PDA

View Full Version : Issues setting up VPN connection between Checkpoint and Zyxel firewall



torenhof
2013-03-20, 17:22
Hello all,

I'm having issues with the creation of a VPN tunnel. This site-2-site vpn tunnel should pass data between an Checkpoint GAIA firewall, version R75.40 and a Zyxel, zywall USG 1000. All the parameters for the VPN seem to be configured correctly on both the firewalls, but the tunnel doesn't come up.

I have traced the IKE log's but the attempt of the checkpoint firewall building the tunnel, stops in Phase 1 after the first packet, of the 6 packets that should be sent in the first phase, is sent.
Furthermore in the logging in Smartview tracker, I only see an IKE packet being accepted by the implicit rules on the firewall.

In the log's of the zyxell firewall, you can see that the IKE phase has been initiated, but that's it.

Both devices have been rebooted and the settings should be correct.

It's impossible to build a VPN between a zyxel and a Checkpoint Firewall?

Thanks and regards
T.

ShadowPeak.com
2013-03-20, 18:59
Hello all,

I'm having issues with the creation of a VPN tunnel. This site-2-site vpn tunnel should pass data between an Checkpoint GAIA firewall, version R75.40 and a Zyxel, zywall USG 1000. All the parameters for the VPN seem to be configured correctly on both the firewalls, but the tunnel doesn't come up.

I have traced the IKE log's but the attempt of the checkpoint firewall building the tunnel, stops in Phase 1 after the first packet, of the 6 packets that should be sent in the first phase, is sent.
Furthermore in the logging in Smartview tracker, I only see an IKE packet being accepted by the implicit rules on the firewall.

In the log's of the zyxell firewall, you can see that the IKE phase has been initiated, but that's it.

Both devices have been rebooted and the settings should be correct.

It's impossible to build a VPN between a zyxel and a Checkpoint Firewall?

Thanks and regards
T.

I assume that a ping initiated directly from the firewall to the Zyxel's external routable address garners a successful response. Packets 1 and 2 of IKE Phase 1 establish what parameters should be used to build the IKE Phase 1 control tunnel. If packet 2 is not being sent back by the Zyxel check the following:

- The Zyxel or something else in the network path either dropped IKE Packet 1 (unlikely as you say the log on the Zyxel shows something) or more likely dropped Packet 2 on the return path. An access-list on an Internet perimeter router is a likely culprit here.

- The source IP address on the IKE Phase 1 packet does not match what the Zyxel is expecting - In Main Mode the 2 peers must know each other's IP address ahead of time, otherwise the Phase 1 packet will be silently dropped by the recipient.

- Check your VPN Link Selection settings on the firewall/cluster object and ensure you are using the correct source IP address for your firewall's IKE traffic. Be careful changing this as it can break other VPN tunnels if you have any.

- If an invalid/non-matching proposal is received in IKE normally the recipient will send an immediate negative acknowledgement, however I've seen some cases where a silent discard will occur instead (such as an incorrect Proxy-ID/subnet Phase 2 proposal when talking to a Juniper) so it could just be a simple mismatch in IKE Phase 1 settings. Not sure if a Zyxel does silent discard or not so check the encryption algorithm, hash function, SA Lifetime, & Diffie-Helman group number settings for IKE Phase 1. Also make sure the Zyxel is set to use main mode and so is your firewall.

torenhof
2013-03-21, 12:03
I have changed some settings, and using IKE VIEW, I see 5 pakkets being send in Phase one and than the negotiation stops.
I get an error message: IKE: Phase1 Received Notification from Peer: invalid payload type

When looking for this error, it seems that the Preshared secret would be false or something like that.

ShadowPeak.com
2013-03-21, 12:44
I have changed some settings, and using IKE VIEW, I see 5 pakkets being send in Phase one and than the negotiation stops.
I get an error message: IKE: Phase1 Received Notification from Peer: invalid payload type

When looking for this error, it seems that the Preshared secret would be false or something like that.

Exactly, IKE packets 5 and 6 perform the authentication portion of the exchange so your pre-shared secrets don't match.

torenhof
2013-04-04, 02:56
Exactly, IKE packets 5 and 6 perform the authentication portion of the exchange so your pre-shared secrets don't match.

There must be something else that is wrong. The Zyxel firewall keeps giving issues to connect.
The administrator of the Zyxel firewall assured me that the Shared secret is 100% correct.
And I was able to confirm this.

The tunnel refuses to come up.

It's like it's impossible to connect the zyxel to the checkpoint firewall and vice versa.

ShadowPeak.com
2013-04-04, 10:03
Do a:

vpn debug trunc
vpn debug ikeon

on your gateway, have the Zyxel initiate the VPN, watch it fail, run "vpn debug off" then post ike.elg here.

ShadowPeak.com
2013-04-04, 14:07
Unfortunately all the VPN attempts in that ike.elg are your firewall initiating to the Zyxel instead of the other way around (which would be way more conclusive) but I'll take a stab anyway.

In packet 5 your Check Point firewall is choosing to identify itself by IP Address and the IP Address is 194.78.15.34. In the settings of the Zyxel make sure that under Authentication Key Peer ID type is set to IP (not DNS) and the Content field is 194.78.15.34

- Ensure the IP address is correct with no spaces before or after it as that will cause a failure
- Ensure that Extended Authentication on the Zyxel end is unchecked
- Make sure the Zyxel is set for Pre-shared key and not certificate but hopefully that is obvious

Your pre-shared secret appears to be correct but I can't say for sure, so if the above doesn't fix it change the pre-shared secret on both ends to something very simple that only contains alphanumeric characters [a-z][A-Z][0-9] and no special characters or whitespace as I've seen some special characters muck up the negotiation.

