From owner-freebsd-ipfw Wed Jan 22 10:12:39 2003 Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E9E7F37B401 for ; Wed, 22 Jan 2003 10:12:29 -0800 (PST) Received: from parati.mdbrasil.com.br (parati.mdbrasil.com.br [200.210.70.4]) by mx1.FreeBSD.org (Postfix) with SMTP id 78A5843ED8 for ; Wed, 22 Jan 2003 10:12:27 -0800 (PST) (envelope-from eksffa@freebsdbrasil.com.br) Received: (qmail 97611 invoked by uid 85); 22 Jan 2003 18:12:25 -0000 Received: from eksffa@freebsdbrasil.com.br by parati.mdbrasil.com.br with qmail-scanner-1.03 (uvscan: v4.1.40/v4181. . Clean. Processed in 24.250774 secs); 22 Jan 2003 18:12:25 -0000 Received: from unknown (HELO freebsdbrasil.com.br) (200.210.42.5) by parati.mdbrasil.com.br with SMTP; 22 Jan 2003 18:12:00 -0000 Message-ID: <3E2ECDDF.8080400@freebsdbrasil.com.br> Date: Wed, 22 Jan 2003 14:59:11 -0200 From: Patrick Tracanelli Organization: FreeBSD Brasil LTDA User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.1) Gecko/20030104 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org Subject: PARENT dynamic rules Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello there. I am in the process of rewriting some set of firewall rules from IPFW1 to IPFW2, but i am getting a little bit confused by how the dynamic rules work now. I usually see PARENT, LIMIT and STATE labeled dynamic rules what i think is great for user level understanding of that is going on. I believe the PARENT and LIMIT rules work together, and for sure (i dont know the code deeply) they are responsible for solving the annoying "count" problems that used to happen on LIMIT rules (IPFW1). But the PARENT rules doesnt seem to expire. I believe that they are PARENT rule created by every host connection to count the number of (child?) rules. I could see that PARENT 0 mean 1 rule by this src or dst address, PARENT 1 for 2 rules and on and on... in a certain moment the LIMIT rules are created (i would like to know exactly when too). But what i really care the most is those PARENT not expiring. net.inet.ip.fw.dyn_count shows me the number of dyn rules active, that are relatively equiv. to the number of PARENT rules. I would like to understand it to decide about the racional number of max dyn rules i will allow... The relevant part of my "ipfw -dea list" follows (little bit extense): [some rules before] 00415 44 57336 deny log ip from { 10.0.0.0/8 or 192.168.0.0/16 or 172.16.0.0/12 or 255.255.255.255 or 0.0.0.0 or 0.0.0.0/8 or 169.254.0.0/16 or 224.0.0.0/4 or 240.0.0.0/4 } to any in via xl1 00705 0 0 deny log ip from any to { 10.0.0.0/8 or dst-ip 192.168.0.0/16 or dst-ip 172.16.0.0/12 or dst-ip 255.255.255.255 or dst-ip 0.0.0.0 or dst-ip 0.0.0.0/8 or dst-ip 169.254.0.0/16 or dst-ip 224.0.0.0/4 or dst-ip 240.0.0.0/4 } out via xl1 00805 0 0 allow gre from 200.187.144.243 to any via xl1 00810 0 0 allow gre from any to 200.187.144.243 via xl1 00900 0 0 check-state 00905 88 6560 allow icmp from 200.187.144.240/29 to any icmptypes 0,3,8,11 in via xl0 keep-state 00910 267 34169 deny log icmp from any to any 01005 5026 512672 allow udp from any to { 200.187.144.243 or dst-ip 200.187.144.246 } dst-port 53 in via xl1 limit src-addr 15 03005 0 0 deny log udp from any to 200.187.144.241 in via xl0 03010 22470 2695460 allow udp from 200.187.144.246 to any dst-port 53 in via xl0 keep-state 03015 680 51680 allow udp from 200.187.144.240/29 123 to 143.107.151.2 dst-port 123 in via xl0 keep-state 04005 72 7523 allow udp from 200.187.144.241 to 200.187.144.246 dst-port 53 out via xl0 keep-state 30005 71838 7509388 allow tcp from 200.203.206.9 to { 200.187.144.243 or dst-ip 200.187.144.246 } dst-port 22 in via xl1 setup keep-state 30010 0 0 allow log tcp from any to 200.187.144.246 dst-port 1723 in via xl1 setup limit src-addr 3 30015 209450 126520958 allow tcp from any to 200.187.144.243 dst-port 25,110,143 in via xl1 setup limit src-addr 10 30020 1547330 449685324 allow tcp from any to 200.187.144.243 dst-port 80 in via xl1 setup limit src-addr 15 30025 154 34692 allow tcp from any to 200.187.144.244 dst-port 21,20,80,443 in via xl1 setup limit src-addr 10 30035 4574 3121652 allow tcp from any 20 to 200.187.144.240/29 dst-port 1024-65535 in via xl1 setup keep-state 32005 1621 209550 allow log tcp from 200.187.144.246 to 200.187.144.241 dst-port 22 in via xl0 setup keep-state 32010 0 0 deny log tcp from any to 200.187.144.241 in via xl0 32015 684761 361115320 allow tcp from 200.187.144.246 to any dst-port 20,21,22,25,80,110,143,443 in via xl0 setup keep-state [other rules] 65001 103980 49506837 deny log ip from any to any 65535 6 434 deny ip from any to any ## Dynamic rules (515): 01005 0 0 (0s) PARENT 0 udp 200.202.11.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 193.194.133.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.194.240.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 163.185.18.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.157.52.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 209.240.0.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.174.171.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 148.177.88.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.17.209.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.203.163.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.215.63.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.202.17.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.246.143.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.135.35.1 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.103.225.1 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.195.199.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.183.15.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 199.202.55.2 0 <-> 0.0.0.0 0 30025 0 0 (0s) PARENT 0 tcp 138.121.23.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.152.240.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.194.240.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.52.170.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.195.149.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 204.101.251.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.208.9.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 209.240.0.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 205.173.115.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.185.120.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 148.177.2.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 195.25.12.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.140.240.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.198.176.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.203.255.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 202.144.78.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 170.66.1.