Подвисает сеть

Настройка сетевых служб, маршрутизации, фаерволлов. Проблемы с сетевым оборудованием.
Правила форума
Убедительная просьба юзать теги [code] при оформлении листингов.
Сообщения не оформленные должным образом имеют все шансы быть незамеченными.
wed
рядовой
Сообщения: 20
Зарегистрирован: 2007-10-26 8:26:08

Подвисает сеть

Непрочитанное сообщение wed » 2007-11-27 14:45:22

Всем доброго дня.
Никак не могу отловить причину, проблема вот в чем:
Есть сервер freebsd на нем есть vpn сервер нат и биллинговая система (utm)
все работает.
Инет раздается все хорошо все прекрасно, и вдруг бац! у одно пользователя инет не работает. пинг до шлюза есть, до яндекса есть, а браузер не работает. Аська работает если попробовать ее переподключить то заново не подключается. для vpn пользователей решается переподключением (иногда перезагрузкой) для пользователй по nat перезагрузкой. сменой винды или сетевой карточки. куда смотреть что искать?

Хостинговая компания Host-Food.ru
Хостинг HostFood.ru
 

Услуги хостинговой компании Host-Food.ru

Хостинг HostFood.ru

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2460 рублей (8 CPU, 8Gb RAM, 2x500Gb HDD, RAID 3ware 9750):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

Аватара пользователя
Alex Keda
стреляли...
Сообщения: 35068
Зарегистрирован: 2004-10-18 14:25:19
Откуда: Made in USSR
Контактная информация:

Re: Подвисает сеть

Непрочитанное сообщение Alex Keda » 2007-11-27 15:14:03

Код: Выделить всё

ipfw show
Убей их всех! Бог потом рассортирует...

wed
рядовой
Сообщения: 20
Зарегистрирован: 2007-10-26 8:26:08

Re: Подвисает сеть

Непрочитанное сообщение wed » 2007-11-27 16:24:13

1.zip
ipfw show
(9.67 КБ) 21 скачивание
пинги-то идут. в файрволле по портам от клиентских машин ничего не блочится...

Аватара пользователя
Alex Keda
стреляли...
Сообщения: 35068
Зарегистрирован: 2004-10-18 14:25:19
Откуда: Made in USSR
Контактная информация:

Re: Подвисает сеть

Непрочитанное сообщение Alex Keda » 2007-11-27 16:46:14

а так выложить - несудьба?
Убей их всех! Бог потом рассортирует...

wed
рядовой
Сообщения: 20
Зарегистрирован: 2007-10-26 8:26:08

Re: Подвисает сеть

Непрочитанное сообщение wed » 2007-11-27 16:50:38

Имхо, большой...