As a last resort, try changing the Phase 1 hash algorithm from SHA-1 to MD5 on both ends, you are using DES (!!) for your encryption algorithm which is a little unusual and I seem to vaguely recall issues between DES and some hash algorithms.

Also one last thing, I'd advise removing the ike.elg file from your prior posting as it contains way more information than necessary.

torenhof
2013-04-05, 03:06
Unfortunately all the VPN attempts in that ike.elg are your firewall initiating to the Zyxel instead of the other way around (which would be way more conclusive) but I'll take a stab anyway.

In packet 5 your Check Point firewall is choosing to identify itself by IP Address and the IP Address is 194.78.15.34. In the settings of the Zyxel make sure that under Authentication Key Peer ID type is set to IP (not DNS) and the Content field is 194.78.15.34

- Ensure the IP address is correct with no spaces before or after it as that will cause a failure
- Ensure that Extended Authentication on the Zyxel end is unchecked
- Make sure the Zyxel is set for Pre-shared key and not certificate but hopefully that is obvious

Your pre-shared secret appears to be correct but I can't say for sure, so if the above doesn't fix it change the pre-shared secret on both ends to something very simple that only contains alphanumeric characters [a-z][A-Z][0-9] and no special characters or whitespace as I've seen some special characters muck up the negotiation.

As a last resort, try changing the Phase 1 hash algorithm from SHA-1 to MD5 on both ends, you are using DES (!!) for your encryption algorithm which is a little unusual and I seem to vaguely recall issues between DES and some hash algorithms.

Also one last thing, I'd advise removing the ike.elg file from your prior posting as it contains way more information than necessary.

I'll try to adjust the things you mentioned and I'll let you know if it was of any help.
Thanks already for your reactions.

torenhof
2013-04-05, 14:15
I have tried all of your settings, but without any success.
Now the first negotiation stops after 5 packets in Main Mode.

Then I see 3 packets and an authentication failed in MM.

Below You can find the settings on the Zyxell Firewall.
I couldn't think of any other solutions.

maybe aggressive mode or something like that?


727728729

ShadowPeak.com
2013-04-05, 15:10
I have tried all of your settings, but without any success.
Now the first negotiation stops after 5 packets in Main Mode.

Do you mean it is still behaving the same as the ike.elg file was showing? 5 packets then an invalid payload error?


Then I see 3 packets and an authentication failed in MM.

I don't remember seeing this in the original ike.elg, and Phase2/Quick Mode is 3 packets, is Phase 2 actually starting now? If so disable PFS on both sides.

You can try aggressive mode but it is generally less interoperable than Main Mode.

What I really need to see is an ike.elg containing an attempt by the Zyxel to start the tunnel with your Check Point. Then we could see what the Zyxel would send in packet 5 and compare it with the Check Point.

torenhof
2013-04-15, 04:01
Do you mean it is still behaving the same as the ike.elg file was showing? 5 packets then an invalid payload error?



I don't remember seeing this in the original ike.elg, and Phase2/Quick Mode is 3 packets, is Phase 2 actually starting now? If so disable PFS on both sides.

You can try aggressive mode but it is generally less interoperable than Main Mode.

What I really need to see is an ike.elg containing an attempt by the Zyxel to start the tunnel with your Check Point. Then we could see what the Zyxel would send in packet 5 and compare it with the Check Point.

No luck, the tunnel doesn't want to come up.
I can only see Phase 1 packets that are being sent by the checkpoint firewall.
I don't see any packets arriving on our firewall from the Zyxel.

