Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Jan 2003 14:59:11 -0200
From:      Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
To:        freebsd-ipfw@freebsd.org
Subject:   PARENT dynamic rules
Message-ID:  <3E2ECDDF.8080400@freebsdbrasil.com.br>

Next in thread | Raw E-Mail | Index | Archive | Help
 Hello there.

 I am in the process of rewriting some set of firewall rules from IPFW1 to IPFW2, but i am getting a little bit confused by how the dynamic rules work now. I usually see PARENT, LIMIT and STATE labeled dynamic rules what i think is great for user level understanding of that is going on. I believe the PARENT and LIMIT rules work together, and for sure (i dont know the code deeply) they are responsible for solving the annoying "count" problems that used to happen on LIMIT rules (IPFW1).

 But the PARENT rules doesnt seem to expire. I believe that they are PARENT rule created by every host connection to count the number of (child?) rules. I could see that PARENT 0 mean 1 rule by this src or dst address, PARENT 1 for 2 rules and on and on... in a certain moment the LIMIT rules are created (i would like to know exactly when too).

 But what i really care the most is those PARENT not expiring. net.inet.ip.fw.dyn_count shows me the number of dyn rules active, that are relatively equiv. to the number of PARENT rules. I would like to understand it to decide about the racional number of max dyn rules i will allow...

 The relevant part of my "ipfw -dea list" follows (little bit extense):



[some rules before]


00415         44      57336 deny log ip from { 10.0.0.0/8 or 192.168.0.0/16 or 172.16.0.0/12 or 255.255.255.255 or 0.0.0.0 or 0.0.0.0/8 or 169.254.0.0/16 or 224.0.0.0/4 or 240.0.0.0/4 } to any in via xl1
00705          0          0 deny log ip from any to { 10.0.0.0/8 or dst-ip 192.168.0.0/16 or dst-ip 172.16.0.0/12 or dst-ip 255.255.255.255 or dst-ip 0.0.0.0 or dst-ip 0.0.0.0/8 or dst-ip 169.254.0.0/16 or dst-ip 224.0.0.0/4 or dst-ip 240.0.0.0/4 } out via xl1
00805          0          0 allow gre from 200.187.144.243 to any via xl1
00810          0          0 allow gre from any to 200.187.144.243 via xl1
00900          0          0 check-state
00905         88       6560 allow icmp from 200.187.144.240/29 to any icmptypes 0,3,8,11 in via xl0 keep-state
00910        267      34169 deny log icmp from any to any

01005       5026     512672 allow udp from any to { 200.187.144.243 or dst-ip 200.187.144.246 } dst-port 53 in via xl1 limit src-addr 15
03005          0          0 deny log udp from any to 200.187.144.241 in via xl0
03010      22470    2695460 allow udp from 200.187.144.246 to any dst-port 53 in via xl0 keep-state
03015        680      51680 allow udp from 200.187.144.240/29 123 to 143.107.151.2 dst-port 123 in via xl0 keep-state
04005         72       7523 allow udp from 200.187.144.241 to 200.187.144.246 dst-port 53 out via xl0 keep-state
30005      71838    7509388 allow tcp from 200.203.206.9 to { 200.187.144.243 or dst-ip 200.187.144.246 } dst-port 22 in via xl1 setup keep-state
30010          0          0 allow log tcp from any to 200.187.144.246 dst-port 1723 in via xl1 setup limit src-addr 3
30015     209450  126520958 allow tcp from any to 200.187.144.243 dst-port 25,110,143 in via xl1 setup limit src-addr 10
30020    1547330  449685324 allow tcp from any to 200.187.144.243 dst-port 80 in via xl1 setup limit src-addr 15
30025        154      34692 allow tcp from any to 200.187.144.244 dst-port 21,20,80,443 in via xl1 setup limit src-addr 10
30035       4574    3121652 allow tcp from any 20 to 200.187.144.240/29 dst-port 1024-65535 in via xl1 setup keep-state
32005       1621     209550 allow log tcp from 200.187.144.246 to 200.187.144.241 dst-port 22 in via xl0 setup keep-state
32010          0          0 deny log tcp from any to 200.187.144.241 in via xl0
32015     684761  361115320 allow tcp from 200.187.144.246 to any dst-port 20,21,22,25,80,110,143,443 in via xl0 setup keep-state

