {
address 192.168.1.3
}
original-port 8096
protocol tcp
}
rule 3022 {
description "MineCraft MineOS"
forward-to {
address 192.168.1.3
}
original-port 25565,25566
protocol tcp
}
wan-interface eth0
}
service {
dhcp-server {
disabled false
global-parameters "class "denied" { match substring (hardware, 1, 6); deny booting; } subclass "denied" fc:ec:da:48:cf:17; subclass "denied" fc:ec:da:48:cf:18; subclass "denied" fc:ec:da:48:cf:19;"
hostfile-update enable
shared-network-name net_LAN_eth1_192.168.1.0-24 {
authoritative enable
description vlan1
subnet 192.168.1.0/24 {
default-router 192.168.1.1
dns-server 192.168.1.1
domain-name localdomain
lease 86400
start 192.168.1.6 {
stop 192.168.1.254
}
static-mapping 00-0c-43-f1-06-8d {
host-record disable
ip-address 192.168.1.69
mac-address 00:0c:43:f1:06:8d
}
static-mapping 00-1b-a9-bd-25-2d {
host-record disable
ip-address 192.168.1.18
mac-address 00:1b:a9:bd:25:2d
}
static-mapping 00-ee-22-aa-18-ba {
host-record disable
ip-address 192.168.1.51
mac-address 00:ee:22:aa:18:ba
}
static-mapping 7c-dd-90-a7-6f-56 {
host-record disable
ip-address 192.168.1.47
mac-address 7c:dd:90:a7:6f:56
}
static-mapping 34-d2-70-3b-3a-35 {
host-record disable
ip-address 192.168.1.34
mac-address 34:d2:70:3b:3a:35
}
static-mapping 34-d2-70-b3-96-88 {
host-record disable
ip-address 192.168.1.40
mac-address 34:d2:70:b3:96:88
}
static-mapping 52-54-00-eb-ad-bc {
host-record disable
ip-address 192.168.1.4
mac-address 52:54:00:eb:ad:bc
}
static-mapping 74-da-38-6c-7d-4e {
host-record disable
ip-address 192.168.1.49
mac-address 74:da:38:6c:7d:4e
}
static-mapping ac-1f-6b-15-ea-72 {
host-record disable
ip-address 192.168.1.3
mac-address ac:1f:6b:15:ea:72
}
static-mapping b8-27-eb-37-5b-f9 {
host-record disable
ip-address 192.168.1.50
mac-address b8:27:eb:37:5b:f9
}
static-mapping ba-2e-2c-0d-42-1f {
host-record disable
ip-address 192.168.1.13
mac-address ba:2e:2c:0d:42:1f
}
static-mapping d0-52-a8-63-4d-12 {
host-record disable
ip-address 192.168.1.48
mac-address d0:52:a8:63:4d:12
}
static-mapping dc-85-de-e8-bb-e4 {
host-record disable
ip-address 192.168.1.39
mac-address dc:85:de:e8:bb:e4
}
static-mapping ec-b5-fa-00-2c-0c {
host-record disable
ip-address 192.168.1.52
mac-address ec:b5:fa:00:2c:0c
}
}
}
use-dnsmasq disable
}
dns {
forwarding {
cache-size 10000
except-interface eth0
options ptr-record=1.1.168.192.in-addr.arpa,UniFiSecurityGateway
options host-record=unifi,192.168.1.4
}
}
gui {
https-port 443
}
lldp {
interface eth0 {
disable
}
}
nat {
rule 6001 {
description "MASQ corporate_network to WAN"
log disable
outbound-interface eth0
protocol all
source {
group {
network-group corporate_network
}
}
type masquerade
}
rule 6002 {
description "MASQ remote_user_vpn_network to WAN"
log disable
outbound-interface eth0
protocol all
source {
group {
network-group remote_user_vpn_network
}
}
type masquerade
}
rule 6003 {
description "MASQ guest_network to WAN"
log disable
outbound-interface eth0
protocol all
source {
group {
network-group guest_network
}
}
type masquerade
}
}
ssh {
port 22
protocol-version v2
}
}
system {
conntrack {
modules {
sip {
disable
}
}
timeout {
icmp 30
other 600
tcp {
close 10
close-wait 60
established 7440
fin-wait 120
last-ack 30
syn-recv 60
syn-sent 120
time-wait 120
}
udp {
other 30
stream 180
}
}
}
domain-name localdomain
host-name UniFiSecurityGateway
ip {
override-hostname-ip 192.168.1.1
}
login {
user admin {
authentication {
encrypted-password ****************
}
level admin
}
}
ntp {
server 0.ubnt.pool.ntp.org {
}
server 1.ubnt.pool.ntp.org {
}
server 2.ubnt.pool.ntp.org {
}
server 3.ubnt.pool.ntp.org {
}
}
offload {
ipsec enable
ipv4 {
forwarding enable
gre enable
pppoe enable
vlan enable
}
ipv6 {
forwarding enable
vlan enable
}
}
static-host-mapping {
host-name setup.ubnt.com {
alias setup
inet 192.168.1.1
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
}
time-zone America/New_York
traffic-analysis {
dpi enable
export disable
}
}
unifi {
mgmt {
cfgversion fb601e152367f410
}
}
----------------
Package Repository Configuration File
----------------
----------------
User Startup Scripts
----------------
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
exit 0
----------------
post-config.d scripts
----------------
total 0
----------------
Quagga Configuration
----------------
Building configuration...
Current configuration:
!
log syslog
log facility local7
!
interface eth0
ipv6 nd suppress-ra
!
interface eth1
ipv6 nd suppress-ra
!
interface eth2
ipv6 nd suppress-ra
!
interface imq0
ipv6 nd suppress-ra
!
interface lo
!
ip route 0.0.0.0/0 192.168.0.1
!
ip forwarding
ipv6 forwarding
!
line vty
!
end
----------------
INTERFACES
----------------
----------------
Interfaces
----------------
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface IP Address S/L Description
--------- ---------- --- -----------
eth0 192.168.0.6/24 u/u WAN
eth1 192.168.1.1/24 u/u LAN
eth2 - A/D
lo 127.0.0.1/8 u/u
::1/128
----------------
Ethernet
----------------
----------------
Interface statistics
----------------
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
RX: bytes packets errors dropped overrun mcast
11324 131 0 0 0 0
TX: bytes packets errors dropped carrier collsns
11324 131 0 0 0 0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN mode DEFAULT
link/ether fc:ec:da:48:cf:17 brd ff:ff:ff:ff:ff:ff
alias WAN
RX: bytes packets errors dropped overrun mcast
2871110330 2369657 0 0 0 352
TX: bytes packets errors dropped carrier collsns
485902623 1265858 0 0 0 0
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN mode DEFAULT
link/ether fc:ec:da:48:cf:18 brd ff:ff:ff:ff:ff:ff
alias LAN
RX: bytes packets errors dropped overrun mcast
495637146 1297917 0 5 0 11455
TX: bytes packets errors dropped carrier collsns
2870260633 2388261 0 0 0 0
4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN mode DEFAULT
link/ether fc:ec:da:48:cf:19 brd ff:ff:ff:ff:ff:ff
RX: bytes packets errors dropped overrun mcast
0 0 0 0 0 0
TX: bytes packets errors dropped carrier collsns
0 0 0 0 0 0
5: imq0: <NOARP,UP,LOWER_UP> mtu 16000 qdisc pfifo_fast state UNKNOWN mode DEFAULT qlen 11000
link/void
RX: bytes packets errors dropped overrun mcast
0 0 0 0 0 0
TX: bytes packets errors dropped carrier collsns
0 0 0 0 0 0
----------------
Physical Interface Details for eth0
----------------
Settings for eth0:
Auto-negotiation: on
Speed: 1000Mb/s
Duplex: Full
Link detected: yes
----------------
Physical Interface Details for eth1
----------------
Settings for eth1:
Auto-negotiation: on
Speed: 1000Mb/s
Duplex: Full
Link detected: yes
----------------
Physical Interface Details for eth2
----------------
Settings for eth2:
Auto-negotiation: on
Speed: 10Mb/s
Duplex: Half
Link detected: no
----------------
ARP Table (Total entries)
----------------
Address HWtype HWaddress Flags Mask Iface
192.168.1.17 ether e0:c7:67:b8:78:40 C eth1
192.168.1.40 ether 34:d2:70:b3:96:88 C eth1
192.168.1.34 ether 34:d2:70:3b:3a:35 C eth1
192.168.1.75 ether 74:c2:46:a9:62:83 C eth1
192.168.1.36 ether 18:b4:30:6e:19:e0 C eth1
192.168.1.16 ether f0:99:bf:4d:4e:ff C eth1
192.168.1.27 ether fc:19:10:76:a7:99 C eth1
192.168.1.29 ether dc:0c:5c:88:28:2b C eth1
192.168.1.70 ether 18:b4:30:c2:99:81 C eth1
192.168.1.56 ether e8:d1:1b:39:8e:cb C eth1
192.168.1.23 ether 44:91:60:d6:34:1a C eth1
192.168.1.52 ether ec:b5:fa:00:2c:0c C eth1
192.168.1.3 ether ac:1f:6b:15:ea:72 C eth1
192.168.1.208 (incomplete) eth1
192.168.1.73 ether b8:e9:37:83:6f:8c C eth1
192.168.1.155 (incomplete) eth1
192.168.1.67 ether cc:6e:a4:eb:58:8c C eth1
192.168.1.114 ether f0:4d:a2:5f:21:a9 C eth1
192.168.1.69 ether 00:0c:43:f1:06:8d C eth1
192.168.1.63 ether b4:fb:e4:20:7f:03 C eth1
192.168.1.22 ether 52:54:00:9c:8e:6a C eth1
192.168.1.8 ether d8:61:62:4d:5c:3a C eth1
192.168.1.4 ether 52:54:00:eb:ad:bc C eth1
192.168.1.66 ether b4:fb:e4:20:89:f8 C eth1
192.168.1.21 ether 10:1c:0c:57:38:ae C eth1
192.168.1.15 ether 3c:a9:f4:0c:ec:0c C eth1
192.168.1.48 ether d0:52:a8:63:4d:12 C eth1
192.168.1.44 ether 28:a0:2b:53:df:d2 C eth1
192.168.1.65 ether 18:b4:30:71:4d:44 C eth1
192.168.1.41 ether dc:ef:ca:3d:63:d0 C eth1
192.168.0.1 ether 80:2b:f9:ff:8e:86 C eth0
192.168.1.207 (incomplete) eth1
192.168.1.64 ether fc:ec:da:d4:c0:b7 C eth1
----------------
Number of incomplete entries in ARP table
----------------
3
----------------
ROUTING
----------------
----------------
show ip route connected (total 3)
----------------
Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF,
I - ISIS, B - BGP, > - selected route, * - FIB route
C>* 127.0.0.0/8 is directly connected, lo
C>* 192.168.0.0/24 is directly connected, eth0
C>* 192.168.1.0/24 is directly connected, eth1
----------------
show ip route static (total 1)
----------------
Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF,
I - ISIS, B - BGP, > - selected route, * - FIB route
S>* 0.0.0.0/0 [1/0] via 192.168.0.1, eth0
----------------
show ip route rip (total 0)- limit 500
----------------
----------------
show ip route ospf (total 0)- limit 500
----------------
----------------
show ip route bgp (total 0)- limit 500
----------------
----------------
show ip route (total 4)- limit 500
----------------
Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF,
I - ISIS, B - BGP, > - selected route, * - FIB route
S>* 0.0.0.0/0 [1/0] via 192.168.0.1, eth0
C>* 127.0.0.0/8 is directly connected, lo
C>* 192.168.0.0/24 is directly connected, eth0
C>* 192.168.1.0/24 is directly connected, eth1
----------------
show ipv6 route connected (total 3)
----------------
Codes: K - kernel route, C - connected, S - static, R - RIPng, O - OSPFv3,
I - ISIS, B - BGP, * - FIB route.
C>* ::1/128 is directly connected, lo
C * fe80::/64 is directly connected, eth0
C>* fe80::/64 is directly connected, eth1
----------------
show ipv6 route static (total 0)
----------------
----------------
show ipv6 route ripng (total 0)- limit 500
----------------
----------------
show ipv6 route ospf6 (total 0)- limit 500
----------------
----------------
show ipv6 route bgp (total 0)- limit 500
----------------
----------------
show ipv6 route (total 3)- limit 500
----------------
Codes: K - kernel route, C - connected, S - static, R - RIPng, O - OSPFv3,
I - ISIS, B - BGP, * - FIB route.
C>* ::1/128 is directly connected, lo
C * fe80::/64 is directly connected, eth0
C>* fe80::/64 is directly connected, eth1
----------------
IPTABLES
----------------
----------------
Filter Chain Details
----------------
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
32326 3810K UBNT_VPN_IPSEC_FW_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
32326 3810K VYATTA_FW_LOCAL_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
30927 3652K VYATTA_POST_FW_IN_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
44624 7621K MINIUPNPD all -- * * 0.0.0.0/0 0.0.0.0/0
111K 15M UBNT_VPN_IPSEC_FW_IN_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
111K 15M UBNT_PFOR_FW_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
111K 15M VYATTA_FW_IN_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
111K 15M VYATTA_FW_OUT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
111K 15M VYATTA_POST_FW_FWD_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
25255 9577K VYATTA_POST_FW_OUT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
Chain AUTHORIZED_GUESTS (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* AUTHORIZED_GUESTS-10000 default-action accept */
Chain GUEST_IN (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-3001 */ tcp dpt:53
0 0 RETURN udp -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-3001 */ udp dpt:53
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-3002 */ tcp dpt:443 match-set captive_portal_subnets dst
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-3003 */ match-set guest_allow_addresses dst
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-3004 */ match-set guest_restricted_addresses dst
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-3005 */ match-set corporate_network dst
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-3006 */ match-set remote_user_vpn_network dst
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-3007 */ match-set authorized_guests dst
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_IN-10000 default-action accept */
Chain GUEST_LOCAL (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_LOCAL-3001 */ tcp dpt:53
0 0 RETURN udp -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_LOCAL-3001 */ udp dpt:53
0 0 RETURN icmp -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_LOCAL-3002 */
0 0 RETURN udp -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_LOCAL-3003 */ udp spt:68 dpt:67
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_LOCAL-10000 default-action drop */
Chain GUEST_OUT (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* GUEST_OUT-10000 default-action accept */
Chain LAN_IN (1 references)
pkts bytes target prot opt in out source destination
60419 7425K RETURN all -- * * 192.168.1.0/24 0.0.0.0/0 /* LAN_IN-6001 */
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* LAN_IN-10000 default-action accept */
Chain LAN_LOCAL (1 references)
pkts bytes target prot opt in out source destination
25741 2909K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* LAN_LOCAL-10000 default-action accept */
Chain LAN_OUT (1 references)
pkts bytes target prot opt in out source destination
50244 7266K RETURN all -- * * 0.0.0.0/0 192.168.1.0/24 /* LAN_OUT-6001 */
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* LAN_OUT-10000 default-action accept */
Chain MINIUPNPD (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_PFOR_FW_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_PFOR_FW_RULES (0 references)
pkts bytes target prot opt in out source destination
Chain UBNT_VPN_IPSEC_FW_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_VPN_IPSEC_FW_IN_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain VYATTA_FW_IN_HOOK (1 references)
pkts bytes target prot opt in out source destination
50244 7266K WAN_IN all -- eth0 * 0.0.0.0/0 0.0.0.0/0
60419 7425K LAN_IN all -- eth1 * 0.0.0.0/0 0.0.0.0/0
Chain VYATTA_FW_LOCAL_HOOK (1 references)
pkts bytes target prot opt in out source destination
6399 886K WAN_LOCAL all -- eth0 * 0.0.0.0/0 0.0.0.0/0
25741 2909K LAN_LOCAL all -- eth1 * 0.0.0.0/0 0.0.0.0/0
Chain VYATTA_FW_OUT_HOOK (1 references)
pkts bytes target prot opt in out source destination
60409 7424K WAN_OUT all -- * eth0 0.0.0.0/0 0.0.0.0/0
50244 7266K LAN_OUT all -- * eth1 0.0.0.0/0 0.0.0.0/0
Chain VYATTA_POST_FW_FWD_HOOK (1 references)
pkts bytes target prot opt in out source destination
111K 15M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain VYATTA_POST_FW_IN_HOOK (1 references)
pkts bytes target prot opt in out source destination
30927 3652K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain VYATTA_POST_FW_OUT_HOOK (1 references)
pkts bytes target prot opt in out source destination
25255 9577K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain WAN_IN (1 references)
pkts bytes target prot opt in out source destination
35077 5437K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* WAN_IN-3001 */ state RELATED,ESTABLISHED
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* WAN_IN-3002 */ state INVALID
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.4 /* WAN_IN-3003 */ tcp dpt:4020
0 0 RETURN udp -- * * 0.0.0.0/0 192.168.1.4 /* WAN_IN-3003 */ udp dpt:4020
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3004 */ tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3005 */ tcp dpt:17231
0 0 RETURN udp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3005 */ udp dpt:17231
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3006 */ tcp dpt:10000
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.50 /* WAN_IN-3007 */ tcp dpt:22
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.50 /* WAN_IN-3008 */ tcp dpt:80
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.50 /* WAN_IN-3009 */ tcp dpt:1025
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3010 */ tcp dpt:8888
0 0 RETURN udp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3011 */ udp dpt:1194
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3012 */ multiport dports 6883,51413
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.4 /* WAN_IN-3013 */ multiport dports 9000:9010
0 0 RETURN udp -- * * 0.0.0.0/0 192.168.1.4 /* WAN_IN-3013 */ multiport dports 9000:9010
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.4 /* WAN_IN-3014 */ tcp dpt:4030
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.22 /* WAN_IN-3015 */ tcp dpt:22
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.22 /* WAN_IN-3016 */ tcp dpt:80
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.22 /* WAN_IN-3017 */ tcp dpt:8070
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.22 /* WAN_IN-3018 */ tcp dpt:3306
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.4 /* WAN_IN-3019 */ multiport dports 7777:7779
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.4 /* WAN_IN-3020 */ tcp dpt:16365
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3021 */ multiport dports 943,8090:8091,9080,9443:9444,32400
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3022 */ tcp dpt:8096
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3023 */ tcp dpt:8096
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.3 /* WAN_IN-3024 */ multiport dports 25565,25566
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* WAN_IN-10000 default-action drop */
Chain WAN_LOCAL (1 references)
pkts bytes target prot opt in out source destination
5000 728K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* WAN_LOCAL-3001 */ state RELATED,ESTABLISHED
49 3685 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* WAN_LOCAL-3002 */ state INVALID
1350 155K DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* WAN_LOCAL-10000 default-action drop */
Chain WAN_OUT (1 references)
pkts bytes target prot opt in out source destination
60409 7424K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* WAN_OUT-10000 default-action accept */
----------------
Nat Chain Details
----------------
Chain PREROUTING (policy ACCEPT 8433 packets, 898K bytes)
pkts bytes target prot opt in out source destination
8433 898K MINIUPNPD all -- * * 0.0.0.0/0 0.0.0.0/0
23767 2400K UBNT_PFOR_DNAT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
23767 2400K VYATTA_PRE_DNAT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
Chain INPUT (policy ACCEPT 2331 packets, 223K bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 2014 packets, 142K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 2014 packets, 142K bytes)
pkts bytes target prot opt in out source destination
17549 1614K UBNT_VPN_IPSEC_SNAT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
6318 576K MINIUPNPD-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
17549 1614K UBNT_PFOR_SNAT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
11857 1061K MASQUERADE all -- * eth0 0.0.0.0/0 0.0.0.0/0 match-set corporate_network src /* NAT-6001 */
0 0 MASQUERADE all -- * eth0 0.0.0.0/0 0.0.0.0/0 match-set remote_user_vpn_network src /* NAT-6002 */
0 0 MASQUERADE all -- * eth0 0.0.0.0/0 0.0.0.0/0 match-set guest_network src /* NAT-6003 */
5692 553K VYATTA_PRE_SNAT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
Chain MINIUPNPD (1 references)
pkts bytes target prot opt in out source destination
Chain MINIUPNPD-POSTROUTING (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_PFOR_DNAT_HOOK (1 references)
pkts bytes target prot opt in out source destination
1251 140K UBNT_PFOR_DNAT_RULES all -- eth0 * 0.0.0.0/0 0.0.0.0/0 match-set ADDRv4_eth0 dst
0 0 UBNT_PFOR_DNAT_RULES all -- eth1 * 0.0.0.0/0 0.0.0.0/0 match-set ADDRv4_eth0 dst
Chain UBNT_PFOR_DNAT_RULES (2 references)
pkts bytes target prot opt in out source destination
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4020 to:192.168.1.4
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:4020 to:192.168.1.4
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 to:192.168.1.3
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:17231 to:192.168.1.3
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:17231 to:192.168.1.3
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10000 to:192.168.1.3
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1001 to:192.168.1.50:22
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1002 to:192.168.1.50:80
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1003 to:192.168.1.50:1025
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8888 to:192.168.1.3
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194 to:192.168.1.3
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp multiport dports 6883,51413 to:192.168.1.3
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp multiport dports 9000:9010 to:192.168.1.4
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp multiport dports 9000:9010 to:192.168.1.4
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4030 to:192.168.1.4
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:19987 to:192.168.1.22:22
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:19999 to:192.168.1.22:80
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21087 to:192.168.1.22:8070
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:23306 to:192.168.1.22:3306
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp multiport dports 7777:7779 to:192.168.1.4
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:16365 to:192.168.1.4
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp multiport dports 943,8090:8091,9080,9443:9444,32400 to:192.168.1.3
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8096 to:192.168.1.3
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8096 to:192.168.1.3
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp multiport dports 25565,25566 to:192.168.1.3
Chain UBNT_PFOR_SNAT_HOOK (1 references)
pkts bytes target prot opt in out source destination
488 110K UBNT_PFOR_SNAT_RULES all -- * eth1 0.0.0.0/0 0.0.0.0/0
Chain UBNT_PFOR_SNAT_RULES (1 references)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.4 match-set NETv4_eth1 src tcp dpt:4020
0 0 MASQUERADE udp -- * eth1 0.0.0.0/0 192.168.1.4 match-set NETv4_eth1 src udp dpt:4020
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp dpt:443
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp dpt:17231
0 0 MASQUERADE udp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src udp dpt:17231
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp dpt:10000
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.50 match-set NETv4_eth1 src tcp dpt:22
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.50 match-set NETv4_eth1 src tcp dpt:80
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.50 match-set NETv4_eth1 src tcp dpt:1025
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp dpt:8888
0 0 MASQUERADE udp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src udp dpt:1194
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp multiport dports 6883,51413
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.4 match-set NETv4_eth1 src tcp multiport dports 9000:9010
0 0 MASQUERADE udp -- * eth1 0.0.0.0/0 192.168.1.4 match-set NETv4_eth1 src udp multiport dports 9000:9010
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.4 match-set NETv4_eth1 src tcp dpt:4030
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.22 match-set NETv4_eth1 src tcp dpt:22
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.22 match-set NETv4_eth1 src tcp dpt:80
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.22 match-set NETv4_eth1 src tcp dpt:8070
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.22 match-set NETv4_eth1 src tcp dpt:3306
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.4 match-set NETv4_eth1 src tcp multiport dports 7777:7779
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.4 match-set NETv4_eth1 src tcp dpt:16365
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp multiport dports 943,8090:8091,9080,9443:9444,32400
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp dpt:8096
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp dpt:8096
0 0 MASQUERADE tcp -- * eth1 0.0.0.0/0 192.168.1.3 match-set NETv4_eth1 src tcp multiport dports 25565,25566
