

pfTop: Up Rule 1-363/363, View: rules
RULE  ACTION   DIR LOG Q IF     PR        K     PKTS    BYTES   STATES   MAX INFO                                                                     
   0  Pass     Any                                 0        0        0       all                                                                      
   1  Pass     Any                                 0        0        0       all                                                                      
   2  Pass     In      Q lo0              K        0        0        0       inet6 all  flags S/SA                                                    
   3  Pass     Out     Q lo0              K        0        0        0       inet6 all  flags S/SA                                                    
   4  Block    In  Log Q                       34305  6996482        0       drop inet6 all                                                           
   5  Block    Out Log Q                         202    16736        0       drop inet6 all                                                           
   6  Block    In  Log Q                           0        0        0       drop inet6 from any to <_nat64reserved_>                                 
   7  Block    Out Log Q                           0        0        0       drop inet6 from any to <_nat64reserved_>                                 
   8  Block    In  Log Q                         129     9660        0       drop inet from 169.254.0.0/16 to any                                     
   9  Block    In  Log Q                         731    47892        0       drop inet from any to 169.254.0.0/16                                     
  10  Block    In  Log                            26     8466        0       drop inet all                                                            
  11  Block    Out Log                           122    16791        0       drop inet all                                                            
  12  Block    In  Log                             0        0        0       drop inet6 all                                                           
  13  Block    Out Log                             0        0        0       drop inet6 all                                                           
  14  Block    Any Log Q        tcp                0        0        0       drop inet from any port = 0 to any                                       
  15  Block    Any Log Q        udp                0        0        0       drop inet from any port = 0 to any                                       
  16  Block    Any Log Q        tcp                0        0        0       drop inet from any to any port = 0                                       
  17  Block    Any Log Q        udp                0        0        0       drop inet from any to any port = 0                                       
  18  Block    Any Log Q                           0        0        0       drop from <snort2c> to any                                               
  19  Block    Any Log Q                           0        0        0       drop from any to <snort2c>                                               
  20  Block    In  Log Q        tcp                0        0        0       drop from <sshguard> to (self) port = ssh                                
  21  Block    In  Log Q        tcp                0        0        0       drop from <sshguard> to (self) port = https                              
  22  Block    In  Log Q                           0        0        0       drop from <virusprot> to any                                             
  23  Block    Out     Q        udp                0        0        0       drop from any port = bootps to any port = bootpc  tagged dhcpin          
  24  Block    In  Log Q lagg0.                    0        0        0       drop from <bogons> to any                                                
  25  Block    In  Log   !lagg0                    0        0        0       drop inet from 193.97.129.0/24 to any                                    
  26  Block    In  Log   !lagg0                    0        0        0       drop inet from 193.97.129.12/32 to any                                   
  27  Block    In  Log   !lagg0                    0        0        0       drop inet from 193.97.129.13/32 to any                                   
  28  Block    In  Log   !lagg0                    0        0        0       drop inet from 193.97.129.100/32 to any                                  
  29  Block    In  Log   !lagg0                    0        0        0       drop inet from 193.97.129.119/32 to any                                  
  30  Block    In  Log   !lagg0                    0        0        0       drop inet from 193.97.129.96/32 to any                                   
  31  Block    In  Log   !lagg0                    0        0        0       drop inet from 193.97.129.113/32 to any                                  
  32  Block    In  Log   !lagg0                    0        0        0       drop inet from 193.97.129.114/32 to any                                  
  33  Block    In  Log   lagg0.                    0        0        0       drop inet6 from fe80::208:a2ff:fe11:cc41/128 to any                      
  34  Block    In  Log                             0        0        0       drop inet from 193.97.129.89/32 to any                                   
  35  Block    In  Log                             0        0        0       drop inet from 193.97.129.12/32 to any                                   
  36  Block    In  Log                             0        0        0       drop inet from 193.97.129.13/32 to any                                   
  37  Block    In  Log                             0        0        0       drop inet from 193.97.129.100/32 to any                                  
  38  Block    In  Log                             0        0        0       drop inet from 193.97.129.119/32 to any                                  
  39  Block    In  Log                             0        0        0       drop inet from 193.97.129.96/32 to any                                   