[other rules]

65001     103980   49506837 deny log ip from any to any
65535          6        434 deny ip from any to any
## Dynamic rules (515):
01005          0          0 (0s) PARENT 0 udp 200.202.11.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 193.194.133.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.194.240.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 163.185.18.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.157.52.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 209.240.0.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.174.171.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 148.177.88.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.17.209.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.203.163.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.215.63.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.202.17.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.246.143.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.135.35.1 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.103.225.1 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.195.199.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.183.15.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 199.202.55.2 0 <-> 0.0.0.0 0
30025          0          0 (0s) PARENT 0 tcp 138.121.23.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.152.240.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.194.240.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.52.170.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.195.149.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 204.101.251.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.208.9.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 209.240.0.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 205.173.115.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.185.120.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 148.177.2.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 195.25.12.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.140.240.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.198.176.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.203.255.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 202.144.78.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 170.66.1.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 65.203.232.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.212.39.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.195.199.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 80.15.238.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 64.37.246.2 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 213.61.6.2 0 <-> 0.0.0.0 0
30020          0          0 (0s) PARENT 4 tcp 200.222.81.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 143.166.224.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 213.158.0.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.52.170.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.250.225.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.202.7.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.184.26.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 170.66.1.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.195.149.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.160.2.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 193.194.133.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.203.161.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.181.14.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.208.9.3 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.229.135.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.218.161.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.203.161.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.175.5.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.175.11.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.219.150.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.52.170.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.195.149.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.182.104.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.185.44.4 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 216.194.70.5 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.219.150.5 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.52.170.5 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 209.140.200.5 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.228.85.5 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 193.194.133.5 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.223.0.5 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 204.176.88.5 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 68.46.192.6 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 198.5.148.6 0 <-> 0.0.0.0 0
30020        511      30710 (176s) LIMIT tcp 200.181.178.85 21489 <-> 200.187.144.243 80
01005          0          0 (0s) PARENT 0 udp 200.193.55.7 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.195.192.7 0 <-> 0.0.0.0 0
30025          0          0 (0s) PARENT 0 tcp 211.66.88.8 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.203.191.8 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.215.189.8 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.203.206.9 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.176.131.9 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.175.8.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.152.240.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.184.26.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.176.2.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.192.208.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.230.199.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.250.190.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 216.73.83.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 216.73.84.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.204.0.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 64.14.117.10 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.190.77.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.175.8.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.153.60.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.183.132.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.189.161.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.192.100.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.210.249.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.160.16.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.177.96.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.176.2.11 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.44.32.12 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.176.199.12 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.0.96.12 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.160.16.13 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.192.208.13 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 168.126.63.13 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.176.2.13 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 208.185.54.14 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.176.2.14 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 61.9.208.15 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.190.77.15 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.198.100.16 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.176.3.18 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.225.93.18 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.176.3.19 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.196.89.19 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.176.3.20 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.152.240.20 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.52.208.20 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 205.173.114.20 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.201.164.20 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.192.161.20 0 <-> 0.0.0.0 0