Chain UBNT_VPN_IPSEC_SNAT_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain VYATTA_PRE_DNAT_HOOK (1 references)
pkts bytes target prot opt in out source destination
23767 2400K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
Chain VYATTA_PRE_SNAT_HOOK (1 references)
pkts bytes target prot opt in out source destination
5692 553K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
----------------
Mangle Chain Details
----------------
Chain PREROUTING (policy ACCEPT 55875 packets, 8802K bytes)
pkts bytes target prot opt in out source destination
55875 8802K MINIUPNPD all -- * * 0.0.0.0/0 0.0.0.0/0
146K 19M VYATTA_FW_IN_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
Chain INPUT (policy ACCEPT 10651 packets, 1072K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 44628 packets, 7621K bytes)
pkts bytes target prot opt in out source destination
111K 15M UBNT_FW_MSS_CLAMP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 6708 packets, 2449K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 51336 packets, 10M bytes)
pkts bytes target prot opt in out source destination
136K 24M VYATTA_FW_OUT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
136K 24M UBNT_QOS_FW_OUT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
Chain MINIUPNPD (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_FW_MSS_CLAMP (1 references)
pkts bytes target prot opt in out source destination
0 0 TCPMSS tcp -- * pppoe+ 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS set 1452
0 0 TCPMSS tcp -- pppoe+ * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS set 1452
0 0 TCPMSS tcp -- * pptp+ 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS set 1452
0 0 TCPMSS tcp -- pptp+ * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS set 1452
0 0 TCPMSS tcp -- * vti+ 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS set 1452
0 0 TCPMSS tcp -- vti+ * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS set 1452
Chain UBNT_QOS_FW_OUT_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain VYATTA_FW_IN_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain VYATTA_FW_OUT_HOOK (1 references)
pkts bytes target prot opt in out source destination
----------------
Raw Chain Details
----------------
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
146K 19M UBNT_PREROUTING_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
146K 19M VYATTA_CT_IGNORE all -- * * 0.0.0.0/0 0.0.0.0/0
146K 19M UBNT_CT_BRIDGE all -- * * 0.0.0.0/0 0.0.0.0/0
146K 19M VYATTA_CT_PREROUTING_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
146K 19M NAT_CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0
128 10776 PFOR_CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0
128 10776 FW_CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 CT all -- * * 0.0.0.0/0 0.0.0.0/0 NOTRACK
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
25281 9604K VYATTA_CT_IGNORE all -- * * 0.0.0.0/0 0.0.0.0/0
25281 9604K VYATTA_CT_OUTPUT_HOOK all -- * * 0.0.0.0/0 0.0.0.0/0
25153 9593K NAT_CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0
128 10776 PFOR_CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0
128 10776 FW_CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 CT all -- * * 0.0.0.0/0 0.0.0.0/0 NOTRACK
Chain FW_CONNTRACK (2 references)
pkts bytes target prot opt in out source destination
256 21552 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain NAT_CONNTRACK (2 references)
pkts bytes target prot opt in out source destination
171K 28M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain PFOR_CONNTRACK (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain UBNT_CT_BRIDGE (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_PREROUTING_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain VYATTA_CT_IGNORE (2 references)
pkts bytes target prot opt in out source destination
171K 28M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
Chain VYATTA_CT_OUTPUT_HOOK (1 references)
pkts bytes target prot opt in out source destination
25281 9604K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
Chain VYATTA_CT_PREROUTING_HOOK (1 references)
pkts bytes target prot opt in out source destination
146K 19M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
----------------
Save Iptables Rule-Set
----------------
# Generated by iptables-save v1.4.20 on Wed Feb 6 19:10:30 2019
*nat
:PREROUTING ACCEPT [8433:898017]
:INPUT ACCEPT [2331:222728]
:OUTPUT ACCEPT [2014:141842]
:POSTROUTING ACCEPT [2014:141842]
:MINIUPNPD - [0:0]
:MINIUPNPD-POSTROUTING - [0:0]
:UBNT_PFOR_DNAT_HOOK - [0:0]
:UBNT_PFOR_DNAT_RULES - [0:0]
:UBNT_PFOR_SNAT_HOOK - [0:0]
:UBNT_PFOR_SNAT_RULES - [0:0]
:UBNT_VPN_IPSEC_SNAT_HOOK - [0:0]
:VYATTA_PRE_DNAT_HOOK - [0:0]
:VYATTA_PRE_SNAT_HOOK - [0:0]
[8433:898017] -A PREROUTING -j MINIUPNPD
[23767:2400406] -A PREROUTING -j UBNT_PFOR_DNAT_HOOK
[23767:2400406] -A PREROUTING -j VYATTA_PRE_DNAT_HOOK
[17549:1614149] -A POSTROUTING -j UBNT_VPN_IPSEC_SNAT_HOOK
[6318:575812] -A POSTROUTING -j MINIUPNPD-POSTROUTING
[17549:1614149] -A POSTROUTING -j UBNT_PFOR_SNAT_HOOK
[11857:1060906] -A POSTROUTING -o eth0 -m set --match-set corporate_network src -m comment --comment NAT-6001 -j MASQUERADE
[0:0] -A POSTROUTING -o eth0 -m set --match-set remote_user_vpn_network src -m comment --comment NAT-6002 -j MASQUERADE
[0:0] -A POSTROUTING -o eth0 -m set --match-set guest_network src -m comment --comment NAT-6003 -j MASQUERADE
[5692:553243] -A POSTROUTING -j VYATTA_PRE_SNAT_HOOK
[1251:140136] -A UBNT_PFOR_DNAT_HOOK -i eth0 -m set --match-set ADDRv4_eth0 dst -j UBNT_PFOR_DNAT_RULES
[0:0] -A UBNT_PFOR_DNAT_HOOK -i eth1 -m set --match-set ADDRv4_eth0 dst -j UBNT_PFOR_DNAT_RULES
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 4020 -j DNAT --to-destination 192.168.1.4
[0:0] -A UBNT_PFOR_DNAT_RULES -p udp -m udp --dport 4020 -j DNAT --to-destination 192.168.1.4
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 443 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 17231 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p udp -m udp --dport 17231 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 10000 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 1001 -j DNAT --to-destination 192.168.1.50:22
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 1002 -j DNAT --to-destination 192.168.1.50:80
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 1003 -j DNAT --to-destination 192.168.1.50:1025
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 8888 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p udp -m udp --dport 1194 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp -m multiport --dports 6883,51413 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp -m multiport --dports 9000:9010 -j DNAT --to-destination 192.168.1.4
[0:0] -A UBNT_PFOR_DNAT_RULES -p udp -m udp -m multiport --dports 9000:9010 -j DNAT --to-destination 192.168.1.4
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 4030 -j DNAT --to-destination 192.168.1.4
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 19987 -j DNAT --to-destination 192.168.1.22:22
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 19999 -j DNAT --to-destination 192.168.1.22:80
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 21087 -j DNAT --to-destination 192.168.1.22:8070
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 23306 -j DNAT --to-destination 192.168.1.22:3306
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp -m multiport --dports 7777:7779 -j DNAT --to-destination 192.168.1.4
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 16365 -j DNAT --to-destination 192.168.1.4
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp -m multiport --dports 943,8090:8091,9080,9443:9444,32400 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 8096 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp --dport 8096 -j DNAT --to-destination 192.168.1.3
[0:0] -A UBNT_PFOR_DNAT_RULES -p tcp -m tcp -m multiport --dports 25565,25566 -j DNAT --to-destination 192.168.1.3
[488:110486] -A UBNT_PFOR_SNAT_HOOK -o eth1 -j UBNT_PFOR_SNAT_RULES
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.4/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 4020 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.4/32 -o eth1 -p udp -m set --match-set NETv4_eth1 src -m udp --dport 4020 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 443 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 17231 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p udp -m set --match-set NETv4_eth1 src -m udp --dport 17231 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 10000 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.50/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 22 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.50/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 80 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.50/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 1025 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 8888 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p udp -m set --match-set NETv4_eth1 src -m udp --dport 1194 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp -m multiport --dports 6883,51413 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.4/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp -m multiport --dports 9000:9010 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.4/32 -o eth1 -p udp -m set --match-set NETv4_eth1 src -m udp -m multiport --dports 9000:9010 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.4/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 4030 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.22/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 22 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.22/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 80 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.22/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 8070 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.22/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 3306 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.4/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp -m multiport --dports 7777:7779 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.4/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 16365 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp -m multiport --dports 943,8090:8091,9080,9443:9444,32400 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 8096 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp --dport 8096 -j MASQUERADE
[0:0] -A UBNT_PFOR_SNAT_RULES -d 192.168.1.3/32 -o eth1 -p tcp -m set --match-set NETv4_eth1 src -m tcp -m multiport --dports 25565,25566 -j MASQUERADE
[23767:2400406] -A VYATTA_PRE_DNAT_HOOK -j RETURN
[5692:553243] -A VYATTA_PRE_SNAT_HOOK -j RETURN
COMMIT
# Completed on Wed Feb 6 19:10:30 2019
# Generated by iptables-save v1.4.20 on Wed Feb 6 19:10:30 2019
*mangle
:PREROUTING ACCEPT [55883:8801867]
:INPUT ACCEPT [10659:1072553]
:FORWARD ACCEPT [44628:7621380]
:OUTPUT ACCEPT [6718:2460245]
:POSTROUTING ACCEPT [51346:10081625]
:MINIUPNPD - [0:0]
:UBNT_FW_MSS_CLAMP - [0:0]
:UBNT_QOS_FW_OUT_HOOK - [0:0]
:VYATTA_FW_IN_HOOK - [0:0]
:VYATTA_FW_OUT_HOOK - [0:0]
[55883:8801867] -A PREROUTING -j MINIUPNPD
[145984:18856332] -A PREROUTING -j VYATTA_FW_IN_HOOK
[110664:14691253] -A FORWARD -j UBNT_FW_MSS_CLAMP
[135952:24303521] -A POSTROUTING -j VYATTA_FW_OUT_HOOK
[135952:24303521] -A POSTROUTING -j UBNT_QOS_FW_OUT_HOOK
[0:0] -A UBNT_FW_MSS_CLAMP -o pppoe+ -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452
[0:0] -A UBNT_FW_MSS_CLAMP -i pppoe+ -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452
[0:0] -A UBNT_FW_MSS_CLAMP -o pptp+ -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452
[0:0] -A UBNT_FW_MSS_CLAMP -i pptp+ -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452
[0:0] -A UBNT_FW_MSS_CLAMP -o vti+ -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452
[0:0] -A UBNT_FW_MSS_CLAMP -i vti+ -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452
COMMIT
# Completed on Wed Feb 6 19:10:30 2019
# Generated by iptables-save v1.4.20 on Wed Feb 6 19:10:30 2019
*raw
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:FW_CONNTRACK - [0:0]
:NAT_CONNTRACK - [0:0]
:PFOR_CONNTRACK - [0:0]
:UBNT_CT_BRIDGE - [0:0]
:UBNT_PREROUTING_HOOK - [0:0]
:VYATTA_CT_IGNORE - [0:0]
:VYATTA_CT_OUTPUT_HOOK - [0:0]
:VYATTA_CT_PREROUTING_HOOK - [0:0]
[145987:18856452] -A PREROUTING -j UBNT_PREROUTING_HOOK
[145987:18856452] -A PREROUTING -j VYATTA_CT_IGNORE
[145987:18856452] -A PREROUTING -j UBNT_CT_BRIDGE
[145987:18856452] -A PREROUTING -j VYATTA_CT_PREROUTING_HOOK
[145859:18845676] -A PREROUTING -j NAT_CONNTRACK
[128:10776] -A PREROUTING -j PFOR_CONNTRACK
[128:10776] -A PREROUTING -j FW_CONNTRACK
[0:0] -A PREROUTING -j NOTRACK
[25292:9616764] -A OUTPUT -j VYATTA_CT_IGNORE
[25292:9616764] -A OUTPUT -j VYATTA_CT_OUTPUT_HOOK
[25164:9605988] -A OUTPUT -j NAT_CONNTRACK
[128:10776] -A OUTPUT -j PFOR_CONNTRACK
[128:10776] -A OUTPUT -j FW_CONNTRACK
[0:0] -A OUTPUT -j NOTRACK
[256:21552] -A FW_CONNTRACK -j ACCEPT
[171023:28451664] -A NAT_CONNTRACK -j ACCEPT
[0:0] -A PFOR_CONNTRACK -j ACCEPT
[171279:28473216] -A VYATTA_CT_IGNORE -j RETURN
[25292:9616764] -A VYATTA_CT_OUTPUT_HOOK -j RETURN
[145987:18856452] -A VYATTA_CT_PREROUTING_HOOK -j RETURN
COMMIT
# Completed on Wed Feb 6 19:10:30 2019
# Generated by iptables-save v1.4.20 on Wed Feb 6 19:10:30 2019
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:AUTHORIZED_GUESTS - [0:0]
:GUEST_IN - [0:0]
:GUEST_LOCAL - [0:0]
:GUEST_OUT - [0:0]
:LAN_IN - [0:0]
:LAN_LOCAL - [0:0]
:LAN_OUT - [0:0]
:MINIUPNPD - [0:0]
:UBNT_PFOR_FW_HOOK - [0:0]
:UBNT_PFOR_FW_RULES - [0:0]
:UBNT_VPN_IPSEC_FW_HOOK - [0:0]
:UBNT_VPN_IPSEC_FW_IN_HOOK - [0:0]
:VYATTA_FW_IN_HOOK - [0:0]
:VYATTA_FW_LOCAL_HOOK - [0:0]
:VYATTA_FW_OUT_HOOK - [0:0]
:VYATTA_POST_FW_FWD_HOOK - [0:0]
:VYATTA_POST_FW_IN_HOOK - [0:0]
:VYATTA_POST_FW_OUT_HOOK - [0:0]
:WAN_IN - [0:0]
:WAN_LOCAL - [0:0]
:WAN_OUT - [0:0]
[32353:3811624] -A INPUT -j UBNT_VPN_IPSEC_FW_HOOK
[32353:3811624] -A INPUT -j VYATTA_FW_LOCAL_HOOK
[30954:3653285] -A INPUT -j VYATTA_POST_FW_IN_HOOK
[44625:7621216] -A FORWARD -j MINIUPNPD
[110664:14691253] -A FORWARD -j UBNT_VPN_IPSEC_FW_IN_HOOK
[110664:14691253] -A FORWARD -j UBNT_PFOR_FW_HOOK
[110664:14691253] -A FORWARD -j VYATTA_FW_IN_HOOK
[110664:14691253] -A FORWARD -j VYATTA_FW_OUT_HOOK
[110664:14691253] -A FORWARD -j VYATTA_POST_FW_FWD_HOOK
[25292:9616764] -A OUTPUT -j VYATTA_POST_FW_OUT_HOOK
[0:0] -A AUTHORIZED_GUESTS -m comment --comment "AUTHORIZED_GUESTS-10000 default-action accept" -j RETURN
[0:0] -A GUEST_IN -p tcp -m comment --comment GUEST_IN-3001 -m tcp --dport 53 -j RETURN
[0:0] -A GUEST_IN -p udp -m comment --comment GUEST_IN-3001 -m udp --dport 53 -j RETURN
[0:0] -A GUEST_IN -p tcp -m comment --comment GUEST_IN-3002 -m tcp --dport 443 -m set --match-set captive_portal_subnets dst -j RETURN
[0:0] -A GUEST_IN -m comment --comment GUEST_IN-3003 -m set --match-set guest_allow_addresses dst -j RETURN
[0:0] -A GUEST_IN -m comment --comment GUEST_IN-3004 -m set --match-set guest_restricted_addresses dst -j DROP
[0:0] -A GUEST_IN -m comment --comment GUEST_IN-3005 -m set --match-set corporate_network dst -j DROP
[0:0] -A GUEST_IN -m comment --comment GUEST_IN-3006 -m set --match-set remote_user_vpn_network dst -j DROP
[0:0] -A GUEST_IN -m comment --comment GUEST_IN-3007 -m set --match-set authorized_guests dst -j DROP
[0:0] -A GUEST_IN -m comment --comment "GUEST_IN-10000 default-action accept" -j RETURN
[0:0] -A GUEST_LOCAL -p tcp -m comment --comment GUEST_LOCAL-3001 -m tcp --dport 53 -j RETURN
[0:0] -A GUEST_LOCAL -p udp -m comment --comment GUEST_LOCAL-3001 -m udp --dport 53 -j RETURN
[0:0] -A GUEST_LOCAL -p icmp -m comment --comment GUEST_LOCAL-3002 -j RETURN
[0:0] -A GUEST_LOCAL -p udp -m comment --comment GUEST_LOCAL-3003 -m udp --sport 68 --dport 67 -j RETURN
[0:0] -A GUEST_LOCAL -m comment --comment "GUEST_LOCAL-10000 default-action drop" -j DROP
[0:0] -A GUEST_OUT -m comment --comment "GUEST_OUT-10000 default-action accept" -j RETURN
[60419:7424819] -A LAN_IN -s 192.168.1.0/24 -m comment --comment LAN_IN-6001 -j RETURN
[0:0] -A LAN_IN -m comment --comment "LAN_IN-10000 default-action accept" -j RETURN
[25768:2910513] -A LAN_LOCAL -m comment --comment "LAN_LOCAL-10000 default-action accept" -j RETURN
[50245:7266434] -A LAN_OUT -d 192.168.1.0/24 -m comment --comment LAN_OUT-6001 -j RETURN
[0:0] -A LAN_OUT -m comment --comment "LAN_OUT-10000 default-action accept" -j RETURN
[50245:7266434] -A VYATTA_FW_IN_HOOK -i eth0 -j WAN_IN
[60419:7424819] -A VYATTA_FW_IN_HOOK -i eth1 -j LAN_IN
[6399:886049] -A VYATTA_FW_LOCAL_HOOK -i eth0 -j WAN_LOCAL
[25768:2910513] -A VYATTA_FW_LOCAL_HOOK -i eth1 -j LAN_LOCAL
[60409:7424147] -A VYATTA_FW_OUT_HOOK -o eth0 -j WAN_OUT
[50245:7266434] -A VYATTA_FW_OUT_HOOK -o eth1 -j LAN_OUT
[110664:14691253] -A VYATTA_POST_FW_FWD_HOOK -j ACCEPT
[30954:3653285] -A VYATTA_POST_FW_IN_HOOK -j ACCEPT
[25292:9616764] -A VYATTA_POST_FW_OUT_HOOK -j ACCEPT
[35078:5436646] -A WAN_IN -m comment --comment WAN_IN-3001 -m state --state RELATED,ESTABLISHED -j RETURN
[0:0] -A WAN_IN -m comment --comment WAN_IN-3002 -m state --state INVALID -j DROP
[0:0] -A WAN_IN -d 192.168.1.4/32 -p tcp -m comment --comment WAN_IN-3003 -m tcp --dport 4020 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.4/32 -p udp -m comment --comment WAN_IN-3003 -m udp --dport 4020 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3004 -m tcp --dport 443 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3005 -m tcp --dport 17231 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p udp -m comment --comment WAN_IN-3005 -m udp --dport 17231 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3006 -m tcp --dport 10000 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.50/32 -p tcp -m comment --comment WAN_IN-3007 -m tcp --dport 22 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.50/32 -p tcp -m comment --comment WAN_IN-3008 -m tcp --dport 80 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.50/32 -p tcp -m comment --comment WAN_IN-3009 -m tcp --dport 1025 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3010 -m tcp --dport 8888 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p udp -m comment --comment WAN_IN-3011 -m udp --dport 1194 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3012 -m multiport --dports 6883,51413 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.4/32 -p tcp -m comment --comment WAN_IN-3013 -m multiport --dports 9000:9010 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.4/32 -p udp -m comment --comment WAN_IN-3013 -m multiport --dports 9000:9010 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.4/32 -p tcp -m comment --comment WAN_IN-3014 -m tcp --dport 4030 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.22/32 -p tcp -m comment --comment WAN_IN-3015 -m tcp --dport 22 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.22/32 -p tcp -m comment --comment WAN_IN-3016 -m tcp --dport 80 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.22/32 -p tcp -m comment --comment WAN_IN-3017 -m tcp --dport 8070 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.22/32 -p tcp -m comment --comment WAN_IN-3018 -m tcp --dport 3306 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.4/32 -p tcp -m comment --comment WAN_IN-3019 -m multiport --dports 7777:7779 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.4/32 -p tcp -m comment --comment WAN_IN-3020 -m tcp --dport 16365 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3021 -m multiport --dports 943,8090:8091,9080,9443:9444,32400 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3022 -m tcp --dport 8096 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3023 -m tcp --dport 8096 -j RETURN
[0:0] -A WAN_IN -d 192.168.1.3/32 -p tcp -m comment --comment WAN_IN-3024 -m multiport --dports 25565,25566 -j RETURN
[0:0] -A WAN_IN -m comment --comment "WAN_IN-10000 default-action drop" -j DROP
[5000:727710] -A WAN_LOCAL -m comment --comment WAN_LOCAL-3001 -m state --state RELATED,ESTABLISHED -j RETURN
[49:3685] -A WAN_LOCAL -m comment --comment WAN_LOCAL-3002 -m state --state INVALID -j DROP
[1350:154654] -A WAN_LOCAL -m comment --comment "WAN_LOCAL-10000 default-action drop" -j DROP
[60409:7424147] -A WAN_OUT -m comment --comment "WAN_OUT-10000 default-action accept" -j RETURN
COMMIT
# Completed on Wed Feb 6 19:10:30 2019
----------------
SYSTEM
----------------
----------------
Show System Image Version
----------------
The system currently has the following image(s) installed:
v4.4.36.5146617.181205.0449 (running image) (default boot)
v4.4.29.5124210.180918.0331
----------------
Show System Image Storage
----------------
Image name Read-Only Read-Write Total
------------------------------ ------------ ------------ ------------
v4.4.36.5146617.181205.0449 101516 3040 104556
v4.4.29.5124210.180918.0331 102580 110296 212876
----------------
System Information
----------------
processor_id: 0xd0601
boot_flags: 0x5
dram_size: 512
phy_mem_desc_addr: 0x24108
eclock_hz: 500000000
io_clock_hz: 500000000
dclock_hz: 266000000
board_type: 20004
board_serial_number: fcecda48cf17
ubnt_r1: 0
ubnt_r2: 16
mac_addr_base: fc:ec:da:48:cf:17
mac_addr_count: 3
32bit_shared_mem_base: 0x0
32bit_shared_mem_size: 0x0
----------------
Current Time
----------------
Wed Feb 6 19:10:31 EST 2019
----------------
Installed Packages
----------------
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-================================-=================================================-============-==============================================================================
ii adduser 3.113+nmu3 all add and remove users and groups
ii apt 0.9.7.9+deb7u7 mips commandline package manager
ii apt-transport-https 0.9.7.9+deb7u7 mips https download transport for APT
ii arpwatch 0.3 mips Arpwatch maintains a database of Ethernet MAC
ii at 3.1.13-2+deb7u1 mips Delayed job execution and batch processing
ii avahi-daemon 0.6.31-2 mips Avahi mDNS/DNS-SD daemon
ii awk 9:0.1.26+t5146614-ugw-v4.4.36-4055712 all Replacement for awk
ii base-files 7.1wheezy11 mips Debian base system miscellaneous files
ii base-passwd 3.5.26 mips Debian base system master password and group files
ii bash 4.2+dfsg-0.1+deb7u3 mips GNU Bourne Again SHell
ii bash-completion 1:2.0-1 all programmable completion for the bash shell
ii bcrelay 1.3.4-5.2 mips Broadcast relay daemon
ii bind9-host 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 mips Version of 'host' bundled with BIND 9.X
ii binutils 2.22-8+deb7u2 mips GNU assembler, linker and binary utilities
ii bridge-utils 1.5-6 mips Utilities for configuring the Linux Ethernet bridge
ii bsdmainutils 9.0.3 mips collection of more utilities from FreeBSD
ii bsdutils 1:2.20.1-5.3 mips Basic utilities from 4.4BSD-Lite
ii busybox 9:1.19.0-ubnt5+t5146611-ugw-v4.4.36-24c5521 mips Tiny utilities for small and embedded systems
ii ca-certificates 20130119+deb7u1 all Common CA certificates
ii conntrack 2:0.9.14-ubnt3+t5146611-ugw-v4.4.36-6b624f6 mips Program to modify the conntrack tables
ii coreutils 9:0.1.26+t5146614-ugw-v4.4.36-4055712 all Replacement for coreutils
ii cron 3.0pl1-124 mips process scheduling daemon
ii curl 7.26.0-1+wheezy13 mips command line tool for transferring data with URL syntax
ii dash 0.5.7-3 mips POSIX-compliant shell
ii dbus 1.6.8-1+deb7u6 mips simple interprocess messaging system (daemon and utilities)
ii ddclient 3.8.3-1 all address updating utility for dynamic DNS services
ii debconf 1.5.49 all Debian configuration management system
ii debian-archive-keyring 2014.3~deb7u1 all GnuPG archive keys of the Debian archive
ii debianutils 4.3.2 mips Miscellaneous utilities specific to Debian
ii dhtest 1.0.0 mips Sends dhcp discovery and request packets
ii dmsetup 2:1.02.74-8 mips Linux Kernel Device Mapper userspace library
ii dnsmasq 1:2.78-1-ubnt2 all Small caching DNS proxy and DHCP/TFTP server
ii dnsmasq-base 1:2.78-1-ubnt2 mips Small caching DNS proxy and DHCP/TFTP server
ii dpkg 1.16.18 mips Debian package management system
ii e2fslibs:mips 1.42.5-1.1+deb7u1 mips ext2/ext3/ext4 file system libraries
ii e2fsprogs 1.42.5-1.1+deb7u1 mips ext2/ext3/ext4 file system utilities