I have the logs of the Zyxel:
No. Date/Time Source Destination
Priority Category Note
Message
1 2013-04-11 14:12:46 89.245.239.168:34150 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
2 2013-04-11 14:12:46 60.229.0.200:64740 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
3 2013-04-11 14:12:46 95.211.210.241:49900 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
4 2013-04-11 14:12:46 77.235.37.41:13077 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
5 2013-04-11 14:12:46
notice system
Sending event/alert log to mail server has succeeded.
6 2013-04-11 14:12:47 10.4.6.4:49325 10.0.11.101:53
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, UDP, service others, ACCEPT
7 2013-04-11 14:12:47 60.229.0.200:7117 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
8 2013-04-11 14:12:47 95.211.210.241:18531 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
9 2013-04-11 14:12:47 77.235.37.41:37099 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
10 2013-04-11 14:12:47 178.217.191.90:11970 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
11 2013-04-11 14:12:47 60.229.0.200:64694 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
12 2013-04-11 14:12:47 95.211.210.241:64562 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
13 2013-04-11 14:12:47 77.235.37.41:61540 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
14 2013-04-11 14:12:48 60.229.0.200:41249 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
15 2013-04-11 14:12:48 95.211.210.241:47528 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
16 2013-04-11 14:12:48 85.90.84.170:61903 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
17 2013-04-11 14:12:48 77.235.37.41:64145 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
18 2013-04-11 14:12:48 60.229.0.200:24205 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
19 2013-04-11 14:12:48 95.211.210.241:54269 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
20 2013-04-11 14:12:48 83.219.121.90:399 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
21 2013-04-11 14:12:48 77.235.37.41:56966 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
22 2013-04-11 14:12:49 94.23.155.141:33512 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
23 2013-04-11 14:12:49 60.229.0.200:30504 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
24 2013-04-11 14:12:49 95.211.210.241:13997 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
25 2013-04-11 14:12:49 77.235.37.41:54563 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
26 2013-04-11 14:12:49 94.23.155.141:21653 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
27 2013-04-11 14:12:49 60.229.0.200:50366 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
28 2013-04-11 14:12:49 95.211.210.241:15335 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
29 2013-04-11 14:12:49 77.235.37.41:32984 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
30 2013-04-11 14:12:50 60.229.0.200:57782 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
31 2013-04-11 14:12:50 95.211.210.241:33388 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
32 2013-04-11 14:12:50 77.235.37.41:21496 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
33 2013-04-11 14:12:50 60.229.0.200:64351 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
34 2013-04-11 14:12:50 95.211.210.241:34335 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
35 2013-04-11 14:12:50 77.235.37.41:47498 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
36 2013-04-11 14:12:51 60.229.0.200:46003 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
37 2013-04-11 14:12:51 95.211.210.241:57827 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
38 2013-04-11 14:12:51 77.235.37.41:46025 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
39 2013-04-11 14:12:51 89.245.239.168:37159 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
40 2013-04-11 14:12:51 60.229.0.200:2203 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
41 2013-04-11 14:12:51 95.211.210.241:38760 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
42 2013-04-11 14:12:52 77.235.37.41:9549 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
43 2013-04-11 14:12:52 85.90.84.170:33158 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
44 2013-04-11 14:12:52 60.229.0.200:38876 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
45 2013-04-11 14:12:52 95.211.210.241:46866 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
46 2013-04-11 14:12:52 77.235.37.41:51191 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
47 2013-04-11 14:12:52 60.229.0.200:55745 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
48 2013-04-11 14:12:52 95.211.210.241:41989 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
49 2013-04-11 14:12:53 77.235.37.41:56728 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
50 2013-04-11 14:12:53 178.217.191.90:45676 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
51 2013-04-11 14:12:53 60.229.0.200:11415 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
52 2013-04-11 14:12:53 95.211.210.241:6430 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
53 2013-04-11 14:12:53 117.53.12.124:3921 192.168.4.254:445
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, TCP, service others, ACCEPT [count=3]
54 2013-04-11 14:12:53 77.235.37.41:64678 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
55 2013-04-11 14:12:53 60.229.0.200:15979 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
56 2013-04-11 14:12:53 95.211.210.241:63247 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
57 2013-04-11 14:12:53 77.235.37.41:16717 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
58 2013-04-11 14:12:54 77.235.37.41:178 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
59 2013-04-11 14:12:54 60.229.0.200:62525 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
60 2013-04-11 14:12:54 95.211.210.241:29182 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
61 2013-04-11 14:12:54 10.13.6.8:57364 10.0.11.101:53
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, UDP, service others, ACCEPT
62 2013-04-11 14:12:54 60.229.0.200:61288 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
63 2013-04-11 14:12:54 83.219.121.90:38780 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
64 2013-04-11 14:12:54 77.235.37.41:14132 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
65 2013-04-11 14:12:54 60.229.0.200:25970 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
66 2013-04-11 14:12:54 95.211.210.241:34147 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
67 2013-04-11 14:12:55 94.23.155.141:2957 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
68 2013-04-11 14:12:55 77.235.37.41:22480 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
69 2013-04-11 14:12:55 60.229.0.200:6652 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
70 2013-04-11 14:12:55 95.211.210.241:45989 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
71 2013-04-11 14:12:55 89.245.239.168:202 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
72 2013-04-11 14:12:55 77.235.37.41:8647 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
73 2013-04-11 14:12:55 60.229.0.200:9507 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
74 2013-04-11 14:12:55 95.211.210.241:58050 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
75 2013-04-11 14:12:56 77.235.37.41:24885 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
76 2013-04-11 14:12:56 60.229.0.200:2098 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
77 2013-04-11 14:12:56 95.211.210.241:51977 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
78 2013-04-11 14:12:56 77.235.37.41:20779 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