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 65.203.232.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.212.39.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.195.199.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 80.15.238.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 64.37.246.2 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 213.61.6.2 0 <-> 0.0.0.0 0 30020 0 0 (0s) PARENT 4 tcp 200.222.81.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 143.166.224.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 213.158.0.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.52.170.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.250.225.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.202.7.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.184.26.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 170.66.1.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.195.149.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.160.2.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 193.194.133.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.203.161.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.181.14.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.208.9.3 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.229.135.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.218.161.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.203.161.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.175.5.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.175.11.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.219.150.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.52.170.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.195.149.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.182.104.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.185.44.4 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 216.194.70.5 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.219.150.5 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.52.170.5 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 209.140.200.5 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.228.85.5 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 193.194.133.5 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.223.0.5 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 204.176.88.5 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 68.46.192.6 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 198.5.148.6 0 <-> 0.0.0.0 0 30020 511 30710 (176s) LIMIT tcp 200.181.178.85 21489 <-> 200.187.144.243 80 01005 0 0 (0s) PARENT 0 udp 200.193.55.7 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.195.192.7 0 <-> 0.0.0.0 0 30025 0 0 (0s) PARENT 0 tcp 211.66.88.8 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.203.191.8 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.215.189.8 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.203.206.9 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.176.131.9 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.175.8.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.152.240.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.184.26.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.176.2.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.192.208.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.230.199.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.250.190.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 216.73.83.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 216.73.84.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.204.0.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 64.14.117.10 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.190.77.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.175.8.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.153.60.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.183.132.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.189.161.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.192.100.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.210.249.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.160.16.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.177.96.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.176.2.11 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.44.32.12 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.176.199.12 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.0.96.12 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.160.16.13 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.192.208.13 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 168.126.63.13 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.176.2.13 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 208.185.54.14 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.176.2.14 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 61.9.208.15 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.190.77.15 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.198.100.16 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.176.3.18 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.225.93.18 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.176.3.19 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.196.89.19 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.176.3.20 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.152.240.20 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.52.208.20 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 205.173.114.20 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.201.164.20 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.192.161.20 0 <-> 0.0.0.0 0 32015 35 11686 (176s) STATE tcp 200.187.144.246 2344 <-> 200.215.181.155 80 01005 0 0 (0s) PARENT 0 udp 200.192.140.21 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.19.74.21 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 199.67.138.21 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.230.128.21 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.199.201.23 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.212.63.24 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 1 tcp 200.194.242.26 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.226.139.26 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.205.123.27 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.196.234.27 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.212.63.29 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.196.66.30 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.204.76.31 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 63.84.236.33 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.189.112.33 