32015         35      11686 (176s) STATE tcp 200.187.144.246 2344 <-> 200.215.181.155 80
01005          0          0 (0s) PARENT 0 udp 200.192.140.21 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.19.74.21 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 199.67.138.21 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.230.128.21 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.199.201.23 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.212.63.24 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 1 tcp 200.194.242.26 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.226.139.26 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.205.123.27 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.196.234.27 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.212.63.29 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.196.66.30 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.204.76.31 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 63.84.236.33 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.189.112.33 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.208.17.34 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.193.137.34 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.189.233.34 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.195.129.35 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.215.1.35 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 216.136.224.35 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.150.146.37 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.185.56.37 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.178.0.37 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.186.153.37 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 216.136.224.37 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.214.239.38 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.186.153.38 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 2 tcp 200.189.234.40 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.181.172.41 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.185.42.41 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 194.239.10.41 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.212.56.43 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.215.1.44 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 159.124.4.45 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.176.131.45 0 <-> 0.0.0.0 0
32025       1695      75410 (36s) STATE tcp 200.187.144.244 1697 <-> 207.46.106.61 1863
01005          0          0 (0s) PARENT 0 udp 200.197.200.47 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.192.6.48 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.48 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.194.242.49 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.49 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.168.32.49 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 12.107.122.50 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.230.199.50 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.50 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.162.192.50 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.162.192.51 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.51 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.53 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.54 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.55 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.56 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.245.207.57 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 209.225.52.57 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.57 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.218.71.58 0 <-> 0.0.0.0 0
32015        625     460414 (1s) STATE tcp 200.187.144.246 2487 <-> 200.155.1.42 80
01005          0          0 (0s) PARENT 0 udp 66.218.71.59 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 207.69.200.60 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.4.16.60 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.4.14.61 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 207.68.162.61 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.4.16.61 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.174.86.62 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.181.217.65 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.219.184.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.156.198.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 62.4.74.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.198.64.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.212.174.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 211.13.227.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.124.186.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 213.41.76.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.224.140.66 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.184.42.67 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.199.252.68 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.203.207.71 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.208.29.72 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.203.179.72 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.181.68.75 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 196.27.25.75 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.202.193.76 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.246.143.77 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 208.184.139.82 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.198.64.83 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.181.178.85 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.250.77.85 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 196.27.25.85 0 <-> 0.0.0.0 0
30005        673     136592 (300s) STATE tcp 200.203.206.9 3263 <-> 200.187.144.246 22
01005          0          0 (0s) PARENT 0 udp 66.111.46.90 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 65535 udp 200.222.80.90 0 <-> 0.0.0.0 0
30025          0          0 (0s) PARENT 0 tcp 210.100.220.90 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.222.80.91 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.152.225.91 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 66.218.66.92 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.152.225.92 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.194.132.93 0 <-> 0.0.0.0 0
30020        129       6732 (156s) LIMIT tcp 200.181.178.85 22423 <-> 200.187.144.243 80
01005          0          0 (0s) PARENT 0 udp 200.30.0.97 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.28.12.98 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 211.169.245.98 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.225.157.99 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.221.11.100 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.221.11.101 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.181.178.102 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.221.11.102 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 63.119.175.103 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.41.192.103 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.221.11.103 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.225.157.104 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.103.142.109 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.211.224.110 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.251.233.114 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.161.30.118 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.187.232.120 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.193.144.121 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.250.83.129 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 200.244.136.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.248.206.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.215.40.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.250.173.130 0 <-> 0.0.0.0 0