Код: Выделить всё

00100      26       1344 allow ip from 192.168.120.0/24 to xxx.xxx.105.0/24
00110       0          0 allow ip from xxx.xxx.105.0/24 to 192.168.120.0/24
00120       0          0 allow ip from 192.168.20.0/24 to xxx.xxx.105.0/24
00130       0          0 allow ip from xxx.xxx.105.0/24 to 192.168.20.0/24
00140  554406   62445934 divert 8668 ip from 192.168.120.0/24 to any out recv vr0 xmit rl0
00150 2126863  411109481 divert 8668 ip from 192.168.20.0/24 to any xmit rl0
00160 3229728 2923051111 divert 8668 ip from not 10.10.1.0/24 to 212.118.46.182 recv rl0
00170 2184777  488628972 allow ip from 192.168.130.0/24 to me
00180 2827131 2281362913 allow ip from me to 192.168.130.0/24
00190   14463    1118524 allow ip from 192.168.120.0/24 to me
00200     328      15736 deny tcp from any 135,137,138,139,445,69,1433 to any
00210     723      39436 deny tcp from any to any dst-port 135,137,138,139,445,69,1433
00220   46166    4048285 deny udp from any 135,137,138,139,445,69,1433 to any
00230    1691     131898 deny udp from any to any dst-port 135,137,138,139,445,69,1433
00240     422      20284 deny tcp from any 4444,5554,9996,3127 to any
00250       6        288 deny tcp from any to any dst-port 4444,5554,9996,3127
00260      21       2175 deny udp from any 4444,5554,9996,3127 to any
00270       1         50 deny udp from any to any dst-port 4444,5554,9996,3127
00280    7272     349500 deny tcp from any 3141-3198 to any
00290      81       3888 deny tcp from any to any dst-port 3141-3198
00300     454      31032 deny udp from any 3141-3198 to any
00310      12       1767 deny udp from any to any dst-port 3141-3198
00320    7458   11678704 allow ip from any to any via lo0
00330       0          0 deny ip from any to 127.0.0.0/8
00340       0          0 deny ip from 127.0.0.0/8 to any
00350   98926  100904335 pipe 129 ip from any to 192.168.20.129 in
00360   39891   39331720 pipe 130 ip from any to 192.168.20.130 in
00370       0          0 pipe 131 ip from any to 192.168.20.131 in
00380       0          0 pipe 132 ip from any to 192.168.20.132 in
00390       0          0 pipe 133 ip from any to 192.168.20.133 in
00400       0          0 pipe 134 ip from any to 192.168.20.134 in
00410    2636    2198230 pipe 135 ip from any to 192.168.20.135 in
00420       0          0 pipe 136 ip from any to 192.168.20.136 in
00430   46789   48275797 pipe 137 ip from any to 192.168.20.137 in
00440       0          0 pipe 138 ip from any to 192.168.20.138 in
00450   56549   25691568 pipe 139 ip from any to 192.168.20.139 in
00460       0          0 pipe 140 ip from any to 192.168.20.140 in
00470       0          0 pipe 141 ip from any to 192.168.20.141 in
00480  183793  233839577 pipe 142 ip from any to 192.168.20.142 in
00490       0          0 pipe 143 ip from any to 192.168.20.143 in
00500       0          0 pipe 144 ip from any to 192.168.20.144 in
00510       0          0 pipe 145 ip from any to 192.168.20.145 in
00520       0          0 pipe 146 ip from any to 192.168.20.146 in
00530       0          0 pipe 147 ip from any to 192.168.20.147 in
00540       0          0 pipe 148 ip from any to 192.168.20.148 in
00550       0          0 pipe 149 ip from any to 192.168.20.149 in
00560  451324   87953201 pipe 150 ip from any to 192.168.20.150 in
00570       0          0 pipe 151 ip from any to 192.168.20.151 in
00580       0          0 pipe 152 ip from any to 192.168.20.152 in
00590    1463     949966 pipe 153 ip from any to 192.168.20.153 in
00600       0          0 pipe 154 ip from any to 192.168.20.154 in
00610       0          0 pipe 155 ip from any to 192.168.20.155 in
00620       0          0 pipe 156 ip from any to 192.168.20.156 in
00630       0          0 pipe 157 ip from any to 192.168.20.157 in
00640       0          0 pipe 158 ip from any to 192.168.20.158 in
00650   11932   13548183 pipe 159 ip from any to 192.168.20.159 in
00660       0          0 pipe 193 ip from any to 192.168.20.193 in
00670   93722  114690953 pipe 194 ip from any to 192.168.20.194 in
00680       0          0 pipe 195 ip from any to 192.168.20.195 in
00690       0          0 pipe 196 ip from any to 192.168.20.196 in
00700       0          0 pipe 197 ip from any to 192.168.20.197 in
00710       0          0 pipe 198 ip from any to 192.168.20.198 in
00720       0          0 pipe 199 ip from any to 192.168.20.199 in
00730       0          0 pipe 200 ip from any to 192.168.20.200 in
00740   27794   17676917 pipe 201 ip from any to 192.168.20.201 in
00750       0          0 pipe 202 ip from any to 192.168.20.202 in
00760       0          0 pipe 203 ip from any to 192.168.20.203 in
00770   12187    8216061 pipe 204 ip from any to 192.168.20.204 in
00780       0          0 pipe 205 ip from any to 192.168.20.205 in
00790       0          0 pipe 206 ip from any to 192.168.20.206 in
00800       0          0 pipe 207 ip from any to 192.168.20.207 in
00810       0          0 pipe 208 ip from any to 192.168.20.208 in
00820   33922   23256623 pipe 209 ip from any to 192.168.20.209 in
00830       0          0 pipe 210 ip from any to 192.168.20.210 in
00840       0          0 pipe 211 ip from any to 192.168.20.211 in
00850       0          0 pipe 212 ip from any to 192.168.20.212 in
00860       0          0 pipe 213 ip from any to 192.168.20.213 in
00870       0          0 pipe 214 ip from any to 192.168.20.214 in
00880       0          0 pipe 215 ip from any to 192.168.20.215 in
00890       0          0 pipe 216 ip from any to 192.168.20.216 in
00900       0          0 pipe 217 ip from any to 192.168.20.217 in
00910       0          0 pipe 218 ip from any to 192.168.20.218 in
00920       0          0 pipe 219 ip from any to 192.168.20.219 in
00930       0          0 pipe 220 ip from any to 192.168.20.220 in
00940       0          0 pipe 221 ip from any to 192.168.20.221 in
00950       0          0 pipe 222 ip from any to 192.168.20.222 in
00960       0          0 pipe 223 ip from any to 192.168.20.223 in
00970 2726591  494333701 allow ip from me to any
00980   29078    2358887 allow ip from any to me
01001       0          0 allow ip from 192.168.20.1 to any
01001       0          0 allow ip from any to 192.168.20.1
01001       0          0 allow ip from 80.90.120.250 to any
01001   14461    1199860 allow ip from any to 80.90.120.250
01005       0          0 allow ip from 80.90.120.251 to any
01005       0          0 allow ip from any to 80.90.120.251
01007       0          0 allow ip from 80.90.120.195 to any
01007     225      13151 allow ip from any to 80.90.120.195
01008   13840    1358711 allow ip from xxx.xxx.50.70 to any
01008   14854   11255962 allow ip from any to xxx.xxx.50.70
01011 1190665   51692990 allow ip from 192.168.120.2 to any
01011 2419648 3383849010 allow ip from any to 192.168.120.2
01013       0          0 allow ip from 192.168.120.5 to any
01013       0          0 allow ip from any to 192.168.120.5
01014       0          0 allow ip from 80.90.120.199 to any
01014     134       8734 allow ip from any to 80.90.120.199
01015       0          0 allow ip from 192.168.120.6 to any
01015       0          0 allow ip from any to 192.168.120.6
01017   13428     929688 allow ip from 192.168.120.7 to any
01017   25680   14274096 allow ip from any to 192.168.120.7
01020     360      21626 allow ip from 192.168.120.10 to any
01020     634      43632 allow ip from any to 192.168.120.10
01021     646      45032 allow ip from 80.90.120.210 to any
01021    6153    1393688 allow ip from any to 80.90.120.210
01023       0          0 allow ip from 192.168.120.13 to any
01023       0          0 allow ip from any to 192.168.120.13
01024      76      10306 allow ip from 192.168.120.14 to any
01024     116      14210 allow ip from any to 192.168.120.14
01025       0          0 allow ip from 192.168.120.15 to any
01025       0          0 allow ip from any to 192.168.120.15
01026       0          0 allow ip from 80.90.120.196 to any
01026     161       9373 allow ip from any to 80.90.120.196
01027       0          0 allow ip from 192.168.120.16 to any
01027       0          0 allow ip from any to 192.168.120.16
01031    1105      79261 allow ip from 192.168.120.20 to any
01031    1156      97554 allow ip from any to 192.168.120.20
01032       0          0 allow ip from 192.168.20.5 to any
01032       0          0 allow ip from any to 192.168.20.5
01033       0          0 allow ip from 80.90.120.200 to any
01033     130       7778 allow ip from any to 80.90.120.200
01034    1703     107878 allow ip from 192.168.120.22 to any
01034    2784     209594 allow ip from any to 192.168.120.22
01035       0          0 allow ip from 192.168.120.23 to any
01035       0          0 allow ip from any to 192.168.120.23
01036       1        576 allow ip from 192.168.120.24 to any
01036       0          0 allow ip from any to 192.168.120.24
01038   53384    8320915 allow ip from 192.168.120.25 to any
01038  103974   69697118 allow ip from any to 192.168.120.25
01039      16       4416 allow ip from 80.90.120.201 to any
01039     130       7124 allow ip from any to 80.90.120.201
01040       0          0 allow ip from 192.168.20.203 to any
01040       0          0 allow ip from any to 192.168.20.203