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.208.17.34 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.193.137.34 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.189.233.34 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.195.129.35 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.215.1.35 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 216.136.224.35 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.150.146.37 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.185.56.37 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.178.0.37 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.186.153.37 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 216.136.224.37 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.214.239.38 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.186.153.38 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 2 tcp 200.189.234.40 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.181.172.41 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.185.42.41 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 194.239.10.41 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.212.56.43 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.215.1.44 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 159.124.4.45 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.176.131.45 0 <-> 0.0.0.0 0 32025 1695 75410 (36s) STATE tcp 200.187.144.244 1697 <-> 207.46.106.61 1863 01005 0 0 (0s) PARENT 0 udp 200.197.200.47 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.192.6.48 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.48 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.194.242.49 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.49 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.168.32.49 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 12.107.122.50 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.230.199.50 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.50 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.162.192.50 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.162.192.51 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.51 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.53 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.54 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.55 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.56 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.245.207.57 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 209.225.52.57 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.57 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.218.71.58 0 <-> 0.0.0.0 0 32015 625 460414 (1s) STATE tcp 200.187.144.246 2487 <-> 200.155.1.42 80 01005 0 0 (0s) PARENT 0 udp 66.218.71.59 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 207.69.200.60 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.4.16.60 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.4.14.61 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 207.68.162.61 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.4.16.61 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.174.86.62 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.181.217.65 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.219.184.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.156.198.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 62.4.74.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.198.64.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.212.174.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 211.13.227.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.124.186.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 213.41.76.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.224.140.66 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.184.42.67 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.199.252.68 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.203.207.71 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.208.29.72 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.203.179.72 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.181.68.75 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 196.27.25.75 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.202.193.76 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.246.143.77 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 208.184.139.82 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.198.64.83 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.181.178.85 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.250.77.85 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 196.27.25.85 0 <-> 0.0.0.0 0 30005 673 136592 (300s) STATE tcp 200.203.206.9 3263 <-> 200.187.144.246 22 01005 0 0 (0s) PARENT 0 udp 66.111.46.90 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 65535 udp 200.222.80.90 0 <-> 0.0.0.0 0 30025 0 0 (0s) PARENT 0 tcp 210.100.220.90 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.222.80.91 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.152.225.91 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 66.218.66.92 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.152.225.92 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.194.132.93 0 <-> 0.0.0.0 0 30020 129 6732 (156s) LIMIT tcp 200.181.178.85 22423 <-> 200.187.144.243 80 01005 0 0 (0s) PARENT 0 udp 200.30.0.97 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.28.12.98 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 211.169.245.98 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.225.157.99 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.221.11.100 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.221.11.101 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.181.178.102 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.221.11.102 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 63.119.175.103 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.41.192.103 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.221.11.103 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.225.157.104 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.103.142.109 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.211.224.110 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.251.233.114 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.161.30.118 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.187.232.120 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.193.144.121 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.250.83.129 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 200.244.136.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.248.206.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.215.40.