  40  Block    In  Log                             0        0        0       drop inet from 193.97.129.113/32 to any                                  
  41  Block    In  Log                             0        0        0       drop inet from 193.97.129.114/32 to any                                  
  42  Block    In  Log Q lagg0.                    0        0        0       drop inet from 10.0.0.0/8 to any                                         
  43  Block    In  Log Q lagg0.                    0        0        0       drop inet from 127.0.0.0/8 to any                                        
  44  Block    In  Log Q lagg0.                    0        0        0       drop inet from 172.16.0.0/12 to any                                      
  45  Block    In  Log Q lagg0.                  282    46812        0       drop inet from 192.168.0.0/16 to any                                     
  46  Block    In  Log Q lagg0.                    0        0        0       drop inet6 from fc00::/7 to any                                          
  47  Block    In  Log   !lagg0                    0        0        0       drop inet from 192.168.128.0/18 to any                                   
  48  Block    In  Log   lagg0.                    0        0        0       drop inet6 from fe80::208:a2ff:fe11:cc41/128 to any                      
  49  Block    In  Log                             0        0        0       drop inet from 192.168.129.1/32 to any                                   
  50  Block    In  Log   !ix0                      0        0        0       drop inet from 192.168.3.0/24 to any                                     
  51  Block    In  Log   ix0                       0        0        0       drop inet6 from fe80::208:a2ff:fe11:cc3f/128 to any                      
  52  Block    In  Log                             0        0        0       drop inet from 192.168.3.254/32 to any                                   
  53  Pass     In      Q ix0    udp       K        4     1324        0       inet from any port = bootpc to 255.255.255.255/32 port = bootps          
  54  Block    In  Log   !lagg0                    0        0        0       drop inet from 192.168.1.0/24 to any                                     
  55  Block    In  Log   lagg0.                    0        0        0       drop inet6 from fe80::208:a2ff:fe11:cc41/128 to any                      
  56  Block    In  Log                             0        0        0       drop inet from 192.168.1.200/32 to any                                   
  57  Pass     In      Q lagg0. udp       K        1      363        0       inet from any port = bootpc to 255.255.255.255/32 port = bootps          
  58  Block    In  Log   !lagg0                    0        0        0       drop inet from 192.168.254.0/24 to any                                   
  59  Block    In  Log   lagg0.                    0        0        0       drop inet6 from fe80::208:a2ff:fe11:cc41/128 to any                      
  60  Block    In  Log                             0        0        0       drop inet from 192.168.254.250/32 to any                                 
  61  Pass     In      Q lagg0. udp       K        0        0        0       inet from any port = bootpc to 255.255.255.255/32 port = bootps          
  62  Block    In  Log   !lagg0                    0        0        0       drop inet from 192.168.2.0/24 to any                                     
  63  Block    In  Log   lagg0.                    0        0        0       drop inet6 from fe80::208:a2ff:fe11:cc41/128 to any                      
  64  Block    In  Log                             0        0        0       drop inet from 192.168.2.254/32 to any                                   
  65  Pass     In      Q lagg0. udp       K        0        0        0       inet from any port = bootpc to 255.255.255.255/32 port = bootps          
  66  Block    In  Log   !lagg0                    0        0        0       drop inet from 192.168.4.0/24 to any                                     
  67  Block    In  Log   lagg0.                    0        0        0       drop inet6 from fe80::208:a2ff:fe11:cc41/128 to any                      
  68  Block    In  Log                             0        0        0       drop inet from 192.168.4.254/32 to any                                   
  69  Pass     In      Q lagg0. udp       K        0        0        0       inet from any port = bootpc to 255.255.255.255/32 port = bootps          
  70  Pass     In        lo0              K  1019671 86577082       36       inet all  flags S/SA                                                     
  71  Pass     Out       lo0              K        0        0        0       inet all  flags S/SA                                                     
  72  Pass     Out                        K  353018K  444046M    18673       inet all  flags S/SA allow-opts                                          
  73  Pass     Out                        K  444724K  421633M    25484       route-to ... inet from 193.97.129.89/32 to ! 193.97.129.0/24  flags S/SA 
  74  Pass     Out                        K        0        0        0       route-to ... inet from 193.97.129.12/32 to ! 193.97.129.0/24  flags S/SA 
  75  Pass     Out                        K        0        0        0       route-to ... inet from 193.97.129.13/32 to ! 193.97.129.0/24  flags S/SA 
  76  Pass     Out                        K    38667 44578527        4       route-to ... inet from 193.97.129.100/32 to ! 193.97.129.0/24  flags S/SA
  77  Pass     Out                        K        0        0        0       route-to ... inet from 193.97.129.119/32 to ! 193.97.129.0/24  flags S/SA
  78  Pass     Out                        K        0        0        0       route-to ... inet from 193.97.129.96/32 to ! 193.97.129.0/24  flags S/SA 
  79  Pass     Out                        K        0        0        0       route-to ... inet from 193.97.129.113/32 to ! 193.97.129.0/24  flags S/SA
  80  Pass     Out                        K        0        0        0       route-to ... inet from 193.97.129.114/32 to ! 193.97.129.0/24  flags S/SA