79 2013-04-11 14:12:56 178.217.191.90:24364 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
80 2013-04-11 14:12:56 10.4.6.4:52410 10.0.11.101:53
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, UDP, service others, ACCEPT
81 2013-04-11 14:12:56 60.229.0.200:5999 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
82 2013-04-11 14:12:56 95.211.210.241:21094 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
83 2013-04-11 14:12:57 10.4.6.4:52411 10.0.11.101:53
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, UDP, service others, ACCEPT
84 2013-04-11 14:12:57 77.235.37.41:30043 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
85 2013-04-11 14:12:57 60.229.0.200:9415 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
86 2013-04-11 14:12:57 95.211.210.241:25823 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
87 2013-04-11 14:12:57 10.4.6.4:61268 10.0.11.101:53
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, UDP, service others, ACCEPT
88 2013-04-11 14:12:57 77.235.37.41:43237 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
89 2013-04-11 14:12:57 124.191.152.92:755 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
90 2013-04-11 14:12:57 85.90.84.170:45868 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
91 2013-04-11 14:12:57 60.229.0.200:41720 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
92 2013-04-11 14:12:57 95.211.210.241:40618 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
93 2013-04-11 14:12:58 77.235.37.41:52172 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
94 2013-04-11 14:12:58 83.219.121.90:30230 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
95 2013-04-11 14:12:58 60.229.0.200:40293 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
96 2013-04-11 14:12:58 95.211.210.241:27018 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
97 2013-04-11 14:12:58 77.235.37.41:18710 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
98 2013-04-11 14:12:58 10.0.0.10:138 10.0.255.255:138
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
99 2013-04-11 14:12:58 94.23.155.141:9879 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
100 2013-04-11 14:12:58 60.229.0.200:52051 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
101 2013-04-11 14:12:58 95.211.210.241:351 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
102 2013-04-11 14:12:59 77.235.37.41:31006 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
103 2013-04-11 14:12:59 60.229.0.200:60848 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
104 2013-04-11 14:12:59 95.211.210.241:33553 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
105 2013-04-11 14:12:59 77.235.37.41:49440 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
106 2013-04-11 14:12:59 60.229.0.200:1768 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
107 2013-04-11 14:12:59 95.211.210.241:27600 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
108 2013-04-11 14:13:00 77.235.37.41:28041 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
109 2013-04-11 14:13:00 60.229.0.200:45840 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
110 2013-04-11 14:13:00 95.211.210.241:11714 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
111 2013-04-11 14:13:00 77.235.37.41:18270 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
112 2013-04-11 14:13:00 89.245.239.168:38334 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
113 2013-04-11 14:13:00 60.229.0.200:9865 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
114 2013-04-11 14:13:00 95.211.210.241:8053 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
115 2013-04-11 14:13:01 77.235.37.41:30565 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
116 2013-04-11 14:13:01 85.90.84.170:43111 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
117 2013-04-11 14:13:01 60.229.0.200:3356 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
118 2013-04-11 14:13:01 95.211.210.241:59773 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
119 2013-04-11 14:13:01 77.235.37.41:55111 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
120 2013-04-11 14:13:01 60.229.0.200:5477 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
121 2013-04-11 14:13:01 95.211.210.241:41647 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
122 2013-04-11 14:13:02 77.235.37.41:16124 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
123 2013-04-11 14:13:02 178.217.191.90:47789 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
124 2013-04-11 14:13:02 60.229.0.200:11072 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
125 2013-04-11 14:13:02 95.211.210.241:36805 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
126 2013-04-11 14:13:02 77.235.37.41:41326 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
127 2013-04-11 14:13:02 60.229.0.200:37624 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
128 2013-04-11 14:13:02 95.211.210.241:52006 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
129 2013-04-11 14:13:03 77.235.37.41:11742 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
130 2013-04-11 14:13:03 60.229.0.200:63357 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
131 2013-04-11 14:13:03 95.211.210.241:6503 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
132 2013-04-11 14:13:03 77.235.37.41:14155 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
133 2013-04-11 14:13:03 83.219.121.90:57159 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
134 2013-04-11 14:13:03 60.229.0.200:21222 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
135 2013-04-11 14:13:03 95.211.210.241:65316 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
136 2013-04-11 14:13:04 77.235.37.41:30017 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
137 2013-04-11 14:13:04 94.23.155.141:51640 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
138 2013-04-11 14:13:04 89.245.239.168:43941 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
139 2013-04-11 14:13:04 107.0.185.100:37790 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
140 2013-04-11 14:13:04 60.229.0.200:21625 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
141 2013-04-11 14:13:04 95.211.210.241:60016 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
142 2013-04-11 14:13:04 94.23.155.141:44049 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
143 2013-04-11 14:13:04 77.235.37.41:61857 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
144 2013-04-11 14:13:04 77.235.37.41:61510 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
145 2013-04-11 14:13:04 60.229.0.200:40010 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
146 2013-04-11 14:13:04 95.211.210.241:57576 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
147 2013-04-11 14:13:05 60.229.0.200:12623 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
148 2013-04-11 14:13:05 77.235.37.41:25234 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
149 2013-04-11 14:13:05 60.229.0.200:23292 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
150 2013-04-11 14:13:05 95.211.210.241:40004 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
151 2013-04-11 14:13:05 89.245.239.168:56243 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
152 2013-04-11 14:13:05 89.245.239.168:61710 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
153 2013-04-11 14:13:05 77.235.37.41:65274 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
154 2013-04-11 14:13:05 60.229.0.200:32007 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
155 2013-04-11 14:13:05 95.211.210.241:11963 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
156 2013-04-11 14:13:06 77.235.37.41:39785 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