01044    3417     641537 allow ip from 192.168.20.2 to any
01044    7840    5043258 allow ip from any to 192.168.20.2
01045  182218   17807662 allow ip from xxx.xxx.50.78 to any
01045  259692  267993356 allow ip from any to xxx.xxx.50.78
01051    4426     314994 allow ip from 192.168.120.28 to any
01051    7366     746294 allow ip from any to 192.168.120.28
01052       0          0 allow ip from 192.168.20.6 to any
01052       0          0 allow ip from any to 192.168.20.6
01053       0          0 allow ip from 192.168.120.29 to any
01053       0          0 allow ip from any to 192.168.120.29
01054       0          0 allow ip from 192.168.120.30 to any
01054       0          0 allow ip from any to 192.168.120.30
01055    2982     199023 allow ip from 192.168.20.7 to any
01055    7966    9737532 allow ip from any to 192.168.20.7
01056       0          0 allow ip from 192.168.20.198 to any
01056       0          0 allow ip from any to 192.168.20.198
01058    1614     124386 allow ip from 192.168.120.31 to any
01058    2334     167680 allow ip from any to 192.168.120.31
01059       0          0 allow ip from 192.168.120.32 to any
01059       0          0 allow ip from any to 192.168.120.32
01060       0          0 allow ip from 192.168.20.10 to any
01060       0          0 allow ip from any to 192.168.20.10
01061   39439    4384488 allow ip from 192.168.20.11 to any
01061  110092  118350074 allow ip from any to 192.168.20.11
01062       0          0 allow ip from 192.168.120.33 to any
01062       0          0 allow ip from any to 192.168.120.33
01063       0          0 allow ip from 80.90.120.203 to any
01063     225      12767 allow ip from any to 80.90.120.203
01065  193326   22026146 allow ip from 192.168.20.12 to any
01065  407180   50505696 allow ip from any to 192.168.20.12
01066       0          0 allow ip from 80.90.120.208 to any
01066     114       6160 allow ip from any to 80.90.120.208
01067       0          0 allow ip from 192.168.120.35 to any
01067       0          0 allow ip from any to 192.168.120.35
01069     599      98485 allow ip from 192.168.20.14 to any
01069    1228     737670 allow ip from any to 192.168.20.14
01070   27381    2835886 allow ip from 192.168.20.15 to any
01070   73712   74837884 allow ip from any to 192.168.20.15
01071   16261    3438800 allow ip from 192.168.20.16 to any
01071   28594   19957604 allow ip from any to 192.168.20.16
01073  151102   23670885 allow ip from 192.168.120.36 to any
01073  370460  418360426 allow ip from any to 192.168.120.36
01075     104      10264 allow ip from 192.168.20.127 to any
01075     188      91286 allow ip from any to 192.168.20.127
01076   61771    5704315 allow ip from 192.168.20.19 to any
01076  169810  196436880 allow ip from any to 192.168.20.19
01077      77       6641 allow ip from 192.168.120.37 to any
01077      70       4994 allow ip from any to 192.168.120.37
01078   69433    5183377 allow ip from 192.168.120.38 to any
01078  258768  356809466 allow ip from any to 192.168.120.38
01079    8813    1383182 allow ip from 192.168.20.20 to any
01079   20362   11128726 allow ip from any to 192.168.20.20
01081       0          0 allow ip from 192.168.20.214 to any
01081       0          0 allow ip from any to 192.168.20.214
01082       0          0 allow ip from 192.168.20.23 to any
01082       0          0 allow ip from any to 192.168.20.23
01083    5701     695715 allow ip from 192.168.20.24 to any
01083   13482   11688618 allow ip from any to 192.168.20.24
01084       0          0 allow ip from 192.168.20.25 to any
01084       0          0 allow ip from any to 192.168.20.25
01085       0          0 allow ip from 192.168.20.26 to any
01085       0          0 allow ip from any to 192.168.20.26
01086       0          0 allow ip from 192.168.20.27 to any
01086       0          0 allow ip from any to 192.168.20.27
01087    3338     454712 allow ip from 192.168.20.28 to any
01087    8768   10120462 allow ip from any to 192.168.20.28
01088       0          0 allow ip from 80.90.120.204 to any
01088   36519    1665051 allow ip from any to 80.90.120.204
01089    6905     819954 allow ip from 192.168.20.29 to any
01089   16740   12487230 allow ip from any to 192.168.20.29
01091       0          0 allow ip from 192.168.20.140 to any
01091       0          0 allow ip from any to 192.168.20.140
01092   64163    4943204 allow ip from 192.168.120.39 to any
01092  102462   10249792 allow ip from any to 192.168.120.39
01093     570      89919 allow ip from 192.168.20.32 to any
01093     986     588110 allow ip from any to 192.168.20.32
01094       0          0 allow ip from 192.168.20.33 to any
01094       0          0 allow ip from any to 192.168.20.33
01095    3949     615464 allow ip from 192.168.20.34 to any
01095    8170    5962008 allow ip from any to 192.168.20.34
01098   21497    3020124 allow ip from 192.168.20.37 to any
01098   52468   37681118 allow ip from any to 192.168.20.37
01099   17449    7647807 allow ip from 192.168.20.38 to any
01099   29814    3442502 allow ip from any to 192.168.20.38
01100    2133     240081 allow ip from 192.168.20.39 to any
01100    5076    4577194 allow ip from any to 192.168.20.39
01101    2652     426987 allow ip from 192.168.120.41 to any
01101    5324    3302992 allow ip from any to 192.168.120.41
01102       0          0 allow ip from 192.168.20.21 to any
01102       0          0 allow ip from any to 192.168.20.21
01104       0          0 allow ip from 192.168.20.138 to any
01104       0          0 allow ip from any to 192.168.20.138
01105    6105     847890 allow ip from 192.168.20.41 to any
01105   18538   18276080 allow ip from any to 192.168.20.41
01107   73549   30785506 allow ip from 192.168.20.129 to any
01107   98778  100791898 allow ip from any to 192.168.20.129
01108   29236    2583431 allow ip from 192.168.20.42 to any
01108   75634   80228136 allow ip from any to 192.168.20.42
01110  247139   10953917 allow ip from 192.168.20.60 to any
01110  877060 1226983656 allow ip from any to 192.168.20.60
01111       0          0 allow ip from 192.168.20.133 to any
01111       0          0 allow ip from any to 192.168.20.133
01113       0          0 allow ip from 192.168.20.154 to any
01113       0          0 allow ip from any to 192.168.20.154
01115       0          0 allow ip from 192.168.20.46 to any
01115       0          0 allow ip from any to 192.168.20.46
01116       0          0 allow ip from 192.168.120.254 to any
01116       0          0 allow ip from any to 192.168.120.254
01117       0          0 allow ip from 192.168.20.132 to any
01117       0          0 allow ip from any to 192.168.20.132
01118       0          0 allow ip from 192.168.20.48 to any
01118       0          0 allow ip from any to 192.168.20.48
01119      42       2311 allow ip from 192.168.120.42 to any
01119     114       7158 allow ip from any to 192.168.120.42
01120       0          0 allow ip from 192.168.20.49 to any
01120       0          0 allow ip from any to 192.168.20.49
01121   11774    6086275 allow ip from 192.168.20.204 to any
01121   12169    8196289 allow ip from any to 192.168.20.204
01122     257      21604 allow ip from 192.168.20.51 to any
01122     608     351386 allow ip from any to 192.168.20.51
01123       0          0 allow ip from 192.168.20.134 to any
01123       0          0 allow ip from any to 192.168.20.134
01124       0          0 allow ip from 192.168.20.202 to any
01124       0          0 allow ip from any to 192.168.20.202
01125    2382     297029 allow ip from 192.168.20.52 to any
01125    5580    4466938 allow ip from any to 192.168.20.52
01126       0          0 allow ip from 192.168.20.53 to any
01126       0          0 allow ip from any to 192.168.20.53
01127    9616    1131830 allow ip from 192.168.20.54 to any
01127   23314   20663300 allow ip from any to 192.168.20.54
01128       0          0 allow ip from 192.168.20.149 to any
01128       0          0 allow ip from any to 192.168.20.149
01131    6385    1107672 allow ip from 192.168.20.58 to any
01131   13866    8977844 allow ip from any to 192.168.20.58
01133  298277  148125610 allow ip from 192.168.20.59 to any
01133  718898  758360540 allow ip from any to 192.168.20.59
01134   35987    4397927 allow ip from 192.168.20.137 to any
01134   45376   46662827 allow ip from any to 192.168.20.137
01135       0          0 allow ip from 192.168.120.43 to any
01135       0          0 allow ip from any to 192.168.120.43
01136       0          0 allow ip from 192.168.20.8 to any
01136       0          0 allow ip from any to 192.168.20.8
01138    7433    1107042 allow ip from xxx.xxx.50.126 to any
01138    7792    6204000 allow ip from any to xxx.xxx.50.126
01139       0          0 allow ip from 80.90.120.206 to any
01139     198      11926 allow ip from any to 80.90.120.206
01140       0          0 allow ip from 80.90.120.205 to any
01140     242      19604 allow ip from any to 80.90.120.205
01142       0          0 allow ip from 80.90.120.207 to any
01142      93       4893 allow ip from any to 80.90.120.207
01143       0          0 allow ip from 192.168.120.44 to any
01143       0          0 allow ip from any to 192.168.120.44
01144       0          0 allow ip from 192.168.20.193 to any