  81  Pass     Out       enc0             K    49286  4479495       32       all  flags S/SA                                                          
  82  Pass     In      Q lagg0. tcp       K    97917 27586190        9       from any to (lagg0.4091) port = https  flags S/SA                        
  83  Pass     In      Q lagg0. tcp       K        7     1013        0       from any to (lagg0.4091) port = http  flags S/SA                         
  84  Pass     In      Q lagg0. tcp       K     2182  1935936        0       from any to (lagg0.4091) port = ssh  flags S/SA                          
  85  Pass     In                         K        0        0        0       inet all  flags S/SA tagged PFREFLECT                                    
  86  Pass     Any                                 0        0        0       all                                                                      
  87  Pass     In      Q openvp           K  271109K  222351M     8007       inet all  flags S/SA                                                     
  88  Pass     In      Q openvp           K        0        0        0       inet6 all  flags S/SA                                                    
  89  Pass     In      Q lagg0. icmp      K        0        0        0       reply-to ... inet from any to <WAN__NETWORK>                             
  90  Pass     In      Q lagg0. icmp      K        0        0        0       reply-to ... inet from any to <WAN__NETWORK>                             
  91  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from 212.202.98.22/32 to 193.97.129.89/32 port = isakmp
  92  Pass     In      Q lagg0. udp       K        0        0        0       reply-to ... inet from 212.202.98.22/32 to 193.97.129.89/32 port = isakmp
  93  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from 80.151.5.161/32 to 192.168.1.13/32 port = http  fl
  94  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from 93.240.133.186/32 to 192.168.1.13/32 port = http  
  95  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from 212.202.98.22/32 to 192.168.1.13/32 port = http  f
  96  Pass     In      Q lagg0. udp       K     3122   237272       73       reply-to ... inet from 193.97.129.0/24 to 192.168.160.1/32 port = ntp    
  97  Pass     In      Q lagg0. tcp       K    35382 36779080        0       reply-to ... inet from <sfi_rdpsrv> to <sfi_texas> port = ssh  flags S/SA
  98  Pass     In      Q lagg0. tcp       K      467    38236        0       reply-to ... inet from <sfi_rdpsrv> to <sfi_texas> port = nfsd  flags S/S
  99  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <sfi_web> to <sfi_texas> port = ssh  flags S/SA   
 100  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <sfi_web> to <sfi_texas> port = sunrpc  flags S/SA
 101  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <sfi_web> to <sfi_texas> port = cryptoadmin  flags
 102  Pass     In      Q lagg0. tcp       K      885    78912        0       reply-to ... inet from <sfi_web> to <sfi_texas> port = nfsd  flags S/SA  
 103  Pass     In      Q lagg0. udp       K        0        0        0       reply-to ... inet from <sfi_web> to <sfi_texas> port = sunrpc            
 104  Pass     In      Q lagg0. udp       K        0        0        0       reply-to ... inet from <sfi_web> to <sfi_texas> port = cryptoadmin       
 105  Pass     In      Q lagg0. udp       K        0        0        0       reply-to ... inet from <sfi_web> to <sfi_texas> port = nfsd              
 106  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <prox_oedmz_1> to 192.168.160.1/32 port = ldaps  f
 107  Pass     In      Q lagg0. tcp       K     1525  1495254        0       reply-to ... inet from <prox_oedmz_1> to <sfi_texas> port = ssh  flags S/
 108  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <prox_oedmz_1> to <sfi_texas> port = sunrpc  flags
 109  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <prox_oedmz_1> to <sfi_texas> port = cryptoadmin  
 110  Pass     In      Q lagg0. tcp       K      377    62424        0       reply-to ... inet from <prox_oedmz_1> to <sfi_texas> port = nfsd  flags S
 111  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <prox_oedmz_1> to 192.168.160.11/32 port = ldaps  
 112  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <prox_oedmz_1> to <qnap> port = sunrpc  flags S/SA
 113  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from <prox_oedmz_1> to <qnap> port = nfsd  flags S/SA  
 114  Pass     In      Q lagg0. tcp       K   714721  223888K      760       reply-to ... inet from <prox_oedmz_1> to <Prox_Backup> port = 8007  flags
 115  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.1.42/32 port = ms-wbt-server  flags
 116  Pass     In      Q lagg0. udp       K        0        0        0       reply-to ... inet from any to 192.168.1.42/32 port = ms-wbt-server       
 117  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.1.120/32 port = ms-wbt-server  flag
 118  Pass     In      Q lagg0. tcp       K      550    24013       12       reply-to ... inet from any to 192.168.1.126/32 port = http  flags S/SA   
 119  Pass     In      Q lagg0. tcp       K     2921   146495       10       reply-to ... inet from any to 192.168.1.126/32 port = https  flags S/SA  
 120  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.1.126/32 port = 2019  flags S/SA   
 121  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.1.151/32 port = ms-wbt-server  flag
 122  Pass     In      Q lagg0. tcp       K     2161   223542        9       reply-to ... inet from any to 192.168.1.165/32 port = http  flags S/SA   
 123  Pass     In      Q lagg0. tcp       K   131736  135517K       64       reply-to ... inet from any to 192.168.1.165/32 port = https  flags S/SA  
 124  Pass     In      Q lagg0. tcp       K     2678   281276        6       reply-to ... inet from any to 192.168.1.166/32 port = http  flags S/SA   
 125  Pass     In      Q lagg0. tcp       K   104928  111722K      108       reply-to ... inet from any to 192.168.1.166/32 port = https  flags S/SA  
 126  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.129.28/32 port = bacula-dir  flags 
