Date: Wed, 22 Jan 2003 14:59:11 -0200 From: Patrick Tracanelli <eksffa@freebsdbrasil.com.br> To: freebsd-ipfw@freebsd.org Subject: PARENT dynamic rules Message-ID: <3E2ECDDF.8080400@freebsdbrasil.com.br>
next in thread | raw e-mail | index | archive | help
Hello there.
I am in the process of rewriting some set of firewall rules from IPFW1 to IPFW2, but i am getting a little bit confused by how the dynamic rules work now. I usually see PARENT, LIMIT and STATE labeled dynamic rules what i think is great for user level understanding of that is going on. I believe the PARENT and LIMIT rules work together, and for sure (i dont know the code deeply) they are responsible for solving the annoying "count" problems that used to happen on LIMIT rules (IPFW1).
But the PARENT rules doesnt seem to expire. I believe that they are PARENT rule created by every host connection to count the number of (child?) rules. I could see that PARENT 0 mean 1 rule by this src or dst address, PARENT 1 for 2 rules and on and on... in a certain moment the LIMIT rules are created (i would like to know exactly when too).
But what i really care the most is those PARENT not expiring. net.inet.ip.fw.dyn_count shows me the number of dyn rules active, that are relatively equiv. to the number of PARENT rules. I would like to understand it to decide about the racional number of max dyn rules i will allow...
The relevant part of my "ipfw -dea list" follows (little bit extense):
[some rules before]
00415 44 57336 deny log ip from { 10.0.0.0/8 or 192.168.0.0/16 or 172.16.0.0/12 or 255.255.255.255 or 0.0.0.0 or 0.0.0.0/8 or 169.254.0.0/16 or 224.0.0.0/4 or 240.0.0.0/4 } to any in via xl1
00705 0 0 deny log ip from any to { 10.0.0.0/8 or dst-ip 192.168.0.0/16 or dst-ip 172.16.0.0/12 or dst-ip 255.255.255.255 or dst-ip 0.0.0.0 or dst-ip 0.0.0.0/8 or dst-ip 169.254.0.0/16 or dst-ip 224.0.0.0/4 or dst-ip 240.0.0.0/4 } out via xl1
00805 0 0 allow gre from 200.187.144.243 to any via xl1
00810 0 0 allow gre from any to 200.187.144.243 via xl1
00900 0 0 check-state
00905 88 6560 allow icmp from 200.187.144.240/29 to any icmptypes 0,3,8,11 in via xl0 keep-state
00910 267 34169 deny log icmp from any to any
01005 5026 512672 allow udp from any to { 200.187.144.243 or dst-ip 200.187.144.246 } dst-port 53 in via xl1 limit src-addr 15
03005 0 0 deny log udp from any to 200.187.144.241 in via xl0
03010 22470 2695460 allow udp from 200.187.144.246 to any dst-port 53 in via xl0 keep-state
03015 680 51680 allow udp from 200.187.144.240/29 123 to 143.107.151.2 dst-port 123 in via xl0 keep-state
04005 72 7523 allow udp from 200.187.144.241 to 200.187.144.246 dst-port 53 out via xl0 keep-state
30005 71838 7509388 allow tcp from 200.203.206.9 to { 200.187.144.243 or dst-ip 200.187.144.246 } dst-port 22 in via xl1 setup keep-state
30010 0 0 allow log tcp from any to 200.187.144.246 dst-port 1723 in via xl1 setup limit src-addr 3
30015 209450 126520958 allow tcp from any to 200.187.144.243 dst-port 25,110,143 in via xl1 setup limit src-addr 10
30020 1547330 449685324 allow tcp from any to 200.187.144.243 dst-port 80 in via xl1 setup limit src-addr 15
30025 154 34692 allow tcp from any to 200.187.144.244 dst-port 21,20,80,443 in via xl1 setup limit src-addr 10
30035 4574 3121652 allow tcp from any 20 to 200.187.144.240/29 dst-port 1024-65535 in via xl1 setup keep-state
32005 1621 209550 allow log tcp from 200.187.144.246 to 200.187.144.241 dst-port 22 in via xl0 setup keep-state
32010 0 0 deny log tcp from any to 200.187.144.241 in via xl0
32015 684761 361115320 allow tcp from 200.187.144.246 to any dst-port 20,21,22,25,80,110,143,443 in via xl0 setup keep-state
[other rules]
65001 103980 49506837 deny log ip from any to any
65535 6 434 deny ip from any to any
## Dynamic rules (515):
01005 0 0 (0s) PARENT 0 udp 200.202.11.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 193.194.133.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.194.240.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 163.185.18.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.157.52.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.240.0.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.174.171.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 148.177.88.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.17.209.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.163.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.63.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.202.17.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.246.143.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.135.35.1 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.103.225.1 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.195.199.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.183.15.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 199.202.55.2 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 138.121.23.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.240.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.194.240.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.170.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.149.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 204.101.251.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.9.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.240.0.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.173.115.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.120.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 148.177.2.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 195.25.12.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.140.240.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.176.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.255.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 202.144.78.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 170.66.1.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 65.203.232.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.39.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.199.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 80.15.238.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 64.37.246.2 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 213.61.6.2 0 <-> 0.0.0.0 0
30020 0 0 (0s) PARENT 4 tcp 200.222.81.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 143.166.224.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 213.158.0.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.170.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.225.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.202.7.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.184.26.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 170.66.1.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.149.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.160.2.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 193.194.133.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.161.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.14.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.9.3 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.229.135.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.218.161.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.161.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.5.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.11.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.219.150.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.170.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.149.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.182.104.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.44.4 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.194.70.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.219.150.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.170.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.140.200.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.228.85.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 193.194.133.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.223.0.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 204.176.88.5 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 68.46.192.6 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 198.5.148.6 0 <-> 0.0.0.0 0
30020 511 30710 (176s) LIMIT tcp 200.181.178.85 21489 <-> 200.187.144.243 80