157 2013-04-11 14:13:06 60.229.0.200:30209 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
158 2013-04-11 14:13:06 95.211.210.241:57982 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
159 2013-04-11 14:13:06 77.235.37.41:53037 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
160 2013-04-11 14:13:06 85.90.84.170:25087 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
161 2013-04-11 14:13:06 60.229.0.200:63452 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
162 2013-04-11 14:13:07 95.211.210.241:62437 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
163 2013-04-11 14:13:07 77.235.37.41:7137 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
164 2013-04-11 14:13:07 60.229.0.200:173 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
165 2013-04-11 14:13:07 95.211.210.241:61613 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
166 2013-04-11 14:13:07 77.235.37.41:42030 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
167 2013-04-11 14:13:07 83.219.121.90:14077 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
168 2013-04-11 14:13:08 60.229.0.200:63054 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
169 2013-04-11 14:13:08 95.211.210.241:7126 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
170 2013-04-11 14:13:08 94.23.155.141:10479 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
171 2013-04-11 14:13:08 10.4.6.4:64817 10.0.11.101:53
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, UDP, service others, ACCEPT
172 2013-04-11 14:13:08 77.235.37.41:6121 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
173 2013-04-11 14:13:08 60.229.0.200:7202 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
174 2013-04-11 14:13:08 95.211.210.241:62886 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
175 2013-04-11 14:13:08 89.245.239.168:41890 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
176 2013-04-11 14:13:08 77.235.37.41:5448 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
177 2013-04-11 14:13:09 60.229.0.200:64260 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
178 2013-04-11 14:13:09 95.211.210.241:19206 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
179 2013-04-11 14:13:09 77.235.37.41:2500 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
180 2013-04-11 14:13:09 60.229.0.200:7275 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
181 2013-04-11 14:13:09 95.211.210.241:54438 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
182 2013-04-11 14:13:09 77.235.37.41:14476 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
183 2013-04-11 14:13:09 89.245.239.168:2175 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
184 2013-04-11 14:13:10 60.229.0.200:30174 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
185 2013-04-11 14:13:10 95.211.210.241:29695 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
186 2013-04-11 14:13:10 77.235.37.41:53928 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
187 2013-04-11 14:13:10 60.229.0.200:45261 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
188 2013-04-11 14:13:10 95.211.210.241:64679 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
189 2013-04-11 14:13:10 85.90.84.170:60792 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
190 2013-04-11 14:13:10 77.235.37.41:17153 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
191 2013-04-11 14:13:11 60.229.0.200:43203 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
192 2013-04-11 14:13:11 95.211.210.241:58500 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
193 2013-04-11 14:13:11 77.235.37.41:1412 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
194 2013-04-11 14:13:11 60.229.0.200:56348 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
195 2013-04-11 14:13:11 95.211.210.241:42282 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
196 2013-04-11 14:13:11 77.235.37.41:24802 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
197 2013-04-11 14:13:12 107.0.185.100:48143 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
198 2013-04-11 14:13:12 60.229.0.200:13675 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
199 2013-04-11 14:13:12 95.211.210.241:24853 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
200 2013-04-11 14:13:12 77.235.37.41:29090 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
201 2013-04-11 14:13:12 60.229.0.200:13448 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
202 2013-04-11 14:13:12 95.211.210.241:14069 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
203 2013-04-11 14:13:12 77.235.37.41:27894 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
204 2013-04-11 14:13:13 60.229.0.200:62405 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
205 2013-04-11 14:13:13 95.211.210.241:27841 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
206 2013-04-11 14:13:13 89.245.239.168:14024 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
207 2013-04-11 14:13:13 77.235.37.41:54554 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
208 2013-04-11 14:13:13 89.245.239.168:54574 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
209 2013-04-11 14:13:13 83.219.121.90:38803 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
210 2013-04-11 14:13:13 60.229.0.200:16148 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
211 2013-04-11 14:13:13 95.211.210.241:20480 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
212 2013-04-11 14:13:13 94.23.155.141:21948 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
213 2013-04-11 14:13:13 77.235.37.41:25882 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
214 2013-04-11 14:13:13 2.123.11.55:7405 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
215 2013-04-11 14:13:14 60.229.0.200:18727 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
216 2013-04-11 14:13:14 95.211.210.241:12673 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
217 2013-04-11 14:13:14 77.235.37.41:28154 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
218 2013-04-11 14:13:14 60.229.0.200:30695 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
219 2013-04-11 14:13:14 95.211.210.241:39714 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
220 2013-04-11 14:13:14 77.235.37.41:5521 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
221 2013-04-11 14:13:15 60.229.0.200:18546 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
222 2013-04-11 14:13:15 95.211.210.241:39424 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
223 2013-04-11 14:13:15 77.235.37.41:36007 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
224 2013-04-11 14:13:15 77.235.37.41:51707 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
225 2013-04-11 14:13:15 60.229.0.200:13405 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
226 2013-04-11 14:13:15 95.211.210.241:11049 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
227 2013-04-11 14:13:15 77.235.37.41:60903 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
228 2013-04-11 14:13:15 60.229.0.200:56760 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
229 2013-04-11 14:13:16 60.229.0.200:65078 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
230 2013-04-11 14:13:16 95.211.210.241:763 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
231 2013-04-11 14:13:16 85.90.84.170:6014 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
232 2013-04-11 14:13:16 77.235.37.41:8449 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
233 2013-04-11 14:13:16 60.229.0.200:22379 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
234 2013-04-11 14:13:16 95.211.210.241:58488 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