 127  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.129.28/32 port = bacula-fd  flags S
 128  Pass     In      Q lagg0. tcp       K  5880416 7470871K        5       reply-to ... inet from any to 192.168.129.117/32 port = https  flags S/SA
 129  Pass     In      Q lagg0. tcp       K     4026   453627        6       reply-to ... inet from any to 192.168.160.2/32 port = http-alt  flags S/S
 130  Pass     In      Q lagg0. tcp       K    35824  6091476       19       reply-to ... inet from any to 192.168.160.2/32 port = 8443  flags S/SA   
 131  Pass     In      Q lagg0. tcp       K   159363  175709K       27       reply-to ... inet from any to 192.168.160.7/32 port = smtp  flags S/SA   
 132  Pass     In      Q lagg0. tcp       K    11895  2200250        3       reply-to ... inet from any to 192.168.160.7/32 port = http  flags S/SA   
 133  Pass     In      Q lagg0. tcp       K   104904 35931579      104       reply-to ... inet from any to 192.168.160.7/32 port = https  flags S/SA  
 134  Pass     In      Q lagg0. tcp       K     7426  7042398        0       reply-to ... inet from any to 192.168.160.7/32 port = submission  flags S
 135  Pass     In      Q lagg0. tcp       K   896403  454298K       53       reply-to ... inet from any to 192.168.160.7/32 port = imaps  flags S/SA  
 136  Pass     In      Q lagg0. tcp       K   171022  115586K       98       reply-to ... inet from any to 192.168.160.8/32 port = https  flags S/SA  
 137  Pass     In      Q lagg0. udp       K      738    64888        6       reply-to ... inet from any to 192.168.160.8/32 port = 3478               
 138  Pass     In      Q lagg0. tcp       K     3062   651147        0       reply-to ... inet from any to 192.168.160.8/32 port = 5349  flags S/SA   
 139  Pass     In      Q lagg0. udp       K      106    74122        0       reply-to ... inet from any to 192.168.160.8/32 port = 5349               
 140  Pass     In      Q lagg0. udp       K      226    57665        2       reply-to ... inet from any to 192.168.160.8/32 port >= 49152             
 141  Pass     In      Q lagg0. tcp       K    10758  7097335        3       reply-to ... inet from any to 192.168.180.2/32 port = 8169  flags S/SA   
 142  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.175.117/32 port = 1883  flags S/SA 
 143  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.175.117/32 port = 8883  flags S/SA 
 144  Pass     In      Q lagg0. tcp       K        0        0        0       reply-to ... inet from any to 192.168.1.119/32 port = ms-wbt-server  flag
 145  Pass     In  Log Q lagg0. tcp       K  203682K  138929M        0       reply-to ... inet from any to 193.97.129.89/32 port = openvpn  flags S/SA
 146  Pass     In  Log Q lagg0. udp       K 48573995   37242M        4       reply-to ... inet from any to 193.97.129.89/32 port = openvpn            
 147  Block    In  Log Q lagg0.                 6312   476419        0       drop inet all                                                            
 148  Block    In  Log Q lagg0.                    0        0        0       drop inet6 all                                                           
 149  Block    In  Log Q lagg0. tcp                0        0        0       drop inet from 192.168.128.0/18 to 193.97.129.89/32 port = openvpn       
 150  Block    In  Log Q lagg0. udp                0        0        0       drop inet from 192.168.128.0/18 to 193.97.129.89/32 port = openvpn       
 151  Pass     In      Q lagg0. tcp       K  159225K  177102M     4912       inet from any to any port = https  flags S/SA                            
 152  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <WLANIPs> to <Drucker>  flags S/SA                             
 153  Pass     In      Q lagg0. udp       K        0        0        0       inet from <WLANIPs> to <Drucker>                                         
 154  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.2.254/32 to <Drucker>  flags S/SA                      
 155  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.2.254/32 to <Drucker>                                  
 156  Pass     In  Log Q lagg0.           K      420    95388        0       inet from <LAN__NETWORK> to <sfi_web>  flags S/SA                        
 157  Pass     In      Q lagg0. icmp      K   179560 17197305      517       inet all                                                                 
 158  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.160.2/32 to <OPT7__NETWORK> port 136 >< 140            
 159  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.160.2/32 to <OPT7__NETWORK> port = netbios-ssn  flags S
 160  Block    In      Q lagg0. tcp                0        0        0       drop inet from any to any port 134 >< 140                                
 161  Block    In      Q lagg0. udp            23391  3590637        0       drop inet from any to any port 134 >< 140                                
 162  Block    In      Q lagg0. tcp                0        0        0       drop inet6 from any to any port 134 >< 140                               
 163  Block    In      Q lagg0. udp                0        0        0       drop inet6 from any to any port 134 >< 140                               
 164  Pass     In  Log Q lagg0. tcp       K        0        0        0       inet from 192.168.160.2/32 to <OPT7__NETWORK> port = microsoft-ds  flags 
 165  Block    In  Log Q lagg0. tcp               15      780        0       drop inet from any to any port = microsoft-ds                            
 166  Block    In  Log Q lagg0. udp                0        0        0       drop inet from any to any port = microsoft-ds                            
 167  Block    In  Log Q lagg0. tcp                0        0        0       drop inet6 from any to any port = microsoft-ds                           
 168  Block    In  Log Q lagg0. udp                0        0        0       drop inet6 from any to any port = microsoft-ds                           
 169  Pass     In      Q lagg0. udp       K        0        0        0       inet from <OPT7__NETWORK> to any port = ntp                              
 170  Pass     In      Q lagg0. udp       K    11495   873788      125       inet from <LAN__NETWORK> to any port = ntp                               