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.250.173.130 0 <-> 0.0.0.0 0 30025 0 0 (0s) PARENT 0 tcp 200.183.8.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 202.130.158.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 208.254.75.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 205.252.48.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 208.184.39.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 63.219.179.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.35.7.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.28.34.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 63.218.7.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 66.28.255.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 63.216.25.130 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.250.2.131 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.185.6.131 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.212.172.132 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 63.212.171.132 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.140.232.133 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 1 tcp 200.162.4.134 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 200.162.4.134 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 216.121.96.134 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.198.188.134 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 62.42.230.135 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.204.0.138 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.250.90.139 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.175.89.139 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.175.5.139 0 <-> 0.0.0.0 0 32025 9 1070 (300s) STATE tcp 200.187.144.244 4398 <-> 193.206.158.6 80 01005 0 0 (0s) PARENT 0 udp 200.32.96.140 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 1 udp 212.62.17.145 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.219.165.147 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.190.99.147 0 <-> 0.0.0.0 0 30015 0 0 (19s) PARENT 1 tcp 200.183.200.149 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 198.81.9.149 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.162.4.150 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.225.157.150 0 <-> 0.0.0.0 0 30020 21 4414 (131s) LIMIT tcp 200.171.14.187 1664 <-> 200.187.144.243 80 30025 0 0 (0s) PARENT 0 tcp 200.161.145.152 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.247.217.154 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 204.176.177.155 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.211.8.160 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 130.54.210.161 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 66.28.47.162 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.223.209.163 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.212.186.163 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 2 tcp 200.194.134.165 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.194.134.167 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.251.232.167 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.247.247.171 0 <-> 0.0.0.0 0 32025 91 79746 (282s) STATE tcp 200.187.144.244 4392 <-> 131.252.208.32 80 01005 0 0 (0s) PARENT 0 udp 216.136.172.176 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 216.136.172.179 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.194.134.183 0 <-> 0.0.0.0 0 30020 0 0 (0s) PARENT 5 tcp 200.171.14.187 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.171.14.187 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 63.123.77.194 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 205.158.108.194 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 63.218.13.194 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.252.68.196 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.15.251.198 0 <-> 0.0.0.0 0 03010 3 397 (10s) STATE udp 200.187.144.246 1024 <-> 131.154.1.11 53 01005 0 0 (0s) PARENT 0 udp 205.138.3.200 0 <-> 0.0.0.0 0 30015 251 63044 (121s) LIMIT tcp 200.194.242.26 1338 <-> 200.187.144.243 25 30015 0 0 (0s) PARENT 4 tcp 200.103.136.202 0 <-> 0.0.0.0 0 03010 3 397 (9s) STATE udp 200.187.144.246 1024 <-> 193.205.245.8 53 01005 0 0 (0s) PARENT 0 udp 200.176.115.203 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 194.196.15.207 0 <-> 0.0.0.0 0 03010 3 869 (8s) STATE udp 200.187.144.246 1024 <-> 192.36.148.17 53 01005 0 0 (0s) PARENT 0 udp 66.187.233.210 0 <-> 0.0.0.0 0 32005 395 66466 (300s) STATE tcp 200.187.144.246 2504 <-> 200.187.144.241 22 03010 7 739 (9s) STATE udp 200.187.144.246 1024 <-> 192.106.1.31 53 03010 3 390 (9s) STATE udp 200.187.144.246 1024 <-> 192.12.94.30 53 01005 0 0 (0s) PARENT 0 udp 200.253.253.222 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.185.13.223 0 <-> 0.0.0.0 0 30025 0 0 (0s) PARENT 0 tcp 80.200.104.225 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.205.181.226 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 64.28.86.226 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 209.237.238.228 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 206.64.119.229 0 <-> 0.0.0.0 0 30015 41 16220 (300s) LIMIT tcp 200.183.200.149 59028 <-> 200.187.144.243 25 32025 35 15568 (296s) STATE tcp 200.187.144.244 4396 <-> 216.239.37.101 80 01005 0 0 (0s) PARENT 0 udp 216.46.98.240 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 194.73.82.242 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 206.99.44.245 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 63.212.171.245 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.208.16.246 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.140.237.246 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.247.217.248 0 <-> 0.0.0.0 0 32025 29 16794 (293s) STATE tcp 200.187.144.244 4395 <-> 130.94.185.117 80 01005 0 0 (0s) PARENT 0 udp 210.0.128.250 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 192.138.110.250 0 <-> 0.0.0.0 0 32025 81 72132 (291s) STATE tcp 200.187.144.244 4394 <-> 130.94.185.117 80 01005 0 0 (0s) PARENT 0 udp 143.166.82.251 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 200.204.183.252 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 1 tcp 192.138.110.252 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 143.166.82.252 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 205.152.37.252 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.246.0.252 0 <-> 0.0.0.0 0 30020 587 53450 (171s) LIMIT tcp 200.181.178.85 21003 <-> 200.187.144.243 80 01005 0 0 (0s) PARENT 1 udp 192.138.110.253 0 <-> 0.0.0.0 0 30015 0 0 (0s) PARENT 0 tcp 192.138.110.254 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 200.250.47.254 0 <-> 0.0.0.0 0 01005 0 0 (0s) PARENT 0 udp 206.99.44.254 0 <-> 0.0.0.0 0 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message