Не учтенный трафик

[md5]

Ребят!
Не могу понять в чем собственно проблема. Фаер настроен а вот не учтенный трафик ломится как дурной

Код:

#!/bin/sh -

f='/sbin/ipfw'

ifOut1='sk0'
ifOut2='sk1'


${f} -f flush

${f} add 5 allow tcp from any to me 21, 22
${f} add 6 allow tcp from me 21, 22 to any

${f} add pass ip from any to 224.0.0.0/4

${f} add 54 allow udp from any to me 8767,30033,10011,9987
${f} add 55 allow udp from me 8767,30033,10011,9987 to any

${f} add 56 allow igmp from any to any
${f} add 57 allow igmp from any to any

${f} add 100 deny tcp from any to any 445

${f} add 110 allow ip from any to any via lo0
${f} add 120 skipto 1000 ip from me to any
${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17
${f} add 160 skipto 2000 ip from any to me

${f} add 200 skipto 32500 ip from any to any via ${ifOut1} in
${f} add 230 skipto 32500 ip from any to any via ${ifOut2} in
${f} add 260 ngtee 1 ip from any to any via ${ifOut1}
${f} add 290 ngtee 1 ip from any to any via ${ifOut2}

${f} add 300 skipto 4500 ip from any to any in

${f} add 400 ngtee 2 ip from any to any recv ${ifOut1}
${f} add 430 ngtee 2 ip from any to any recv ${ifOut2}
${f} add 460 ngtee 3 ip from any to any

${f} add 1000 allow udp from any 53,7723,29890 to any
${f} add 1002 allow tcp from any 25,53,110,143,995 to any
${f} add 1010 allow tcp from any to any setup keep-state
${f} add 1020 allow udp from any to any keep-state
${f} add 1100 allow ip from any to any

${f} add 2000 check-state
${f} add 2010 allow icmp from any to any
${f} add 2020 allow tcp from any to any 80,443
${f} add 2050 deny ip from any to any via ${ifOut1}
${f} add 2060 deny ip from any to any via ${ifOut2}
${f} add 2030 allow udp from any to any 53,7723,29890
${f} add 2040 allow tcp from any to any 25,53,110,143,995
${f} add 2100 deny ip from any to any

Где моя ошибка подскажите!

[Maks]

А откуда куда хоть трафик?
Доп сателлитов нет?

[md5]

допольнительных нет
все на одно сервере
127.0.0.1 ipacct:
0.0.0.0/0 *_*

причем в статистике трафик есть, но неучтенных горой спиться. не могу понять откуда

[md5]

ребят кто сталкивался ?

[0xbad0c0d3]

покажи ipfw show

[md5]

Код:

00005    1079     96908 allow tcp from any to me dst-port 21,22,3000,4500,14534,50080,51234,27010,27011,27012,27013,27014,27015,27016,27017,1234,7781,7782,9875,3306,8767,30033,10011,9987
00006    1042    332933 allow tcp from me 21,22,3000,4500,14534,50080,51234,27010,27011,27012,27013,27014,27015,27016,27017,1234,7781,7782,9875,3306,8767,30033,10011,9987 to any
00054       0         0 allow udp from any to me dst-port 8767,30033,10011,9987
00055       0         0 allow udp from me 8767,30033,10011,9987 to any
00056     178      4984 allow igmp from any to any
00057       0         0 allow igmp from any to any
00100      19       928 deny tcp from any to any dst-port 445
00106       0         0 allow ip from any to 224.0.0.0/4
00110    1960    193364 allow ip from any to any via lo0
00120    6946   1346952 skipto 1000 ip from me to any
00130      24      3795 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00160   85019   5899958 skipto 2000 ip from any to me
00200  431730 311449111 skipto 32500 ip from any to any via sk0 in
00230  435065 165396661 skipto 32500 ip from any to any via sk1 in
00260  191274  23868164 ngtee 1 ip from any to any via sk0
00290      24      3123 ngtee 1 ip from any to any via sk1
00300  192489  24128726 skipto 4500 ip from any to any in
00400  407804 296273858 ngtee 2 ip from any to any recv sk0
00430  434723 165360607 ngtee 2 ip from any to any recv sk1
00460 1033825 485505752 ngtee 3 ip from any to any
01000    1751    249362 allow udp from any 53,7723,29890 to any
01002      40      2452 allow tcp from any 25,53,110,143,995 to any
01010    2944    143435 allow tcp from any to any setup keep-state
01020  351106  46429521 allow udp from any to any keep-state
01100  686929 440249728 allow ip from any to any
02000       0         0 check-state

02010     452     28604 allow icmp from any to any
02020    1015    248396 allow tcp from any to any dst-port 80,443
02030    1752    113953 allow udp from any to any dst-port 53,7723,29890
02040      49      3140 allow tcp from any to any dst-port 25,53,110,143,995
02050   73145   4787634 deny ip from any to any via sk0
02060    3484    239715 deny ip from any to any via sk1
02100    3123    256722 deny ip from any to any
05000       0         0 deny ip from not table(0) to any
05001       0         0 skipto 5010 ip from table(127) to table(126)
05002  192233  24089478 skipto 5030 ip from any to not table(2)
05003       0         0 deny ip from any to not table(1)
05004       0         0 pipe tablearg ip from table(21) to any
05005       0         0 deny ip from any to any
05010       0         0 pipe tablearg ip from table(127) to any
05030       0         0 deny tcp from table(15) to any dst-port 25,110,135,139,445
05130       0         0 allow ip from table(31) to table(30)
05140       0         0 allow ip from table(41) to table(40)
05400  191663  23963178 pipe tablearg ip from table(11) to any
32000     570    126300 deny ip from any to any
33000       0         0 pipe tablearg ip from table(126) to table(127)
33001  865152 475432620 skipto 33010 ip from not table(2) to any
33002       0         0 pipe tablearg ip from any to table(20)
33003       0         0 deny ip from any to any
33130       0         0 allow ip from table(30) to table(31)
33140       0         0 allow ip from table(40) to table(41)
33400  846148 462454344 pipe tablearg ip from any to table(10)
65535   19179  12989679 deny ip from any to any

[0xbad0c0d3]

ifconfig
и ИП с/на которых неучтенный трафф

[md5]

у меня связка ipfw + pf
2 провайдера два шлюза http://forum.nodeny.com.ua/index.php?topic=635.0

2 сетевые в инет одна в локалку

[Efendy]

В неучтенном трафике пишется с какого ипа на какой ип - вот тебе старт откуда копать нужно