 171  Pass     In      Q lagg0. tcp       K    38667 44578527        4       inet from 192.168.160.7/32 to 195.30.249.98/32 port = smtp  flags S/SA   
 172  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.129.125/32 to 192.168.160.7/32 port = smtp  flags S/SA 
 173  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT8__NETWORK> to 192.168.160.7/32 port = smtp  flags S/SA    
 174  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = ssh  flags S/SA                  
 175  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = icap  flags S/SA                 
 176  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = epmd  flags S/SA                 
 177  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = amqp  flags S/SA                 
 178  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = 6150  flags S/SA                 
 179  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = 6379  flags S/SA                 
 180  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port 7074:7077  flags S/SA              
 181  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = 7081  flags S/SA                 
 182  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = 7083  flags S/SA                 
 183  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = http-alt  flags S/SA             
 184  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = 8443  flags S/SA                 
 185  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = 27017  flags S/SA                
 186  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = 32002  flags S/SA                
 187  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = 48652  flags S/SA                
 188  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = ldap  flags S/SA                 
 189  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <AVSrv> to <ITMgmtSrv> port = ldaps  flags S/SA                
 190  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <grpITMgmtAllowed> to <ITMgmtSrv> port = ms-wbt-server  flags S
 191  Pass     In      Q lagg0. tcp       K        6      360        0       inet from <OPSISrv> to <OPT8__NETWORK> port = 4441  flags S/SA           
 192  Pass     In      Q lagg0. tcp       K      101     6788        0       inet from <OPSISrv> to <WLANIPs> port = 4441  flags S/SA                 
 193  Block    In      Q lagg0. tcp                0        0        0       drop inet from any to <ITMgmtSrv>  flags S/SA                            
 194  Pass     In      Q lagg0.           K 31906530   29371M    17741       inet from <LAN__NETWORK> to any  flags S/SA                              
 195  Block    In  Log Q lagg0.                    0        0        0       drop inet6 all                                                           
 196  Block    In  Log Q lagg0.                 8657  1955730        0       drop inet all                                                            
 197  Pass     In      Q ix0    tcp       K    43856 14400245       76       inet from 192.168.3.253/32 to 192.168.130.109/32 port = http-alt  flags S
 198  Pass     In      Q ix0    udp       K      330    25080        3       inet from <OPT1__NETWORK> to 192.168.160.1/32 port = ntp                 
 199  Pass     In      Q ix0    icmp      K        0        0        0       inet all                                                                 
 200  Pass     In      Q ix0    icmp      K       32     2688        0       inet all                                                                 
 201  Pass     In      Q ix0    tcp       K        0        0        0       inet from any to 192.168.129.119/32 port = domain  flags S/SA            
 202  Pass     In      Q ix0    udp       K     4648   428997       43       inet from any to 192.168.129.119/32 port = domain                        
 203  Pass     In      Q ix0    tcp       K        0        0        0       inet from any to any port = http  flags S/SA                             
 204  Pass     In      Q ix0    tcp       K      291    87899        0       inet from any to any port = https  flags S/SA                            
 205  Pass     In      Q ix0    tcp       K       36     9663        0       inet from <OPT1__NETWORK> to 192.168.160.7/32 port = smtp  flags S/SA    
 206  Block    In      Q ix0                   50227  6575422        0       drop inet all                                                            
 207  Block    In      Q ix0                       0        0        0       drop inet6 all                                                           
 208  Block    In  Log Q lagg0. tcp                0        0        0       drop inet from <OPT7__NETWORK> to 193.97.129.89/32 port = openvpn        
 209  Block    In  Log Q lagg0. udp                0        0        0       drop inet from <OPT7__NETWORK> to 193.97.129.89/32 port = openvpn        
 210  Pass     In      Q lagg0. tcp       K     2598   286757        9       inet from <OPT7__NETWORK> to 192.168.129.119/32 port = domain  flags S/SA
 211  Pass     In      Q lagg0. udp       K   260788 35409786     1511       inet from <OPT7__NETWORK> to 192.168.129.119/32 port = domain            
 212  Pass     In      Q lagg0. tcp       K    11065 11522224        0       inet from 192.168.1.1/32 to <sfi_texas> port = ssh  flags S/SA           
 213  Pass     In      Q lagg0. icmp      K        0        0        0       inet from <IPiDMZatSFAllowedtoSchmalz> to <IPATSchmalzAllowedFromSF>     
 214  Block    In      Q lagg0. icmp               0        0        0       drop inet from any to <IPATSchmalzAllowedFromSF>                         
 215  Pass     In      Q lagg0. icmp      K     2694   263340        1       inet from <OPT7__NETWORK> to any                                         
 216  Pass     In      Q lagg0. tcp       K    43581  4000275        0       inet from <IPiDMZatSFAllowedtoSchmalz> to <IPATSchmalzAllowedFromSF> port
 217  Block    In      Q lagg0. tcp                0        0        0       drop inet from any to <IPATSchmalzAllowedFromSF> port = ms-wbt-server  fl