235 2013-04-11 14:13:16 77.235.37.41:20252 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
236 2013-04-11 14:13:17 60.229.0.200:38785 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
237 2013-04-11 14:13:17 95.211.210.241:62992 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
238 2013-04-11 14:13:17 77.235.37.41:11160 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
239 2013-04-11 14:13:17 83.219.121.90:29741 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
240 2013-04-11 14:13:17 94.23.155.141:32207 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
241 2013-04-11 14:13:17 60.229.0.200:27852 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
242 2013-04-11 14:13:17 95.211.210.241:43961 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
243 2013-04-11 14:13:17 77.235.37.41:18946 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
244 2013-04-11 14:13:18 60.229.0.200:12014 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
245 2013-04-11 14:13:18 95.211.210.241:3233 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
246 2013-04-11 14:13:18 77.235.37.41:16126 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
247 2013-04-11 14:13:18 10.4.6.2:1834 10.0.0.1:8059
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, TCP, service others, ACCEPT [count=3]
248 2013-04-11 14:13:18 60.229.0.200:5723 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
249 2013-04-11 14:13:18 95.211.210.241:14632 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
250 2013-04-11 14:13:18 77.235.37.41:38612 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
251 2013-04-11 14:13:19 89.245.239.168:15931 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
252 2013-04-11 14:13:19 60.229.0.200:35784 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
253 2013-04-11 14:13:19 95.211.210.241:17139 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
254 2013-04-11 14:13:19 77.235.37.41:36239 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
255 2013-04-11 14:13:19 60.229.0.200:52717 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
256 2013-04-11 14:13:19 95.211.210.241:9626 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
257 2013-04-11 14:13:19 77.235.37.41:48521 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
258 2013-04-11 14:13:20 85.90.84.170:13054 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
259 2013-04-11 14:13:20 60.229.0.200:19272 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
260 2013-04-11 14:13:20 95.211.210.241:15365 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
261 2013-04-11 14:13:20 77.235.37.41:9459 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
262 2013-04-11 14:13:20 60.229.0.200:44577 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
263 2013-04-11 14:13:20 95.211.210.241:57912 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
264 2013-04-11 14:13:20 77.235.37.41:54496 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
265 2013-04-11 14:13:21 60.229.0.200:590 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
266 2013-04-11 14:13:21 95.211.210.241:17765 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
267 2013-04-11 14:13:21 77.235.37.41:622 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
268 2013-04-11 14:13:21 60.229.0.200:48443 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
269 2013-04-11 14:13:21 95.211.210.241:48531 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
270 2013-04-11 14:13:21 77.235.37.41:64012 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
271 2013-04-11 14:13:22 60.229.0.200:32293 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
272 2013-04-11 14:13:22 95.211.210.241:29430 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
273 2013-04-11 14:13:22 77.235.37.41:1466 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
274 2013-04-11 14:13:22 60.229.0.200:12109 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
275 2013-04-11 14:13:22 95.211.210.241:9783 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
276 2013-04-11 14:13:22 89.245.239.168:15584 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
277 2013-04-11 14:13:22 77.235.37.41:6332 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
278 2013-04-11 14:13:23 94.23.155.141:60052 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
279 2013-04-11 14:13:23 60.229.0.200:22394 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
280 2013-04-11 14:13:23 95.211.210.241:60881 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
281 2013-04-11 14:13:23 10.0.6.96:68 255.255.255.255:67
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
282 2013-04-11 14:13:23 10.0.6.96:137 10.0.255.255:137
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
283 2013-04-11 14:13:23 77.235.37.41:3783 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
284 2013-04-11 14:13:23 60.229.0.200:4923 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
285 2013-04-11 14:13:23 95.211.210.241:4629 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
286 2013-04-11 14:13:23 77.235.37.41:48957 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
287 2013-04-11 14:13:24 60.229.0.200:17739 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
288 2013-04-11 14:13:24 95.211.210.241:37719 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
289 2013-04-11 14:13:24 89.245.239.168:19958 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
290 2013-04-11 14:13:24 89.245.239.168:62339 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
291 2013-04-11 14:13:24 77.235.37.41:64384 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
292 2013-04-11 14:13:24 60.229.0.200:56679 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
293 2013-04-11 14:13:24 95.211.210.241:34047 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
294 2013-04-11 14:13:24 77.235.37.41:20286 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
295 2013-04-11 14:13:25 60.229.0.200:41140 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
296 2013-04-11 14:13:25 95.211.210.241:45711 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
297 2013-04-11 14:13:25 10.0.11.102:137 10.0.255.255:137
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
298 2013-04-11 14:13:25 77.235.37.41:44380 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
299 2013-04-11 14:13:25 85.90.84.170:61975 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
300 2013-04-11 14:13:25 60.229.0.200:50704 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
301 2013-04-11 14:13:25 95.211.210.241:27609 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
302 2013-04-11 14:13:26 77.235.37.41:9328 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
303 2013-04-11 14:13:26 77.235.37.41:33667 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
304 2013-04-11 14:13:26 60.229.0.200:54301 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
305 2013-04-11 14:13:26 95.211.210.241:45740 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
306 2013-04-11 14:13:26 77.235.37.41:32051 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
307 2013-04-11 14:13:26 60.229.0.200:57965 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
308 2013-04-11 14:13:26 60.229.0.200:44166 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
309 2013-04-11 14:13:26 95.211.210.241:45913 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
310 2013-04-11 14:13:26 94.23.155.141:7595 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
311 2013-04-11 14:13:27 77.235.37.41:2333 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
312 2013-04-11 14:13:27 83.219.121.90:48391 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
313 2013-04-11 14:13:27 60.229.0.200:3721 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