01144       0          0 allow ip from any to 192.168.20.193
01145    3700     578244 allow ip from 192.168.20.61 to any
01145    8586    6028548 allow ip from any to 192.168.20.61
01149  142135    8404577 allow ip from 192.168.20.142 to any
01149  183792  233838410 allow ip from any to 192.168.20.142
01150   27140   12586677 allow ip from 192.168.20.201 to any
01150   27778   17663993 allow ip from any to 192.168.20.201
01151       0          0 allow ip from 192.168.20.143 to any
01151       0          0 allow ip from any to 192.168.20.143
01152       0          0 allow ip from 192.168.20.65 to any
01152       0          0 allow ip from any to 192.168.20.65
01153       0          0 allow ip from 192.168.20.66 to any
01153       0          0 allow ip from any to 192.168.20.66
01154       0          0 allow ip from 192.168.20.67 to any
01154       0          0 allow ip from any to 192.168.20.67
01155       0          0 allow ip from 192.168.20.144 to any
01155       0          0 allow ip from any to 192.168.20.144
01156       0          0 allow ip from 192.168.120.45 to any
01156       0          0 allow ip from any to 192.168.120.45
01159   23238    2800404 allow ip from 192.168.20.55 to any
01159   62476   67871764 allow ip from any to 192.168.20.55
01161       0          0 allow ip from 192.168.20.68 to any
01161       0          0 allow ip from any to 192.168.20.68
01162      97       6058 allow ip from 192.168.120.46 to any
01162     190      11958 allow ip from any to 192.168.120.46
01169   57885    4865954 allow ip from 192.168.20.194 to any
01169   93686  114676168 allow ip from any to 192.168.20.194
01171    7997    1198533 allow ip from 192.168.120.40 to any
01171   18310   17213956 allow ip from any to 192.168.120.40
01172   31655    1798920 allow ip from 192.168.20.70 to any
01172   62948   83504202 allow ip from any to 192.168.20.70
01173       0          0 allow ip from 192.168.120.3 to any
01173       0          0 allow ip from any to 192.168.120.3
01174       0          0 allow ip from 192.168.20.71 to any
01174       0          0 allow ip from any to 192.168.20.71
01175       0          0 allow ip from 192.168.20.151 to any
01175       0          0 allow ip from any to 192.168.20.151
01177       0          0 allow ip from 192.168.20.195 to any
01177       0          0 allow ip from any to 192.168.20.195
01180       0          0 allow ip from 192.168.20.158 to any
01180       0          0 allow ip from any to 192.168.20.158
01181     442      22984 allow ip from 80.90.120.209 to any
01181     227      13041 allow ip from any to 80.90.120.209
01182       0          0 allow ip from 192.168.20.72 to any
01182       0          0 allow ip from any to 192.168.20.72
01183    2109     286975 allow ip from 192.168.20.135 to any
01183    2633    2194030 allow ip from any to 192.168.20.135
01185       0          0 allow ip from 192.168.20.196 to any
01185       0          0 allow ip from any to 192.168.20.196
01186    5893     688960 allow ip from 192.168.20.74 to any
01186   14244   15451886 allow ip from any to 192.168.20.74
01188   18742    2681265 allow ip from 192.168.120.26 to any
01188   38784   26201696 allow ip from any to 192.168.120.26
01189  559842   88720276 allow ip from 192.168.20.150 to any
01189  451303   87951645 allow ip from any to 192.168.20.150
01191   47197   20203487 allow ip from 192.168.20.139 to any
01191   56493   25639696 allow ip from any to 192.168.20.139
01192    7822     866407 allow ip from 192.168.120.34 to any
01192   26912   33457910 allow ip from any to 192.168.120.34
01194       0          0 allow ip from 192.168.20.141 to any
01194       0          0 allow ip from any to 192.168.20.141
01195       0          0 allow ip from 192.168.120.49 to any
01195       0          0 allow ip from any to 192.168.120.49
01196    3758     360215 allow ip from 192.168.120.21 to any
01196    9652   11886968 allow ip from any to 192.168.120.21
01197       0          0 allow ip from 192.168.120.50 to any
01197       0          0 allow ip from any to 192.168.120.50
01198       0          0 allow ip from 192.168.20.75 to any
01198       0          0 allow ip from any to 192.168.20.75
01199       0          0 allow ip from 192.168.20.148 to any
01199       0          0 allow ip from any to 192.168.20.148
01200       0          0 allow ip from 192.168.20.199 to any
01200       0          0 allow ip from any to 192.168.20.199
01202       0          0 allow ip from 192.168.120.4 to any
01202       0          0 allow ip from any to 192.168.120.4
01203       0          0 allow ip from 192.168.120.8 to any
01203       0          0 allow ip from any to 192.168.120.8
01205       0          0 allow ip from 192.168.120.9 to any
01205       0          0 allow ip from any to 192.168.120.9
01206   28592    3636916 allow ip from 192.168.20.130 to any
01206   39836   39283430 allow ip from any to 192.168.20.130
01209   26721    2075297 allow ip from 192.168.20.209 to any
01209   33849   23157789 allow ip from any to 192.168.20.209
01210      18        970 allow ip from 192.168.120.17 to any
01210      42       2954 allow ip from any to 192.168.120.17
01211       0          0 allow ip from 80.90.120.221 to any
01211     194      11028 allow ip from any to 80.90.120.221
01213      17       1520 allow ip from 192.168.120.18 to any
01213      24       1752 allow ip from any to 192.168.120.18
01214    1282     248923 allow ip from 192.168.20.153 to any
01214    1463     949966 allow ip from any to 192.168.20.153
01215    8971     650919 allow ip from 192.168.20.159 to any
01215   11692   13381392 allow ip from any to 192.168.20.159
01216       0          0 allow ip from 192.168.20.211 to any
01216       0          0 allow ip from any to 192.168.20.211
01217   24582    3000777 allow ip from 192.168.20.35 to any
01217   68982   74000666 allow ip from any to 192.168.20.35
01218       0          0 allow ip from 192.168.20.40 to any
01218       0          0 allow ip from any to 192.168.20.40
01219       0          0 allow ip from 80.90.120.211 to any
01219     126       6880 allow ip from any to 80.90.120.211
01220       0          0 allow ip from 192.168.20.50 to any
01220       0          0 allow ip from any to 192.168.20.50
01221       0          0 allow ip from 192.168.20.212 to any
01221       0          0 allow ip from any to 192.168.20.212
01222       0          0 allow ip from 0.0.0.2 to any
01222       0          0 allow ip from any to 0.0.0.2
01224       0          0 allow ip from 0.0.0.4 to any
01224       0          0 allow ip from any to 0.0.0.4
01225       0          0 allow ip from 0.0.0.5 to any
01225       0          0 allow ip from any to 0.0.0.5
01226       0          0 allow ip from 0.0.0.6 to any
01226       0          0 allow ip from any to 0.0.0.6
01227       0          0 allow ip from 0.0.0.7 to any
01227       0          0 allow ip from any to 0.0.0.7
01228       0          0 allow ip from 0.0.0.8 to any
01228       0          0 allow ip from any to 0.0.0.8
01229       0          0 allow ip from 0.0.0.9 to any
01229       0          0 allow ip from any to 0.0.0.9
01230   16337    3600260 allow ip from 192.168.120.19 to any
01230   48638   31827522 allow ip from any to 192.168.120.19
01231       0          0 allow ip from 80.90.120.212 to any
01231     132       7220 allow ip from any to 80.90.120.212
01232       0          0 allow ip from 192.168.120.11 to any
01232       0          0 allow ip from any to 192.168.120.11
01233    3895     242885 allow ip from 192.168.120.12 to any
01233    6934     520390 allow ip from any to 192.168.120.12
01234       0          0 allow ip from 192.168.20.213 to any
01234       0          0 allow ip from any to 192.168.20.213
01265       0          0 allow ip from 192.168.120.27 to any
01265       0          0 allow ip from any to 192.168.120.27
01266       0          0 allow ip from 192.168.120.51 to any
01266       0          0 allow ip from any to 192.168.120.51
01267       0          0 allow ip from 192.168.120.47 to any
01267       0          0 allow ip from any to 192.168.120.47
01268       0          0 allow ip from 0.0.0.31 to any
01268       0          0 allow ip from any to 0.0.0.31
65534  105681    9499280 deny ip from any to any
65535      60       4402 allow ip from any to any
00100        0           0 allow ip from 192.168.120.0/24 to xxx.xxx.105.0/24
00110        0           0 allow ip from xxx.xxx.105.0/24 to 192.168.120.0/24
00120        0           0 allow ip from 192.168.20.0/24 to xxx.xxx.105.0/24
00130        0           0 allow ip from xxx.xxx.105.0/24 to 192.168.20.0/24
00140 14726670  1981853823 divert 8668 ip from 192.168.120.0/24 to any out recv vr0 xmit rl0
00150 27938353  7999694704 divert 8668 ip from 192.168.20.0/24 to any xmit rl0
00160 46000852 33815144413 divert 8668 ip from not 10.10.1.0/24 to 212.118.46.182 recv rl0
00170 35729892  9503023740 allow ip from 192.168.130.0/24 to me
00180 47094870 38660342701 allow ip from me to 192.168.130.0/24
00190    13329     1005335 allow ip from 192.168.120.0/24 to me
00200     1927       92604 deny tcp from any 135,137,138,139,445,69,1433 to any
00210     5078      251184 deny tcp from any to any dst-port 135,137,138,139,445,69,1433