 218  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.1/32 to <sfi_texas> port = sunrpc  flags S/SA        
 219  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.1/32 to <sfi_texas> port = nfsd  flags S/SA          
 220  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.13/32 to 192.168.130.216/32  flags S/SA              
 221  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.13/32 to 192.168.160.16/32 port = 7788  flags S/SA   
 222  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.13/32 to 192.168.160.16/32 port = 49247  flags S/SA  
 223  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.19/32 to 192.168.129.59/32 port = 8081  flags S/SA   
 224  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.31/32 to 192.168.160.1/32 port = microsoft-ds  flags 
 225  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.42/32 to 192.168.130.133/32 port 26999 >< 27010  flag
 226  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.1.42/32 to 192.168.130.133/32 port 26999 >< 27010      
 227  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.42/32 to 192.168.130.133/32 port = 41978  flags S/SA 
 228  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.1.42/32 to 192.168.130.133/32 port = 41978             
 229  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.64/32 to 192.168.130.187/32 port = ssh  flags S/SA   
 230  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.64/32 to 192.168.130.185/32 port = 8443  flags S/SA  
 231  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.1.64/32 to 192.168.130.185/32 port = 8443              
 232  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.66/32 to <sfi_nas> port = sunrpc  flags S/SA         
 233  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.66/32 to <sfi_nas> port = cryptoadmin  flags S/SA    
 234  Pass     In      Q lagg0. tcp       K       42     2664        0       inet from 192.168.1.66/32 to <sfi_nas> port = nfsd  flags S/SA           
 235  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.100/32 to 192.168.160.201/32 port = sunrpc  flags S/S
 236  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.100/32 to 192.168.1.1/32 port = ldap  flags S/SA     
 237  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.100/32 to 192.168.1.1/32 port = ldaps  flags S/SA    
 238  Pass     In      Q lagg0. tcp       K      804    65724        0       inet from 192.168.1.100/32 to 192.168.160.201/32 port = nfsd  flags S/SA 
 239  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <sf_sprung_CAD_kisten> to 5.102.189.15/32 port = openvpn  flags
 240  Pass     In      Q lagg0. udp       K        0        0        0       inet from <sf_sprung_CAD_kisten> to 5.102.189.15/32 port = openvpn       
 241  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.160/32 to 192.168.130.133/32  flags S/SA             
 242  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.1.160/32 to 192.168.130.133/32                         
 243  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.160/32 to 192.168.130.136/32  flags S/SA             
 244  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.1.160/32 to 192.168.130.136/32                         
 245  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.160/32 to 192.168.160.1/32 port = ldap  flags S/SA   
 246  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.1.160/32 to 192.168.160.1/32 port = ldap               
 247  Pass     In      Q lagg0. udp       K        8      656        0       inet from <sf_sprung_se_Kisten> to any port = domain                     
 248  Pass     In      Q lagg0. udp       K      160    12160        2       inet from <sf_sprung_se_Kisten> to any port = ntp                        
 249  Pass     In      Q lagg0. udp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = isakmp                     
 250  Pass     In      Q lagg0. udp       K   360971  230342K        0       inet from <sf_sprung_se_Kisten> to any port = ipsec-nat-t                
 251  Pass     In      Q lagg0. udp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = msexch-routing             
 252  Pass     In      Q lagg0. udp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = hyperwave-isp              
 253  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = ssh  flags S/SA            
 254  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = smtp  flags S/SA           
 255  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = domain  flags S/SA         
 256  Pass     In      Q lagg0. tcp       K   459182  552125K       38       inet from <sf_sprung_se_Kisten> to any port = http  flags S/SA           
 257  Pass     In      Q lagg0. tcp       K   218811 95095656      138       inet from <sf_sprung_se_Kisten> to any port = https  flags S/SA          
 258  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = pptp  flags S/SA           
 259  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = 8000  flags S/SA           
 260  Pass     In      Q lagg0. tcp       K    53899  5656663       75       inet from <sf_sprung_se_Kisten> to any port = 8443  flags S/SA           
 261  Pass     In      Q lagg0. tcp       K     2803   576614        0       inet from <sf_sprung_se_Kisten> to any port = msexch-routing  flags S/SA 
 262  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any port = hyperwave-isp  flags S/SA  
 263  Pass     In      Q lagg0. gre       K        0        0        0       inet from <sf_sprung_se_Kisten> to any                                   
 264  Pass     In      Q lagg0. esp       K        0        0        0       inet from <sf_sprung_se_Kisten> to any                                   
 265  Pass     In      Q lagg0. tcp       K     2195  2228482        0       inet from 192.168.1.100/32 to <sfi_texas> port = ssh  flags S/SA         
 266  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.100/32 to <sfi_texas> port = sunrpc  flags S/SA      
 267  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.100/32 to <sfi_texas> port = cryptoadmin  flags S/SA 
 268  Pass     In      Q lagg0. tcp       K      373    62316        0       inet from 192.168.1.100/32 to <sfi_texas> port = nfsd  flags S/SA        