30025          0          0 (0s) PARENT 0 tcp 200.183.8.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 202.130.158.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 208.254.75.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 205.252.48.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 208.184.39.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 63.219.179.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.35.7.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.28.34.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 63.218.7.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 66.28.255.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 63.216.25.130 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.250.2.131 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.185.6.131 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.212.172.132 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 63.212.171.132 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.140.232.133 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 1 tcp 200.162.4.134 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 200.162.4.134 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 216.121.96.134 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.198.188.134 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 62.42.230.135 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.204.0.138 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.250.90.139 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.175.89.139 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.175.5.139 0 <-> 0.0.0.0 0
32025          9       1070 (300s) STATE tcp 200.187.144.244 4398 <-> 193.206.158.6 80
01005          0          0 (0s) PARENT 0 udp 200.32.96.140 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 1 udp 212.62.17.145 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.219.165.147 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.190.99.147 0 <-> 0.0.0.0 0
30015          0          0 (19s) PARENT 1 tcp 200.183.200.149 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 198.81.9.149 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.162.4.150 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.225.157.150 0 <-> 0.0.0.0 0
30020         21       4414 (131s) LIMIT tcp 200.171.14.187 1664 <-> 200.187.144.243 80
30025          0          0 (0s) PARENT 0 tcp 200.161.145.152 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.247.217.154 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 204.176.177.155 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.211.8.160 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 130.54.210.161 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 66.28.47.162 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.223.209.163 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.212.186.163 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 2 tcp 200.194.134.165 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.194.134.167 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.251.232.167 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.247.247.171 0 <-> 0.0.0.0 0
32025         91      79746 (282s) STATE tcp 200.187.144.244 4392 <-> 131.252.208.32 80
01005          0          0 (0s) PARENT 0 udp 216.136.172.176 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 216.136.172.179 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.194.134.183 0 <-> 0.0.0.0 0
30020          0          0 (0s) PARENT 5 tcp 200.171.14.187 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.171.14.187 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 63.123.77.194 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 205.158.108.194 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 63.218.13.194 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.252.68.196 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.15.251.198 0 <-> 0.0.0.0 0
03010          3        397 (10s) STATE udp 200.187.144.246 1024 <-> 131.154.1.11 53
01005          0          0 (0s) PARENT 0 udp 205.138.3.200 0 <-> 0.0.0.0 0
30015        251      63044 (121s) LIMIT tcp 200.194.242.26 1338 <-> 200.187.144.243 25
30015          0          0 (0s) PARENT 4 tcp 200.103.136.202 0 <-> 0.0.0.0 0
03010          3        397 (9s) STATE udp 200.187.144.246 1024 <-> 193.205.245.8 53
01005          0          0 (0s) PARENT 0 udp 200.176.115.203 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 194.196.15.207 0 <-> 0.0.0.0 0
03010          3        869 (8s) STATE udp 200.187.144.246 1024 <-> 192.36.148.17 53
01005          0          0 (0s) PARENT 0 udp 66.187.233.210 0 <-> 0.0.0.0 0
32005        395      66466 (300s) STATE tcp 200.187.144.246 2504 <-> 200.187.144.241 22
03010          7        739 (9s) STATE udp 200.187.144.246 1024 <-> 192.106.1.31 53
03010          3        390 (9s) STATE udp 200.187.144.246 1024 <-> 192.12.94.30 53
01005          0          0 (0s) PARENT 0 udp 200.253.253.222 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.185.13.223 0 <-> 0.0.0.0 0
30025          0          0 (0s) PARENT 0 tcp 80.200.104.225 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.205.181.226 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 64.28.86.226 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 209.237.238.228 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 206.64.119.229 0 <-> 0.0.0.0 0
30015         41      16220 (300s) LIMIT tcp 200.183.200.149 59028 <-> 200.187.144.243 25
32025         35      15568 (296s) STATE tcp 200.187.144.244 4396 <-> 216.239.37.101 80
01005          0          0 (0s) PARENT 0 udp 216.46.98.240 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 194.73.82.242 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 206.99.44.245 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 63.212.171.245 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.208.16.246 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.140.237.246 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.247.217.248 0 <-> 0.0.0.0 0
32025         29      16794 (293s) STATE tcp 200.187.144.244 4395 <-> 130.94.185.117 80
01005          0          0 (0s) PARENT 0 udp 210.0.128.250 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 192.138.110.250 0 <-> 0.0.0.0 0
32025         81      72132 (291s) STATE tcp 200.187.144.244 4394 <-> 130.94.185.117 80
01005          0          0 (0s) PARENT 0 udp 143.166.82.251 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 200.204.183.252 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 1 tcp 192.138.110.252 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 143.166.82.252 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 205.152.37.252 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.246.0.252 0 <-> 0.0.0.0 0
30020        587      53450 (171s) LIMIT tcp 200.181.178.85 21003 <-> 200.187.144.243 80
01005          0          0 (0s) PARENT 1 udp 192.138.110.253 0 <-> 0.0.0.0 0
30015          0          0 (0s) PARENT 0 tcp 192.138.110.254 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 200.250.47.254 0 <-> 0.0.0.0 0
01005          0          0 (0s) PARENT 0 udp 206.99.44.254 0 <-> 0.0.0.0 0




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?3E2ECDDF.8080400>