00220   283200    27822394 deny udp from any 135,137,138,139,445,69,1433 to any
00230    79143     7952573 deny udp from any to any dst-port 135,137,138,139,445,69,1433
00240     2256      108488 deny tcp from any 4444,5554,9996,3127 to any
00250       49        2352 deny tcp from any to any dst-port 4444,5554,9996,3127
00260      390       26714 deny udp from any 4444,5554,9996,3127 to any
00270       15         830 deny udp from any to any dst-port 4444,5554,9996,3127
00280    75088     3609044 deny tcp from any 3141-3198 to any
00290       85        4080 deny tcp from any to any dst-port 3141-3198
00300     8669      688960 deny udp from any 3141-3198 to any
00310      102       10077 deny udp from any to any dst-port 3141-3198
00320    67388   259772112 allow ip from any to any via lo0
00330        0           0 deny ip from any to 127.0.0.0/8
00340        0           0 deny ip from 127.0.0.0/8 to any
00350   534933   166234994 pipe 129 ip from any to 192.168.20.129 in
00360   176819   138030104 pipe 130 ip from any to 192.168.20.130 in
00370        0           0 pipe 131 ip from any to 192.168.20.131 in
00380   804037   419814934 pipe 132 ip from any to 192.168.20.132 in
00390        0           0 pipe 133 ip from any to 192.168.20.133 in
00400    56368    59267722 pipe 134 ip from any to 192.168.20.134 in
00410        0           0 pipe 135 ip from any to 192.168.20.135 in
00420        0           0 pipe 136 ip from any to 192.168.20.136 in
00430   417304   511990159 pipe 137 ip from any to 192.168.20.137 in
00440   806924  1100558210 pipe 138 ip from any to 192.168.20.138 in
00450    20067    16552892 pipe 139 ip from any to 192.168.20.139 in
00460   460226   593946591 pipe 140 ip from any to 192.168.20.140 in
00470  2287176  1512251524 pipe 141 ip from any to 192.168.20.141 in
00480  8461502  7866147091 pipe 142 ip from any to 192.168.20.142 in
00490        0           0 pipe 143 ip from any to 192.168.20.143 in
00500   147827   110979792 pipe 144 ip from any to 192.168.20.144 in
00510        0           0 pipe 145 ip from any to 192.168.20.145 in
00520        0           0 pipe 146 ip from any to 192.168.20.146 in
00530     7432     6457930 pipe 147 ip from any to 192.168.20.147 in
00540   127273   125982280 pipe 148 ip from any to 192.168.20.148 in
00550   398513   183881069 pipe 149 ip from any to 192.168.20.149 in
00560   301967   244934041 pipe 150 ip from any to 192.168.20.150 in
00570    55409    41597441 pipe 151 ip from any to 192.168.20.151 in
00580  1834673   379534305 pipe 152 ip from any to 192.168.20.152 in
00590     1890     1453658 pipe 153 ip from any to 192.168.20.153 in
00600   410320   566107544 pipe 154 ip from any to 192.168.20.154 in
00610        0           0 pipe 155 ip from any to 192.168.20.155 in
00620        0           0 pipe 156 ip from any to 192.168.20.156 in
00630        0           0 pipe 157 ip from any to 192.168.20.157 in
00640        0           0 pipe 158 ip from any to 192.168.20.158 in
00650   230089   183998249 pipe 159 ip from any to 192.168.20.159 in
00660   821307   469739380 pipe 193 ip from any to 192.168.20.193 in
00670    96605    91498827 pipe 194 ip from any to 192.168.20.194 in
00680   153234   157275554 pipe 195 ip from any to 192.168.20.195 in
00690      637      483962 pipe 196 ip from any to 192.168.20.196 in
00700        0           0 pipe 197 ip from any to 192.168.20.197 in
00710   153565    60973776 pipe 198 ip from any to 192.168.20.198 in
00720        0           0 pipe 199 ip from any to 192.168.20.199 in
00730        0           0 pipe 200 ip from any to 192.168.20.200 in
00740   124807    89437975 pipe 201 ip from any to 192.168.20.201 in
00750  2401706  2352322196 pipe 202 ip from any to 192.168.20.202 in
00760   399153   489988735 pipe 203 ip from any to 192.168.20.203 in
00770  2655463  2362589629 pipe 204 ip from any to 192.168.20.204 in
00780        0           0 pipe 205 ip from any to 192.168.20.205 in
00790    29796    19195963 pipe 206 ip from any to 192.168.20.206 in
00800        0           0 pipe 207 ip from any to 192.168.20.207 in
00810        0           0 pipe 208 ip from any to 192.168.20.208 in
00820   200519   173043836 pipe 209 ip from any to 192.168.20.209 in
00830   266650   304701904 pipe 210 ip from any to 192.168.20.210 in
00840    49432    31985392 pipe 211 ip from any to 192.168.20.211 in
00850   117820    80855347 pipe 212 ip from any to 192.168.20.212 in
00860   687969   151938419 pipe 213 ip from any to 192.168.20.213 in
00870    40626    31418670 pipe 214 ip from any to 192.168.20.214 in
00880        0           0 pipe 215 ip from any to 192.168.20.215 in
00890  4875343  5111931805 pipe 216 ip from any to 192.168.20.216 in
00900    12999    15898037 pipe 217 ip from any to 192.168.20.217 in
00910        0           0 pipe 218 ip from any to 192.168.20.218 in
00920        0           0 pipe 219 ip from any to 192.168.20.219 in
00930        0           0 pipe 220 ip from any to 192.168.20.220 in
00940        0           0 pipe 221 ip from any to 192.168.20.221 in
00950        0           0 pipe 222 ip from any to 192.168.20.222 in
00960        0           0 pipe 223 ip from any to 192.168.20.223 in
00970 43019198 10040080759 allow ip from me to any
00980   331911    22307548 allow ip from any to me
01001        0           0 allow ip from 192.168.20.1 to any
01001        0           0 allow ip from any to 192.168.20.1
01001        0           0 allow ip from 80.90.120.250 to any
01001      220       10560 allow ip from any to 80.90.120.250
01005        0           0 allow ip from 80.90.120.251 to any
01005        0           0 allow ip from any to 80.90.120.251
01007  5624530   579664990 allow ip from xxx.xxx.50.71 to any
01007  6704600  6934412838 allow ip from any to xxx.xxx.50.71
01008        0           0 allow ip from xxx.xxx.50.70 to any
01008      628       38210 allow ip from any to xxx.xxx.50.70
01011   976065    73199261 allow ip from 192.168.120.2 to any
01011  2305684  2452528986 allow ip from any to 192.168.120.2
01013     7691      961601 allow ip from 192.168.120.5 to any
01013    19094    21466740 allow ip from any to 192.168.120.5
01014        0           0 allow ip from xxx.xxx.50.75 to any
01014      650       40214 allow ip from any to xxx.xxx.50.75
01015        0           0 allow ip from 192.168.120.6 to any
01015        0           0 allow ip from any to 192.168.120.6
01017  2345844   276937149 allow ip from 192.168.120.7 to any
01017  6584920  7582371612 allow ip from any to 192.168.120.7
01020    14304      938750 allow ip from 192.168.120.10 to any
01020    38694    36437158 allow ip from any to 192.168.120.10
01021   392958    96517660 allow ip from xxx.xxx.50.86 to any
01021   496190   413823900 allow ip from any to xxx.xxx.50.86
01023     9723     1173674 allow ip from 192.168.120.13 to any
01023    23480    11917534 allow ip from any to 192.168.120.13
01024    31462     3754340 allow ip from 192.168.120.14 to any
01024    94178    99455292 allow ip from any to 192.168.120.14
01025    22834     2303016 allow ip from 192.168.120.15 to any
01025    59206    55017732 allow ip from any to 192.168.120.15
01026        0           0 allow ip from xxx.xxx.50.72 to any
01026      558       35018 allow ip from any to xxx.xxx.50.72
01027   890213   270362494 allow ip from 192.168.120.16 to any
01027  1214196   246760858 allow ip from any to 192.168.120.16
01031   201447    64574143 allow ip from 192.168.120.20 to any
01031   421826   387988042 allow ip from any to 192.168.120.20
01032        0           0 allow ip from 192.168.20.5 to any
01032        0           0 allow ip from any to 192.168.20.5
01033        0           0 allow ip from xxx.xxx.50.76 to any
01033      652       39270 allow ip from any to xxx.xxx.50.76
01034   141329    41392800 allow ip from 192.168.120.22 to any
01034   379748   283085028 allow ip from any to 192.168.120.22
01035        0           0 allow ip from 192.168.120.23 to any
01035        0           0 allow ip from any to 192.168.120.23
01036   224223    24901678 allow ip from 192.168.120.24 to any
01036   582204   697955228 allow ip from any to 192.168.120.24
01038   397220    48223235 allow ip from 192.168.120.25 to any
01038   684732   214208758 allow ip from any to 192.168.120.25
01039   157414    33064956 allow ip from xxx.xxx.50.77 to any
01039   171190   133447832 allow ip from any to xxx.xxx.50.77
01040   243401    18429782 allow ip from 192.168.20.203 to any
01040   397679   488458236 allow ip from any to 192.168.20.203
01045   947184   163653316 allow ip from xxx.xxx.50.78 to any
01045  1035358   794880844 allow ip from any to xxx.xxx.50.78
01051   223679    35463669 allow ip from 192.168.120.28 to any
01051   515968   450007390 allow ip from any to 192.168.120.28
01052    37445     5455970 allow ip from 192.168.20.6 to any
01052    78058    49151176 allow ip from any to 192.168.20.6
01055    44824     5660092 allow ip from 192.168.20.7 to any
01055   104186    81027672 allow ip from any to 192.168.20.7
01056   233485    19009588 allow ip from 192.168.20.198 to any
01056   153536    60945812 allow ip from any to 192.168.20.198
01058    84179    21015966 allow ip from 192.168.120.31 to any