314 2013-04-11 14:13:27 95.211.210.241:12623 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
315 2013-04-11 14:13:27 77.235.37.41:58724 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
316 2013-04-11 14:13:27 60.229.0.200:56150 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
317 2013-04-11 14:13:27 95.211.210.241:29116 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
318 2013-04-11 14:13:27 94.23.155.141:23777 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
319 2013-04-11 14:13:28 77.235.37.41:9677 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
320 2013-04-11 14:13:28 89.245.239.168:50078 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
321 2013-04-11 14:13:28 60.229.0.200:4342 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
322 2013-04-11 14:13:28 95.211.210.241:28295 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
323 2013-04-11 14:13:28 77.235.37.41:2625 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
324 2013-04-11 14:13:28 60.229.0.200:38468 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
325 2013-04-11 14:13:28 95.211.210.241:32099 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
326 2013-04-11 14:13:28 10.4.6.4:60420 10.0.11.101:53
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, UDP, service others, ACCEPT
327 2013-04-11 14:13:28 10.4.6.4:51602 10.0.11.104:445
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, TCP, service others, ACCEPT
328 2013-04-11 14:13:29 77.235.37.41:47811 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
329 2013-04-11 14:13:29 60.229.0.200:20584 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
330 2013-04-11 14:13:29 95.211.210.241:3667 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
331 2013-04-11 14:13:29 85.90.84.170:48566 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
332 2013-04-11 14:13:29 77.235.37.41:52624 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
333 2013-04-11 14:13:29 10.4.6.4:51603 10.0.11.104:49234
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, TCP, service others, ACCEPT
334 2013-04-11 14:13:29 10.4.6.4:51604 10.0.11.101:88
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, TCP, service others, ACCEPT
335 2013-04-11 14:13:29 60.229.0.200:28711 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
336 2013-04-11 14:13:29 95.211.210.241:16380 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
337 2013-04-11 14:13:29 10.4.6.4:51605 10.0.11.101:88
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, TCP, service others, ACCEPT
338 2013-04-11 14:13:30 77.235.37.41:52612 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
339 2013-04-11 14:13:30 60.229.0.200:32552 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
340 2013-04-11 14:13:30 95.211.210.241:39896 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
341 2013-04-11 14:13:30 94.12.43.146:32109 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
342 2013-04-11 14:13:30 77.235.37.41:50841 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
343 2013-04-11 14:13:30 60.229.0.200:42085 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
344 2013-04-11 14:13:30 95.211.210.241:27358 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
345 2013-04-11 14:13:31 77.235.37.41:57173 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
346 2013-04-11 14:13:31 10.4.6.4:51606 10.0.11.104:49234
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, TCP, service others, ACCEPT
347 2013-04-11 14:13:31 60.229.0.200:8032 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
348 2013-04-11 14:13:31 95.211.210.241:50658 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
349 2013-04-11 14:13:31 10.4.6.4:51607 10.0.11.104:445
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, TCP, service others, ACCEPT
350 2013-04-11 14:13:31 77.235.37.41:27967 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
351 2013-04-11 14:13:31 60.229.0.200:49567 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
352 2013-04-11 14:13:31 95.211.210.241:27327 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
353 2013-04-11 14:13:32 89.245.239.168:50738 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
354 2013-04-11 14:13:32 77.235.37.41:40064 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
355 2013-04-11 14:13:32 60.229.0.200:11762 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
356 2013-04-11 14:13:32 95.211.210.241:31806 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
357 2013-04-11 14:13:32 124.191.152.92:44050 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
358 2013-04-11 14:13:32 94.23.155.141:23909 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
359 2013-04-11 14:13:32 77.235.37.41:43662 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
360 2013-04-11 14:13:32 83.219.121.90:57789 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
361 2013-04-11 14:13:32 60.229.0.200:48908 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
362 2013-04-11 14:13:32 95.211.210.241:54986 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
363 2013-04-11 14:13:33 77.235.37.41:35512 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
364 2013-04-11 14:13:33 60.229.0.200:64940 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
365 2013-04-11 14:13:33 95.211.210.241:51612 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
366 2013-04-11 14:13:33 77.235.37.41:39904 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
367 2013-04-11 14:13:33 60.229.0.200:22000 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
368 2013-04-11 14:13:33 95.211.210.241:15040 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
369 2013-04-11 14:13:34 77.235.37.41:4012 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
370 2013-04-11 14:13:34 60.229.0.200:61152 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
371 2013-04-11 14:13:34 95.211.210.241:16209 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
372 2013-04-11 14:13:34 77.235.37.41:54870 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
373 2013-04-11 14:13:34 60.229.0.200:51640 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
374 2013-04-11 14:13:34 95.211.210.241:42513 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
375 2013-04-11 14:13:35 85.90.84.170:49101 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
376 2013-04-11 14:13:35 77.235.37.41:65245 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
377 2013-04-11 14:13:35 60.229.0.200:48027 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
378 2013-04-11 14:13:35 95.211.210.241:23673 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
379 2013-04-11 14:13:35 77.235.37.41:52243 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
380 2013-04-11 14:13:35 60.229.0.200:7849 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
381 2013-04-11 14:13:35 95.211.210.241:63224 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
382 2013-04-11 14:13:36 77.235.37.41:64578 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
383 2013-04-11 14:13:36 94.23.155.141:21229 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
384 2013-04-11 14:13:36 60.229.0.200:29353 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
385 2013-04-11 14:13:36 95.211.210.241:23716 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
386 2013-04-11 14:13:36 77.235.37.41:24851 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
387 2013-04-11 14:13:36 83.219.121.90:13561 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
388 2013-04-11 14:13:36 77.235.37.41:22155 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
389 2013-04-11 14:13:36 60.229.0.200:16169 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