ii ethtool 1:3.4.2-1 mips display or change Ethernet device settings
ii fail2ban 0.8.6-3wheezy3 all ban hosts that cause multiple authentication errors
ii freeradius 2.1.12+dfsg-1.2 mips high-performance and highly configurable RADIUS server
ii freeradius-common 2.1.12+dfsg-1.2 all FreeRADIUS common files
ii freeradius-ldap 2.1.12+dfsg-1.2 mips LDAP module for FreeRADIUS server
ii freeradius-utils 2.1.12+dfsg-1.2 mips FreeRADIUS client utilities
ii gcc-4.7-base:mips 4.7.2-5 mips GCC, the GNU Compiler Collection (base package)
ii gnupg 1.4.12-7+deb7u7 mips GNU privacy guard - a free PGP replacement
ii gpgv 1.4.12-7+deb7u7 mips GNU privacy guard - signature verification tool
ii grep 2.12-2 mips GNU grep, egrep and fgrep
ii host 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 all Transitional package
ii ifupdown 0.7.8 mips high level tools to configure network interfaces
ii igmpproxy 1:0.1-ubnt3+t5146612-ugw-v4.4.36-6df661e mips The igmpproxy package
ii init-system-helpers 1.18~bpo70+1 all helper tools for all init systems
ii initscripts 2.88dsf-41+deb7u1 mips scripts for initializing and shutting down the system
ii insserv 1.14.0-5 mips boot sequence organizer using LSB init.d script dependency information
ii iproute 1:0.1.39+t5146619-dev-ugw-f6478cf mips The UBNT iproute package
ii ipset 6.23-2 mips administration tool for kernel IP sets
ii iptables 1:1.4.20-ubnt4+t5146612-ugw-v4.4.36-faa1b1b mips administration tools for packet filtering and NAT
ii iputils-ping 3:20101006-1+b1 mips Tools to test the reachability of network hosts
ii kmod 9-3 mips tools for managing Linux kernel modules
ii less 444-4 mips pager program similar to more
ii libacl1:mips 2.2.51-8 mips Access control list shared library
ii libapt-pkg4.12:mips 0.9.7.9+deb7u7 mips package managment runtime library
ii libattr1:mips 1:2.4.46-8 mips Extended attribute shared library
ii libavahi-common-data:mips 0.6.31-2 mips Avahi common data files
ii libavahi-common3:mips 0.6.31-2 mips Avahi common library
ii libavahi-core7:mips 0.6.31-2 mips Avahi's embeddable mDNS/DNS-SD library
ii libbind9-80 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 mips BIND9 Shared Library used by BIND
ii libblkid1:mips 2.20.1-5.3 mips block device id library
ii libboost-filesystem1.49.0 1.49.0-3.2 mips filesystem operations (portable paths, iteration over directories, etc) in C++
ii libboost-iostreams1.49.0 1.49.0-3.2 mips Boost.Iostreams Library
ii libboost-serialization1.49.0 1.49.0-3.2 mips serialization library for C++
ii libboost-system1.49.0 1.49.0-3.2 mips Operating system (e.g. diagnostics support) library
ii libboost-thread1.49.0 1.49.0-3.2 mips portable C++ multi-threading
ii libbsd0:mips 0.4.2-1 mips utility functions from BSD systems - shared library
ii libbz2-1.0:mips 1.0.6-4 mips high-quality block-sorting file compressor library - runtime
ii libc-bin 2.13-38+deb7u11 mips Embedded GNU C Library: Binaries
ii libc2lib 1:1.4.2-ubnt1+t5146611-ugw-v4.4.36-9058f2c mips The c2lib library
ii libc6:mips 2.13-38+deb7u11 mips Embedded GNU C Library: Shared libraries
ii libcap2:mips 1:2.22-1.2 mips support for getting/setting POSIX.1e capabilities
ii libcap2-bin 1:2.22-1.2 mips basic utility programs for using capabilities
ii libclass-isa-perl 0.36-3 all report the search path for a class's ISA tree
ii libcomerr2:mips 1.42.5-1.1+deb7u1 mips common error description library
ii libcrypt-openssl-bignum-perl 0.04-3 mips Access OpenSSL multiprecision integer arithmetic libraries
ii libcrypt-openssl-rsa-perl 0.28-1 mips module for RSA encryption using OpenSSL
ii libcurl3:mips 7.26.0-1+wheezy13 mips easy-to-use client-side URL transfer library (OpenSSL flavour)
ii libcurl3-gnutls:mips 7.26.0-1+wheezy13 mips easy-to-use client-side URL transfer library (GnuTLS flavour)
ii libcwidget3 0.5.16-3.4 mips high-level terminal interface library for C++ (runtime files)
ii libdaemon0 0.14-2 mips lightweight C library for daemons - runtime library
ii libdb5.1:mips 5.1.29-5 mips Berkeley v5.1 Database Libraries [runtime]
ii libdbus-1-3:mips 1.6.8-1+deb7u6 mips simple interprocess messaging system (library)
ii libdevmapper1.02.1:mips 2:1.02.74-8 mips Linux Kernel Device Mapper userspace library
ii libdns88 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 mips DNS Shared Library used by BIND
ii libecap2 0.2.0-3~bpo70+1 mips eCAP library
ii libedit2:mips 2.11-20080614-5 mips BSD editline and history libraries
ii libencode-locale-perl 1.03-1 all utility to determine the locale encoding
ii libevent-2.0-5:mips 2.0.19-stable-3+deb7u1 mips Asynchronous event notification library
ii libexpat1:mips 2.1.0-1+deb7u4 mips XML parsing C library - runtime library
ii libfile-listing-perl 6.04-1 all module to parse directory listings
ii libfile-sync-perl 0.11-1 mips Perl interface to sync() and fsync()
ii libfreeradius2 2.1.12+dfsg-1.2 mips FreeRADIUS shared library
ii libgcc1:mips 1:4.7.2-5 mips GCC support library
ii libgcrypt11:mips 1.5.0-5+deb7u4 mips LGPL Crypto library - runtime library
ii libgdbm3:mips 1.8.3-11 mips GNU dbm database routines (runtime version)
ii libgeoip1 1.4.8+dfsg-3 mips non-DNS IP-to-country resolver library
ii libgmp10:mips 2:5.0.5+dfsg-2 mips Multiprecision arithmetic library
ii libgnutls-openssl27:mips 2.12.20-8+deb7u5 mips GNU TLS library - OpenSSL wrapper
ii libgnutls26:mips 2.12.20-8+deb7u5 mips GNU TLS library - runtime library
ii libgpg-error0:mips 1.10-3.1 mips library for common error values and messages in GnuPG components
ii libgssapi-krb5-2:mips 1.10.1+dfsg-5+deb7u7 mips MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
ii libhogweed2:mips 2.7.1-1~bpo70+1 mips low level cryptographic library (public-key cryptos)
ii libhtml-parser-perl 3.69-2 mips collection of modules that parse HTML text documents
ii libhtml-tagset-perl 3.20-2 all Data tables pertaining to HTML
ii libhtml-tree-perl 5.02-1 all Perl module to represent and create HTML syntax trees
ii libhttp-cookies-perl 6.00-2 all HTTP cookie jars
ii libhttp-date-perl 6.02-1 all module of date conversion routines
ii libhttp-message-perl 6.03-1 all perl interface to HTTP style messages
ii libhttp-negotiate-perl 6.00-2 all implementation of content negotiation
ii libidn11:mips 1.25-2+deb7u1 mips GNU Libidn library, implementation of IETF IDN specifications
ii libio-prompt-perl 0.997001-1+deb7u1 all module to interactively prompt for user input
ii libio-socket-ssl-perl 1.76-2 all Perl module implementing object oriented interface to SSL sockets
ii libipset3:mips 6.23-2 mips library for IP sets
ii libisc84 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 mips ISC Shared Library used by BIND
ii libisccc80 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 mips Command Channel Library used by BIND
ii libisccfg82 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 mips Config File Handling Library used by BIND
ii libjansson4:mips 2.3.1-2 mips C library for encoding, decoding and manipulating JSON data
ii libjpeg62:mips 6b1-3+deb7u1 mips Independent JPEG Group's JPEG runtime library (version 6.2)
ii libjson-any-perl 1.28-1 all wrapper class for the various JSON classes
ii libjson-perl 2.53-1 all module for manipulating JSON-formatted data
ii libk5crypto3:mips 1.10.1+dfsg-5+deb7u7 mips MIT Kerberos runtime libraries - Crypto Library
ii libkeyutils1:mips 1.5.5-3+deb7u1 mips Linux Key Management Utilities (library)
ii libkmod2:mips 9-3 mips libkmod shared library
ii libkrb5-3:mips 1.10.1+dfsg-5+deb7u7 mips MIT Kerberos runtime libraries
ii libkrb5support0:mips 1.10.1+dfsg-5+deb7u7 mips MIT Kerberos runtime libraries - Support library
ii libldap-2.4-2:mips 2.4.31-2+deb7u2 mips OpenLDAP libraries
ii liblocale-gettext-perl 1.05-7+b1 mips module using libc functions for internationalization in Perl
ii libltdl7:mips 2.4.2-1.1 mips A system independent dlopen wrapper for GNU libtool
ii liblwp-mediatypes-perl 6.02-1 all module to guess media type for a file or a URL
ii liblwp-protocol-https-perl 6.03-1 all HTTPS driver for LWP::UserAgent
ii liblwres80 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 mips Lightweight Resolver Library used by BIND
ii liblzma5:mips 5.1.1alpha+20120614-2 mips XZ-format compression library
ii liblzo2-2:mips 2.06-1+deb7u1 mips data compression library
ii libmnl0:mips 1.0.3-5 mips minimalistic Netlink communication library
ii libmount1 2.20.1-5.3 mips block device id library
ii libncurses5:mips 5.9-10 mips shared libraries for terminal handling
ii libncursesw5:mips 5.9-10 mips shared libraries for terminal handling (wide character support)
ii libnet-http-perl 6.03-2 all module providing low-level HTTP connection client
ii libnet-ssleay-perl 1.48-1+b1 mips Perl module for Secure Sockets Layer (SSL)
ii libnetaddr-ip-perl 4.062+dfsg-1 mips IP address manipulation module
ii libnetfilter-conntrack3:mips 1.0.1-1 mips Netfilter netlink-conntrack library
ii libnettle4:mips 2.7.1-1~bpo70+1 mips low level cryptographic library (symmetric and one-way cryptos)
ii libnfnetlink0 1.0.0-1.1 mips Netfilter netlink library
ii libnl-3-200:mips 3.2.7-4 mips library for dealing with netlink sockets
ii libnl-cli-3-200:mips 3.2.7-4 mips library for dealing with netlink sockets - cli helpers
ii libnl-genl-3-200:mips 3.2.7-4 mips library for dealing with netlink sockets - generic netlink
ii libnl-nf-3-200:mips 3.2.7-4 mips library for dealing with netlink sockets - netfilter interface
ii libnl-route-3-200:mips 3.2.7-4 mips library for dealing with netlink sockets - route interface
ii libopenconnect5:mips 7.08-2 mips open client for Cisco AnyConnect VPN - shared library
ii libopts25 1:5.12-0.1 mips automated option processing library based on autogen
ii libp11-kit0:mips 0.12-3 mips Library for loading and coordinating access to PKCS#11 modules - runtime
ii libpam-modules:mips 1.1.3-7.1 mips Pluggable Authentication Modules for PAM
ii libpam-modules-bin 1.1.3-7.1 mips Pluggable Authentication Modules for PAM - helper binaries
ii libpam-radius-auth 1.3.16-4.4 mips The PAM RADIUS authentication module
ii libpam-runtime 1.1.3-7.1 all Runtime support for the PAM library
ii libpam0g:mips 1.1.3-7.1 mips Pluggable Authentication Modules library
ii libparted0debian1:mips 2.3-12 mips disk partition manipulator - shared library
ii libpcap0.8:mips 1.7.4-1~bpo70+1 mips system interface for user-level packet capture
ii libpcre3:mips 1:8.30-5 mips Perl 5 Compatible Regular Expression Library - runtime files
ii libperl4-corelibs-perl 0.003-1 all libraries historically supplied with Perl 4
ii libperl5.14 5.14.2-21+deb7u3 mips shared Perl library
ii libpkcs11-helper1:mips 1.09-1 mips library that simplifies the interaction with PKCS#11
ii libpng12-0:mips 1.2.49-1+deb7u2 mips PNG library - runtime
ii libpopt0:mips 1.16-7 mips lib for parsing cmdline parameters
ii libprocps0:mips 1:3.3.3-3 mips library for accessing process information from /proc
ii libpython2.7 2.7.3-6+deb7u2 mips Shared Python runtime library (version 2.7)
ii libradiusclient-ng2 0.5.6-1.1 mips Enhanced RADIUS client library
ii libreadline6:mips 6.2+dfsg-0.1 mips GNU readline and history libraries, run-time libraries
ii librtmp0:mips 2.4+20111222.git4e06e21-1 mips toolkit for RTMP streams (shared library)
ii libsasl2-2:mips 2.1.25.dfsg1-6+deb7u1 mips Cyrus SASL - authentication abstraction library
ii libselinux1:mips 2.1.9-5 mips SELinux runtime shared libraries
ii libsemanage-common 2.1.6-6 all Common files for SELinux policy management libraries
ii libsemanage1:mips 2.1.6-6 mips SELinux policy management library
ii libsepol1:mips 2.1.4-3 mips SELinux library for manipulating binary security policies
ii libsigc++-2.0-0c2a:mips 2.2.10-0.2 mips type-safe Signal Framework for C++ - runtime
ii libslang2:mips 2.2.4-15 mips S-Lang programming library - runtime version
ii libsnmp-base 1:5.7.2-ubnt7+t5146613-ugw-v4.4.36-7e3435f all SNMP (Simple Network Management Protocol) MIBs and documentation
ii libsnmp15 1:5.7.2-ubnt7+t5146613-ugw-v4.4.36-7e3435f mips SNMP (Simple Network Management Protocol) library
ii libsocket6-perl 0.23-1+b2 mips Perl extensions for IPv6
ii libsort-versions-perl 1.5-4 all Perl module for sorting of revision (and similar) numbers
ii libsqlite3-0:mips 3.7.13-1+deb7u2 mips SQLite 3 shared library
ii libss2:mips 1.42.5-1.1+deb7u1 mips command-line interface parsing library
ii libssh2-1:mips 1.4.2-1.1+deb7u2 mips SSH2 client-side library
ii libssl1.0.0:mips 1.0.1te-2+deb7u21+ubnt2 mips SSL shared libraries
ii libstdc++6:mips 4.7.2-5 mips GNU Standard C++ Library v3
ii libstrongswan 1:5.2.2-ubnt2 mips strongSwan utility and crypto library
ii libswitch-perl 2.16-2 all switch statement for Perl
ii libsysfs2:mips 2.1.0+repack-2 mips interface library to sysfs
ii libsystemd-login0:mips 44-11+deb7u4 mips systemd login utility library
ii libtasn1-3:mips 2.13-2+deb7u3 mips Manage ASN.1 structures (runtime)
ii libterm-readkey-perl 2.30-4+b2 mips A perl module for simple terminal control
ii libtimedate-perl 1.2000-1 all collection of modules to manipulate date/time information
ii libtinfo5:mips 5.9-10 mips shared low-level terminfo library for terminal handling
ii libtree-simple-perl 1.18-1 all A simple tree object
ii libudev0:mips 175-7.2 mips libudev shared library
ii libudev1:mips 204-14~bpo70+1 mips libudev shared library
ii libupnp4 1.8.0~svn20100507-1.2 mips Portable SDK for UPnP Devices, version 1.8 (shared libraries)
ii liburi-perl 1.60-1 all module to manipulate and access URI strings
ii libusb-0.1-4:mips 2:0.1.12-20+nmu1 mips userspace USB programming library
ii libustr-1.0-1:mips 1.0.4-3 mips Micro string library: shared library
ii libuuid1:mips 2.20.1-5.3 mips Universally Unique ID library
ii libvyatta-cfg1 1:1.0.31+t5146616-ugw-v4.4.36-48f3f76 mips vyatta-cfg back-end library
ii libwant-perl 0.21-1 mips generalisation of wantarray
ii libwrap0:mips 7.6.q-24 mips Wietse Venema's TCP wrappers library
ii libwww-perl 6.04-1 all simple and consistent interface to the world-wide web
ii libwww-robotrules-perl 6.01-1 all database of robots.txt-derived permissions
ii libxml-libxml-perl 2.0001+dfsg-1+deb7u1 mips Perl interface to the libxml2 library
ii libxml-namespacesupport-perl 1.09-3 all Perl module for supporting simple generic namespaces
ii libxml-sax-base-perl 1.07-1 all base class for SAX drivers and filters
ii libxml-sax-perl 0.99+dfsg-2 all Perl module for using and building Perl SAX2 XML processors
ii libxml-simple-perl 2.20-1 all Perl module for reading and writing XML
ii libxml2:mips 2.8.0+dfsg1-7+wheezy6 mips GNOME XML library
ii linux-igd 1.0+cvs20070630-4 mips Linux UPnP Internet Gateway Device
ii lldpd 1:0.5.5-ubnt5+t5146612-ugw-v4.4.36-36b3193 mips implementation of IEEE 802.1ab (LLDP)
ii login 1:4.1.5.1-1 mips system login tools
ii logrotate 3.8.1-4 mips Log rotation utility
ii lsb-base 4.1+Debian8+deb7u1 all Linux Standard Base 4.1 init script functionality
ii lsof 4.86+dfsg-1 mips Utility to list open files
ii mactelnet-client 0.4.0-1 mips Console tools for telneting and pinging via MAC addresses
ii mactelnet-server 0.4.0-1 mips Telnet daemon for accepting connections via MAC addresses
ii mawk 1.3.3-17 mips a pattern scanning and text processing language
ii mgetty 1.1.36-1.6 mips Smart Modem getty replacement
ii mime-support 3.52-1+deb7u1 all MIME files 'mime.types' & 'mailcap', and support programs
ii miniupnpd 1:1.8.20140203-ubnt9+t5146612-ugw-v4.4.36-b5a0c93 mips UPnP and NAT-PMP daemon for gateway routers
ii mount 2.20.1-5.3 mips Tools for mounting and manipulating filesystems
ii mtr-tiny 0.82-3 mips Full screen ncurses traceroute tool
ii multiarch-support 2.13-38+deb7u11 mips Transitional package to ensure multiarch compatibility
ii ncurses-base 5.9-10 all basic terminal type definitions
ii ncurses-bin 5.9-10 mips terminal-related programs and man pages
ii net-tools 1.60-24.2 mips The NET-3 networking toolkit
ii netbase 5.0 all Basic TCP/IP networking system
ii netplug 1:1.2.9-ubnt3+t5146613-ugw-v4.4.36-8020cc8 mips network link monitor daemon
ii ntp 2:4.2.6p2-ubnt7+t5146613-ugw-v4.4.36-b2b0095 mips Network Time Protocol daemon and utility programs
ii ntpdate 2:4.2.6p2-ubnt7+t5146613-ugw-v4.4.36-b2b0095 mips client for setting system time from NTP servers
ii openconnect 7.08-2 mips open client for Cisco AnyConnect VPN
ii openssh-client 1:6.6p1-4~bpo70+1 mips secure shell (SSH) client, for secure access to remote machines
ii openssh-server 1:6.6p1-4~bpo70+1 mips secure shell (SSH) server, for secure access from remote machines
ii openssh-sftp-server 1:6.6p1-4~bpo70+1 mips secure shell (SSH) sftp server module, for SFTP access from remote machines
ii openssl 1.0.1te-2+deb7u21+ubnt2+1.g44784bf mips Secure Socket Layer (SSL) binary and related cryptographic tools
ii openvpn 2.3.2-7~bpo70+2 mips virtual private network daemon
ii parted 2.3-12 mips disk partition manipulator
ii passwd 1:4.1.5.1-1 mips change and administer password and group data
ii perl 5.14.2-21+deb7u3 mips Larry Wall's Practical Extraction and Report Language
ii perl-base 5.14.2-21+deb7u3 mips minimal Perl system
ii perl-modules 5.14.2-21+deb7u3 all Core Perl modules
ii pmacct 1:1.5.0rc1-ubnt4+t5146614-ugw-v4.4.36-7a6e67c mips promiscuous mode traffic accountant
ii ppp 2.4.5-5.1+deb7u2 mips Point-to-Point Protocol (PPP) - daemon
ii pppoe 1:3.11-ubnt6+t5146614-ugw-v4.4.36-33fab31 mips PPP over Ethernet driver
ii pptp-linux 1.7.2-7 mips Point-to-Point Tunneling Protocol (PPTP) Client
ii pptpd 1.3.4-5.2 mips PoPToP Point to Point Tunneling Server
ii procps 1:3.3.3-3 mips /proc file system utilities
ii python 2.7.3-4+deb7u1 all interactive high-level object-oriented language (default version)
ii python-central 0.6.17 all register and build utility for Python packages
ii python-minimal 2.7.3-4+deb7u1 all minimal subset of the Python language (default version)
ii python-serial 2.5-2.1 all pyserial - module encapsulating access for the serial port
ii python2.6 2.6.8-1.1 mips Interactive high-level object-oriented language (version 2.6)
ii python2.6-minimal 2.6.8-1.1 mips Minimal subset of the Python language (version 2.6)
ii python2.7 2.7.3-6+deb7u2 mips Interactive high-level object-oriented language (version 2.7)
ii python2.7-minimal 2.7.3-6+deb7u2 mips Minimal subset of the Python language (version 2.7)
ii radvd 2:2.16-1-ubnt1+t5146614-ugw-v4.4.36-2b2b827 mips Router Advertisement Daemon
ii readline-common 6.2+dfsg-0.1 all GNU readline and history libraries, common files
ii rsyslog 5.8.11-3+deb7u2 mips reliable system and kernel logging daemon
ii sed 4.2.1-10 mips The GNU sed stream editor
ii sensible-utils 0.0.7 all Utilities for sensible alternative selection
ii sharutils 1:4.11.1-1 mips shar, unshar, uuencode, uudecode
ii snmp 1:5.7.2-ubnt7+t5146613-ugw-v4.4.36-7e3435f mips SNMP (Simple Network Management Protocol) applications
ii snmpd 1:5.7.2-ubnt7+t5146613-ugw-v4.4.36-7e3435f mips SNMP (Simple Network Management Protocol) agents
ii squid-langpack 20120616-1 all Localized error pages for Squid
ii squid3 3.4.8-6+deb8u3 mips Full featured Web Proxy cache (HTTP proxy)
ii squid3-common 3.4.8-6+deb8u3 all Full featured Web Proxy cache (HTTP proxy) - common files
ii squidclient 3.4.8-6+deb8u3 mips Full featured Web Proxy cache (HTTP proxy) - control utility
ii squidguard 1.5-1 mips filter and redirector plugin for Squid
ii ssh 1:6.6p1-4~bpo70+1 all secure shell client and server (metapackage)
ii ssl-cert 1.0.32+deb7u1 all simple debconf wrapper for OpenSSL
ii ssmtp 2.64-7 mips extremely simple MTA to get mail off the system to a mail hub
ii strongswan 1:5.2.2-ubnt2 mips IPsec VPN solution.
ii strongswan-tools 1:5.2.2-ubnt2 mips Additional command line tools for strongSwan.
ii sudo 1.8.5p2-1+nmu3+deb7u1 mips Provide limited super user privileges to specific users
ii suricata 4.0-10 mips Suricata IDS/IPS
ii sysv-rc 2.88dsf-41+deb7u1 all System-V-like runlevel change mechanism
ii sysvinit 2.88dsf-41+deb7u1 mips System-V-like init utilities
ii sysvinit-utils 2.88dsf-41+deb7u1 mips System-V-like utilities
ii tar 9:0.1.26+t5146614-ugw-v4.4.36-4055712 all Replacement for tar
ii tcpdump 4.7.4-1~bpo70+1 mips command-line network traffic analyzer
ii tzdata 2018d-0+deb7u1 all time zone and daylight-saving time data
ii ubnt-debian 9:0.1.26+t5146614-ugw-v4.4.36-4055712 mips Utilities for Debian
ii ubnt-geoip-filter 0.2+t5146611-ugw-v4.4.36-7dabf86 all GeoIP Filter configuration templates and scripts
ii ubnt-gui-common 0.1.16+t5146612-ugw-v4.4.36-203488f all UBNT common UI
ii ubnt-igmpproxy 0.1.5+t5146614-ugw-v4.4.36-4d7dad0 mips The ubnt-igmpproxy package
ii ubnt-platform-e120 1:0.1.39+t5146619-dev-ugw-f6478cf mips The ubnt-platform package
ii ubnt-platform-priv-e120 1:0.1.81+t5146619-dev-ugw-3cf03c6 mips The ubnt-platform-priv package
ii ubnt-pppoe-server 0.1.15+t5146614-ugw-v4.4.36-d8e13e2 all PPPoE server configuration/operational commands
ii ubnt-pptp 0.1.5+t5146614-ugw-v4.4.36-7a76155 all Ubiquiti commands for PPtP client
ii ubnt-radius-server 0.1.8+t5146617-ugw-v4.4.36-2c1440a all FreeRadius Server configuration templates and scripts
ii ubnt-unifi-ui 0.1.13+t5146617-ugw-v4.4.36-e151630 all UBNT USG UI
ii ubnt-util 0.1.75+t5146612-ugw-v4.4.36-db23f0b mips The ubnt-util package
ii ucf 9:0.1.26+t5146614-ugw-v4.4.36-4055712 all Replacement for ucf
ii unifi-util 0.1.59+t5146617-develop-30d7953 mips The unifi-util package
ii unzip 6.0-8+deb7u5 mips De-archiver for .zip files
ii util-linux 2.20.1-5.3 mips Miscellaneous system utilities
ii utmdaemon 1.0-9 mips UTM security daemon
ii uuid-runtime 2.20.1-5.3 mips runtime components for the Universally Unique ID library
ii vyatta-bash 1:4.1-ubnt6+t5146616-ugw-v4.4.36-64b234d mips The Vyatta Shell based on GNU bash
ii vyatta-cfg 1:1.0.31+t5146616-ugw-v4.4.36-48f3f76 mips Vyatta configuration system
ii vyatta-cfg-dhcp-relay 1:0.11.2+t5146616-ugw-v4.4.36-d284c47 all Vyatta DHCP-relay-level configuration templates and scripts
ii vyatta-cfg-dhcp-server 1:0.13.31+t5146616-ugw-v4.4.36-39fe3cc all Vyatta DHCP-server-level configuration templates and scripts
ii vyatta-cfg-firewall 1:0.14.27+t5146616-ugw-v4.4.36-d4f35cc all Vyatta firewall configuration templates/scripts
ii vyatta-cfg-op-pppoe 1:0.12.18+t5146616-ugw-v4.4.36-fa44f04 all Vyatta config and op mode templates for PPPOE
ii vyatta-cfg-qos 1:0.16.13+t5146616-ugw-v4.4.36-0316476 all Vyatta Qos configuration templates/scripts
ii vyatta-cfg-quagga 1:0.19.13+t5146616-ugw-v4.4.36-70b45be mips Vyatta configuration templates/scripts for Quagga
ii vyatta-cfg-system 1:0.20.58+t5146616-ugw-v4.4.36-eb9cb4f mips Vyatta system-level configuration
ii vyatta-cfg-vpn 1:0.13.24+t5146616-ugw-v4.4.36-b7fe8cf all Vyatta VPN configuration templates/scripts
ii vyatta-config-mgmt 1:0.32.6+t5146616-ugw-v4.4.36-9b821f5 all Vyatta commands for config-mgmt
ii vyatta-config-migrate 1:0.14.4+t5146616-ugw-v4.4.36-08a02b0 all Vyatta configuration migration
ii vyatta-conntrack 1:0.55.3+t5146616-ugw-v4.4.36-8d40e3f mips Vyatta conntrack configuration
ii vyatta-cron 1:1.0.6+t5146616-ugw-v4.4.36-3f9f656 all Vyatta task scheduler configuration
ii vyatta-dhcp3-client 1:4.1-ESV-R8-ubnt2+t5146616-ugw-v4.4.36-74d6e95 mips Vyattanized DHCP client
ii vyatta-dhcp3-common 1:4.1-ESV-R8-ubnt2+t5146616-ugw-v4.4.36-74d6e95 mips Vyattanized common files used by all the vyatta-dhcp3* packages
ii vyatta-dhcp3-relay 1:4.1-ESV-R8-ubnt2+t5146616-ugw-v4.4.36-74d6e95 mips Vyattanized DHCP relay daemon
ii vyatta-dhcp3-server 1:4.1-ESV-R8-ubnt2+t5146616-ugw-v4.4.36-74d6e95 mips Vyattanized DHCP server for automatic IP address assignment
ii vyatta-ipv6-rtradv 1:0.36.15+t5146616-ugw-v4.4.36-1bee674 all Vyatta config and op mode templates for IPv6 Router Advertisements
ii vyatta-keepalived 1:1.2.19-ubnt2+t5146616-ugw-v4.4.36-8ee2fd4 mips Failover and monitoring daemon for LVS clusters
ii vyatta-lldp 1:0.21.2+t5146616-ugw-v4.4.36-222b441 all The vyatta-lldp package
ii vyatta-nat 1:0.13.8+t5146616-ugw-v4.4.36-a97152b all Vyatta configuration/operational commands for NAT
ii vyatta-netflow 1:0.34.5+t5146616-ugw-v4.4.36-52f5662 all Vyatta commands for netflow
ii vyatta-op 1:0.14.21+t5146617-ugw-v4.4.36-c9045d3 all bash operational command completion
ii vyatta-op-dhcp-server 1:0.14.10+t5146616-ugw-v4.4.36-c46336c mips Vyatta operational commands for DHCP server
ii vyatta-op-firewall 1:0.11.4+t5146616-ugw-v4.4.36-d2632a1 all Vyatta operational commands for firewall.