01058   225692   164677764 allow ip from any to 192.168.120.31
01059        0           0 allow ip from 192.168.120.32 to any
01059        0           0 allow ip from any to 192.168.120.32
01060    12592     1517643 allow ip from 192.168.20.10 to any
01060    29706    22262240 allow ip from any to 192.168.20.10
01061     3684      406380 allow ip from 192.168.20.11 to any
01061     9324     8295924 allow ip from any to 192.168.20.11
01062        0           0 allow ip from 192.168.120.33 to any
01062        0           0 allow ip from any to 192.168.120.33
01063   329279    37115893 allow ip from xxx.xxx.50.79 to any
01063   410933   422734346 allow ip from any to xxx.xxx.50.79
01065   879934    73044898 allow ip from 192.168.20.12 to any
01065  1835231   249542162 allow ip from any to 192.168.20.12
01066  1870578   349700778 allow ip from xxx.xxx.50.84 to any
01066  2217056  1539612882 allow ip from any to xxx.xxx.50.84
01067        0           0 allow ip from 192.168.120.35 to any
01067        0           0 allow ip from any to 192.168.120.35
01069    69273    10482567 allow ip from 192.168.20.14 to any
01069   164804   141640964 allow ip from any to 192.168.20.14
01071   108020    19059017 allow ip from 192.168.20.16 to any
01071   163558    98033220 allow ip from any to 192.168.20.16
01072    48766     5684970 allow ip from 192.168.20.17 to any
01072    98842    85190150 allow ip from any to 192.168.20.17
01073   660764   106693421 allow ip from 192.168.120.36 to any
01073  1078764   316368148 allow ip from any to 192.168.120.36
01075        0           0 allow ip from 192.168.20.127 to any
01075        0           0 allow ip from any to 192.168.20.127
01076        0           0 allow ip from 192.168.20.19 to any
01076        0           0 allow ip from any to 192.168.20.19
01077     2258      385152 allow ip from 192.168.120.37 to any
01077     4648     2132662 allow ip from any to 192.168.120.37
01078    73641    10836179 allow ip from 192.168.120.38 to any
01078   180864   157588134 allow ip from any to 192.168.120.38
01079    34123     4111769 allow ip from 192.168.20.20 to any
01079    84024    71594194 allow ip from any to 192.168.20.20
01081    34019     4327804 allow ip from 192.168.20.214 to any
01081    40543    31380605 allow ip from any to 192.168.20.214
01082    11045     1513747 allow ip from 192.168.20.23 to any
01082    24416    20093600 allow ip from any to 192.168.20.23
01083        0           0 allow ip from 192.168.20.24 to any
01083        0           0 allow ip from any to 192.168.20.24
01084        0           0 allow ip from 192.168.20.25 to any
01084        0           0 allow ip from any to 192.168.20.25
01085        0           0 allow ip from 192.168.20.26 to any
01085        0           0 allow ip from any to 192.168.20.26
01086    40939     3286093 allow ip from 192.168.20.27 to any
01086   125164   155449102 allow ip from any to 192.168.20.27
01087        0           0 allow ip from 192.168.20.28 to any
01087        0           0 allow ip from any to 192.168.20.28
01088   904950   130507924 allow ip from xxx.xxx.50.80 to any
01088  1049381   798864606 allow ip from any to xxx.xxx.50.80
01089        0           0 allow ip from 192.168.20.29 to any
01089        0           0 allow ip from any to 192.168.20.29
01091   323650    23171637 allow ip from 192.168.20.140 to any
01091   458610   592097013 allow ip from any to 192.168.20.140
01092  4017714   276627084 allow ip from 192.168.120.39 to any
01092  6469276   746052960 allow ip from any to 192.168.120.39
01093   250222    26764291 allow ip from 192.168.20.32 to any
01093   688256   739508868 allow ip from any to 192.168.20.32
01094    35162     3573271 allow ip from 192.168.20.33 to any
01094    96628    94694694 allow ip from any to 192.168.20.33
01095    31922     4275283 allow ip from 192.168.20.34 to any
01095    80784    75405368 allow ip from any to 192.168.20.34
01098    39709     4969690 allow ip from 192.168.20.37 to any
01098    97938    78115050 allow ip from any to 192.168.20.37
01099    76993    27763538 allow ip from 192.168.20.38 to any
01099   180480   139699048 allow ip from any to 192.168.20.38
01100    20108     2282713 allow ip from 192.168.20.39 to any
01100    50506    48765294 allow ip from any to 192.168.20.39
01101   128625    21470465 allow ip from 192.168.120.41 to any
01101   274652   204142348 allow ip from any to 192.168.120.41
01104   513336    24533770 allow ip from 192.168.20.138 to any
01104   806887  1100527239 allow ip from any to 192.168.20.138
01105    14166     2397306 allow ip from 192.168.20.41 to any
01105    30228    18196020 allow ip from any to 192.168.20.41
01107   468273    29712084 allow ip from 192.168.20.129 to any
01107   534870   166174685 allow ip from any to 192.168.20.129
01108        0           0 allow ip from 192.168.20.42 to any
01108        0           0 allow ip from any to 192.168.20.42
01110   154519    22818418 allow ip from 192.168.20.60 to any
01110   343692   315670914 allow ip from any to 192.168.20.60
01111        0           0 allow ip from 192.168.20.133 to any
01111        0           0 allow ip from any to 192.168.20.133
01113   240965    11191876 allow ip from 192.168.20.154 to any
01113   410245   566034171 allow ip from any to 192.168.20.154
01115    50385     4571926 allow ip from 192.168.20.46 to any
01115   141010   150492214 allow ip from any to 192.168.20.46
01116        0           0 allow ip from 192.168.120.254 to any
01116        0           0 allow ip from any to 192.168.120.254
01117   830994    83392951 allow ip from 192.168.20.132 to any
01117   803875   419615610 allow ip from any to 192.168.20.132
01118    13577     2085476 allow ip from 192.168.20.48 to any
01118    30344    21632740 allow ip from any to 192.168.20.48
01119    19408     1746561 allow ip from 192.168.120.42 to any
01119    57708    65761812 allow ip from any to 192.168.120.42
01120     3176      640485 allow ip from 192.168.20.49 to any
01120     6490     4328248 allow ip from any to 192.168.20.49
01121  2572525  1516908004 allow ip from 192.168.20.204 to any
01121  2628072  2330200193 allow ip from any to 192.168.20.204
01122   300794    33640359 allow ip from 192.168.20.51 to any
01122   609524   268187854 allow ip from any to 192.168.20.51
01123    43525     4531588 allow ip from 192.168.20.134 to any
01123    56320    59202467 allow ip from any to 192.168.20.134
01124  1840772   104867258 allow ip from 192.168.20.202 to any
01124  2399707  2349840808 allow ip from any to 192.168.20.202
01125    49085     7137250 allow ip from 192.168.20.52 to any
01125   109728    80113838 allow ip from any to 192.168.20.52
01126    40330     2829643 allow ip from 192.168.20.53 to any
01126   118774   142573908 allow ip from any to 192.168.20.53
01127    39392     4305750 allow ip from 192.168.20.54 to any
01127    85482    69742116 allow ip from any to 192.168.20.54
01128   423743    75979244 allow ip from 192.168.20.149 to any
01128   398087   183496776 allow ip from any to 192.168.20.149
01131     6671      863749 allow ip from 192.168.20.58 to any
01131    14508     9596084 allow ip from any to 192.168.20.58
01133    71367     3751596 allow ip from 192.168.20.59 to any
01133   164726    69572892 allow ip from any to 192.168.20.59
01134   262260    22861953 allow ip from 192.168.20.137 to any
01134   413247   507637618 allow ip from any to 192.168.20.137
01135   160428    19564057 allow ip from 192.168.120.43 to any
01135   387422   317896600 allow ip from any to 192.168.120.43
01136   151372    22207583 allow ip from 192.168.20.8 to any
01136   278606    66826588 allow ip from any to 192.168.20.8
01138 17757825 18827956187 allow ip from xxx.xxx.50.126 to any
01138 11823995   670978714 allow ip from any to xxx.xxx.50.126
01139    72796     7927566 allow ip from xxx.xxx.50.82 to any
01139    90024   100786108 allow ip from any to xxx.xxx.50.82
01140   709372   198768594 allow ip from xxx.xxx.50.81 to any
01140   522590   213850232 allow ip from any to xxx.xxx.50.81
01142    95704    15751120 allow ip from xxx.xxx.50.83 to any
01142   103318    84754826 allow ip from any to xxx.xxx.50.83
01143     6242      755016 allow ip from 192.168.120.44 to any
01143    14642    11772106 allow ip from any to 192.168.120.44
01144   789670   111180195 allow ip from 192.168.20.193 to any
01144   818370   466106243 allow ip from any to 192.168.20.193
01149  7124376  2178507213 allow ip from 192.168.20.142 to any
01149  8455879  7860324682 allow ip from any to 192.168.20.142
01150   110285    19568951 allow ip from 192.168.20.201 to any
01150   124531    89187207 allow ip from any to 192.168.20.201
01151        0           0 allow ip from 192.168.20.143 to any
01151        0           0 allow ip from any to 192.168.20.143
01152    42435     5919746 allow ip from 192.168.20.65 to any
01152    95954    75190494 allow ip from any to 192.168.20.65
01153     3087      486925 allow ip from 192.168.20.66 to any
01153     5876     2579410 allow ip from any to 192.168.20.66
01155   128925    28770301 allow ip from 192.168.20.144 to any
01155   147274   110461883 allow ip from any to 192.168.20.144