01005 0 0 (0s) PARENT 0 udp 200.193.55.7 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.192.7 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 211.66.88.8 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.191.8 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.189.8 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.206.9 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.131.9 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.8.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.240.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.184.26.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.2.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.192.208.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.230.199.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.190.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.73.83.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.73.84.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.204.0.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 64.14.117.10 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.190.77.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.8.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.153.60.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.183.132.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.189.161.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.192.100.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.210.249.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.160.16.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.177.96.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.2.11 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.44.32.12 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.199.12 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.0.96.12 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.160.16.13 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.192.208.13 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 168.126.63.13 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.2.13 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 208.185.54.14 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.2.14 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 61.9.208.15 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.190.77.15 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.100.16 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.176.3.18 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.225.93.18 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.176.3.19 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.196.89.19 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.176.3.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.240.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.52.208.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.173.114.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.201.164.20 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.192.161.20 0 <-> 0.0.0.0 0
32015 35 11686 (176s) STATE tcp 200.187.144.246 2344 <-> 200.215.181.155 80
01005 0 0 (0s) PARENT 0 udp 200.192.140.21 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.19.74.21 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 199.67.138.21 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.230.128.21 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.199.201.23 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.63.24 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 1 tcp 200.194.242.26 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.226.139.26 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.205.123.27 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.196.234.27 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.63.29 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.196.66.30 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.204.76.31 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.84.236.33 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.189.112.33 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.17.34 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.193.137.34 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.189.233.34 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.195.129.35 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.1.35 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.136.224.35 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.150.146.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.56.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.178.0.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.186.153.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.136.224.37 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.214.239.38 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.186.153.38 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 2 tcp 200.189.234.40 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.172.41 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.42.41 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 194.239.10.41 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.56.43 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.1.44 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 159.124.4.45 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.176.131.45 0 <-> 0.0.0.0 0
32025 1695 75410 (36s) STATE tcp 200.187.144.244 1697 <-> 207.46.106.61 1863
01005 0 0 (0s) PARENT 0 udp 200.197.200.47 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.192.6.48 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.48 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.194.242.49 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.49 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.168.32.49 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 12.107.122.50 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.230.199.50 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.50 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.162.192.50 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.162.192.51 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.51 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.53 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.54 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.55 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.56 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.245.207.57 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.225.52.57 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.57 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.218.71.58 0 <-> 0.0.0.0 0
32015 625 460414 (1s) STATE tcp 200.187.144.246 2487 <-> 200.155.1.42 80
01005 0 0 (0s) PARENT 0 udp 66.218.71.59 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 207.69.200.60 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.4.16.60 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.4.14.61 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 207.68.162.61 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.4.16.61 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.174.86.62 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.217.65 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.219.184.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.156.198.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 62.4.74.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.64.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.174.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 211.13.227.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.124.186.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 213.41.76.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.224.140.66 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.184.42.67 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.199.252.68 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.207.71 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.29.72 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.203.179.72 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.68.75 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 196.27.25.75 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.202.193.76 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.246.143.77 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 208.184.139.82 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.64.83 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.178.85 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.77.85 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 196.27.25.85 0 <-> 0.0.0.0 0
30005 673 136592 (300s) STATE tcp 200.203.206.9 3263 <-> 200.187.144.246 22
