Project

General

Profile

Bug #9615 » UDP States - Before and After-Redacted.txt

UDP states before and after for example host - Benjamin Lee, 04/24/2020 01:04 PM

 
1
=========== STATES and RULES Before the Schedule Expired ============
2

    
3
--
4
lagg0 udp 128.RBX.GME.SVR:49473 <- 192.168.0.5:64913       MULTIPLE:MULTIPLE
5
   age 00:12:19, expires in 00:01:00, 14706:26910 pkts, 1655854:12549651 bytes, rule 98
6
   id: 020000005ea4ee13 creatorid: 1551d1e1
7
--
8
igb0 udp 47.SPC.MY.IP:51888 (192.168.0.5:64913) -> 128.RBX.GME.SVR:49473       MULTIPLE:MULTIPLE
9
   age 00:12:19, expires in 00:01:00, 14706:26910 pkts, 1655854:12549651 bytes, rule 64
10
   id: 020000005ea4ee14 creatorid: 1551d1e1
11
--
12

    
13
@98(1586552496) pass in quick on LOCAL_NETS route-to { (igb0 47.SPC.MY.GW), (igb0 47.SPC.MY.GW), (igb0 47.SPC.MY.GW), (igb0 47.SPC.MY.GW), (igb0 47.SPC.MY.GW) } round-robin inet from <_WEB_ACCS:17> to any flags S/SA keep state label "USER_RULE: Allow Internet by Schedule"
14

    
15
@64(1000008011) pass out route-to (igb0 47.SPC.MY.GW) inet from 47.SPC.MY.IP to ! 47.SPC.RNG.0/21 flags S/SA keep state allow-opts label "let out anything from firewall host itself" 
16

    
17

    
18
=========== STATES and RULES After the Schedule Expired =============
19

    
20
--
21
igb0 udp 47.SPC.MY.IP:51888 (192.168.0.5:64913) -> 128.RBX.GME.SVR:49473       MULTIPLE:MULTIPLE
22
   age 00:17:13, expires in 00:01:00, 31069:63644 pkts, 14203479:53418978 bytes, rule 64
23
   id: 020000005ea4ee14 creatorid: 1551d1e1
24
--
25
lagg0 udp 128.RBX.GME.SV2:49473 -> 192.168.0.5:64913       MULTIPLE:MULTIPLE
26
   age 00:01:22, expires in 00:01:00, 19410:10080 pkts, 15811058:4762508 bytes, rule 63
27
   id: 020000005ea4ee27 creatorid: 1551d1e1
28
--
29

    
30
@64(1000008011) pass out route-to (igb0 47.SPC.MY.GW) inet from 47.SPC.MY.IP to ! 47.SPC.RNG.0/21 flags S/SA keep state allow-opts label "let out anything from firewall host itself"
31

    
32
@63(1000007913) pass out inet all flags S/SA keep state allow-opts label "let out anything IPv4 from firewall host itself"
(4-4/4)