01156        0           0 allow ip from 192.168.120.45 to any
01156        0           0 allow ip from any to 192.168.120.45
01159   118545     9746372 allow ip from 192.168.20.55 to any
01159   221226    79821762 allow ip from any to 192.168.20.55
01160     5414      586255 allow ip from 192.168.20.147 to any
01160     6993     6130545 allow ip from any to 192.168.20.147
01161        0           0 allow ip from 192.168.20.68 to any
01161        0           0 allow ip from any to 192.168.20.68
01162   163584    19965378 allow ip from 192.168.120.46 to any
01162   388754   354986890 allow ip from any to 192.168.120.46
01169    78938     9640428 allow ip from 192.168.20.194 to any
01169    96152    90937673 allow ip from any to 192.168.20.194
01171    11662     1904035 allow ip from 192.168.120.40 to any
01171    27522    20277844 allow ip from any to 192.168.120.40
01172   179389    13947322 allow ip from 192.168.20.70 to any
01172   480016   532002016 allow ip from any to 192.168.20.70
01173        0           0 allow ip from 192.168.120.3 to any
01173        0           0 allow ip from any to 192.168.120.3
01174        0           0 allow ip from 192.168.20.71 to any
01174        0           0 allow ip from any to 192.168.20.71
01175    50885     6895513 allow ip from 192.168.20.151 to any
01175    55314    41504143 allow ip from any to 192.168.20.151
01176  1941804   161862463 allow ip from 192.168.20.152 to any
01176  1785446   371161671 allow ip from any to 192.168.20.152
01177   117142    15024107 allow ip from 192.168.20.195 to any
01177   152027   155915838 allow ip from any to 192.168.20.195
01180        0           0 allow ip from 192.168.20.158 to any
01180        0           0 allow ip from any to 192.168.20.158
01181   214769    41172820 allow ip from xxx.xxx.50.85 to any
01181   216922   107707934 allow ip from any to xxx.xxx.50.85
01182    28576     3480807 allow ip from 192.168.20.72 to any
01182    61090    53798436 allow ip from any to 192.168.20.72
01183        0           0 allow ip from 192.168.20.135 to any
01183        0           0 allow ip from any to 192.168.20.135
01185      559       54294 allow ip from 192.168.20.196 to any
01185      637      483962 allow ip from any to 192.168.20.196
01186    91154     6949093 allow ip from 192.168.20.74 to any
01186   244056   297277346 allow ip from any to 192.168.20.74
01188    83770    31503827 allow ip from 192.168.120.26 to any
01188   174696   156214680 allow ip from any to 192.168.120.26
01189   405344    35168830 allow ip from 192.168.20.150 to any
01189   301853   244806904 allow ip from any to 192.168.20.150
01191    17940     2767571 allow ip from 192.168.20.139 to any
01191    20059    16543659 allow ip from any to 192.168.20.139
01192        0           0 allow ip from 192.168.120.34 to any
01192        0           0 allow ip from any to 192.168.120.34
01194  2691171  2558722689 allow ip from 192.168.20.141 to any
01194  2284248  1508749000 allow ip from any to 192.168.20.141
01195    62617    23546058 allow ip from 192.168.120.49 to any
01195   116762    79940648 allow ip from any to 192.168.120.49
01196    42225     4919261 allow ip from 192.168.120.21 to any
01196   107918   123570570 allow ip from any to 192.168.120.21
01197  3368533   540431376 allow ip from 192.168.120.50 to any
01197  5041130   374138784 allow ip from any to 192.168.120.50
01198   236512    30529500 allow ip from 192.168.20.75 to any
01198   599816   554009930 allow ip from any to 192.168.20.75
01199    96034    12960517 allow ip from 192.168.20.148 to any
01199   126138   125369879 allow ip from any to 192.168.20.148
01201    24208     2623754 allow ip from 192.168.20.206 to any
01201    29767    19179193 allow ip from any to 192.168.20.206
01202     9373     1850934 allow ip from 192.168.120.4 to any
01202    20574    14672632 allow ip from any to 192.168.120.4
01203        0           0 allow ip from 192.168.120.8 to any
01203        0           0 allow ip from any to 192.168.120.8
01205    28068     2648389 allow ip from 192.168.120.9 to any
01205    64494    52982922 allow ip from any to 192.168.120.9
01206   128644    25454605 allow ip from 192.168.20.130 to any
01206   149361   109026330 allow ip from any to 192.168.20.130
01209   167130    19996999 allow ip from 192.168.20.209 to any
01209   199977   172496937 allow ip from any to 192.168.20.209
01210   150534    15041453 allow ip from 192.168.120.17 to any
01210   403094   473454146 allow ip from any to 192.168.120.17
01211        0           0 allow ip from xxx.xxx.50.97 to any
01211      560       34952 allow ip from any to xxx.xxx.50.97
01213       52        3510 allow ip from 192.168.120.18 to any
01213       80        9988 allow ip from any to 192.168.120.18
01214     1689      355049 allow ip from 192.168.20.153 to any
01214     1888     1450858 allow ip from any to 192.168.20.153
01215   196158    44015077 allow ip from 192.168.20.159 to any
01215   229859   183789169 allow ip from any to 192.168.20.159
01216    43332    10596182 allow ip from 192.168.20.211 to any
01216    49003    31919155 allow ip from any to 192.168.20.211
01217   356669    45559546 allow ip from 192.168.20.35 to any
01217   905986   765618338 allow ip from any to 192.168.20.35
01218        0           0 allow ip from 192.168.20.40 to any
01218        0           0 allow ip from any to 192.168.20.40
01219      402       64741 allow ip from xxx.xxx.50.87 to any
01219      700       45224 allow ip from any to xxx.xxx.50.87
01220     6176      821187 allow ip from 192.168.20.50 to any
01220    14512    10375044 allow ip from any to 192.168.20.50
01221   104904    23401315 allow ip from 192.168.20.212 to any
01221   117576    80554520 allow ip from any to 192.168.20.212
01222   207361    18969243 allow ip from 192.168.20.210 to any
01222   266496   304520730 allow ip from any to 192.168.20.210
01223   164485    40419134 allow ip from 192.168.20.160 to any
01223   401164   322538118 allow ip from any to 192.168.20.160
01224        0           0 allow ip from 192.168.20.13 to any
01224        0           0 allow ip from any to 192.168.20.13
01225        0           0 allow ip from 0.0.0.5 to any
01225        0           0 allow ip from any to 0.0.0.5
01226     5643      703281 allow ip from 192.168.20.22 to any
01226    12338     8802108 allow ip from any to 192.168.20.22
01227        0           0 allow ip from 0.0.0.7 to any
01227        0           0 allow ip from any to 0.0.0.7
01229        0           0 allow ip from 192.168.20.215 to any
01229        0           0 allow ip from any to 192.168.20.215
01230    61940     9425932 allow ip from 192.168.120.19 to any
01230   172746   123891054 allow ip from any to 192.168.120.19
01231   154540    18293612 allow ip from xxx.xxx.50.88 to any
01231   182318   151996482 allow ip from any to xxx.xxx.50.88
01232    20075     2102693 allow ip from 192.168.120.11 to any
01232    47512    45923522 allow ip from any to 192.168.120.11
01233   229098    25263326 allow ip from 192.168.120.12 to any
01233   703926   845971054 allow ip from any to 192.168.120.12
01234   716110   153433072 allow ip from 192.168.20.213 to any
01234   687969   151938419 allow ip from any to 192.168.20.213
01235    21763     1734717 allow ip from 192.168.20.163 to any
01235    51856    53732346 allow ip from any to 192.168.20.163
01236   274358    28175147 allow ip from 192.168.20.162 to any
01236   699714   766538980 allow ip from any to 192.168.20.162
01238   181231    37050774 allow ip from 192.168.20.216 to any
01238   209413   138326465 allow ip from any to 192.168.20.216
01245     6946     1005688 allow ip from 192.168.20.164 to any
01245    17320    12705032 allow ip from any to 192.168.20.164
01260    13892     1326685 allow ip from 192.168.20.77 to any
01260    42170    49485454 allow ip from any to 192.168.20.77
01265    62981     8812285 allow ip from 192.168.120.27 to any
01265   142688   121404484 allow ip from any to 192.168.120.27
01266     1419       82380 allow ip from 192.168.120.51 to any
01266     3796     3906942 allow ip from any to 192.168.120.51
01267    18177     1440984 allow ip from 192.168.120.47 to any
01267    54924    66810280 allow ip from any to 192.168.120.47
01268        0           0 allow ip from 0.0.0.31 to any
01268        0           0 allow ip from any to 0.0.0.31
01283    13322      772473 allow ip from 192.168.20.217 to any
01283    12867    15751785 allow ip from any to 192.168.20.217
01308    43431     3566534 allow ip from 192.168.120.29 to any
01308   139092   172605200 allow ip from any to 192.168.120.29
01310   181783    58905421 allow ip from 192.168.20.161 to any
01310   457472   337557594 allow ip from any to 192.168.20.161
01318    93119    10617466 allow ip from 192.168.20.76 to any
01318   254450   250913640 allow ip from any to 192.168.20.76
01319    10489     1169417 allow ip from 192.168.120.30 to any
01319    25070    22655074 allow ip from any to 192.168.120.30
65534   598876    46263364 deny ip from any to any
65535        8        1277 allow ip from any to any
Последний раз редактировалось Alex Keda 2007-11-27 20:07:19, всего редактировалось 1 раз.
Причина: Товарищщи, цените чужое время, юзайте кнопочку [code]...