ii vyatta-op-qos 1:0.13.3+t5146617-ugw-v4.4.36-dd714b7 all Vyatta operational commands for QOS
ii vyatta-op-quagga 1:0.12.6+t5146617-ugw-v4.4.36-3ff3a8f all Vyatta operational command for the Quagga route daemons
ii vyatta-op-vpn 1:0.14.10+t5146617-ugw-v4.4.36-47a07dc all Vyatta operational commands for VPN
ii vyatta-openvpn 1:0.3.9+t5146617-ugw-v4.4.36-465713a all Vyatta OpenVPN configuration/operational commands
ii vyatta-ppp 1:2.4.4-ubnt24+t5146614-ugw-v4.4.36-0d2b386 mips Point-to-Point Protocol (PPP) daemon
ii vyatta-quagga 1:0.99.20.1-ubnt9+t5146617-ugw-v4.4.36-41292e2 mips BGP/OSPF/RIP routing daemon
ii vyatta-ravpn 1:0.13.24+t5146617-ugw-v4.4.36-4e2f158 all Vyatta remote access VPN configuration/operational commands
ii vyatta-upnp 0.2.7+t5146617-ugw-v4.4.36-02dde4c all Vyatta UPNP configuration templates and scripts
ii vyatta-webproxy 1:0.3.7+t5146617-ugw-v4.4.36-dddc250 all Vyatta commands for webproxy
ii vyatta-wirelessmodem 1:0.2.1+t5146617-ugw-v4.4.36-8cda9b2 all Vyatta configuration/operational commands for USB 3G modems
ii vyatta-zone 1:0.11.1+t5146617-ugw-v4.4.36-f302422 all The vyatta-zone package
ii whois 5.1.1~deb7u1 mips intelligent WHOIS client
ii wide-dhcpv6-client 1:20080615-16-ubnt2+t5146617-ugw-v4.4.36-44843a8 mips DHCPv6 client for automatic IPv6 hosts configuration
ii xl2tpd 1.3.9+ubnt1+t5146617-ugw-v4.4.36-6ec3e5e mips layer 2 tunneling protocol implementation
ii xz-utils 5.1.1alpha+20120614-2 mips XZ-format compression utilities
ii zlib1g:mips 1:1.2.7.dfsg-13 mips compression library - runtime
----------------
Loaded Modules
----------------
8021q 18796 0 - Live 0xffffffffc0b82000 0xffffffffc0b80000
garp 5710 1 8021q, Live 0xffffffffc0b7b000 0xffffffffc0b79000
stp 1829 1 garp, Live 0xffffffffc0b75000 0xffffffffc0b73000
llc 4017 2 garp,stp, Live 0xffffffffc0b6f000 0xffffffffc0b6d000
xt_nat 1913 25 - Live 0xffffffffc0b69000 0xffffffffc0b67000
ipt_MASQUERADE 1706 28 - Live 0xffffffffc0b63000 0xffffffffc0b61000
xt_multiport 1854 18 - Live 0xffffffffc0b5d000 0xffffffffc0b5b000
xt_set 5792 37 - Live 0xffffffffc0b57000 0xffffffffc0b55000
nf_conntrack_ipv6 8181 4 - Live 0xffffffffc0b4f000 0xffffffffc0b4d000
nf_defrag_ipv6 22705 1 nf_conntrack_ipv6, Live 0xffffffffc0b48000 0xffffffffc0b42000
xt_comment 939 75 - Live 0xffffffffc0b3e000 0xffffffffc0b3c000
xt_conntrack 2961 8 - Live 0xffffffffc0b38000 0xffffffffc0b36000
ip_set_bitmap_port 6393 4 - Live 0xffffffffc0b31000 0xffffffffc0b2f000
xt_TCPMSS 3631 10 - Live 0xffffffffc0b2b000 0xffffffffc0b29000
xt_tcpudp 2519 86 - Live 0xffffffffc0b25000 0xffffffffc0b23000
ip6table_mangle 1788 1 - Live 0xffffffffc0b1f000 0xffffffffc0b1d000
ip6table_filter 1356 1 - Live 0xffffffffc0b19000 0xffffffffc0b17000
ip6table_raw 1280 1 - Live 0xffffffffc0b13000 0xffffffffc0b11000
ip6_tables 16876 3 ip6table_mangle,ip6table_filter,ip6table_raw, Live 0xffffffffc0b09000 0xffffffffc0b07000
iptable_nat 2950 1 - Live 0xffffffffc0b03000 0xffffffffc0b01000
nf_conntrack_ipv4 7878 5 - Live 0xffffffffc0afb000 0xffffffffc0af9000
nf_defrag_ipv4 1283 1 nf_conntrack_ipv4, Live 0xffffffffc0af5000 0xffffffffc0af3000
nf_nat_ipv4 3904 1 iptable_nat, Live 0xffffffffc0aef000 0xffffffffc0aed000
iptable_mangle 1672 1 - Live 0xffffffffc0ae9000 0xffffffffc0ae7000
xt_CT 4171 4 - Live 0xffffffffc0ae3000 0xffffffffc0ae1000
iptable_raw 1356 1 - Live 0xffffffffc0add000 0xffffffffc0adb000
nf_nat_pptp 1978 0 - Live 0xffffffffc0ad7000 0xffffffffc0ad5000
nf_conntrack_pptp 4368 1 nf_nat_pptp, Live 0xffffffffc0ad1000 0xffffffffc0acf000
nf_conntrack_proto_gre 4623 1 nf_conntrack_pptp, Live 0xffffffffc0acb000 0xffffffffc0ac9000
nf_nat_h323 6087 0 - Live 0xffffffffc0ac4000 0xffffffffc0ac2000
nf_conntrack_h323 41900 1 nf_nat_h323, Live 0xffffffffc0ab3000 0xffffffffc0ab0000
nf_nat_proto_gre 1509 1 nf_nat_pptp, Live 0xffffffffc0a99000 0xffffffffc0a97000
nf_nat_tftp 958 0 - Live 0xffffffffc0a93000 0xffffffffc0a91000
nf_nat_ftp 1804 0 - Live 0xffffffffc0a8d000 0xffffffffc0a8b000
nf_nat 13634 9 xt_nat,ipt_MASQUERADE,iptable_nat,nf_nat_ipv4,nf_nat_pptp,nf_nat_h323,nf_nat_proto_gre,nf_nat_tftp,nf_nat_ftp, Live 0xffffffffc0a83000 0xffffffffc0a81000
nf_conntrack_tftp 3929 1 nf_nat_tftp, Live 0xffffffffc0a7d000 0xffffffffc0a7b000
nf_conntrack_ftp 7502 1 nf_nat_ftp, Live 0xffffffffc0a76000 0xffffffffc0a74000
nf_conntrack 62676 17 ipt_MASQUERADE,nf_conntrack_ipv6,xt_conntrack,iptable_nat,nf_conntrack_ipv4,nf_nat_ipv4,xt_CT,nf_nat_pptp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_nat_h323,nf_conntrack_h323,nf_nat_tftp,nf_nat_ftp,nf_nat,nf_conntrack_tftp,nf_conntrack_ftp, Live 0xffffffffc0a5d000 0xffffffffc0a5a000
iptable_filter 1432 1 - Live 0xffffffffc0a56000 0xffffffffc0a54000
ip_tables 16598 4 iptable_nat,iptable_mangle,iptable_raw,iptable_filter, Live 0xffffffffc0a4c000 0xffffffffc0a4a000
x_tables 19171 17 xt_nat,ipt_MASQUERADE,xt_multiport,xt_set,xt_comment,xt_conntrack,xt_TCPMSS,xt_tcpudp,ip6table_mangle,ip6table_filter,ip6table_raw,ip6_tables,iptable_mangle,xt_CT,iptable_raw,iptable_filter,ip_tables, Live 0xffffffffc0a40000 0xffffffffc0a3e000
ip_set_hash_net 21210 22 - Live 0xffffffffc0a36000 0xffffffffc0a34000
ip_set 22410 3 xt_set,ip_set_bitmap_port,ip_set_hash_net, Live 0xffffffffc0a2a000 0xffffffffc0a28000
nfnetlink 3789 1 ip_set, Live 0xffffffffc0a24000 0xffffffffc0a20000
configfs 24850 1 - Live 0xffffffffc0a15000 0xffffffffc0a13000
unifigpio 6128 0 - Live 0xffffffffc0a0e000 0xffffffffc0a0c000 (PO)
unifihal 58054 0 - Live 0xffffffffc09f9000 0xffffffffc09f7000 (PO)
cvm_ipsec_kame 36927 0 - Live 0xffffffffc09ea000 0xffffffffc09e8000 (O)
ipv6 359926 34 nf_conntrack_ipv6,nf_defrag_ipv6,ip6table_mangle,cvm_ipsec_kame, Live 0xffffffffc0984000 0xffffffffc097a000
imq 6288 0 - Live 0xffffffffc0974000 0xffffffffc0972000
cavium_ip_offload 216055 0 - Live 0xffffffffc0940000 0xffffffffc0935000 (PO)
ubnt_nf_app 10220 1 cavium_ip_offload, Live 0xffffffffc092f000 0xffffffffc092d000 (PO)
tdts 548691 2 cavium_ip_offload,ubnt_nf_app, Live 0xffffffffc08b9000 0xffffffffc0898000 (PO)
octeon_rng 1794 0 - Live 0xffffffffc0894000 0xffffffffc0892000
rng_core 3928 2 octeon_rng, Live 0xffffffffc088e000 0xffffffffc088c000
octeon_ethernet 54284 1 cavium_ip_offload, Live 0xffffffffc0879000 0xffffffffc0877000
mdio_octeon 3619 1 octeon_ethernet, Live 0xffffffffc0873000 0xffffffffc0871000
ethernet_mem 3960 1 octeon_ethernet, Live 0xffffffffc086d000 0xffffffffc086b000
octeon_common 2400 1 octeon_ethernet, Live 0xffffffffc0867000 0xffffffffc0865000
of_mdio 2726 2 octeon_ethernet,mdio_octeon, Live 0xffffffffc0861000 0xffffffffc085f000
ubnt_platform 283394 0 - Live 0xffffffffc0816000 0xffffffffc080c000 (PO)
libphy 19303 4 octeon_ethernet,mdio_octeon,of_mdio,ubnt_platform, Live 0xffffffffc0802000 0xffffffffc0800000
----------------
CPU
----------------
----------------
Cumulative CPU Time Used by Running Processes
----------------
top - 19:10:31 up 1:42, 1 user, load average: 0.20, 0.10, 0.13
Tasks: 83 total, 1 running, 82 sleeping, 0 stopped, 0 zombie
%Cpu(s): 3.3 us, 2.9 sy, 0.0 ni, 92.7 id, 0.0 wa, 0.0 hi, 1.1 si, 0.0 st
KiB Mem: 495536 total, 230928 used, 264608 free, 26468 buffers
KiB Swap: 0 total, 0 used, 0 free, 100296 cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
19678 admin 20 0 3444 1124 880 R 15.8 0.2 0:00.09 top
1 root 20 0 2572 764 656 S 0.0 0.2 2:21.96 init
2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kthreadd
3 root 20 0 0 0 0 S 0.0 0.0 0:06.49 ksoftirqd/0
4 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kworker/0:0
5 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kworker/0:0H
7 root rt 0 0 0 0 S 0.0 0.0 0:00.53 migration/0
8 root 20 0 0 0 0 S 0.0 0.0 0:00.00 rcu_bh
9 root 20 0 0 0 0 S 0.0 0.0 0:03.44 rcu_sched
10 root 20 0 0 0 0 S 0.0 0.0 0:11.53 rcuc/0
11 root rt 0 0 0 0 S 0.0 0.0 0:00.10 watchdog/0
12 root rt 0 0 0 0 S 0.0 0.0 0:00.08 watchdog/1
13 root 20 0 0 0 0 S 0.0 0.0 0:05.48 rcuc/1
14 root rt 0 0 0 0 S 0.0 0.0 0:12.31 migration/1
15 root 20 0 0 0 0 S 0.0 0.0 0:00.67 ksoftirqd/1
16 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kworker/1:0
17 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kworker/1:0H
18 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 khelper
19 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 netns
20 root 20 0 0 0 0 S 0.0 0.0 0:00.54 kworker/u4:1
106 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 writeback
109 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 bioset
110 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 crypto
112 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kblockd
120 root 20 0 0 0 0 S 0.0 0.0 0:00.11 khubd
142 root 20 0 0 0 0 S 0.0 0.0 0:00.92 kworker/1:1
167 root 20 0 0 0 0 S 0.0 0.0 0:00.00 khungtaskd
168 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kswapd0
169 root 20 0 0 0 0 S 0.0 0.0 0:00.00 fsnotify_mark
170 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 unionfs_siod
240 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 deferwq
241 root 20 0 0 0 0 S 0.0 0.0 0:01.80 kworker/0:1
244 root 20 0 0 0 0 S 0.0 0.0 0:00.00 scsi_eh_0
245 root 20 0 0 0 0 S 0.0 0.0 0:00.70 usb-storage
258 root 0 -20 0 0 0 S 0.0 0.0 0:00.03 kworker/0:1H
259 root 20 0 0 0 0 S 0.0 0.0 0:00.03 kjournald
263 root 0 -20 0 0 0 S 0.0 0.0 0:00.45 loop8
266 root 0 -20 0 0 0 S 0.0 0.0 0:00.06 kworker/1:1H
339 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 octeon-ethernet
368 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 ipv6_addrconf
473 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kjournald
513 root 20 0 1952 280 220 S 0.0 0.1 0:05.23 rngd
523 daemon 20 0 2700 328 208 S 0.0 0.1 0:00.00 atd
530 root 20 0 2972 936 768 S 0.0 0.2 0:02.17 cron
539 root 20 0 2760 312 204 S 0.0 0.1 0:00.45 ubnt-daemon
540 root 20 0 18328 2604 2264 S 0.0 0.5 2:46.95 ubnt-cfgd
543 root 20 0 131m 11m 3484 S 0.0 2.4 1:50.41 ubnt-util
552 root 20 0 18328 1640 1288 S 0.0 0.3 0:00.00 ubnt-cfgd
585 freerad 20 0 51148 4044 1316 S 0.0 0.8 0:00.01 freeradius
623 quagga 20 0 7744 1736 1132 S 0.0 0.4 0:00.54 zebra
1956 root -51 0 0 0 0 S 0.0 0.0 0:00.00 irq/117-octeon-
2324 ntp 20 0 6816 2128 1716 S 0.0 0.4 0:01.98 ntpd
2389 root 20 0 29560 1560 1188 S 0.0 0.3 0:00.79 rsyslogd
2644 root 20 0 2520 880 744 S 0.0 0.2 0:07.47 lldpd
2645 _lldpd 20 0 2520 448 336 S 0.0 0.1 0:01.52 lldpd
2780 root 20 0 18328 1940 1536 S 0.0 0.4 0:00.13 ubnt-cfgd
2815 root 20 0 1960 472 396 S 0.0 0.1 0:09.62 netplugd
2858 root 20 0 15852 4156 2972 S 0.0 0.8 2:50.50 mcad
2861 root 20 0 15020 2228 1720 S 0.0 0.4 0:01.27 mca-monitor
2864 root 20 0 15020 2324 1808 S 0.0 0.5 0:00.82 linkcheck
2865 root 20 0 2536 776 676 S 0.0 0.2 0:00.02 getty
2868 root 20 0 18328 1640 1288 S 0.0 0.3 0:00.00 ubnt-cfgd
2872 root 20 0 6456 2624 968 S 0.0 0.5 0:04.38 dpi_wlan_fw_rul
3045 root 20 0 15616 5540 1044 S 0.0 1.1 0:21.85 perl_wrapper.pl
3063 root 20 0 8032 984 564 S 0.0 0.2 0:01.60 sshd
8742 root 20 0 2748 844 572 S 0.0 0.2 0:07.74 dhclient
8824 root 20 0 2256 464 404 S 0.0 0.1 0:00.00 telnetd
8828 www-data 20 0 6300 1412 768 S 0.0 0.3 0:00.21 lighttpd
8830 www-data 20 0 18364 4132 2748 S 0.0 0.8 0:00.09 php-cgi
8831 www-data 20 0 18364 1748 364 S 0.0 0.4 0:00.00 php-cgi
8832 www-data 20 0 18364 1748 364 S 0.0 0.4 0:00.00 php-cgi
8833 www-data 20 0 18364 1748 364 S 0.0 0.4 0:00.00 php-cgi
8834 www-data 20 0 18364 1748 364 S 0.0 0.4 0:00.00 php-cgi
8864 root 20 0 5052 3296 1100 S 0.0 0.7 0:01.03 dhcpd3
8908 dnsmasq 20 0 6132 2200 748 S 0.0 0.4 0:04.81 dnsmasq
8929 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kworker/u4:2
16385 root 20 0 11756 3232 2580 S 0.0 0.7 0:01.32 sshd
16391 admin 20 0 11756 1832 1176 S 0.0 0.4 0:00.64 sshd
16393 admin 20 0 4220 2124 1572 S 0.0 0.4 0:00.88 vbash
19341 admin 20 0 4404 1308 584 S 0.0 0.3 0:00.05 vbash
19342 admin 20 0 4220 880 328 S 0.0 0.2 0:00.00 vbash
19343 admin 20 0 2124 424 364 S 0.0 0.1 0:00.07 cat
19357 admin 20 0 4420 1568 792 S 0.0 0.3 0:08.93 vbash
----------------
Hardware Interrupt Counters
----------------
CPU0 CPU1
8: 626873 631758 Core timer
24: 3033595 0 CIU eth0
34: 57 0 CIU serial
56: 42174 0 CIU Octeon USB:usb1
73: 1229 0 CIU-W octeon_wdt
74: 0 1229 CIU-W octeon_wdt
105: 135703 189966 CIU-M SMP-IPI
117: 2 0 CIU octeon-hw-status
ERR: 0
----------------
Load Average
----------------
0.20 0.10 0.13 1/104 19680
----------------
Running Processes
----------------
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 17:28 ? 00:00:00 init [2]
root 2 0 0 17:28 ? 00:00:00 [kthreadd]
root 3 2 0 17:28 ? 00:00:06 [ksoftirqd/0]
root 4 2 0 17:28 ? 00:00:00 [kworker/0:0]
root 5 2 0 17:28 ? 00:00:00 [kworker/0:0H]
root 7 2 0 17:28 ? 00:00:00 [migration/0]
root 8 2 0 17:28 ? 00:00:00 [rcu_bh]
root 9 2 0 17:28 ? 00:00:03 [rcu_sched]
root 10 2 0 17:28 ? 00:00:11 [rcuc/0]
root 11 2 0 17:28 ? 00:00:00 [watchdog/0]
root 12 2 0 17:28 ? 00:00:00 [watchdog/1]
root 13 2 0 17:28 ? 00:00:05 [rcuc/1]
root 14 2 0 17:28 ? 00:00:12 [migration/1]
root 15 2 0 17:28 ? 00:00:00 [ksoftirqd/1]
root 16 2 0 17:28 ? 00:00:00 [kworker/1:0]
root 17 2 0 17:28 ? 00:00:00 [kworker/1:0H]
root 18 2 0 17:28 ? 00:00:00 [khelper]
root 19 2 0 17:28 ? 00:00:00 [netns]
root 20 2 0 17:28 ? 00:00:00 [kworker/u4:1]
root 106 2 0 17:28 ? 00:00:00 [writeback]
root 109 2 0 17:28 ? 00:00:00 [bioset]
root 110 2 0 17:28 ? 00:00:00 [crypto]
root 112 2 0 17:28 ? 00:00:00 [kblockd]
root 120 2 0 17:28 ? 00:00:00 [khubd]
root 142 2 0 17:28 ? 00:00:00 [kworker/1:1]
root 167 2 0 17:28 ? 00:00:00 [khungtaskd]
root 168 2 0 17:28 ? 00:00:00 [kswapd0]
root 169 2 0 17:28 ? 00:00:00 [fsnotify_mark]
root 170 2 0 17:28 ? 00:00:00 [unionfs_siod]
root 240 2 0 17:28 ? 00:00:00 [deferwq]
root 241 2 0 17:28 ? 00:00:01 [kworker/0:1]
root 244 2 0 17:28 ? 00:00:00 [scsi_eh_0]
root 245 2 0 17:28 ? 00:00:00 [usb-storage]
root 258 2 0 17:28 ? 00:00:00 [kworker/0:1H]
root 259 2 0 17:28 ? 00:00:00 [kjournald]
root 263 2 0 17:28 ? 00:00:00 [loop8]
root 266 2 0 17:28 ? 00:00:00 [kworker/1:1H]
root 339 2 0 17:28 ? 00:00:00 [octeon-ethernet]
root 368 2 0 17:28 ? 00:00:00 [ipv6_addrconf]
root 473 2 0 17:28 ? 00:00:00 [kjournald]
root 513 1 0 17:28 ? 00:00:05 /usr/sbin/rngd
daemon 523 1 0 17:28 ? 00:00:00 /usr/sbin/atd
root 530 1 0 17:28 ? 00:00:00 /usr/sbin/cron
root 539 1 0 17:28 ? 00:00:00 /usr/sbin/ubnt-daemon
root 540 539 0 17:28 ? 00:00:00 /opt/vyatta/sbin/ubnt-cfgd
root 543 539 0 17:28 ? 00:00:37 /usr/sbin/ubnt-util -f
root 552 540 0 17:28 ? 00:00:00 /opt/vyatta/sbin/ubnt-cfgd
freerad 585 1 0 17:28 ? 00:00:00 /usr/sbin/freeradius
quagga 623 1 0 17:28 ? 00:00:00 /usr/sbin/zebra -d -P 0 -i /var/run/quagga/zebra.pid -S -s 1048576
root 1956 2 0 17:29 ? 00:00:00 [irq/117-octeon-]
ntp 2324 1 0 17:30 ? 00:00:01 /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 104:111
root 2389 1 0 17:30 ? 00:00:00 /usr/sbin/rsyslogd -c5
root 2644 1 0 17:30 ? 00:00:07 /usr/sbin/lldpd -H 0 -M4 -S UBNT UniFi-Gateway-3 running on v4.4.36.5146617.181205.0449 -I *,!eth0
_lldpd 2645 2644 0 17:30 ? 00:00:01 /usr/sbin/lldpd -H 0 -M4 -S UBNT UniFi-Gateway-3 running on v4.4.36.5146617.181205.0449 -I *,!eth0
root 2780 540 0 17:30 ? 00:00:00 /opt/vyatta/sbin/ubnt-cfgd
root 2815 1 0 17:30 ? 00:00:00 /sbin/netplugd -P -p /var/run/netplugd.pid
root 2858 1 0 17:30 ? 00:00:41 /usr/bin/mcad
root 2861 1 0 17:30 ? 00:00:01 /usr/bin/mca-monitor
root 2864 1 0 17:30 ? 00:00:00 /usr/bin/linkcheck
root 2865 1 0 17:30 ttyS0 00:00:00 /sbin/getty -L ttyS0 115200 vt100
root 2868 540 0 17:30 ? 00:00:00 /opt/vyatta/sbin/ubnt-cfgd
root 2872 1 0 17:30 ? 00:00:01 /usr/bin/perl /usr/bin/dpi_wlan_fw_rules.pl
root 3045 1 0 17:30 ? 00:00:02 /usr/bin/perl /usr/bin/perl_wrapper.pl
root 3063 1 0 17:30 ? 00:00:00 /usr/sbin/sshd -p 22 -o Protocol=2
root 8742 1 0 18:04 ? 00:00:00 /sbin/dhclient -q -nw -cf /var/run/dhclient_eth0.conf -pf /var/run/dhclient_eth0.pid -lf /var/run/dhclient_eth0.leases eth0
root 8824 1 0 18:04 ? 00:00:00 /usr/sbin/telnetd -p 55523 -b 127.0.0.101 -F
www-data 8828 1 0 18:04 ? 00:00:00 /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf
www-data 8830 8828 0 18:04 ? 00:00:00 /usr/bin/php-cgi
www-data 8831 8830 0 18:04 ? 00:00:00 /usr/bin/php-cgi
www-data 8832 8830 0 18:04 ? 00:00:00 /usr/bin/php-cgi
www-data 8833 8830 0 18:04 ? 00:00:00 /usr/bin/php-cgi
www-data 8834 8830 0 18:04 ? 00:00:00 /usr/bin/php-cgi
root 8864 1 0 18:04 ? 00:00:00 /usr/sbin/dhcpd3 -f -pf /var/run/dhcpd-unused.pid -cf /opt/vyatta/etc/dhcpd.conf -lf /var/run/dhcpd.leases
dnsmasq 8908 1 0 18:04 ? 00:00:04 /usr/sbin/dnsmasq -x /run/dnsmasq/dnsmasq.pid -u dnsmasq -7 /etc/dnsmasq.d,.dpkg-dist,.dpkg-old,.dpkg-new --local-service
root 8929 2 0 18:05 ? 00:00:00 [kworker/u4:2]
root 16385 3063 0 18:50 ? 00:00:00 sshd: admin [priv]
admin 16391 16385 0 18:50 ? 00:00:00 sshd: admin@pts/0
admin 16393 16391 0 18:50 pts/0 00:00:00 -vbash
admin 19341 16393 0 19:10 pts/0 00:00:00 -vbash
admin 19342 16393 0 19:10 pts/0 00:00:00 -vbash
admin 19343 19342 0 19:10 pts/0 00:00:00 cat
admin 19357 19341 2 19:10 pts/0 00:00:00 -vbash
admin 19681 19357 0 19:10 pts/0 00:00:00 ps -ef
----------------
Memory
----------------
----------------
Installed Memory
----------------
MemTotal: 495536 kB
MemFree: 264712 kB
Buffers: 26468 kB
Cached: 100296 kB
SwapCached: 0 kB
Active: 61512 kB
Inactive: 96680 kB
Active(anon): 33880 kB
Inactive(anon): 164 kB
Active(file): 27632 kB
Inactive(file): 96516 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 31452 kB
Mapped: 14504 kB
Shmem: 2620 kB
Slab: 42448 kB
SReclaimable: 14972 kB
SUnreclaim: 27476 kB
KernelStack: 1680 kB
PageTables: 1356 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 247768 kB
Committed_AS: 280180 kB
VmallocTotal: 534773760 kB
VmallocUsed: 27036 kB
VmallocChunk: 534685988 kB
HugePages_Total: 0
HugePages_Free: 0
HugePages_Rsvd: 0
HugePages_Surp: 0
Hugepagesize: 2048 kB
----------------
Memory Usage
----------------
total used free shared buffers cached
Mem: 495536 230824 264712 0 26468 100296
-/+ buffers/cache: 104060 391476
Swap: 0 0 0
----------------
Storage
----------------
----------------
Devices
----------------
Character devices:
1 mem
4 ttyS
5 /dev/tty
5 /dev/console
5 /dev/ptmx
10 misc
13 input
90 mtd
128 ptm
136 pts
180 usb
189 usb_device
190 detector
Block devices:
259 blkext
7 loop
8 sd
31 mtdblock
65 sd
66 sd
67 sd
68 sd
69 sd
70 sd
71 sd
128 sd
129 sd
130 sd
131 sd
132 sd
133 sd
134 sd
135 sd
179 mmc
----------------
Partitions
----------------
major minor #blocks name
31 0 512 mtdblock0
31 1 512 mtdblock1
31 2 64 mtdblock2
8 0 3915776 sda
8 1 145408 sda1
8 2 1709056 sda2
8 3 1855488 sda3
7 8 101412 loop8
----------------
Partitioning for disk sda
----------------
Disk /dev/sda: 4009 MB, 4009754624 bytes
124 heads, 62 sectors/track, 1018 cylinders, total 7831552 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x344c0700
Device Boot Start End Blocks Id System
/dev/sda1 2048 292863 145408 c W95 FAT32 (LBA)
/dev/sda2 292864 3710975 1709056 83 Linux
/dev/sda3 3710976 7421951 1855488 83 Linux
----------------
Mounts
----------------
rootfs / rootfs rw 0 0
/dev/root /root.dev ext3 rw,noatime,errors=continue,user_xattr,acl,barrier=1,data=journal 0 0
aufs / aufs rw,noatime,si=669d9f7bcc35ddd2,noxino 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
tmpfs /run tmpfs rw,nosuid,relatime,mode=755 0 0
tmpfs /run tmpfs rw,nosuid,relatime,mode=755 0 0
tmpfs /var/log tmpfs rw,nosuid,nodev,noexec,relatime,mode=755 0 0
tmpfs /dev/shm tmpfs rw,nosuid,nodev,relatime 0 0
none /dev/pts devpts rw,nosuid,noexec,relatime,gid=5,mode=620 0 0
tmpfs /tmp tmpfs rw,relatime,nr_inodes=300000 0 0
none /opt/vyatta/config tmpfs rw,nosuid,nodev,relatime,nr_inodes=300000,mode=775 0 0
none /sys/kernel/config configfs rw,relatime 0 0
/dev/sda3 /root.dev/ugw ext3 rw,relatime,errors=continue,user_xattr,acl,barrier=1,data=journal 0 0
unionfs /opt/vyatta/config/tmp/new_config_6d8fd732ecf8a52d402085fe20 unionfs rw,relatime,dirs=/tmp/changes_only_6d8fd732ecf8a52d402085fe20=rw:/opt/vyatta/config/active=ro 0 0
----------------
Diskstats
----------------
7 0 loop0 0 0 0 0 0 0 0 0 0 0 0
7 1 loop1 0 0 0 0 0 0 0 0 0 0 0
7 2 loop2 0 0 0 0 0 0 0 0 0 0 0
7 3 loop3 0 0 0 0 0 0 0 0 0 0 0
7 4 loop4 0 0 0 0 0 0 0 0 0 0 0
7 5 loop5 0 0 0 0 0 0 0 0 0 0 0
7 6 loop6 0 0 0 0 0 0 0 0 0 0 0
7 7 loop7 0 0 0 0 0 0 0 0 0 0 0
31 0 mtdblock0 0 0 0 0 0 0 0 0 0 0 0
31 1 mtdblock1 0 0 0 0 0 0 0 0 0 0 0
31 2 mtdblock2 4 60 512 50 0 0 0 0 0 50 50
8 0 sda 1490 36 82148 4870 262 625 7144 4540 0 5180 9390
8 1 sda1 0 0 0 0 0 0 0 0 0 0 0
8 2 sda2 1399 15 81258 4790 257 624 7096 4520 0 5100 9290
8 3 sda3 87 11 778 70 5 1 48 20 0 90 90
7 8 loop8 0 0 0 0 0 0 0 0 0 0 0
----------------
Hard Drive Usage
----------------
Filesystem Size Used Available Use% Mounted on
/dev/root 1.6G 344.5M 1.2G 22% /root.dev
aufs 1.6G 344.5M 1.2G 22% /
tmpfs 242.0M 352.0K 241.6M 0% /run
tmpfs 242.0M 352.0K 241.6M 0% /run
tmpfs 242.0M 76.0K 241.9M 0% /var/log
tmpfs 242.0M 0 242.0M 0% /dev/shm
tmpfs 242.0M 36.0K 241.9M 0% /tmp
none 242.0M 2.1M 239.9M 1% /opt/vyatta/config
/dev/sda3 1.7G 34.7M 1.6G 2% /root.dev/ugw
unionfs 242.0M 36.0K 241.9M 0% /opt/vyatta/config/tmp/new_config_6d8fd732ecf8a52d402085fe20
----------------
General System
----------------
----------------
Boot Messages
----------------
Linux version 3.10.107-UBNT (ubnt@dde891067c7a) (gcc version 4.7.0 (Cavium Inc. Version: SDK_3_1_0_p2 build 34) ) #1 SMP Wed Dec 5 04:57:56 UTC 2018
CVMSEG size: 2 cache lines (256 bytes)
Cavium Inc. SDK-3.1.2
bootconsole [early0] enabled
CPU revision is: 000d0601 (Cavium Octeon+)
Checking for the multiply/shift bug... no.