 269  Pass     In      Q lagg0. tcp       K  276941K  375587M     2280       inet from 192.168.1.100/32 to <Prox_Backup> port = 8007  flags S/SA      
 270  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.125/32 to 192.168.130.136/32 port = 27000  flags S/SA
 271  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.1.125/32 to 192.168.130.136/32 port = 27000            
 272  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.1.125/32 to 192.168.130.136/32 port = 49178  flags S/SA
 273  Pass     In      Q lagg0. udp       K        0        0        0       inet from 192.168.1.125/32 to 192.168.130.136/32 port = 49178            
 274  Pass     In      Q lagg0. tcp       K       12     1492        0       inet from any to any port = 1688  flags S/SA                             
 275  Pass     In      Q lagg0. udp       K        0        0        0       inet from any to any port = 1688                                         
 276  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to <LAN__NETWORK> port = ftp  flags S/SA       
 277  Pass     In      Q lagg0. udp       K        0        0        0       inet from <OPT7__NETWORK> to <LAN__NETWORK> port = ftp                   
 278  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to 192.168.129.28/32 port 9100 >< 9104  flags S
 279  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to <OPSISrv> port = netbios-ssn  flags S/SA    
 280  Pass     In      Q lagg0. tcp       K      291    44499        0       inet from <OPT7__NETWORK> to <OPSISrv> port = microsoft-ds  flags S/SA   
 281  Pass     In      Q lagg0. tcp       K     2071   673649        0       inet from <OPT7__NETWORK> to <OPSISrv> port = 4447  flags S/SA           
 282  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to <OPSISrv> port = 4441  flags S/SA           
 283  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to 192.168.130.136/32 port = microsoft-ds  flag
 284  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to 192.168.130.136/32 port = ms-sql-s  flags S/
 285  Pass     In      Q lagg0. udp       K     1578   119928       16       inet from <OPT7__NETWORK> to 192.168.160.1/32 port = ntp                 
 286  Pass     In      Q lagg0. tcp       K 16275483   21317M      303       inet from <OPT7__NETWORK> to 192.168.160.2/32 port = 7074  flags S/SA    
 287  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to 192.168.160.2/32 port = http-alt  flags S/SA
 288  Pass     In      Q lagg0. tcp       K   130922 13268779      162       inet from <OPT7__NETWORK> to 192.168.160.2/32 port = 8443  flags S/SA    
 289  Pass     In      Q lagg0. tcp       K     2208  1210406        1       inet from <OPT7__NETWORK> to 192.168.160.7/32 port = smtp  flags S/SA    
 290  Pass     In      Q lagg0. udp       K        0        0        0       inet from <OPT7__NETWORK> to 192.168.160.7/32 port = smtp                
 291  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to 192.168.160.7/32 port = submission  flags S/
 292  Pass     In      Q lagg0. udp       K        0        0        0       inet from <OPT7__NETWORK> to 192.168.160.7/32 port = submission          
 293  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT7__NETWORK> to 192.168.130.136/32 port = 49206  flags S/SA 
 294  Pass     In      Q lagg0. tcp       K  1394211 1618856K       50       inet from <OPT7__NETWORK> to any port = http  flags S/SA                 
 295  Pass     In      Q lagg0. tcp       K  1516593 1315225K      302       inet from <OPT7__NETWORK> to any port = https  flags S/SA                
 296  Pass     In      Q lagg0. udp       K        0        0        0       inet from <OPT7__NETWORK> to any port = 4501                             
 297  Block    In  Log Q lagg0.               216319 11477516        0       drop inet from <OPT7__NETWORK> to <LAN__NETWORK>                         
 298  Block    In  Log Q lagg0.                    0        0        0       drop inet6 from <OPT7__NETWORK> to <LAN__NETWORK>                        
 299  Block    In  Log Q lagg0.                50901  4872392        0       drop inet all                                                            
 300  Block    In  Log Q lagg0.                    0        0        0       drop inet6 all                                                           
 301  Block    In  Log Q lagg0. tcp                0        0        0       drop inet from 192.168.128.0/18 to 193.97.129.89/32 port = openvpn       
 302  Block    In  Log Q lagg0. udp                0        0        0       drop inet from 192.168.128.0/18 to 193.97.129.89/32 port = openvpn       
 303  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT8__NETWORK> to 192.168.129.170/32 port = netbios-ssn  flags
 304  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT8__NETWORK> to 192.168.129.170/32 port = microsoft-ds  flag
 305  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT8__NETWORK> to 192.168.129.170/32 port = 4441  flags S/SA  
 306  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT8__NETWORK> to 192.168.129.170/32 port = 4447  flags S/SA  
 307  Pass     In      Q lagg0. udp       K     6726   511176       72       inet from <OPT8__NETWORK> to 192.168.160.1/32 port = ntp                 
 308  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT8__NETWORK> to 192.168.160.7/32 port = smtp  flags S/SA    
 309  Pass     In      Q lagg0. icmp      K        0        0        0       inet all                                                                 
 310  Pass     In      Q lagg0. icmp      K     6432   540288       70       inet all                                                                 
 311  Pass     In      Q lagg0. tcp       K       20     1016        0       inet from any to 192.168.129.119/32 port = domain  flags S/SA            
 312  Pass     In      Q lagg0. udp       K    17794  1634728      109       inet from any to 192.168.129.119/32 port = domain                        
 313  Pass     In      Q lagg0. tcp       K      402   342594        0       inet from any to any port = http  flags S/SA                             