Аватара пользователя
Alex Keda
стреляли...
Сообщения: 35068
Зарегистрирован: 2004-10-18 14:25:19
Откуда: Made in USSR
Контактная информация:

Re: Подвисает сеть

Непрочитанное сообщение Alex Keda » 2007-11-27 20:09:47

а в логах что?
Убей их всех! Бог потом рассортирует...

wed
рядовой
Сообщения: 20
Зарегистрирован: 2007-10-26 8:26:08

Re: Подвисает сеть

Непрочитанное сообщение wed » 2007-11-27 22:02:52

var\log\ipfw.today

Код: Выделить всё

00200     1531       73576 deny tcp from any 135,137,138,139,445,69,1433 to any
00210     4330      214804 deny tcp from any to any dst-port 135,137,138,139,445,69,1433
00220   231697    22455668 deny udp from any 135,137,138,139,445,69,1433 to any
00230    48952     4867318 deny udp from any to any dst-port 135,137,138,139,445,69,1433
00240     1826       87788 deny tcp from any 4444,5554,9996,3127 to any
00250       49        2352 deny tcp from any to any dst-port 4444,5554,9996,3127
00260      252       18102 deny udp from any 4444,5554,9996,3127 to any
00270       15         830 deny udp from any to any dst-port 4444,5554,9996,3127
00280    59325     2851376 deny tcp from any 3141-3198 to any
00290       79        3792 deny tcp from any to any dst-port 3141-3198
00300     5650      487108 deny udp from any 3141-3198 to any
00310       95        9695 deny udp from any to any dst-port 3141-3198
00330        0           0 deny ip from any to 127.0.0.0/8
00340        0           0 deny ip from 127.0.0.0/8 to any
65534   543035    40920316 deny ip from any to any

Аватара пользователя
Alex Keda
стреляли...
Сообщения: 35068
Зарегистрирован: 2004-10-18 14:25:19
Откуда: Made in USSR
Контактная информация:

Re: Подвисает сеть

Непрочитанное сообщение Alex Keda » 2007-11-27 23:11:04

не.
в messages
Убей их всех! Бог потом рассортирует...

wed
рядовой
Сообщения: 20
Зарегистрирован: 2007-10-26 8:26:08

Re: Подвисает сеть

Непрочитанное сообщение wed » 2007-11-28 6:57:22

Код: Выделить всё

Nov 28 07:11:46 Telekor kernel: Connection attempt to UDP xxx.xxx.46.182:29642 from 85.211.15.154:18935
Nov 28 07:12:16 Telekor kernel: Connection attempt to UDP xxx.xxx.46.182:4672 from 70.237.212.204:64686
Nov 28 07:12:25 Telekor kernel: Connection attempt to TCP xxx.xxx.46.182:50816 from 89.232.197.95:4384 flags:0x02
Nov 28 07:12:26 Telekor last message repeated 2 times
Nov 28 07:12:29 Telekor kernel: Connection attempt to UDP xxx.xxx.46.182:4672 from 85.50.109.178:60939
Nov 28 07:12:38 Telekor kernel: Connection attempt to UDP xxx.xxx.46.182:4672 from 87.218.66.11:10000
xxx.xxx.46.182 - это адрес шлюза в инет.

wed
рядовой
Сообщения: 20
Зарегистрирован: 2007-10-26 8:26:08

Re: Подвисает сеть

Непрочитанное сообщение wed » 2007-11-29 15:56:04

может быть надо как-то ядро оттюнинговать?
sysctl ?

Аватара пользователя
Burn_
мл. сержант
Сообщения: 84
Зарегистрирован: 2007-12-03 9:19:54
Откуда: Алт.край, г.Бийск
Контактная информация:

Re: Подвисает сеть

Непрочитанное сообщение Burn_ » 2007-12-03 21:56:08

Смотри загрузку CPU ( # top ) , а точнее "% interrupt". При большом кол-ве правил ipfw (больше 1000) идет большая нагрузка на проц. Для уменьшения правил используй table (# man ipfw table).
To know everything is to know nothing! / Я знаю только одно, что я ничего не знаю! © Сократ

wed
рядовой
Сообщения: 20
Зарегистрирован: 2007-10-26 8:26:08

Re: Подвисает сеть

Непрочитанное сообщение wed » 2007-12-06 9:07:21

Процессор? иногда бывает что на нем нагрузка резко поднимается...
Тут выплыли еще глюки при запуске ipfw list система виснет...
Думаю это из-за версии фрибсд (current 7, 2006_07)
попробую пересобрать обновиться...

Аватара пользователя
hizel
дядя поня
Сообщения: 9031
Зарегистрирован: 2007-06-29 10:05:02
Откуда: Выборг

Re: Подвисает сеть

Непрочитанное сообщение hizel » 2008-03-25 17:13:38

заодно посмотреть

Код: Выделить всё

systat -v
ставить на боевой серваг -CURRENT верх распиздяйства, извините )
В дурацкие игры он не играет. Он просто жуткий, чу-чу, паровозик, и зовут его Блейн. Блейн --- это Боль.

Аватара пользователя
Dog
лейтенант
Сообщения: 723
Зарегистрирован: 2006-09-21 10:34:36
Откуда: Kharkiv, Ukraine
Контактная информация:

Re: Подвисает сеть

Непрочитанное сообщение Dog » 2008-03-25 18:06:42

hizel писал(а):ставить на боевой серваг -CURRENT верх распиздяйства, извините )
Поддерживаю. Хотя и признаю что иногда бывает жизненно необходимо...
Но сейчас, когда 7-ку зарелизили - сам бог велел обновиться до актуального состояния.
Oh my God, they killed init! Bastards!

Аватара пользователя
Alex Keda
стреляли...
Сообщения: 35068
Зарегистрирован: 2004-10-18 14:25:19
Откуда: Made in USSR
Контактная информация:

Re: Подвисает сеть

Непрочитанное сообщение Alex Keda » 2008-03-25 20:45:58

у меня релиз кандидат стоит.
пока багов не найдут - даже не планирую.
потому как продакшен
Убей их всех! Бог потом рассортирует...

Аватара пользователя
Dog
лейтенант
Сообщения: 723
Зарегистрирован: 2006-09-21 10:34:36
Откуда: Kharkiv, Ukraine
Контактная информация:

Re: Подвисает сеть

Непрочитанное сообщение Dog » 2008-03-25 21:26:54

"Работает - не трогай!" - основной столп IT-шного мироздания, поэтому с точкой зрения согласен :)
Однако в случае, описанном автором темы - ИМХО обновление очень даже не помешает.
Oh my God, they killed init! Bastards!

Аватара пользователя
hizel
дядя поня
Сообщения: 9031
Зарегистрирован: 2007-06-29 10:05:02
Откуда: Выборг

Re: Подвисает сеть

Непрочитанное сообщение hizel » 2008-03-25 22:38:11

ну это не совсем верно
всетаки аудит безопасности в современный реалиях очень не повредит ;)
времена меняются
В дурацкие игры он не играет. Он просто жуткий, чу-чу, паровозик, и зовут его Блейн. Блейн --- это Боль.