Checking for the daddiu bug... no.
Determined physical RAM map:
memory: 0000000000537000 @ 0000000000400000 (kernel data and code)
memory: 0000000000049000 @ 0000000000937000 (usable after init)
memory: 0000000000107000 @ 0000000000980000 (kernel data and code)
memory: 0000000007400000 @ 0000000000d00000 (usable)
memory: 0000000007c00000 @ 0000000008300000 (usable)
memory: 000000000fc00000 @ 0000000410300000 (usable)
software IO TLB [mem 0x0170d000-0x0174d000] (0MB) mapped at [800000000170d000-800000000174cfff]
Zone ranges:
DMA32 [mem 0x00400000-0xefffffff]
Normal [mem 0xf0000000-0x41fefffff]
Movable zone start for each node
Early memory node ranges
node 0: [mem 0x00400000-0x00a86fff]
node 0: [mem 0x00d00000-0x080fffff]
node 0: [mem 0x08300000-0x0fefffff]
node 0: [mem 0x410300000-0x41fefffff]
On node 0 totalpages: 127623
DMA32 zone: 863 pages used for memmap
DMA32 zone: 0 pages reserved
DMA32 zone: 63111 pages, LIFO batch:15
Normal zone: 882 pages used for memmap
Normal zone: 64512 pages, LIFO batch:15
Primary instruction cache 32kB, virtually tagged, 4 way, 64 sets, linesize 128 bytes.
Primary data cache 16kB, 64-way, 2 sets, linesize 128 bytes.
Secondary unified cache 128kB, 8-way, 128 sets, linesize 128 bytes.
PERCPU: Embedded 10 pages/cpu @800000000178a000 s10880 r8192 d21888 u40960
pcpu-alloc: s10880 r8192 d21888 u40960 alloc=10*4096
pcpu-alloc: [0] 0 [0] 1
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 125878
Kernel command line: bootoctlinux $loadaddr coremask=0x3 root=/dev/sda2 rootdelay=15 rw rootsqimg=squashfs.img rootsqwdir=w mtdparts=phys_mapped_flash:512k(boot0),512k(boot1),64k@1024k(eeprom) console=ttyS0,115200
PID hash table entries: 2048 (order: 2, 16384 bytes)
Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)
Inode-cache hash table entries: 32768 (order: 6, 262144 bytes)
Memory: 495244k/504100k available (4017k kernel code, 8856k reserved, 1321k data, 292k init, 0k highmem)
Hierarchical RCU implementation.
Additional per-CPU info printed with stalls.
NR_IRQS:511
Calibrating delay loop (skipped) preset value.. 1000.00 BogoMIPS (lpj=5000000)
pid_max: default: 32768 minimum: 501
Security Framework initialized
Mount-cache hash table entries: 256
Checking for the daddi bug... no.
SMP: Booting CPU01 (CoreId 1)...
CPU revision is: 000d0601 (Cavium Octeon+)
Brought up 2 CPUs
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switching to clocksource OCTEON_CVMCOUNT
NET: Registered protocol family 2
TCP established hash table entries: 4096 (order: 4, 65536 bytes)
TCP bind hash table entries: 4096 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP: reno registered
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
octeon_pci_console: Console not created.
HugeTLB registered 2 MB page size, pre-allocated 0 pages
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering unionfs 2.5.13 (for 3.10.34)
aufs 3.10.x-20141215
msgmni has been set to 967
io scheduler noop registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 6 ports, IRQ sharing disabled
1180000000800.serial: ttyS0 at MMIO 0x1180000000800 (irq = 34) is a OCTEON
console [ttyS0] enabled, bootconsole disabled
1180000000c00.serial: ttyS1 at MMIO 0x1180000000c00 (irq = 35) is a OCTEON
loop: module loaded
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
OcteonUSB 16f0010000000.usbc: Octeon Host Controller
OcteonUSB 16f0010000000.usbc: new USB bus registered, assigned bus number 1
OcteonUSB 16f0010000000.usbc: irq 56, io mem 0x00000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
OcteonUSB: Registered HCD for port 0 on irq 56
usbcore: registered new interface driver usb-storage
octeon_wdt: Initial granularity 5 Sec
TCP: cubic registered
NET: Registered protocol family 17
NET: Registered protocol family 15
Bootbus flash: Setting flash for 8MB flash at 0x1f400000
phys_mapped_flash: Found 1 x16 devices at 0x0 in 8-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x0000c9
Amd/Fujitsu Extended Query Table at 0x0040
Amd/Fujitsu Extended Query version 1.1.
phys_mapped_flash: Swapping erase regions for top-boot CFI table.
number of CFI chips: 1
3 cmdlinepart partitions found on MTD device phys_mapped_flash
Creating 3 MTD partitions on "phys_mapped_flash":
0x000000000000-0x000000080000 : "boot0"
0x000000080000-0x000000100000 : "boot1"
0x000000100000-0x000000110000 : "eeprom"
Waiting 15sec before mounting root device...
usb 1-1: new high-speed USB device number 2 using OcteonUSB
usb-storage 1-1:1.0: USB Mass Storage device detected
scsi0 : usb-storage 1-1:1.0
scsi 0:0:0:0: Direct-Access UDinfo UF2 4GB PMAP PQ: 0 ANSI: 6
sd 0:0:0:0: [sda] 7831552 512-byte logical blocks: (4.00 GB/3.73 GiB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 23 00 00 00
sd 0:0:0:0: [sda] No Caching mode page found
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] No Caching mode page found
sd 0:0:0:0: [sda] Assuming drive cache: write through
sda: sda1 sda2 sda3
sd 0:0:0:0: [sda] No Caching mode page found
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] Attached SCSI removable disk
kjournald starting. Commit interval 3 seconds
EXT3-fs (sda2): using internal journal
EXT3-fs (sda2): mounted filesystem with journal data mode
VFS: Mounted root (aufs filesystem) on device 0:11.
Freeing unused kernel memory: 292K (ffffffffc0537000 - ffffffffc0580000)
Algorithmics/MIPS FPU Emulator v1.5
ubnt_platform: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
libphy: mdio-octeon: probed
mdio-octeon 1180000001800.mdio: Version 1.0
octeon-ethernet 2.0
Node 0 Interface 0 has 3 ports (RGMII)
octeon_rng octeon_rng: Octeon Random Number Generator
Init chrdev /dev/detector with major 190
IMQ driver loaded successfully. (numdevs = 1, numqueues = 1)
Hooking IMQ after NAT on PREROUTING.
Hooking IMQ before NAT on POSTROUTING.
NET: Registered protocol family 10
ubnthal: Ubiquiti UniFi-Gateway-3
creating procfs for ubnthal
creating proc entry for system.info
creating proc entry for board
creating procfs for status
creating proc entry for IsDefault
creating proc entry for IsLocated
creating proc entry for IsIsolated
creating /proc/gpio/
/proc/gpio/led_pattern
/proc/gpio/led_tempo
/proc/gpio/poe_passthrough
kjournald starting. Commit interval 3 seconds
EXT3-fs (sda3): using internal journal
EXT3-fs (sda3): recovery complete
EXT3-fs (sda3): mounted filesystem with journal data mode
----------------
Recent Kernel messages (dmesg)
----------------
Linux version 3.10.107-UBNT (ubnt@dde891067c7a) (gcc version 4.7.0 (Cavium Inc. Version: SDK_3_1_0_p2 build 34) ) #1 SMP Wed Dec 5 04:57:56 UTC 2018
CVMSEG size: 2 cache lines (256 bytes)
Cavium Inc. SDK-3.1.2
bootconsole [early0] enabled
CPU revision is: 000d0601 (Cavium Octeon+)
Checking for the multiply/shift bug... no.
Checking for the daddiu bug... no.
Determined physical RAM map:
memory: 0000000000537000 @ 0000000000400000 (kernel data and code)
memory: 0000000000049000 @ 0000000000937000 (usable after init)
memory: 0000000000107000 @ 0000000000980000 (kernel data and code)
memory: 0000000007400000 @ 0000000000d00000 (usable)
memory: 0000000007c00000 @ 0000000008300000 (usable)
memory: 000000000fc00000 @ 0000000410300000 (usable)
software IO TLB [mem 0x0170d000-0x0174d000] (0MB) mapped at [800000000170d000-800000000174cfff]
Zone ranges:
DMA32 [mem 0x00400000-0xefffffff]
Normal [mem 0xf0000000-0x41fefffff]
Movable zone start for each node
Early memory node ranges
node 0: [mem 0x00400000-0x00a86fff]
node 0: [mem 0x00d00000-0x080fffff]
node 0: [mem 0x08300000-0x0fefffff]
node 0: [mem 0x410300000-0x41fefffff]
On node 0 totalpages: 127623
DMA32 zone: 863 pages used for memmap
DMA32 zone: 0 pages reserved
DMA32 zone: 63111 pages, LIFO batch:15
Normal zone: 882 pages used for memmap
Normal zone: 64512 pages, LIFO batch:15
Primary instruction cache 32kB, virtually tagged, 4 way, 64 sets, linesize 128 bytes.
Primary data cache 16kB, 64-way, 2 sets, linesize 128 bytes.
Secondary unified cache 128kB, 8-way, 128 sets, linesize 128 bytes.
PERCPU: Embedded 10 pages/cpu @800000000178a000 s10880 r8192 d21888 u40960
pcpu-alloc: s10880 r8192 d21888 u40960 alloc=10*4096
pcpu-alloc: [0] 0 [0] 1
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 125878
Kernel command line: bootoctlinux $loadaddr coremask=0x3 root=/dev/sda2 rootdelay=15 rw rootsqimg=squashfs.img rootsqwdir=w mtdparts=phys_mapped_flash:512k(boot0),512k(boot1),64k@1024k(eeprom) console=ttyS0,115200
PID hash table entries: 2048 (order: 2, 16384 bytes)
Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)
Inode-cache hash table entries: 32768 (order: 6, 262144 bytes)
Memory: 495244k/504100k available (4017k kernel code, 8856k reserved, 1321k data, 292k init, 0k highmem)
Hierarchical RCU implementation.
Additional per-CPU info printed with stalls.
NR_IRQS:511
Calibrating delay loop (skipped) preset value.. 1000.00 BogoMIPS (lpj=5000000)
pid_max: default: 32768 minimum: 501
Security Framework initialized
Mount-cache hash table entries: 256
Checking for the daddi bug... no.
SMP: Booting CPU01 (CoreId 1)...
CPU revision is: 000d0601 (Cavium Octeon+)
Brought up 2 CPUs
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switching to clocksource OCTEON_CVMCOUNT
NET: Registered protocol family 2
TCP established hash table entries: 4096 (order: 4, 65536 bytes)
TCP bind hash table entries: 4096 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP: reno registered
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
octeon_pci_console: Console not created.
HugeTLB registered 2 MB page size, pre-allocated 0 pages
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering unionfs 2.5.13 (for 3.10.34)
aufs 3.10.x-20141215
msgmni has been set to 967
io scheduler noop registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 6 ports, IRQ sharing disabled
1180000000800.serial: ttyS0 at MMIO 0x1180000000800 (irq = 34) is a OCTEON
console [ttyS0] enabled, bootconsole disabled
1180000000c00.serial: ttyS1 at MMIO 0x1180000000c00 (irq = 35) is a OCTEON
loop: module loaded
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
OcteonUSB 16f0010000000.usbc: Octeon Host Controller
OcteonUSB 16f0010000000.usbc: new USB bus registered, assigned bus number 1
OcteonUSB 16f0010000000.usbc: irq 56, io mem 0x00000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
OcteonUSB: Registered HCD for port 0 on irq 56
usbcore: registered new interface driver usb-storage
octeon_wdt: Initial granularity 5 Sec
TCP: cubic registered
NET: Registered protocol family 17
NET: Registered protocol family 15
Bootbus flash: Setting flash for 8MB flash at 0x1f400000
phys_mapped_flash: Found 1 x16 devices at 0x0 in 8-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x0000c9
Amd/Fujitsu Extended Query Table at 0x0040
Amd/Fujitsu Extended Query version 1.1.
phys_mapped_flash: Swapping erase regions for top-boot CFI table.
number of CFI chips: 1
3 cmdlinepart partitions found on MTD device phys_mapped_flash
Creating 3 MTD partitions on "phys_mapped_flash":
0x000000000000-0x000000080000 : "boot0"
0x000000080000-0x000000100000 : "boot1"
0x000000100000-0x000000110000 : "eeprom"
Waiting 15sec before mounting root device...
usb 1-1: new high-speed USB device number 2 using OcteonUSB
usb-storage 1-1:1.0: USB Mass Storage device detected
scsi0 : usb-storage 1-1:1.0
scsi 0:0:0:0: Direct-Access UDinfo UF2 4GB PMAP PQ: 0 ANSI: 6
sd 0:0:0:0: [sda] 7831552 512-byte logical blocks: (4.00 GB/3.73 GiB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 23 00 00 00
sd 0:0:0:0: [sda] No Caching mode page found
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] No Caching mode page found
sd 0:0:0:0: [sda] Assuming drive cache: write through
sda: sda1 sda2 sda3
sd 0:0:0:0: [sda] No Caching mode page found
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] Attached SCSI removable disk
kjournald starting. Commit interval 3 seconds
EXT3-fs (sda2): using internal journal
EXT3-fs (sda2): mounted filesystem with journal data mode
VFS: Mounted root (aufs filesystem) on device 0:11.
Freeing unused kernel memory: 292K (ffffffffc0537000 - ffffffffc0580000)
Algorithmics/MIPS FPU Emulator v1.5
ubnt_platform: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
libphy: mdio-octeon: probed
mdio-octeon 1180000001800.mdio: Version 1.0
octeon-ethernet 2.0
Node 0 Interface 0 has 3 ports (RGMII)
octeon_rng octeon_rng: Octeon Random Number Generator
Init chrdev /dev/detector with major 190
IMQ driver loaded successfully. (numdevs = 1, numqueues = 1)
Hooking IMQ after NAT on PREROUTING.
Hooking IMQ before NAT on POSTROUTING.
NET: Registered protocol family 10
ubnthal: Ubiquiti UniFi-Gateway-3
creating procfs for ubnthal
creating proc entry for system.info
creating proc entry for board
creating procfs for status
creating proc entry for IsDefault
creating proc entry for IsLocated
creating proc entry for IsIsolated
creating /proc/gpio/
/proc/gpio/led_pattern
/proc/gpio/led_tempo
/proc/gpio/poe_passthrough
kjournald starting. Commit interval 3 seconds
EXT3-fs (sda3): using internal journal
EXT3-fs (sda3): recovery complete
EXT3-fs (sda3): mounted filesystem with journal data mode
Netfilter messages via NETLINK v0.30.
ip_set: protocol 6
ip_tables: (C) 2000-2006 Netfilter Core Team
nf_conntrack version 0.5.0 (32768 buckets, 262144 max)
ip6_tables: (C) 2000-2006 Netfilter Core Team
eth1: 1000 Mbps Full duplex, port 1
eth2: Link down
IPv6: ADDRCONF(NETDEV_UP): eth2: link is not ready
eth0: 1000 Mbps Full duplex, port 0
IPv4: martian source 169.254.59.92 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 169.254.59.92 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
8021q: 802.1Q VLAN Support v1.8
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 192.168.1.8 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 192.168.1.1 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 192.168.1.8 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 192.168.1.8 from 169.254.59.92, on dev eth1
ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
IPv4: martian source 159.65.98.161 from 172.17.0.13, on dev eth1
ll header: 00000000: fc ec da 48 cf 18 ac 1f 6b 15 ea 72 08 00 ...H....k..r..
IPv4: martian source 51.255.75.9 from 172.17.0.13, on dev eth1
ll header: 00000000: fc ec da 48 cf 18 ac 1f 6b 15 ea 72 08 00 ...H....k..r..
IPv4: martian source 47.222.103.234 from 172.17.0.13, on dev eth1
ll header: 00000000: fc ec da 48 cf 18 ac 1f 6b 15 ea 72 08 00 ...H....k..r..