01005 0 0 (0s) PARENT 0 udp 66.111.46.90 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 65535 udp 200.222.80.90 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 210.100.220.90 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.222.80.91 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.225.91 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 66.218.66.92 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.152.225.92 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.194.132.93 0 <-> 0.0.0.0 0
30020 129 6732 (156s) LIMIT tcp 200.181.178.85 22423 <-> 200.187.144.243 80
01005 0 0 (0s) PARENT 0 udp 200.30.0.97 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.28.12.98 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 211.169.245.98 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.225.157.99 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.221.11.100 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.221.11.101 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.181.178.102 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.221.11.102 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.119.175.103 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.41.192.103 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.221.11.103 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.225.157.104 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.103.142.109 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.211.224.110 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.251.233.114 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.161.30.118 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.187.232.120 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.193.144.121 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.83.129 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 200.244.136.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.248.206.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.215.40.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.173.130 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 200.183.8.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 202.130.158.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 208.254.75.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.252.48.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 208.184.39.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.219.179.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.35.7.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.28.34.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 63.218.7.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 66.28.255.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.216.25.130 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.2.131 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.6.131 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.172.132 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.212.171.132 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.140.232.133 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 1 tcp 200.162.4.134 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 200.162.4.134 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.121.96.134 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.198.188.134 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 62.42.230.135 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.204.0.138 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.90.139 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.89.139 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.175.5.139 0 <-> 0.0.0.0 0
32025 9 1070 (300s) STATE tcp 200.187.144.244 4398 <-> 193.206.158.6 80
01005 0 0 (0s) PARENT 0 udp 200.32.96.140 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 1 udp 212.62.17.145 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.219.165.147 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.190.99.147 0 <-> 0.0.0.0 0
30015 0 0 (19s) PARENT 1 tcp 200.183.200.149 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 198.81.9.149 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.162.4.150 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.225.157.150 0 <-> 0.0.0.0 0
30020 21 4414 (131s) LIMIT tcp 200.171.14.187 1664 <-> 200.187.144.243 80
30025 0 0 (0s) PARENT 0 tcp 200.161.145.152 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.247.217.154 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 204.176.177.155 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.211.8.160 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 130.54.210.161 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 66.28.47.162 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.223.209.163 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.212.186.163 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 2 tcp 200.194.134.165 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.194.134.167 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.251.232.167 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.247.247.171 0 <-> 0.0.0.0 0
32025 91 79746 (282s) STATE tcp 200.187.144.244 4392 <-> 131.252.208.32 80
01005 0 0 (0s) PARENT 0 udp 216.136.172.176 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 216.136.172.179 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.194.134.183 0 <-> 0.0.0.0 0
30020 0 0 (0s) PARENT 5 tcp 200.171.14.187 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.171.14.187 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.123.77.194 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.158.108.194 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.218.13.194 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.252.68.196 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.15.251.198 0 <-> 0.0.0.0 0
03010 3 397 (10s) STATE udp 200.187.144.246 1024 <-> 131.154.1.11 53
01005 0 0 (0s) PARENT 0 udp 205.138.3.200 0 <-> 0.0.0.0 0
30015 251 63044 (121s) LIMIT tcp 200.194.242.26 1338 <-> 200.187.144.243 25
30015 0 0 (0s) PARENT 4 tcp 200.103.136.202 0 <-> 0.0.0.0 0
03010 3 397 (9s) STATE udp 200.187.144.246 1024 <-> 193.205.245.8 53
01005 0 0 (0s) PARENT 0 udp 200.176.115.203 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 194.196.15.207 0 <-> 0.0.0.0 0
03010 3 869 (8s) STATE udp 200.187.144.246 1024 <-> 192.36.148.17 53
01005 0 0 (0s) PARENT 0 udp 66.187.233.210 0 <-> 0.0.0.0 0
32005 395 66466 (300s) STATE tcp 200.187.144.246 2504 <-> 200.187.144.241 22
03010 7 739 (9s) STATE udp 200.187.144.246 1024 <-> 192.106.1.31 53
03010 3 390 (9s) STATE udp 200.187.144.246 1024 <-> 192.12.94.30 53
01005 0 0 (0s) PARENT 0 udp 200.253.253.222 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.185.13.223 0 <-> 0.0.0.0 0
30025 0 0 (0s) PARENT 0 tcp 80.200.104.225 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.205.181.226 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 64.28.86.226 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 209.237.238.228 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 206.64.119.229 0 <-> 0.0.0.0 0
30015 41 16220 (300s) LIMIT tcp 200.183.200.149 59028 <-> 200.187.144.243 25
32025 35 15568 (296s) STATE tcp 200.187.144.244 4396 <-> 216.239.37.101 80
01005 0 0 (0s) PARENT 0 udp 216.46.98.240 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 194.73.82.242 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 206.99.44.245 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 63.212.171.245 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.208.16.246 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.140.237.246 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.247.217.248 0 <-> 0.0.0.0 0
32025 29 16794 (293s) STATE tcp 200.187.144.244 4395 <-> 130.94.185.117 80
01005 0 0 (0s) PARENT 0 udp 210.0.128.250 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 192.138.110.250 0 <-> 0.0.0.0 0
32025 81 72132 (291s) STATE tcp 200.187.144.244 4394 <-> 130.94.185.117 80
01005 0 0 (0s) PARENT 0 udp 143.166.82.251 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 200.204.183.252 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 1 tcp 192.138.110.252 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 143.166.82.252 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 205.152.37.252 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.246.0.252 0 <-> 0.0.0.0 0
30020 587 53450 (171s) LIMIT tcp 200.181.178.85 21003 <-> 200.187.144.243 80
01005 0 0 (0s) PARENT 1 udp 192.138.110.253 0 <-> 0.0.0.0 0
30015 0 0 (0s) PARENT 0 tcp 192.138.110.254 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 200.250.47.254 0 <-> 0.0.0.0 0
01005 0 0 (0s) PARENT 0 udp 206.99.44.254 0 <-> 0.0.0.0 0
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E2ECDDF.8080400>