 314  Pass     In      Q lagg0. tcp       K      108    63964        0       inet from any to any port = https  flags S/SA                            
 315  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <SambaSrv>  flags S/SA                          
 316  Pass     In      Q lagg0. udp       K        0        0        0       inet from <ITMgmtSrv> to <SambaSrv>                                      
 317  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = ssh  flags S/SA                  
 318  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = icap  flags S/SA                 
 319  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = epmd  flags S/SA                 
 320  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = amqp  flags S/SA                 
 321  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = 6150  flags S/SA                 
 322  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = 6379  flags S/SA                 
 323  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port 7074:7077  flags S/SA              
 324  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = 7081  flags S/SA                 
 325  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = 7083  flags S/SA                 
 326  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = http-alt  flags S/SA             
 327  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = 8443  flags S/SA                 
 328  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = 27017  flags S/SA                
 329  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = 32002  flags S/SA                
 330  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = 48652  flags S/SA                
 331  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = ldap  flags S/SA                 
 332  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <ITMgmtSrv> to <AVSrv> port = ldaps  flags S/SA                
 333  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <prox_itmgmt> to <sfi_texas> port = sunrpc  flags S/SA         
 334  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <prox_itmgmt> to <sfi_texas> port = cryptoadmin  flags S/SA    
 335  Pass     In      Q lagg0. tcp       K      243    48884        0       inet from <prox_itmgmt> to <sfi_texas> port = nfsd  flags S/SA           
 336  Block    In      Q lagg0.                20345 10426115        0       drop inet all                                                            
 337  Block    In      Q lagg0.                    0        0        0       drop inet6 all                                                           
 338  Block    In  Log Q lagg0. tcp                0        0        0       drop inet from 192.168.128.0/18 to 193.97.129.89/32 port = openvpn       
 339  Block    In  Log Q lagg0. udp                0        0        0       drop inet from 192.168.128.0/18 to 193.97.129.89/32 port = openvpn       
 340  Pass     In      Q lagg0.           K 29345770   27231M     4994       inet all  flags S/SA                                                     
 341  Pass     In      Q lagg0.           K        0        0        0       inet6 all  flags S/SA                                                    
 342  Block    In      Q lagg0.                  372    33247        0       drop inet all                                                            
 343  Block    In      Q lagg0.                    0        0        0       drop inet6 all                                                           
 344  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT11__NETWORK> to 192.168.129.119/32 port = domain  flags S/S
 345  Pass     In      Q lagg0. udp       K        0        0        0       inet from <OPT11__NETWORK> to 192.168.129.119/32 port = domain           
 346  Pass     In      Q lagg0. udp       K        0        0        0       inet from <OPT11__NETWORK> to 192.168.160.1/32 port = ntp                
 347  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.4.101/32 to 192.168.160.1/32 port = ldap  flags S/SA   
 348  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.4.101/32 to 192.168.160.11/32 port = ldap  flags S/SA  
 349  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.4.101/32 to <sfi_texas> port = sunrpc  flags S/SA      
 350  Pass     In      Q lagg0. tcp       K        0        0        0       inet from 192.168.4.101/32 to <sfi_texas> port = nfsd  flags S/SA        
 351  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT11__NETWORK> to any port = http  flags S/SA                
 352  Pass     In      Q lagg0. tcp       K        0        0        0       inet from <OPT11__NETWORK> to any port = https  flags S/SA               
 353  Pass     In      Q lagg0. icmp      K        0        0        0       inet from <OPT11__NETWORK> to any                                        
 354  Pass     In      Q lagg0. icmp      K        0        0        0       inet from <OPT11__NETWORK> to any                                        
 355  Block    In      Q lagg0. tcp                0        0        0       drop inet all  flags S/SA                                                
 356  Pass     Out              udp       K        2      696        0       route-to ... inet from (self) to 185.169.78.2/32 port = isakmp           
 357  Pass     In        lagg0. udp       K        0        0        0       reply-to ... inet from 185.169.78.2/32 to (self) port = isakmp           
 358  Pass     Out              udp       K     1194   143096        0       route-to ... inet from (self) to 185.169.78.2/32 port = ipsec-nat-t      
 359  Pass     In        lagg0. udp       K        0        0        0       reply-to ... inet from 185.169.78.2/32 to (self) port = ipsec-nat-t      
 360  Pass     Out              esp       K        0        0        0       route-to ... inet from (self) to 185.169.78.2/32                         
 361  Pass     In        lagg0. esp       K        0        0        0       reply-to ... inet from 185.169.78.2/32 to (self)                         
 362  Pass     Any                                 0        0        0       all                                                                      