device eth0 entered promiscuous mode
device eth0 left promiscuous mode
device eth0 entered promiscuous mode
device eth0 left promiscuous mode
device eth1 entered promiscuous mode
device eth1 left promiscuous mode
device eth1 entered promiscuous mode
device eth1 left promiscuous mode
device eth1 entered promiscuous mode
device eth1 left promiscuous mode
device eth1 entered promiscuous mode
device eth1 left promiscuous mode
IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
----------------
Kernel Command line
----------------
bootoctlinux $loadaddr coremask=0x3 root=/dev/sda2 rootdelay=15 rw rootsqimg=squashfs.img rootsqwdir=w mtdparts=phys_mapped_flash:512k(boot0),512k(boot1),64k@1024k(eeprom) console=ttyS0,115200
----------------
Open Ports
----------------
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
freeradiu 585 freerad 6u IPv4 1481 0t64 UDP *:1812
freeradiu 585 freerad 7u IPv4 235 0t64 UDP *:1813
freeradiu 585 freerad 8u IPv4 237 0t64 UDP 127.0.0.1:18120
freeradiu 585 freerad 9u IPv4 238 0t64 UDP *:1814
freeradiu 585 freerad 10u IPv4 239 0t64 UDP *:58935
ntpd 2324 ntp 16u IPv4 17250 0t64 UDP *:123
ntpd 2324 ntp 17u IPv6 17251 0t64 UDP *:123
ntpd 2324 ntp 18u IPv4 17615 0t64 UDP 127.0.0.1:123
ntpd 2324 ntp 19u IPv4 17616 0t64 UDP 192.168.0.6:123
ntpd 2324 ntp 20u IPv4 17617 0t64 UDP 192.168.1.1:123
ntpd 2324 ntp 21u IPv6 17618 0t64 UDP [fe80::feec:daff:fe48:cf18]:123
ntpd 2324 ntp 22u IPv6 17619 0t64 UDP [::1]:123
ntpd 2324 ntp 23u IPv6 17620 0t64 UDP [fe80::feec:daff:fe48:cf17]:123
mcad 2858 root 9u IPv4 81665 0t64 UDP *:48000
mcad 2858 root 10u IPv4 21026 0t64 UDP *:51422
mcad 2858 root 11u IPv4 21027 0t64 UDP *:10001
mcad 2858 root 16u IPv4 98246 0t64 TCP 192.168.1.1:34795->192.168.1.4:8080 (CLOSE_WAIT)
mcad 2858 root 17u IPv4 98249 0t64 TCP 192.168.1.1:34796->192.168.1.4:8080 (CLOSE_WAIT)
mcad 2858 root 18u IPv4 97141 0t64 TCP 192.168.1.1:34797->192.168.1.4:8080 (CLOSE_WAIT)
mcad 2858 root 19u IPv4 97237 0t64 TCP 192.168.1.1:34798->192.168.1.4:8080 (CLOSE_WAIT)
mcad 2858 root 20u IPv4 98697 0t64 TCP 192.168.1.1:34799->192.168.1.4:8080 (ESTABLISHED)
mcad 2858 root 21u IPv4 97876 0t64 TCP 192.168.1.1:34790->192.168.1.4:8080 (CLOSE_WAIT)
mcad 2858 root 22u IPv4 97879 0t64 TCP 192.168.1.1:34791->192.168.1.4:8080 (CLOSE_WAIT)
mcad 2858 root 23u IPv4 96841 0t64 TCP 192.168.1.1:34792->192.168.1.4:8080 (CLOSE_WAIT)
mcad 2858 root 24u IPv4 97033 0t64 TCP 192.168.1.1:34793->192.168.1.4:8080 (CLOSE_WAIT)
mcad 2858 root 25u IPv4 98230 0t64 TCP 192.168.1.1:34794->192.168.1.4:8080 (CLOSE_WAIT)
sshd 3063 root 3u IPv4 21065 0t64 TCP *:22 (LISTEN)
sshd 3063 root 4u IPv6 21067 0t64 TCP *:22 (LISTEN)
dhclient 8742 root 6u IPv4 48232 0t64 UDP *:68
telnetd 8824 root 3u IPv4 48430 0t64 TCP 127.0.0.101:55523 (LISTEN)
lighttpd 8828 www-data 4u IPv4 48444 0t64 TCP *:80 (LISTEN)
lighttpd 8828 www-data 5u IPv4 48445 0t64 TCP *:443 (LISTEN)
lighttpd 8828 www-data 6u IPv6 48446 0t64 TCP *:80 (LISTEN)
lighttpd 8828 www-data 7u IPv6 48448 0t64 TCP *:443 (LISTEN)
dhcpd3 8864 root 7u IPv4 48549 0t64 UDP *:67
dnsmasq 8908 dnsmasq 4u IPv4 46863 0t64 UDP *:53
dnsmasq 8908 dnsmasq 5u IPv4 46864 0t64 TCP *:53 (LISTEN)
dnsmasq 8908 dnsmasq 6u IPv6 46865 0t64 UDP *:53
dnsmasq 8908 dnsmasq 7u IPv6 46866 0t64 TCP *:53 (LISTEN)
sshd 16385 root 3u IPv4 89202 0t64 TCP 192.168.1.1:22->192.168.1.15:3629 (ESTABLISHED)
sshd 16391 admin 3u IPv4 89202 0t64 TCP 192.168.1.1:22->192.168.1.15:3629 (ESTABLISHED)
----------------
System Startup Files
----------------
/etc/rc0.d:
total 1
lrwxrwxrwx 1 root root 15 Dec 5 00:07 K01dhcpd -> ../init.d/dhcpd
lrwxrwxrwx 1 root root 17 Dec 5 00:07 K01dhcpdv6 -> ../init.d/dhcpdv6
lrwxrwxrwx 1 root root 18 Dec 5 00:08 K01fail2ban -> ../init.d/fail2ban
lrwxrwxrwx 1 root root 20 Dec 5 00:06 K01freeradius -> ../init.d/freeradius
lrwxrwxrwx 1 root root 17 Dec 5 00:08 K01netplug -> ../init.d/netplug
lrwxrwxrwx 1 root root 20 Dec 5 00:07 K01unifi-init -> ../init.d/unifi-init
lrwxrwxrwx 1 root root 27 Dec 5 00:05 K01vyatta-keepalived -> ../init.d/vyatta-keepalived
lrwxrwxrwx 1 root root 23 Dec 5 00:06 K01vyatta-quagga -> ../init.d/vyatta-quagga
lrwxrwxrwx 1 root root 23 Dec 5 00:07 K02vyatta-router -> ../init.d/vyatta-router
lrwxrwxrwx 1 root root 18 Dec 5 00:07 K03sendsigs -> ../init.d/sendsigs
lrwxrwxrwx 1 root root 17 Dec 5 00:07 K04rsyslog -> ../init.d/rsyslog
lrwxrwxrwx 1 root root 19 Dec 5 00:07 K05ubnt-init -> ../init.d/ubnt-init
lrwxrwxrwx 1 root root 19 Dec 5 00:07 K06ubnt-halt -> ../init.d/ubnt-halt
lrwxrwxrwx 1 root root 14 Dec 5 00:07 K10halt -> ../init.d/halt
-rw-r--r-- 1 root root 353 Oct 15 2012 README
/etc/rc1.d:
total 1
lrwxrwxrwx 1 root root 15 Dec 5 00:07 K01dhcpd -> ../init.d/dhcpd
lrwxrwxrwx 1 root root 17 Dec 5 00:07 K01dhcpdv6 -> ../init.d/dhcpdv6
lrwxrwxrwx 1 root root 18 Dec 5 00:08 K01fail2ban -> ../init.d/fail2ban
lrwxrwxrwx 1 root root 20 Dec 5 00:06 K01freeradius -> ../init.d/freeradius
lrwxrwxrwx 1 root root 17 Dec 5 00:08 K01netplug -> ../init.d/netplug
lrwxrwxrwx 1 root root 20 Dec 5 00:07 K01unifi-init -> ../init.d/unifi-init
lrwxrwxrwx 1 root root 27 Dec 5 00:05 K01vyatta-keepalived -> ../init.d/vyatta-keepalived
lrwxrwxrwx 1 root root 23 Dec 5 00:06 K01vyatta-quagga -> ../init.d/vyatta-quagga
lrwxrwxrwx 1 root root 23 Dec 5 00:07 K02vyatta-router -> ../init.d/vyatta-router
lrwxrwxrwx 1 root root 17 Dec 5 00:07 K04rsyslog -> ../init.d/rsyslog
lrwxrwxrwx 1 root root 19 Dec 5 00:07 K05ubnt-init -> ../init.d/ubnt-init
-rw-r--r-- 1 root root 369 Oct 15 2012 README
lrwxrwxrwx 1 root root 19 Dec 5 00:03 S01killprocs -> ../init.d/killprocs
lrwxrwxrwx 1 root root 16 Dec 5 00:06 S04single -> ../init.d/single
/etc/rc2.d:
total 1
lrwxrwxrwx 1 root root 18 Dec 5 00:08 K97fail2ban -> ../init.d/fail2ban
-rw-r--r-- 1 root root 677 Jul 14 2013 README
lrwxrwxrwx 1 root root 19 Dec 5 00:03 S01ubnt-init -> ../init.d/ubnt-init
lrwxrwxrwx 1 root root 20 Dec 5 00:06 S03freeradius -> ../init.d/freeradius
lrwxrwxrwx 1 root root 23 Dec 5 00:06 S03vyatta-quagga -> ../init.d/vyatta-quagga
lrwxrwxrwx 1 root root 23 Dec 5 00:07 S03vyatta-router -> ../init.d/vyatta-router
lrwxrwxrwx 1 root root 17 Dec 5 00:08 S04netplug -> ../init.d/netplug
lrwxrwxrwx 1 root root 18 Dec 5 00:06 S05rc.local -> ../init.d/rc.local
lrwxrwxrwx 1 root root 19 Dec 5 00:06 S05rmnologin -> ../init.d/rmnologin
lrwxrwxrwx 1 root root 20 Dec 5 00:07 S05unifi-init -> ../init.d/unifi-init
/etc/rc3.d:
total 1
lrwxrwxrwx 1 root root 18 Dec 5 00:08 K97fail2ban -> ../init.d/fail2ban
-rw-r--r-- 1 root root 677 Jul 14 2013 README
lrwxrwxrwx 1 root root 19 Dec 5 00:03 S01ubnt-init -> ../init.d/ubnt-init
lrwxrwxrwx 1 root root 20 Dec 5 00:06 S03freeradius -> ../init.d/freeradius
lrwxrwxrwx 1 root root 23 Dec 5 00:06 S03vyatta-quagga -> ../init.d/vyatta-quagga
lrwxrwxrwx 1 root root 23 Dec 5 00:07 S03vyatta-router -> ../init.d/vyatta-router
lrwxrwxrwx 1 root root 17 Dec 5 00:08 S04netplug -> ../init.d/netplug
lrwxrwxrwx 1 root root 18 Dec 5 00:06 S05rc.local -> ../init.d/rc.local
lrwxrwxrwx 1 root root 19 Dec 5 00:06 S05rmnologin -> ../init.d/rmnologin
lrwxrwxrwx 1 root root 20 Dec 5 00:07 S05unifi-init -> ../init.d/unifi-init
/etc/rc4.d:
total 1
lrwxrwxrwx 1 root root 18 Dec 5 00:08 K97fail2ban -> ../init.d/fail2ban
-rw-r--r-- 1 root root 677 Jul 14 2013 README
lrwxrwxrwx 1 root root 19 Dec 5 00:03 S01ubnt-init -> ../init.d/ubnt-init
lrwxrwxrwx 1 root root 20 Dec 5 00:06 S03freeradius -> ../init.d/freeradius
lrwxrwxrwx 1 root root 23 Dec 5 00:06 S03vyatta-quagga -> ../init.d/vyatta-quagga
lrwxrwxrwx 1 root root 23 Dec 5 00:07 S03vyatta-router -> ../init.d/vyatta-router
lrwxrwxrwx 1 root root 17 Dec 5 00:08 S04netplug -> ../init.d/netplug
lrwxrwxrwx 1 root root 18 Dec 5 00:06 S05rc.local -> ../init.d/rc.local
lrwxrwxrwx 1 root root 19 Dec 5 00:06 S05rmnologin -> ../init.d/rmnologin
lrwxrwxrwx 1 root root 20 Dec 5 00:07 S05unifi-init -> ../init.d/unifi-init
/etc/rc5.d:
total 1
lrwxrwxrwx 1 root root 18 Dec 5 00:08 K97fail2ban -> ../init.d/fail2ban
-rw-r--r-- 1 root root 677 Jul 14 2013 README
lrwxrwxrwx 1 root root 19 Dec 5 00:03 S01ubnt-init -> ../init.d/ubnt-init
lrwxrwxrwx 1 root root 20 Dec 5 00:06 S03freeradius -> ../init.d/freeradius
lrwxrwxrwx 1 root root 23 Dec 5 00:06 S03vyatta-quagga -> ../init.d/vyatta-quagga
lrwxrwxrwx 1 root root 23 Dec 5 00:07 S03vyatta-router -> ../init.d/vyatta-router
lrwxrwxrwx 1 root root 17 Dec 5 00:08 S04netplug -> ../init.d/netplug
lrwxrwxrwx 1 root root 18 Dec 5 00:06 S05rc.local -> ../init.d/rc.local
lrwxrwxrwx 1 root root 19 Dec 5 00:06 S05rmnologin -> ../init.d/rmnologin
lrwxrwxrwx 1 root root 20 Dec 5 00:07 S05unifi-init -> ../init.d/unifi-init
/etc/rc6.d:
total 1
lrwxrwxrwx 1 root root 15 Dec 5 00:07 K01dhcpd -> ../init.d/dhcpd
lrwxrwxrwx 1 root root 17 Dec 5 00:07 K01dhcpdv6 -> ../init.d/dhcpdv6
lrwxrwxrwx 1 root root 18 Dec 5 00:08 K01fail2ban -> ../init.d/fail2ban
lrwxrwxrwx 1 root root 20 Dec 5 00:06 K01freeradius -> ../init.d/freeradius
lrwxrwxrwx 1 root root 17 Dec 5 00:08 K01netplug -> ../init.d/netplug
lrwxrwxrwx 1 root root 20 Dec 5 00:07 K01unifi-init -> ../init.d/unifi-init
lrwxrwxrwx 1 root root 27 Dec 5 00:05 K01vyatta-keepalived -> ../init.d/vyatta-keepalived
lrwxrwxrwx 1 root root 23 Dec 5 00:06 K01vyatta-quagga -> ../init.d/vyatta-quagga
lrwxrwxrwx 1 root root 23 Dec 5 00:07 K02vyatta-router -> ../init.d/vyatta-router
lrwxrwxrwx 1 root root 18 Dec 5 00:07 K03sendsigs -> ../init.d/sendsigs
lrwxrwxrwx 1 root root 17 Dec 5 00:07 K04rsyslog -> ../init.d/rsyslog
lrwxrwxrwx 1 root root 19 Dec 5 00:07 K05ubnt-init -> ../init.d/ubnt-init
lrwxrwxrwx 1 root root 16 Dec 5 00:07 K10reboot -> ../init.d/reboot
-rw-r--r-- 1 root root 351 Oct 15 2012 README
/etc/rcS.d:
total 1
-rw-r--r-- 1 root root 447 Oct 15 2012 README
lrwxrwxrwx 1 root root 18 Dec 5 00:03 S01ubnt-rcS -> ../init.d/ubnt-rcS
lrwxrwxrwx 1 root root 37 Dec 5 00:07 S09vyatta-config-reboot-params -> ../init.d/vyatta-config-reboot-params
----------------
Bash History
----------------
----------------
Bash History for admin
----------------
No history file found
----------------
Login History
----------------
admin pts/0 192.168.1.15 Wed Feb 6 18:50 still logged in
runlevel (to lvl 2) 0.0.0.0 Wed Feb 6 17:27 - 19:10 (01:43)
reboot system boot 0.0.0.0 Wed Feb 6 17:27 - 19:10 (01:43)
wtmp begins Wed Feb 6 17:27:23 2019
----------------
Recent Log Messages
----------------
Feb 6 17:27:23 UniFiSecurityGateway rsyslogd: set SCM_CREDENTIALS failed on '/dev/log': Protocol not available
Feb 6 17:27:23 UniFiSecurityGateway kernel: Linux version 3.10.107-UBNT (ubnt@dde891067c7a) (gcc version 4.7.0 (Cavium Inc. Version: SDK_3_1_0_p2 build 34) ) #1 SMP Wed Dec 5 04:57:56 UTC 2018
Feb 6 17:27:23 UniFiSecurityGateway kernel: CVMSEG size: 2 cache lines (256 bytes)
Feb 6 17:27:23 UniFiSecurityGateway kernel: Checking for the multiply/shift bug... no.
Feb 6 17:27:23 UniFiSecurityGateway kernel: Checking for the daddiu bug... no.
Feb 6 17:27:23 UniFiSecurityGateway kernel: Zone ranges:
Feb 6 17:27:23 UniFiSecurityGateway kernel: DMA32 [mem 0x00400000-0xefffffff]
Feb 6 17:27:23 UniFiSecurityGateway kernel: Normal [mem 0xf0000000-0x41fefffff]
Feb 6 17:27:23 UniFiSecurityGateway kernel: Movable zone start for each node
Feb 6 17:27:23 UniFiSecurityGateway kernel: Early memory node ranges
Feb 6 17:27:23 UniFiSecurityGateway kernel: node 0: [mem 0x00400000-0x00a86fff]
Feb 6 17:27:23 UniFiSecurityGateway kernel: node 0: [mem 0x00d00000-0x080fffff]
Feb 6 17:27:23 UniFiSecurityGateway kernel: node 0: [mem 0x08300000-0x0fefffff]
Feb 6 17:27:23 UniFiSecurityGateway kernel: node 0: [mem 0x410300000-0x41fefffff]
Feb 6 17:27:23 UniFiSecurityGateway kernel: Primary instruction cache 32kB, virtually tagged, 4 way, 64 sets, linesize 128 bytes.
Feb 6 17:27:23 UniFiSecurityGateway kernel: Primary data cache 16kB, 64-way, 2 sets, linesize 128 bytes.
Feb 6 17:27:23 UniFiSecurityGateway kernel: Secondary unified cache 128kB, 8-way, 128 sets, linesize 128 bytes.
Feb 6 17:27:23 UniFiSecurityGateway kernel: Built 1 zonelists in Zone order, mobility grouping on. Total pages: 125878
Feb 6 17:27:23 UniFiSecurityGateway kernel: Kernel command line: bootoctlinux $loadaddr coremask=0x3 root=/dev/sda2 rootdelay=15 rw rootsqimg=squashfs.img rootsqwdir=w mtdparts=phys_mapped_flash:512k(boot0),512k(boot1),64k@1024k(eeprom) console=ttyS0,115200
Feb 6 17:27:23 UniFiSecurityGateway kernel: Checking for the daddi bug... no.
Feb 6 17:27:23 UniFiSecurityGateway kernel: SCSI subsystem initialized
Feb 6 17:27:23 UniFiSecurityGateway kernel: octeon_pci_console: Console not created.
Feb 6 17:27:23 UniFiSecurityGateway kernel: Bootbus flash: Setting flash for 8MB flash at 0x1f400000
Feb 6 17:27:23 UniFiSecurityGateway kernel: phys_mapped_flash: Swapping erase regions for top-boot CFI table.
Feb 6 17:27:23 UniFiSecurityGateway kernel: number of CFI chips: 1
Feb 6 17:27:23 UniFiSecurityGateway kernel: 3 cmdlinepart partitions found on MTD device phys_mapped_flash
Feb 6 17:27:23 UniFiSecurityGateway kernel: Creating 3 MTD partitions on "phys_mapped_flash":
Feb 6 17:27:23 UniFiSecurityGateway kernel: 0x000000000000-0x000000080000 : "boot0"
Feb 6 17:27:23 UniFiSecurityGateway kernel: 0x000000080000-0x000000100000 : "boot1"
Feb 6 17:27:23 UniFiSecurityGateway kernel: 0x000000100000-0x000000110000 : "eeprom"
Feb 6 17:27:23 UniFiSecurityGateway kernel: scsi 0:0:0:0: Direct-Access UDinfo UF2 4GB PMAP PQ: 0 ANSI: 6
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] 7831552 512-byte logical blocks: (4.00 GB/3.73 GiB)
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] Write Protect is off
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] No Caching mode page found
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] No Caching mode page found
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] No Caching mode page found
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
Feb 6 17:27:23 UniFiSecurityGateway kernel: sd 0:0:0:0: [sda] Attached SCSI removable disk
Feb 6 17:27:23 UniFiSecurityGateway kernel: Algorithmics/MIPS FPU Emulator v1.5
Feb 6 17:27:23 UniFiSecurityGateway kernel: ubnt_platform: module license 'Proprietary' taints kernel.
Feb 6 17:27:23 UniFiSecurityGateway kernel: Disabling lock debugging due to kernel taint
Feb 6 17:27:23 UniFiSecurityGateway kernel: octeon-ethernet 2.0
Feb 6 17:27:23 UniFiSecurityGateway kernel: Node 0 Interface 0 has 3 ports (RGMII)
Feb 6 17:27:25 UniFiSecurityGateway kernel: ip_set: protocol 6
Feb 6 17:27:28 UniFiSecurityGateway zebra[623]: Zebra 0.99.20.1 starting: vty@0
Feb 6 17:27:32 UniFiSecurityGateway rl-system.init: Checking/creating SSH host keys.
Feb 6 17:27:51 UniFiSecurityGateway rsyslogd: set SCM_CREDENTIALS failed on '/dev/log': Protocol not available
Feb 6 17:27:51 UniFiSecurityGateway rsyslogd: set SCM_CREDENTIALS failed on '/dev/log': Protocol not available
Feb 6 17:28:38 UniFiSecurityGateway kernel: eth1: 1000 Mbps Full duplex, port 1
Feb 6 17:28:38 UniFiSecurityGateway zebra[623]: interface eth1 index 3 changed <UP,BROADCAST,RUNNING,MULTICAST>.
Feb 6 17:28:43 UniFiSecurityGateway zebra[623]: interface eth2 index 4 changed <UP,BROADCAST,RUNNING,MULTICAST>.
Feb 6 17:28:43 UniFiSecurityGateway zebra[623]: interface eth2 index 4 changed <UP,BROADCAST,MULTICAST>.
Feb 6 17:28:43 UniFiSecurityGateway kernel: eth2: Link down
Feb 6 17:28:44 UniFiSecurityGateway zebra[623]: interface eth2 index 4 changed <BROADCAST,MULTICAST>.
Feb 6 17:28:47 UniFiSecurityGateway zebra[623]: interface eth0 index 2 changed <UP,BROADCAST,RUNNING,MULTICAST>.
Feb 6 17:28:47 UniFiSecurityGateway kernel: eth0: 1000 Mbps Full duplex, port 0
Feb 6 17:28:55 UniFiSecurityGateway ntpd[2262]: ntpd [email protected] Wed Dec 5 04:29:27 UTC 2018 (1)
Feb 6 17:28:55 UniFiSecurityGateway ntpd[2263]: proto: precision = 48.610 usec
Feb 6 17:28:57 UniFiSecurityGateway ntpd[2263]: ntpd exiting on signal 15
Feb 6 17:28:59 UniFiSecurityGateway ntpd[2323]: ntpd [email protected] Wed Dec 5 04:29:27 UTC 2018 (1)
Feb 6 17:28:59 UniFiSecurityGateway ntpd[2324]: proto: precision = 48.738 usec
Feb 6 17:29:03 UniFiSecurityGateway rsyslogd: set SCM_CREDENTIALS failed on '/dev/log': Protocol not available
Feb 6 17:29:04 UniFiSecurityGateway ubnt-service-ssh: waiting for netplugd to be started...
Feb 6 17:30:26 UniFiSecurityGateway ubnt-service-gui: waiting for netplugd to be started...
Feb 6 17:30:27 UniFiSecurityGateway kernel: IPv4: martian source 169.254.59.92 from 169.254.59.92, on dev eth1
Feb 6 17:30:27 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:29 UniFiSecurityGateway kernel: IPv4: martian source 169.254.59.92 from 169.254.59.92, on dev eth1
Feb 6 17:30:29 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:29 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:29 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:29 UniFiSecurityGateway dhcpd: WARNING: Host declarations are global. They are not limited to the scope you declared them in.
Feb 6 17:30:30 UniFiSecurityGateway dhcpd:
Feb 6 17:30:30 UniFiSecurityGateway dhcpd: No subnet declaration for eth0 (192.168.0.6).
Feb 6 17:30:30 UniFiSecurityGateway dhcpd: ** Ignoring requests on eth0. If this is not what
Feb 6 17:30:30 UniFiSecurityGateway dhcpd: you want, please write a subnet declaration
Feb 6 17:30:30 UniFiSecurityGateway dhcpd: in your dhcpd.conf file for the network segment
Feb 6 17:30:30 UniFiSecurityGateway dhcpd: to which interface eth0 is attached. **
Feb 6 17:30:30 UniFiSecurityGateway dhcpd:
Feb 6 17:30:30 UniFiSecurityGateway dhcpd: Abandoning IP address 192.168.1.207: pinged before offer
Feb 6 17:30:30 UniFiSecurityGateway dhcpd: data: hardware: raw packet not available
Feb 6 17:30:30 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:30 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:31 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:31 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:32 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:32 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:33 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:33 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:38 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:38 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:39 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:39 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:40 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:40 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:41 UniFiSecurityGateway ubnt-service-upnp2: waiting for netplugd to be started...
Feb 6 17:30:41 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:41 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:42 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:42 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:47 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:47 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:48 UniFiSecurityGateway netplugd: Starting network plug daemon: netplugd.
Feb 6 17:30:48 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:48 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:49 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:49 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:50 UniFiSecurityGateway mcad: ace_reporter.set_default_localtime(): failed to get /usr/lib/build.properties
Feb 6 17:30:50 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:50 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:50 UniFiSecurityGateway dpi_wlan_fw_rules.pl: dpi_wlan_fw_rules.pl started
Feb 6 17:30:51 UniFiSecurityGateway kernel: IPv4: martian source 208.67.222.222 from 169.254.59.92, on dev eth1
Feb 6 17:30:51 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:53 UniFiSecurityGateway ubnt-service-ssh: starting the SSH service (see messages from sshd).
Feb 6 17:30:55 UniFiSecurityGateway ubnt-service-upnp2: starting the UPNP2 service (see messages from miniupnpd).
Feb 6 17:30:55 UniFiSecurityGateway miniupnpd[3025]: could not open lease file: /var/log/upnp.leases
Feb 6 17:30:55 UniFiSecurityGateway miniupnpd[3025]: HTTP listening on port 35159
Feb 6 17:30:55 UniFiSecurityGateway miniupnpd[3025]: setsockopt(udp, IP_ADD_MEMBERSHIP): Address already in use
Feb 6 17:30:55 UniFiSecurityGateway miniupnpd[3025]: Failed to add multicast membership for interface 192.168.1.1
Feb 6 17:30:55 UniFiSecurityGateway miniupnpd[3025]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 6 17:30:56 UniFiSecurityGateway perl_wrapper: perl_wrapper.pl started
Feb 6 17:30:56 UniFiSecurityGateway ubnt-service-gui: starting the GUI service.
Feb 6 17:30:56 UniFiSecurityGateway kernel: IPv4: martian source 192.168.1.8 from 169.254.59.92, on dev eth1
Feb 6 17:30:56 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:56 UniFiSecurityGateway kernel: IPv4: martian source 192.168.1.1 from 169.254.59.92, on dev eth1
Feb 6 17:30:56 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:56 UniFiSecurityGateway kernel: IPv4: martian source 192.168.1.8 from 169.254.59.92, on dev eth1
Feb 6 17:30:56 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:30:57 UniFiSecurityGateway kernel: IPv4: martian source 192.168.1.8 from 169.254.59.92, on dev eth1
Feb 6 17:30:57 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff d8 61 62 4d 5c 3a 08 06 .......abM\:..
Feb 6 17:31:06 UniFiSecurityGateway kernel: IPv4: martian source 159.65.98.161 from 172.17.0.13, on dev eth1
Feb 6 17:31:06 UniFiSecurityGateway kernel: ll header: 00000000: fc ec da 48 cf 18 ac 1f 6b 15 ea 72 08 00 ...H....k..r..
Feb 6 18:04:49 UniFiSecurityGateway ubnt-service-gui: starting the GUI service.
Feb 6 18:04:54 UniFiSecurityGateway dhcpd: WARNING: Host declarations are global. They are not limited to the scope you declared them in.
Feb 6 18:04:54 UniFiSecurityGateway dhcpd:
Feb 6 18:04:54 UniFiSecurityGateway dhcpd: No subnet declaration for eth0 (192.168.0.6).
Feb 6 18:04:54 UniFiSecurityGateway dhcpd: ** Ignoring requests on eth0. If this is not what
Feb 6 18:04:54 UniFiSecurityGateway dhcpd: you want, please write a subnet declaration
Feb 6 18:04:54 UniFiSecurityGateway dhcpd: in your dhcpd.conf file for the network segment
Feb 6 18:04:54 UniFiSecurityGateway dhcpd: to which interface eth0 is attached. **
Feb 6 18:04:54 UniFiSecurityGateway dhcpd:
Feb 6 18:05:05 UniFiSecurityGateway mcad: ace_reporter.reporter_fail(): Unknown[11] (http://192.168.1.4:8080/inform)
Feb 6 18:05:05 UniFiSecurityGateway mcad: ace_reporter.reporter_fail(): inform failed #1 (last inform: 106 seconds ago), rc=11
Feb 6 18:09:03 UniFiSecurityGateway kernel: IPv4: martian source 51.255.75.9 from 172.17.0.13, on dev eth1
Feb 6 18:09:03 UniFiSecurityGateway kernel: ll header: 00000000: fc ec da 48 cf 18 ac 1f 6b 15 ea 72 08 00 ...H....k..r..
Feb 6 18:35:12 UniFiSecurityGateway miniupnpd[3025]: shutting down MiniUPnPd
Feb 6 18:48:31 UniFiSecurityGateway sshd[16152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.1.15 user=admin
Feb 6 18:49:57 UniFiSecurityGateway sshd[16152]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.1.15 user=admin
Feb 6 18:49:57 UniFiSecurityGateway sshd[16152]: PAM service(sshd) ignoring max retries; 6 > 3
Feb 6 18:50:07 UniFiSecurityGateway sshd[16385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.1.15 user=admin
Feb 6 18:50:37 UniFiSecurityGateway kernel: IPv4: martian source 47.222.103.234 from 172.17.0.13, on dev eth1
Feb 6 18:50:37 UniFiSecurityGateway kernel: ll header: 00000000: fc ec da 48 cf 18 ac 1f 6b 15 ea 72 08 00 ...H....k..r..
Feb 6 19:09:05 UniFiSecurityGateway kernel: IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
Feb 6 19:09:05 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
Feb 6 19:09:05 UniFiSecurityGateway kernel: IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
Feb 6 19:09:05 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
Feb 6 19:09:05 UniFiSecurityGateway kernel: IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
Feb 6 19:09:05 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
Feb 6 19:09:05 UniFiSecurityGateway kernel: IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
Feb 6 19:09:05 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
Feb 6 19:09:06 UniFiSecurityGateway kernel: IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
Feb 6 19:09:06 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
Feb 6 19:09:06 UniFiSecurityGateway kernel: IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
Feb 6 19:09:06 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
Feb 6 19:09:07 UniFiSecurityGateway kernel: IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
Feb 6 19:09:07 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
Feb 6 19:09:07 UniFiSecurityGateway kernel: IPv4: martian source 169.254.255.255 from 169.254.181.42, on dev eth1
Feb 6 19:09:07 UniFiSecurityGateway kernel: ll header: 00000000: ff ff ff ff ff ff f0 4d a2 5f 21 a9 08 00 .......M._!...
----------------
NTP
----------------
remote local st poll reach delay offset disp
=======================================================================
=198.50.238.163 192.168.0.6 2 128 1 0.03836 -0.007265 2.81735
=74.82.59.150 192.168.0.6 3 128 377 0.07675 0.001199 0.08463
*208.75.89.4 192.168.0.6 2 128 354 0.07475 0.000472 0.08705
=198.46.223.227 192.168.0.6 2 128 200 0.03226 -0.002336 1.98772
----------------
Zebra
----------------
----------------
BGP
----------------
BGP is not configured
----------------
DHCP Server
----------------
----------------
DHCP Leases
----------------
IP address Hardware Address Lease expiration Pool Client Name
---------- ---------------- ---------------- ---- -----------
192.168.1.8 d8:61:62:4d:5c:3a 2019/02/07 22:31:03 net_LAN_eth1_192.168.1.0-24 august-connect
192.168.1.15 3c:a9:f4:0c:ec:0c 2019/02/07 22:30:33 net_LAN_eth1_192.168.1.0-24 Worklap
192.168.1.16 f0:99:bf:4d:4e:ff 2019/02/07 21:46:52 net_LAN_eth1_192.168.1.0-24 iPhone
192.168.1.17 e0:c7:67:b8:78:40 2019/02/07 22:31:08 net_LAN_eth1_192.168.1.0-24 Ambers-iPhone
192.168.1.21 10:1c:0c:57:38:ae 2019/02/07 16:21:53 net_LAN_eth1_192.168.1.0-24 Apples-iPad
192.168.1.22 52:54:00:9c:8e:6a 2019/02/07 13:28:23 net_LAN_eth1_192.168.1.0-24 RocketCenter
192.168.1.23 44:91:60:d6:34:1a 2019/02/07 14:12:42 net_LAN_eth1_192.168.1.0-24 Galaxy-S8
192.168.1.27 fc:19:10:76:a7:99 2019/02/07 15:02:07 net_LAN_eth1_192.168.1.0-24 android-b8b6aa604e9a8511
192.168.1.29 dc:0c:5c:88:28:2b 2019/02/07 16:29:43 net_LAN_eth1_192.168.1.0-24 iPhone
192.168.1.36 18:b4:30:6e:19:e0 2019/02/07 12:35:20 net_LAN_eth1_192.168.1.0-24 09AA01AC36150CPB
192.168.1.41 dc:ef:ca:3d:63:d0 2019/02/07 17:40:45 net_LAN_eth1_192.168.1.0-24 SAMSUNG-SM-G955U
192.168.1.44 28:a0:2b:53:df:d2 2019/02/07 16:28:48 net_LAN_eth1_192.168.1.0-24 iPhone
192.168.1.56 e8:d1:1b:39:8e:cb 2019/02/07 13:52:40 net_LAN_eth1_192.168.1.0-24
192.168.1.63 b4:fb:e4:20:7f:03 2019/02/07 13:28:21 net_LAN_eth1_192.168.1.0-24 GuestAP
192.168.1.64 fc:ec:da:d4:c0:b7 2019/02/07 22:09:53 net_LAN_eth1_192.168.1.0-24 UniFi-CloudKey
192.168.1.65 18:b4:30:71:4d:44 2019/02/07 19:43:28 net_LAN_eth1_192.168.1.0-24 09AA01AC44150J34
192.168.1.66 b4:fb:e4:20:89:f8 2019/02/07 19:47:55 net_LAN_eth1_192.168.1.0-24 UpstairsMasterBedroom
192.168.1.67 cc:6e:a4:eb:58:8c 2019/02/07 21:59:05 net_LAN_eth1_192.168.1.0-24 TIZEN-Y2M6NmU6YTQ6ZWI6NTg6OGMK
192.168.1.70 18:b4:30:c2:99:81 2019/02/07 16:05:29 net_LAN_eth1_192.168.1.0-24 09AA01AC16170R3X
192.168.1.73 b8:e9:37:83:6f:8c 2019/02/07 19:55:41 net_LAN_eth1_192.168.1.0-24 SonosZP
192.168.1.75 74:c2:46:a9:62:83 2019/02/07 18:02:54 net_LAN_eth1_192.168.1.0-24
192.168.1.114 f0:4d:a2:5f:21:a9 2019/02/08 00:09:07 net_LAN_eth1_192.168.1.0-24 MelissaLaptop
192.168.1.155 04:03:d6:2d:ed:ab 2019/02/08 00:09:44 net_LAN_eth1_192.168.1.0-24
192.168.1.160 80:19:34:e7:10:62 2019/02/07 21:48:35 net_LAN_eth1_192.168.1.0-24 LoganPC
192.168.1.208 70:2a:d5:01:a9:61 2019/02/07 22:34:13 net_LAN_eth1_192.168.1.0-24 localhost
----------------
DHCP Statistics
----------------
pool pool size # leased # avail
---- --------- -------- -------
net_LAN_eth1_192.168.1.0-24 249 25 224
----------------
DHCP Client
----------------
----------------
DHCP Client Leases
----------------
interface : eth0
ip address : 192.168.0.6 [Active]
subnet mask: 255.255.255.0
router : 192.168.0.1
name server: 167.206.13.180 167.206.13.181
dhcp server: 192.168.0.1
lease time : 3600
last update: Wed Feb 6 18:57:16 EST 2019
expiry : Wed Feb 06 19:57:13 EST 2019
reason : RENEW
----------------
DHCPV6 Server
----------------
DHCPV6 Server is not configured
----------------
DHCPV6 Relay
----------------
DHCPV6 Relay is not configured
----------------
DHCPV6 Client
----------------
DHCPV6 client is not configured
----------------
DNS
----------------
----------------
DNS Dynamic Status
----------------
Dynamic DNS not configured
----------------
DNS Forwarding Statistics
----------------
----------------
Cache statistics
----------------
Cache size: 10000
Queries forwarded: 2879
Queries answered locally: 887
Total DNS entries inserted into cache: 222
DNS entries removed from cache before expiry: 0
---------------------
Nameserver statistics
---------------------
Server: 167.206.13.180
Queries sent: 1743
Queries retried or failed: 14
Server: 167.206.13.181
Queries sent: 1341
Queries retried or failed: 16
----------------
DNS Forwarding Nameservers
----------------
-----------------------------------------------
Nameservers configured for DNS forwarding
-----------------------------------------------
167.206.13.180 available via 'dhcp eth0'
167.206.13.181 available via 'dhcp eth0'
----------------
FIREWALL
----------------
----------------
Firewall Group
----------------
Name : guest_portal_ports
Type : port
Description: guest portal ports
References : none
Members :
Name : guest_portal_redirector_ports
Type : port
Description: guest portal redirector ports
References : none
Members :
39080
39443
Name : unifi_controller_ports-tcp
Type : port
Description: unifi tcp ports
References : none
Members :
8080
Name : unifi_controller_ports-udp
Type : port
Description: unifi udp ports
References : none
Members :
3478
Name : authorized_guests
Type : address
Family : IPv4
Description: authorized guests MAC addresses
References : GUEST_IN-3007-destination
Members :
Name : guest_allow_addresses
Type : address
Family : IPv4
Description: allow addresses for guests
References : GUEST_IN-3003-destination
Members :
Name : guest_allow_dns_servers
Type : address
Family : IPv4
Description: allow dns servers for guests
References : none
Members :
Name : guest_portal_address
Type : address
Family : IPv4
Description: guest portal address
References : none
Members :
Name : guest_restricted_addresses
Type : address
Family : IPv4
Description: restricted addresses for guests
References : GUEST_IN-3004-destination
Members :
10.0.0.0/8
172.16.0.0/12
192.168.0.0/16
Name : unifi_controller_addresses
Type : address
Family : IPv4
References : none
Members :
192.168.1.4
Name : captive_portal_subnets
Type : network
Family : IPv4
Description: captive portal subnets
References : GUEST_IN-3002-destination
Members :
Name : corporate_network
Type : network
Family : IPv4
Description: corporate subnets
References : GUEST_IN-3005-destination
Members :
192.168.1.0/24
Name : guest_allow_subnets
Type : network
Family : IPv4
Description: allow subnets for guests
References : none
Members :
Name : guest_network
Type : network
Family : IPv4
Description: guest subnets
References : none
Members :
Name : guest_restricted_subnets
Type : network
Family : IPv4
Description: restricted subnets for guests
References : none
Members :
Name : remote_client_vpn_network
Type : network
Family : IPv4
Description: remote client VPN subnets
References : none
Members :
Name : remote_site_vpn_network
Type : network
Family : IPv4
Description: remote site VPN subnets
References : none
Members :
Name : remote_user_vpn_network
Type : network
Family : IPv4
Description: Remote User VPN subnets
References : GUEST_IN-3006-destination
Members :
Name : corporate_networkv6
Type : ipv6-network
Family : IPv6
Description: IPv6 corporate subnets
References : GUESTv6_IN-3001-destination
Members :
Name : guest_networkv6
Type : ipv6-network
Family : IPv6
Description: IPv6 guest subnets
References : none
Members :
----------------
Firewall Detail
----------------
Invalid command
----------------
Firewall Statistics
----------------
--------------------------------------------------------------------------------
IPv4 Firewall "AUTHORIZED_GUESTS" [authorization check packets from guest network]
Inactive - Not applied to any interfaces or zones.
rule packets bytes action description
---- ------- ----- ------ -----------
10000 0 0 DROP DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "GUEST_IN" [packets from guest network]
Inactive - Not applied to any interfaces or zones.
rule packets bytes action description
---- ------- ----- ------ -----------
3001 0 0 ACCEPT allow DNS packets to external name servers
3002 0 0 ACCEPT allow packets to captive portal
3003 0 0 ACCEPT allow packets to allow subnets
3004 0 0 DROP drop packets to restricted subnets
3005 0 0 DROP drop packets to intranet
3006 0 0 DROP drop packets to remote user
3007 0 0 DROP authorized guests white list
10000 0 0 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "GUEST_LOCAL" [packets from guest network to gateway]
Inactive - Not applied to any interfaces or zones.
rule packets bytes action description
---- ------- ----- ------ -----------
3001 0 0 ACCEPT allow DNS
3002 0 0 ACCEPT allow ICMP
3003 0 0 ACCEPT allow to DHCP server
10000 0 0 DROP DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "GUEST_OUT" [packets forward to guest network]
Inactive - Not applied to any interfaces or zones.
rule packets bytes action description
---- ------- ----- ------ -----------
10000 0 0 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "LAN_IN" [packets from intranet]
Active on (eth1,IN)
rule packets bytes action description
---- ------- ----- ------ -----------
6001 60608 7443988 ACCEPT accounting defined network 192.168.1.0/24
10000 0 0 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "LAN_LOCAL" [packets from intranet to gateway]
Active on (eth1,LOCAL)
rule packets bytes action description
---- ------- ----- ------ -----------
10000 26105 2930611 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "LAN_OUT" [packets forward to intranet]
Active on (eth1,OUT)
rule packets bytes action description
---- ------- ----- ------ -----------
6001 50418 7289574 ACCEPT accounting defined network 192.168.1.0/24
10000 0 0 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "WAN_IN" [packets from internet to intranet]
Active on (eth0,IN)
rule packets bytes action description
---- ------- ----- ------ -----------
3001 35251 5459786 ACCEPT allow established/related sessions
3002 0 0 DROP drop invalid state
3003 0 0 ACCEPT PortForward [FTP]
3004 0 0 ACCEPT PortForward [VMWare]
3005 0 0 ACCEPT PortForward [VPN]
3006 0 0 ACCEPT PortForward [Syncthing]
3007 0 0 ACCEPT PortForward [Raspbian SSH]
3008 0 0 ACCEPT PortForward [Raspbian HTTP]
3009 0 0 ACCEPT PortForward [Raspbian ZNC (IRC)]
3010 0 0 ACCEPT PortForward [qBittorrent WebUI]
3011 0 0 ACCEPT PortForward [Server Media Services (UDP)]
3012 0 0 ACCEPT PortForward [Torrent Connection Ports]
3013 0 0 ACCEPT PortForward [FTP Passive]
3014 0 0 ACCEPT PortForward [FTP (RL Project)]
3015 0 0 ACCEPT PortForward [RocketCenter Ubuntu SSH]
3016 0 0 ACCEPT PortForward [RocketCenter Ubuntu WEB]
3017 0 0 ACCEPT PortForward [RocketCenter Ubuntu TEST1]
3018 0 0 ACCEPT PortForward [RocketCenter Ubuntu TEST2]
3019 0 0 ACCEPT PortForward [Terraria Servers]
3020 0 0 ACCEPT PortForward [Portal Knights Server]
3021 0 0 ACCEPT PortForward [Server Media Services (TCP)]
3022 0 0 ACCEPT PortForward [NextCloud Syncing]
3023 0 0 ACCEPT PortForward [Server (NextCloud)]
3024 0 0 ACCEPT PortForward [MineCraft MineOS]
10000 0 0 DROP DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "WAN_LOCAL" [packets from internet to gateway]
Active on (eth0,LOCAL)
rule packets bytes action description
---- ------- ----- ------ -----------
3001 5025 730945 ACCEPT allow established/related sessions
3002 49 3685 DROP drop invalid state
10000 1350 154654 DROP DEFAULT ACTION
--------------------------------------------------------------------------------
IPv4 Firewall "WAN_OUT" [packets to internet]
Active on (eth0,OUT)
rule packets bytes action description
---- ------- ----- ------ -----------
10000 60598 7443316 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "AUTHORIZED_GUESTSv6" [authorization check packets from guest network]
Inactive - Not applied to any interfaces or zones.
rule packets bytes action description
---- ------- ----- ------ -----------
10000 0 0 DROP DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "GUESTv6_IN" [packets from guest network]
Inactive - Not applied to any interfaces or zones.
rule packets bytes action description
---- ------- ----- ------ -----------
3001 0 0 DROP drop packets to intranet
10000 0 0 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "GUESTv6_LOCAL" [packets from guest network to gateway]
Inactive - Not applied to any interfaces or zones.
rule packets bytes action description
---- ------- ----- ------ -----------
3001 0 0 ACCEPT allow DNS
3002 0 0 ACCEPT allow ICMP
10000 0 0 DROP DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "GUESTv6_OUT" [packets forward to guest network]
Inactive - Not applied to any interfaces or zones.
rule packets bytes action description
---- ------- ----- ------ -----------
10000 0 0 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "LANv6_IN" [packets from intranet]
Active on (eth1,IN)
rule packets bytes action description
---- ------- ----- ------ -----------
10000 0 0 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "LANv6_LOCAL" [packets from intranet to gateway]
Active on (eth1,LOCAL)
rule packets bytes action description
---- ------- ----- ------ -----------
10000 65 4246 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "LANv6_OUT" [packets forward to intranet]
Active on (eth1,OUT)
rule packets bytes action description
---- ------- ----- ------ -----------
10000 0 0 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "WANv6_IN" [packets from internet to intranet]
Active on (eth0,IN)
rule packets bytes action description
---- ------- ----- ------ -----------
3001 0 0 ACCEPT allow established/related sessions
3002 0 0 DROP drop invalid state
10000 0 0 DROP DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "WANv6_LOCAL" [packets from internet to gateway]
Active on (eth0,LOCAL)
rule packets bytes action description
---- ------- ----- ------ -----------
3001 0 0 ACCEPT Allow neighbor advertisements
3002 0 0 ACCEPT Allow neighbor solicitation
3003 0 0 ACCEPT allow established/related sessions
3004 0 0 DROP drop invalid state
10000 250 21412 DROP DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "WANv6_OUT" [packets to internet]
Active on (eth0,OUT)
rule packets bytes action description
---- ------- ----- ------ -----------
10000 0 0 ACCEPT DEFAULT ACTION
----------------
IPSec
----------------
IPSec is not configured
----------------
NAT
----------------
----------------
NAT Rules
----------------
Type Codes: SRC - source, DST - destination, MASQ - masquerade
X at the front of rule implies rule is excluded
rule type intf translation
---- ---- ---- -----------
6001 MASQ eth0 saddr ANY to 192.168.0.6
proto-all sport ANY
6002 MASQ eth0 saddr ANY to 192.168.0.6
proto-all sport ANY
6003 MASQ eth0 saddr ANY to 192.168.0.6
proto-all sport ANY
----------------
NAT Statistics
----------------
rule count type IN OUT description
---- ---------- ---- -------- -------- -----------
6001 11931 MASQ - eth0 MASQ corporate_network to WAN
6002 0 MASQ - eth0 MASQ remote_user_vpn_network to WAN
6003 0 MASQ - eth0 MASQ guest_network to WAN
----------------
NAT Translations Detail
----------------
Pre-NAT src Pre-NAT dst Post-NAT src Post-NAT dst
192.168.1.114:49231 23.101.156.198:443 192.168.0.6:49231 23.101.156.198:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 1 use: 1
192.168.1.114:58334 104.16.91.60:443 192.168.0.6:58334 104.16.91.60:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7228 use: 1
192.168.1.114:58330 199.232.38.49:443 192.168.0.6:58330 199.232.38.49:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7232 use: 1
192.168.1.34:55798 52.94.228.85:443 192.168.0.6:55798 52.94.228.85:443
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 6185 use: 1
192.168.1.3:47188 185.45.195.180:20144 192.168.0.6:47188 185.45.195.180:20144
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.15:4906 162.125.18.133:443 192.168.0.6:4906 162.125.18.133:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7376 use: 1
192.168.1.114:58157 172.217.12.174:443 192.168.0.6:58157 172.217.12.174:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7340 use: 1
192.168.1.15:60763 35.186.224.47:443 192.168.0.6:60763 35.186.224.47:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7428 use: 1
192.168.1.114:49261 172.217.10.14:443 192.168.0.6:49261 172.217.10.14:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.3:42628 185.203.56.8:64645 192.168.0.6:42628 185.203.56.8:64645
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7422 use: 1
192.168.1.75:58493 104.154.127.71:4070 192.168.0.6:58493 104.154.127.71:4070
tcp: snat: 192.168.1.75 ==> 192.168.0.6 timeout: 7437 use: 1
192.168.1.15:2135 172.217.10.78:443 192.168.0.6:2135 172.217.10.78:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7419 use: 1
192.168.1.27:35956 172.217.7.2:443 192.168.0.6:35956 172.217.7.2:443
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 7415 use: 1
192.168.1.41:42264 34.255.105.14:5223 192.168.0.6:42264 34.255.105.14:5223
tcp: snat: 192.168.1.41 ==> 192.168.0.6 timeout: 3029 use: 1
192.168.1.15:1773 52.201.127.45:443 192.168.0.6:1773 52.201.127.45:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.15:4385 34.199.240.87:443 192.168.0.6:4385 34.199.240.87:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.34:54522 52.94.241.86:80 192.168.0.6:54522 52.94.241.86:80
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 26 use: 1
192.168.1.114:49266 31.13.71.7:443 192.168.0.6:49266 31.13.71.7:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.56:50124 208.54.7.213:123 192.168.0.6:50124 208.54.7.213:123
udp: snat: 192.168.1.56 ==> 192.168.0.6 timeout: 172 use: 1
192.168.1.8:49157 52.35.246.220:443 192.168.0.6:49157 52.35.246.220:443
tcp: snat: 192.168.1.8 ==> 192.168.0.6 timeout: 7419 use: 1
192.168.1.41:59698 31.13.71.3:443 192.168.0.6:59698 31.13.71.3:443
tcp: snat: 192.168.1.41 ==> 192.168.0.6 timeout: 6937 use: 1
192.168.1.114:49251 172.217.7.10:443 192.168.0.6:49251 172.217.7.10:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.3:42928 185.203.56.8:64645 192.168.0.6:42928 185.203.56.8:64645
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7422 use: 1
192.168.1.15:2459 23.8.117.64:443 192.168.0.6:2459 23.8.117.64:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 5329 use: 1
192.168.1.114:58632 93.184.215.201:443 192.168.0.6:58632 93.184.215.201:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 109 use: 2
192.168.1.70:49146 54.157.15.224:9543 192.168.0.6:49146 54.157.15.224:9543
tcp: snat: 192.168.1.70 ==> 192.168.0.6 timeout: 7362 use: 1
192.168.1.3:34014 104.27.145.205:80 192.168.0.6:34014 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 26 use: 1
192.168.1.15:5215 172.217.11.46:443 192.168.0.6:5215 172.217.11.46:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7431 use: 1
192.168.1.3:58218 185.45.195.180:20144 192.168.0.6:58218 185.45.195.180:20144
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.15:60703 67.22.32.162:443 192.168.0.6:60703 67.22.32.162:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7439 use: 1
192.168.1.27:42678 172.217.10.34:443 192.168.0.6:42678 172.217.10.34:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 7 use: 1
192.168.1.155:65308 95.216.149.205:80 192.168.0.6:65308 95.216.149.205:80
tcp: snat: 192.168.1.155 ==> 192.168.0.6 timeout: 18 use: 1
192.168.1.3:34404 185.21.216.160:52249 192.168.0.6:34404 185.21.216.160:52249
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.114:57884 96.8.93.203:443 192.168.0.6:57884 96.8.93.203:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7245 use: 1
192.168.1.3:45644 185.56.20.14:54755 192.168.0.6:45644 185.56.20.14:54755
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.114:58547 69.169.86.38:443 192.168.0.6:58547 69.169.86.38:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7231 use: 1
192.168.1.114:49268 172.217.7.14:443 192.168.0.6:49268 172.217.7.14:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.4:57137 162.250.5.75:5938 192.168.0.6:57137 162.250.5.75:5938
tcp: snat: 192.168.1.4 ==> 192.168.0.6 timeout: 7434 use: 2
192.168.1.114:58158 172.217.6.206:443 192.168.0.6:58158 172.217.6.206:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7210 use: 1
192.168.1.15:60753 52.112.64.215:443 192.168.0.6:60753 52.112.64.215:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7432 use: 1
192.168.1.3:45626 185.56.20.14:54755 192.168.0.6:45626 185.56.20.14:54755
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.34:37637 72.21.192.213:123 192.168.0.6:37637 72.21.192.213:123
udp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 16 use: 1
192.168.1.3:53992 5.196.81.18:57699 192.168.0.6:53992 5.196.81.18:57699
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7405 use: 1
192.168.1.3:42880 185.45.195.180:20144 192.168.0.6:42880 185.45.195.180:20144
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.3:45642 185.56.20.14:54755 192.168.0.6:45642 185.56.20.14:54755
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.3:33986 104.27.145.205:80 192.168.0.6:33986 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 21 use: 1
192.168.1.15:60712 216.93.253.13:3158 192.168.0.6:60712 216.93.253.13:3158
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7424 use: 1
192.168.1.27:57216 172.217.12.138:443 192.168.0.6:57216 172.217.12.138:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 167 use: 1
192.168.1.3:41876 99.147.238.134:52082 192.168.0.6:41876 99.147.238.134:52082
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 21 use: 1
192.168.1.114:49244 13.68.117.223:443 192.168.0.6:49244 13.68.117.223:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7428 use: 1
192.168.1.15:4755 104.88.11.208:443 192.168.0.6:4755 104.88.11.208:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7003 use: 1
192.168.1.114:49263 152.199.4.33:443 192.168.0.6:49263 152.199.4.33:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7435 use: 2
192.168.1.27:35959 172.217.7.2:443 192.168.0.6:35959 172.217.7.2:443
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 7416 use: 1
192.168.1.114:49241 104.208.165.109:443 192.168.0.6:49241 104.208.165.109:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7424 use: 1
192.168.1.15:4868 23.8.117.64:443 192.168.0.6:4868 23.8.117.64:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7395 use: 1
192.168.1.114:49233 13.90.95.57:443 192.168.0.6:49233 13.90.95.57:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 1 use: 1
192.168.1.114:49238 40.122.36.26:443 192.168.0.6:49238 40.122.36.26:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7418 use: 1
192.168.1.34:58948 52.216.128.75:80 192.168.0.6:58948 52.216.128.75:80
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 7426 use: 1
192.168.1.15:60755 169.48.173.166:5938 192.168.0.6:60755 169.48.173.166:5938
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7413 use: 1
192.168.1.114:58522 96.6.160.234:443 192.168.0.6:58522 96.6.160.234:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7241 use: 1
192.168.1.21:49393 172.217.11.42:443 192.168.0.6:49393 172.217.11.42:443
tcp: snat: 192.168.1.21 ==> 192.168.0.6 timeout: 28 use: 1
192.168.1.114:49240 13.92.27.116:443 192.168.0.6:49240 13.92.27.116:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 1 use: 1
192.168.1.114:58444 151.101.208.175:443 192.168.0.6:58444 151.101.208.175:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7237 use: 1
192.168.1.15:3415 104.18.37.238:80 192.168.0.6:3415 104.18.37.238:80
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7410 use: 1
192.168.1.27:60096 52.199.41.99:5223 192.168.0.6:60096 52.199.41.99:5223
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 3117 use: 1
192.168.1.15:5151 192.241.179.178:443 192.168.0.6:5151 192.241.179.178:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.114:58525 96.6.160.234:443 192.168.0.6:58525 96.6.160.234:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7241 use: 1
192.168.1.208:39151 23.33.99.45:443 192.168.0.6:39151 23.33.99.45:443
tcp: snat: 192.168.1.208 ==> 192.168.0.6 timeout: 1699 use: 1
192.168.1.40:37986 72.21.214.79:80 192.168.0.6:37986 72.21.214.79:80
tcp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 27 use: 1
192.168.1.15:53499 10.254.250.103:161 192.168.0.6:53499 10.254.250.103:161
udp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 28 use: 1
192.168.1.3:38470 185.148.3.35:54933 192.168.0.6:38470 185.148.3.35:54933
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7426 use: 1
192.168.1.114:58523 96.6.160.234:443 192.168.0.6:58523 96.6.160.234:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7241 use: 1
192.168.1.114:49252 172.217.9.228:443 192.168.0.6:49252 172.217.9.228:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.114:58424 199.16.156.232:443 192.168.0.6:58424 199.16.156.232:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7222 use: 2
192.168.1.114:58528 96.6.160.234:443 192.168.0.6:58528 96.6.160.234:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7241 use: 1
192.168.1.73:41072 167.206.87.185:80 192.168.0.6:41072 167.206.87.185:80
tcp: snat: 192.168.1.73 ==> 192.168.0.6 timeout: 3418 use: 1
192.168.1.114:49242 52.163.217.227:443 192.168.0.6:49242 52.163.217.227:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7426 use: 1
192.168.1.3:51544 179.208.165.203:53065 192.168.0.6:51544 179.208.165.203:53065
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 119 use: 1
192.168.1.27:53538 162.216.57.152:443 192.168.0.6:53538 162.216.57.152:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 18 use: 1
192.168.1.27:50940 172.217.10.42:443 192.168.0.6:50940 172.217.10.42:443
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 8 use: 1
192.168.1.15:53499 10.254.250.65:161 192.168.0.6:53499 10.254.250.65:161
udp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 28 use: 1
192.168.1.3:49348 144.76.73.108:58937 192.168.0.6:49348 144.76.73.108:58937
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.114:49179 104.18.25.243:80 192.168.0.6:49179 104.18.25.243:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 78 use: 1
192.168.1.15:5031 104.16.59.37:443 192.168.0.6:5031 104.16.59.37:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7418 use: 1
192.168.1.208:39142 23.33.99.45:443 192.168.0.6:39142 23.33.99.45:443
tcp: snat: 192.168.1.208 ==> 192.168.0.6 timeout: 1697 use: 1
192.168.1.3:57306 195.201.9.37:22067 192.168.0.6:57306 195.201.9.37:22067
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7420 use: 1
192.168.1.114:49259 31.13.71.7:443 192.168.0.6:49259 31.13.71.7:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.114:58407 162.247.242.18:443 192.168.0.6:58407 162.247.242.18:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7212 use: 2
192.168.1.17:4500 172.106.11.98:4500 192.168.0.6:4500 172.106.11.98:4500
udp: snat: 192.168.1.17 ==> 192.168.0.6 timeout: 166 use: 1
192.168.1.3:38496 24.1.14.202:19090 192.168.0.6:38496 24.1.14.202:19090
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7438 use: 1
192.168.1.64:49880 54.230.36.74:443 192.168.0.6:49880 54.230.36.74:443
tcp: snat: 192.168.1.64 ==> 192.168.0.6 timeout: 7426 use: 1
192.168.1.15:2279 172.217.12.195:443 192.168.0.6:2279 172.217.12.195:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7398 use: 1
192.168.1.15:5079 77.79.249.197:443 192.168.0.6:5079 77.79.249.197:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7421 use: 1
192.168.1.40:50507 54.165.163.243:443 192.168.0.6:50507 54.165.163.243:443
tcp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.114:58151 23.192.65.167:443 192.168.0.6:58151 23.192.65.167:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7248 use: 1
192.168.1.17:16393 67.85.158.233:16393 192.168.0.6:16393 67.85.158.233:16393
udp: snat: 192.168.1.17 ==> 192.168.0.6 timeout: 177 use: 1
192.168.1.40:60709 207.171.178.6:123 192.168.0.6:60709 207.171.178.6:123
udp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 17 use: 1
192.168.1.15:3223 40.97.190.2:443 192.168.0.6:3223 40.97.190.2:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.27:50297 216.58.219.206:443 192.168.0.6:50297 216.58.219.206:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 169 use: 1
192.168.1.34:34675 104.154.127.111:4070 192.168.0.6:34675 104.154.127.111:4070
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 7422 use: 1
192.168.1.73:48332 3.86.191.11:443 192.168.0.6:48332 3.86.191.11:443
tcp: snat: 192.168.1.73 ==> 192.168.0.6 timeout: 7439 use: 2
192.168.1.114:57656 23.52.2.243:443 192.168.0.6:57656 23.52.2.243:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7252 use: 1
192.168.1.3:38814 185.148.3.35:54933 192.168.0.6:38814 185.148.3.35:54933
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7426 use: 1
192.168.1.114:58267 31.13.71.1:443 192.168.0.6:58267 31.13.71.1:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7249 use: 1
192.168.1.3:39982 185.149.90.88:51037 192.168.0.6:39982 185.149.90.88:51037
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7393 use: 1
192.168.1.3:60328 177.228.64.61:51413 192.168.0.6:60328 177.228.64.61:51413
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 118 use: 1
192.168.1.114:49239 52.114.142.67:443 192.168.0.6:49239 52.114.142.67:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7419 use: 1
192.168.1.155:21211 163.172.141.219:53 192.168.0.6:21211 163.172.141.219:53
udp: snat: 192.168.1.155 ==> 192.168.0.6 timeout: 18 use: 1
192.168.1.114:58531 52.54.170.1:80 192.168.0.6:58531 52.54.170.1:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7248 use: 1
192.168.1.3:60318 177.228.64.61:51413 192.168.0.6:60318 177.228.64.61:51413
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 117 use: 1
192.168.1.65:36058 52.72.42.156:9543 192.168.0.6:36058 52.72.42.156:9543
tcp: snat: 192.168.1.65 ==> 192.168.0.6 timeout: 7395 use: 1
192.168.1.114:58311 151.101.210.2:443 192.168.0.6:58311 151.101.210.2:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7230 use: 2
192.168.1.8:49159 54.70.179.77:443 192.168.0.6:49159 54.70.179.77:443
tcp: snat: 192.168.1.8 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.114:49230 13.90.95.57:443 192.168.0.6:49230 13.90.95.57:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 1 use: 1
192.168.1.15:60782 13.89.187.212:443 192.168.0.6:60782 13.89.187.212:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 6597 use: 1
192.168.1.114:49243 52.163.217.227:443 192.168.0.6:49243 52.163.217.227:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7426 use: 1
192.168.1.4:54472 54.174.190.185:443 192.168.0.6:54472 54.174.190.185:443
tcp: snat: 192.168.1.4 ==> 192.168.0.6 timeout: 7430 use: 1
192.168.1.114:49249 173.194.175.188:5228 192.168.0.6:49249 173.194.175.188:5228
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.69:42927 8.8.8.8:80 192.168.0.6:42927 8.8.8.8:80
tcp: snat: 192.168.1.69 ==> 192.168.0.6 timeout: 67 use: 1
192.168.1.208:37106 52.214.221.208:5223 192.168.0.6:37106 52.214.221.208:5223
tcp: snat: 192.168.1.208 ==> 192.168.0.6 timeout: 1436 use: 1
192.168.1.21:49378 17.249.172.89:443 192.168.0.6:49378 17.249.172.89:443
tcp: snat: 192.168.1.21 ==> 192.168.0.6 timeout: 7284 use: 1
192.168.1.3:34026 104.27.145.205:80 192.168.0.6:34026 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 29 use: 1
192.168.1.114:49185 188.172.251.38:5938 192.168.0.6:49185 188.172.251.38:5938
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7416 use: 1
192.168.1.114:58423 199.16.156.11:443 192.168.0.6:58423 199.16.156.11:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7228 use: 1
192.168.1.114:58524 96.6.160.234:443 192.168.0.6:58524 96.6.160.234:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7241 use: 1
192.168.1.21:50438 162.216.57.148:443 192.168.0.6:50438 162.216.57.148:443
udp: snat: 192.168.1.21 ==> 192.168.0.6 timeout: 161 use: 1
192.168.1.27:57000 162.216.57.161:443 192.168.0.6:57000 162.216.57.161:443
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 7414 use: 1
192.168.1.3:38210 185.148.3.35:54933 192.168.0.6:38210 185.148.3.35:54933
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7426 use: 1
192.168.1.15:4819 40.97.28.114:443 192.168.0.6:4819 40.97.28.114:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7365 use: 1
192.168.1.114:58331 172.217.11.14:443 192.168.0.6:58331 172.217.11.14:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7237 use: 1
192.168.1.40:47446 52.85.104.114:80 192.168.0.6:47446 52.85.104.114:80
tcp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 17 use: 1
192.168.1.27:56999 162.216.57.161:443 192.168.0.6:56999 162.216.57.161:443
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 7414 use: 1
192.168.1.3:56614 144.76.73.108:58937 192.168.0.6:56614 144.76.73.108:58937
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.73:49887 104.154.127.232:4070 192.168.0.6:49887 104.154.127.232:4070
tcp: snat: 192.168.1.73 ==> 192.168.0.6 timeout: 7433 use: 1
192.168.1.40:54008 72.21.214.79:80 192.168.0.6:54008 72.21.214.79:80
tcp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 27 use: 1
192.168.1.114:58609 172.217.6.206:443 192.168.0.6:58609 172.217.6.206:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 26 use: 1
192.168.1.40:59984 207.171.178.6:123 192.168.0.6:59984 207.171.178.6:123
udp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 17 use: 1
192.168.1.15:2190 172.217.197.189:443 192.168.0.6:2190 172.217.197.189:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.27:57935 172.217.6.194:443 192.168.0.6:57935 172.217.6.194:443
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 7415 use: 1
192.168.1.3:37308 185.148.3.35:54933 192.168.0.6:37308 185.148.3.35:54933
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7426 use: 1
192.168.1.114:49267 31.13.71.7:443 192.168.0.6:49267 31.13.71.7:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 5 use: 1
192.168.1.114:49262 172.217.10.72:443 192.168.0.6:49262 172.217.10.72:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.3:45652 185.56.20.14:54755 192.168.0.6:45652 185.56.20.14:54755
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.3:45628 185.56.20.14:54755 192.168.0.6:45628 185.56.20.14:54755
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.34:60037 52.85.104.206:80 192.168.0.6:60037 52.85.104.206:80
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 16 use: 1
192.168.1.114:49235 52.219.58.8:443 192.168.0.6:49235 52.219.58.8:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 105 use: 1
192.168.1.208:39141 23.33.99.45:443 192.168.0.6:39141 23.33.99.45:443
tcp: snat: 192.168.1.208 ==> 192.168.0.6 timeout: 1697 use: 1
192.168.1.3:57026 144.76.73.108:58937 192.168.0.6:57026 144.76.73.108:58937
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.3:54500 60.241.254.210:51413 192.168.0.6:54500 60.241.254.210:51413
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 119 use: 1
192.168.1.114:49254 31.13.71.7:443 192.168.0.6:49254 31.13.71.7:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.114:57711 172.217.10.2:443 192.168.0.6:57711 172.217.10.2:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7240 use: 2
192.168.1.15:2787 40.97.126.178:443 192.168.0.6:2787 40.97.126.178:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.114:49164 167.206.87.88:80 192.168.0.6:49164 167.206.87.88:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7346 use: 1
192.168.1.15:4892 173.194.206.188:5228 192.168.0.6:4892 173.194.206.188:5228
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7416 use: 1
192.168.1.27:53003 173.194.205.188:5228 192.168.0.6:53003 173.194.205.188:5228
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 7167 use: 1
192.168.1.15:2616 162.250.5.75:5938 192.168.0.6:2616 162.250.5.75:5938
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.56:50124 208.54.7.212:123 192.168.0.6:50124 208.54.7.212:123
udp: snat: 192.168.1.56 ==> 192.168.0.6 timeout: 172 use: 1
192.168.1.15:5049 104.27.146.228:443 192.168.0.6:5049 104.27.146.228:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7397 use: 1
192.168.1.15:60686 162.254.192.101:27020 192.168.0.6:60686 162.254.192.101:27020
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7437 use: 1
192.168.1.114:58599 151.101.210.109:443 192.168.0.6:58599 151.101.210.109:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7251 use: 1
192.168.1.3:52874 5.79.77.46:50201 192.168.0.6:52874 5.79.77.46:50201
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7401 use: 1
192.168.1.155:52361 163.172.141.219:53 192.168.0.6:52361 163.172.141.219:53
udp: snat: 192.168.1.155 ==> 192.168.0.6 timeout: 18 use: 1
192.168.1.15:2734 104.18.36.238:80 192.168.0.6:2734 104.18.36.238:80
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7439 use: 1
192.168.1.3:43750 185.56.20.18:57616 192.168.0.6:43750 185.56.20.18:57616
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.15:5135 172.217.10.74:443 192.168.0.6:5135 172.217.10.74:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7287 use: 1
192.168.1.34:55800 52.94.228.85:443 192.168.0.6:55800 52.94.228.85:443
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 6541 use: 1
192.168.1.15:62042 52.35.187.130:443 192.168.0.6:62042 52.35.187.130:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.3:34002 104.27.145.205:80 192.168.0.6:34002 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 22 use: 1
192.168.1.15:5093 172.217.12.142:443 192.168.0.6:5093 172.217.12.142:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7432 use: 1
192.168.1.208:42416 23.23.60.197:443 192.168.0.6:42416 23.23.60.197:443
tcp: snat: 192.168.1.208 ==> 192.168.0.6 timeout: 1663 use: 1
192.168.1.27:54644 162.216.57.161:443 192.168.0.6:54644 162.216.57.161:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 4 use: 1
192.168.1.3:56406 144.76.73.108:58937 192.168.0.6:56406 144.76.73.108:58937
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.15:5081 193.59.178.227:443 192.168.0.6:5081 193.59.178.227:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 56 use: 2
192.168.1.40:36798 104.154.127.35:4070 192.168.0.6:36798 104.154.127.35:4070
tcp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 7439 use: 1
192.168.1.23:40482 34.240.53.34:5223 192.168.0.6:40482 34.240.53.34:5223
tcp: snat: 192.168.1.23 ==> 192.168.0.6 timeout: 6815 use: 1
192.168.1.34:45830 72.21.192.213:123 192.168.0.6:45830 72.21.192.213:123
udp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 16 use: 1
192.168.1.4:51488 188.172.214.41:5938 192.168.0.6:51488 188.172.214.41:5938
tcp: snat: 192.168.1.4 ==> 192.168.0.6 timeout: 7410 use: 1
192.168.1.27:59302 172.217.7.2:443 192.168.0.6:59302 172.217.7.2:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 5 use: 1
192.168.1.114:49247 172.217.3.109:443 192.168.0.6:49247 172.217.3.109:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.155:14784 163.172.141.219:53 192.168.0.6:14784 163.172.141.219:53
udp: snat: 192.168.1.155 ==> 192.168.0.6 timeout: 18 use: 1
192.168.1.15:60663 209.85.201.125:5222 192.168.0.6:60663 209.85.201.125:5222
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7416 use: 1
192.168.1.75:55766 52.46.156.66:443 192.168.0.6:55766 52.46.156.66:443
tcp: snat: 192.168.1.75 ==> 192.168.0.6 timeout: 7430 use: 1
192.168.1.3:33978 104.27.145.205:80 192.168.0.6:33978 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 20 use: 1
192.168.1.34:40908 52.46.132.49:443 192.168.0.6:40908 52.46.132.49:443
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 7424 use: 1
192.168.1.114:49269 130.211.26.229:443 192.168.0.6:49269 130.211.26.229:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7436 use: 1
192.168.1.114:58101 172.217.10.130:80 192.168.0.6:58101 172.217.10.130:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7239 use: 2
192.168.1.3:45666 185.56.20.14:54755 192.168.0.6:45666 185.56.20.14:54755
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7375 use: 1
192.168.1.3:35116 82.102.24.168:48397 192.168.0.6:35116 82.102.24.168:48397
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7396 use: 1
192.168.1.15:60694 52.173.26.181:443 192.168.0.6:60694 52.173.26.181:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7409 use: 1
192.168.1.41:40088 173.194.207.188:5228 192.168.0.6:40088 173.194.207.188:5228
tcp: snat: 192.168.1.41 ==> 192.168.0.6 timeout: 7427 use: 1
192.168.1.15:60714 172.217.197.125:5222 192.168.0.6:60714 172.217.197.125:5222
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7438 use: 1
192.168.1.155:24342 163.172.141.219:53 192.168.0.6:24342 163.172.141.219:53
udp: snat: 192.168.1.155 ==> 192.168.0.6 timeout: 18 use: 1
192.168.1.3:34008 104.27.145.205:80 192.168.0.6:34008 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 24 use: 1
192.168.1.155:62960 163.172.141.219:53 192.168.0.6:62960 163.172.141.219:53
udp: snat: 192.168.1.155 ==> 192.168.0.6 timeout: 18 use: 1
192.168.1.114:58548 69.169.86.39:443 192.168.0.6:58548 69.169.86.39:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7231 use: 1
192.168.1.36:40291 52.206.238.53:9543 192.168.0.6:40291 52.206.238.53:9543
tcp: snat: 192.168.1.36 ==> 192.168.0.6 timeout: 7400 use: 1
192.168.1.4:57969 35.164.53.110:8883 192.168.0.6:57969 35.164.53.110:8883
tcp: snat: 192.168.1.4 ==> 192.168.0.6 timeout: 7410 use: 1
192.168.1.56:50123 208.54.7.213:123 192.168.0.6:50123 208.54.7.213:123
udp: snat: 192.168.1.56 ==> 192.168.0.6 timeout: 168 use: 1
192.168.1.114:49248 172.217.12.195:443 192.168.0.6:49248 172.217.12.195:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.114:49236 13.107.4.52:80 192.168.0.6:49236 13.107.4.52:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7417 use: 1
192.168.1.114:49256 31.13.71.7:443 192.168.0.6:49256 31.13.71.7:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.67:43358 13.113.78.181:5223 192.168.0.6:43358 13.113.78.181:5223
tcp: snat: 192.168.1.67 ==> 192.168.0.6 timeout: 7413 use: 1
192.168.1.27:41712 162.216.57.159:443 192.168.0.6:41712 162.216.57.159:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 37 use: 1
192.168.1.114:49245 31.13.71.36:443 192.168.0.6:49245 31.13.71.36:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.3:48740 192.131.44.118:60599 192.168.0.6:48740 192.131.44.118:60599
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7421 use: 1
192.168.1.114:58426 104.18.98.194:443 192.168.0.6:58426 104.18.98.194:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7230 use: 1
192.168.1.27:59601 172.217.9.238:443 192.168.0.6:59601 172.217.9.238:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 2 use: 1
192.168.1.48:58909 18.219.62.95:443 192.168.0.6:58909 18.219.62.95:443
tcp: snat: 192.168.1.48 ==> 192.168.0.6 timeout: 7424 use: 1
192.168.1.114:58071 172.217.10.130:80 192.168.0.6:58071 172.217.10.130:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7206 use: 1
192.168.1.15:4510 172.217.6.206:443 192.168.0.6:4510 172.217.6.206:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7433 use: 1
192.168.1.114:49264 130.211.16.53:443 192.168.0.6:49264 130.211.16.53:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7435 use: 2
192.168.1.3:57390 185.45.195.180:20144 192.168.0.6:57390 185.45.195.180:20144
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.114:58320 172.217.6.226:443 192.168.0.6:58320 172.217.6.226:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7237 use: 1
192.168.1.114:49234 52.114.74.43:443 192.168.0.6:49234 52.114.74.43:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 2 use: 1
192.168.1.75:55956 23.23.78.0:33434 192.168.0.6:55956 23.23.78.0:33434
udp: snat: 192.168.1.75 ==> 192.168.0.6 timeout: 14 use: 1
192.168.1.15:3222 40.97.190.2:443 192.168.0.6:3222 40.97.190.2:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7423 use: 1
192.168.1.15:5185 162.125.18.133:443 192.168.0.6:5185 162.125.18.133:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7407 use: 1
192.168.1.114:57956 104.102.91.209:80 192.168.0.6:57956 104.102.91.209:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7248 use: 1
192.168.1.3:44956 91.121.19.126:51103 192.168.0.6:44956 91.121.19.126:51103
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7420 use: 1
192.168.1.114:49201 23.192.7.46:80 192.168.0.6:49201 23.192.7.46:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7416 use: 1
192.168.1.114:49203 23.192.7.46:443 192.168.0.6:49203 23.192.7.46:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7416 use: 1
192.168.1.29:51463 172.217.10.138:443 192.168.0.6:51463 172.217.10.138:443
tcp: snat: 192.168.1.29 ==> 192.168.0.6 timeout: 7296 use: 1
192.168.1.15:2088 172.217.12.174:443 192.168.0.6:2088 172.217.12.174:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7427 use: 1
192.168.1.15:60781 13.89.187.212:443 192.168.0.6:60781 13.89.187.212:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 6182 use: 1
192.168.1.23:44582 209.85.201.188:5228 192.168.0.6:44582 209.85.201.188:5228
tcp: snat: 192.168.1.23 ==> 192.168.0.6 timeout: 7425 use: 1
192.168.1.208:39140 23.33.99.45:443 192.168.0.6:39140 23.33.99.45:443
tcp: snat: 192.168.1.208 ==> 192.168.0.6 timeout: 1697 use: 1
192.168.1.114:58385 209.85.201.188:5228 192.168.0.6:58385 209.85.201.188:5228
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7221 use: 1
192.168.1.114:58338 172.217.12.206:443 192.168.0.6:58338 172.217.12.206:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7237 use: 1
192.168.1.34:35123 72.21.214.79:80 192.168.0.6:35123 72.21.214.79:80
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 26 use: 1
192.168.1.114:49237 52.114.128.9:443 192.168.0.6:49237 52.114.128.9:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7418 use: 1
192.168.1.52:50341 104.155.18.91:443 192.168.0.6:50341 104.155.18.91:443
tcp: snat: 192.168.1.52 ==> 192.168.0.6 timeout: 7429 use: 1
192.168.1.3:34012 104.27.145.205:80 192.168.0.6:34012 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 25 use: 2
192.168.1.27:54027 172.217.9.246:443 192.168.0.6:54027 172.217.9.246:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 168 use: 1
192.168.1.3:37434 172.104.211.98:443 192.168.0.6:37434 172.104.211.98:443
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7425 use: 1
192.168.1.3:44806 46.182.109.195:62102 192.168.0.6:44806 46.182.109.195:62102
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7399 use: 1
192.168.1.3:52956 93.176.178.160:51413 192.168.0.6:52956 93.176.178.160:51413
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 21 use: 1
192.168.1.114:58466 199.232.38.2:443 192.168.0.6:58466 199.232.38.2:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7230 use: 1
192.168.1.27:58102 172.217.12.138:443 192.168.0.6:58102 172.217.12.138:443
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 7408 use: 1
192.168.1.114:58530 96.6.160.234:443 192.168.0.6:58530 96.6.160.234:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7241 use: 1
192.168.1.3:45170 81.171.8.90:10153 192.168.0.6:45170 81.171.8.90:10153
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7368 use: 1
192.168.1.114:58196 23.192.65.167:443 192.168.0.6:58196 23.192.65.167:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7214 use: 1
192.168.1.207:35853 52.72.46.22:443 192.168.0.6:35853 52.72.46.22:443
tcp: snat: 192.168.1.207 ==> 192.168.0.6 timeout: 1413 use: 1
192.168.1.114:49232 52.114.74.43:443 192.168.0.6:49232 52.114.74.43:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 1 use: 1
192.168.1.208:50638 34.254.141.153:5223 192.168.0.6:50638 34.254.141.153:5223
tcp: snat: 192.168.1.208 ==> 192.168.0.6 timeout: 1732 use: 1
192.168.1.114:49250 172.217.10.10:443 192.168.0.6:49250 172.217.10.10:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.114:49255 172.217.10.14:443 192.168.0.6:49255 172.217.10.14:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.114:49169 216.93.253.12:3158 192.168.0.6:49169 216.93.253.12:3158
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7409 use: 1
192.168.1.3:57298 91.121.19.126:51103 192.168.0.6:57298 91.121.19.126:51103
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7420 use: 1
192.168.1.4:57590 54.174.190.185:443 192.168.0.6:57590 54.174.190.185:443
tcp: snat: 192.168.1.4 ==> 192.168.0.6 timeout: 7438 use: 1
192.168.1.114:57980 172.217.10.130:80 192.168.0.6:57980 172.217.10.130:80
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7239 use: 1
192.168.1.56:4500 208.54.90.21:4500 192.168.0.6:4500 208.54.90.21:4500
udp: snat: 192.168.1.56 ==> 192.168.0.6 timeout: 165 use: 1
192.168.1.75:34351 23.23.78.0:33434 192.168.0.6:34351 23.23.78.0:33434
udp: snat: 192.168.1.75 ==> 192.168.0.6 timeout: 19 use: 1
192.168.1.3:43816 95.148.85.239:33063 192.168.0.6:43816 95.148.85.239:33063
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7428 use: 1
192.168.1.114:49258 31.13.71.7:443 192.168.0.6:49258 31.13.71.7:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 4 use: 1
192.168.1.15:2819 40.97.126.50:443 192.168.0.6:2819 40.97.126.50:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7427 use: 2
192.168.1.114:49265 172.217.10.78:443 192.168.0.6:49265 172.217.10.78:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7435 use: 1
192.168.1.34:33894 52.46.133.39:443 192.168.0.6:33894 52.46.133.39:443
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 92 use: 1
192.168.1.15:4702 40.97.154.66:443 192.168.0.6:4702 40.97.154.66:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7433 use: 1
192.168.1.40:46132 205.251.243.55:443 192.168.0.6:46132 205.251.243.55:443
tcp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 7401 use: 1
192.168.1.67:42230 18.188.250.214:443 192.168.0.6:42230 18.188.250.214:443
tcp: snat: 192.168.1.67 ==> 192.168.0.6 timeout: 7407 use: 1
192.168.1.114:49260 31.13.71.7:443 192.168.0.6:49260 31.13.71.7:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 4 use: 1
192.168.1.114:58075 35.186.236.204:443 192.168.0.6:58075 35.186.236.204:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7239 use: 1
192.168.1.3:44204 83.149.125.57:25612 192.168.0.6:44204 83.149.125.57:25612
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7417 use: 1
192.168.1.64:43422 172.217.10.227:80 192.168.0.6:43422 172.217.10.227:80
tcp: snat: 192.168.1.64 ==> 192.168.0.6 timeout: 7426 use: 2
192.168.1.3:34000 104.27.145.205:80 192.168.0.6:34000 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 22 use: 1
192.168.1.34:58328 52.73.171.10:443 192.168.0.6:58328 52.73.171.10:443
tcp: snat: 192.168.1.34 ==> 192.168.0.6 timeout: 7393 use: 1
192.168.1.27:40414 172.217.10.42:443 192.168.0.6:40414 172.217.10.42:443
tcp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 9 use: 1
192.168.1.114:57445 216.93.253.12:3158 192.168.0.6:57445 216.93.253.12:3158
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7404 use: 1
192.168.1.114:57638 172.217.10.138:443 192.168.0.6:57638 172.217.10.138:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 28 use: 1
192.168.1.114:58384 31.13.71.1:443 192.168.0.6:58384 31.13.71.1:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7244 use: 1
192.168.1.3:52990 93.176.178.160:51413 192.168.0.6:52990 93.176.178.160:51413
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 27 use: 1
192.168.1.114:58416 104.244.46.80:443 192.168.0.6:58416 104.244.46.80:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7227 use: 1
192.168.1.40:36994 52.46.136.77:443 192.168.0.6:36994 52.46.136.77:443
tcp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 7429 use: 1
192.168.1.4:60239 172.217.7.10:443 192.168.0.6:60239 172.217.7.10:443
tcp: snat: 192.168.1.4 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.21:58807 162.216.57.163:443 192.168.0.6:58807 162.216.57.163:443
udp: snat: 192.168.1.21 ==> 192.168.0.6 timeout: 171 use: 1
192.168.1.114:49257 31.13.71.7:443 192.168.0.6:49257 31.13.71.7:443
tcp: snat: 192.168.1.114 ==> 192.168.0.6 timeout: 7434 use: 1
192.168.1.3:33972 104.27.145.205:80 192.168.0.6:33972 104.27.145.205:80
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 19 use: 1
192.168.1.3:41614 198.211.120.59:443 192.168.0.6:41614 198.211.120.59:443
tcp: snat: 192.168.1.3 ==> 192.168.0.6 timeout: 7431 use: 2
192.168.1.75:51600 3.89.203.122:443 192.168.0.6:51600 3.89.203.122:443
tcp: snat: 192.168.1.75 ==> 192.168.0.6 timeout: 7414 use: 1
192.168.1.40:53619 52.216.128.75:80 192.168.0.6:53619 52.216.128.75:80
tcp: snat: 192.168.1.40 ==> 192.168.0.6 timeout: 7427 use: 1
192.168.1.15:5102 77.79.249.197:443 192.168.0.6:5102 77.79.249.197:443
tcp: snat: 192.168.1.15 ==> 192.168.0.6 timeout: 7395 use: 1
192.168.1.27:35212 172.217.10.14:443 192.168.0.6:35212 172.217.10.14:443
udp: snat: 192.168.1.27 ==> 192.168.0.6 timeout: 167 use: 1
----------------
NETFLOW
----------------
Netflow is not configured
----------------
OPENVPN
----------------
OpenVPN is not configured
----------------
OSPF
----------------
OSPF is not configured
----------------
OSPFV3
----------------
OSPFV3 is not configured
----------------
Policy
----------------
Policy is not configured
----------------
Traffic Policy
----------------
Traffic-Policy is not configured
----------------
RIP
----------------
RIP is not configured
----------------
RIPNG
----------------
RIPNG is not configured
----------------
VPN-L2TP
----------------
VPN L2TP is not configured
----------------
VPN-PPTP
----------------
VPN PPTP is not configured
----------------
VRRP
----------------
VRRP is not configured
----------------
WAN LOAD BALANCING
----------------
Wan Load Balance is not configured
----------------
WEBPROXY/URL-FILTERING
----------------
Webproxy/URL-filtering is not configured
----------------
END OF TECH-SUPPORT FILE
----------------
admin@UniFiSecurityGateway:~$
Comments
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