390 2013-04-11 14:13:36 95.211.210.241:29589 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
391 2013-04-11 14:13:37 107.0.185.100:50988 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
392 2013-04-11 14:13:37 77.235.37.41:10691 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
393 2013-04-11 14:13:37 60.229.0.200:20824 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
394 2013-04-11 14:13:37 95.211.210.241:41227 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
395 2013-04-11 14:13:37 60.229.0.200:52381 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
396 2013-04-11 14:13:37 89.245.239.168:49022 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
397 2013-04-11 14:13:37 77.235.37.41:26816 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
398 2013-04-11 14:13:37 60.229.0.200:5638 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
399 2013-04-11 14:13:37 95.211.210.241:62997 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
400 2013-04-11 14:13:38 77.235.37.41:40291 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
401 2013-04-11 14:13:38 60.229.0.200:37687 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
402 2013-04-11 14:13:38 95.211.210.241:28329 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
403 2013-04-11 14:13:38 77.235.37.41:41494 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
404 2013-04-11 14:13:38 85.90.84.170:17008 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
405 2013-04-11 14:13:38 60.229.0.200:17093 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
406 2013-04-11 14:13:38 95.211.210.241:2688 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
407 2013-04-11 14:13:39 77.235.37.41:44378 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
408 2013-04-11 14:13:39 60.229.0.200:8930 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
409 2013-04-11 14:13:39 95.211.210.241:38478 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
410 2013-04-11 14:13:39 10.4.6.4:53090 10.0.11.101:53
notice firewall ACCESS FORWARD
priority:2, from IPSec_VPN to ANY, UDP, service others, ACCEPT
411 2013-04-11 14:13:39 77.235.37.41:45239 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
412 2013-04-11 14:13:39 60.229.0.200:60012 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
413 2013-04-11 14:13:39 95.211.210.241:16177 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
414 2013-04-11 14:13:40 77.235.37.41:44281 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
415 2013-04-11 14:13:40 60.229.0.200:60486 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
416 2013-04-11 14:13:40 95.211.210.241:40485 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
417 2013-04-11 14:13:40 77.235.37.41:47859 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
418 2013-04-11 14:13:41 60.229.0.200:49242 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
419 2013-04-11 14:13:41 95.211.210.241:29292 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
420 2013-04-11 14:13:41 77.235.37.41:25317 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
421 2013-04-11 14:13:41 89.245.239.168:30597 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
422 2013-04-11 14:13:41 60.229.0.200:13965 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
423 2013-04-11 14:13:41 95.211.210.241:38810 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
424 2013-04-11 14:13:41 77.235.37.41:9153 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
425 2013-04-11 14:13:41 10.0.2.10:32768 10.0.255.255:138
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
426 2013-04-11 14:13:42 60.229.0.200:47046 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
427 2013-04-11 14:13:42 95.211.210.241:46527 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
428 2013-04-11 14:13:42 77.235.37.41:61662 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
429 2013-04-11 14:13:42 83.219.121.90:12407 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
430 2013-04-11 14:13:42 60.229.0.200:39027 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
431 2013-04-11 14:13:42 95.211.210.241:49930 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
432 2013-04-11 14:13:42 77.235.37.41:14416 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
433 2013-04-11 14:13:43 60.229.0.200:11607 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
434 2013-04-11 14:13:43 95.211.210.241:22899 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
435 2013-04-11 14:13:43 77.235.37.41:19407 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
436 2013-04-11 14:13:43 89.245.239.168:44221 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
437 2013-04-11 14:13:43 89.245.239.168:51209 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
438 2013-04-11 14:13:43 94.23.155.141:64814 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
439 2013-04-11 14:13:43 60.229.0.200:42099 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
440 2013-04-11 14:13:43 95.211.210.241:5288 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
441 2013-04-11 14:13:43 77.235.37.41:12955 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
442 2013-04-11 14:13:44 60.229.0.200:18830 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
443 2013-04-11 14:13:44 95.211.210.241:32644 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
444 2013-04-11 14:13:44 77.235.37.41:18666 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
445 2013-04-11 14:13:44 85.90.84.170:48500 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
446 2013-04-11 14:13:44 60.229.0.200:59494 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
447 2013-04-11 14:13:44 95.211.210.241:39341 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
448 2013-04-11 14:13:44 77.235.37.41:21386 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
449 2013-04-11 14:13:44 107.0.185.100:14515 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
450 2013-04-11 14:13:45 60.229.0.200:59112 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
451 2013-04-11 14:13:45 95.211.210.241:56148 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
452 2013-04-11 14:13:45 77.235.37.41:38911 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
453 2013-04-11 14:13:45 60.229.0.200:64814 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
454 2013-04-11 14:13:45 95.211.210.241:42630 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
455 2013-04-11 14:13:45 77.235.37.41:34673 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
456 2013-04-11 14:13:45 94.23.155.141:30217 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
457 2013-04-11 14:13:46 60.229.0.200:9723 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
458 2013-04-11 14:13:46 95.211.210.241:51019 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
459 2013-04-11 14:13:46 77.235.37.41:18604 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
460 2013-04-11 14:13:46 83.219.121.90:35775 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
461 2013-04-11 14:13:46 60.229.0.200:14073 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
462 2013-04-11 14:13:46 95.211.210.241:17806 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
463 2013-04-11 14:13:46 2.123.11.55:61861 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
464 2013-04-11 14:13:46 89.245.239.168:41529 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
465 2013-04-11 14:13:46 77.235.37.41:31605 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
466 2013-04-11 14:13:47 60.229.0.200:35196 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
467 2013-04-11 14:13:47 95.211.210.241:13436 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
468 2013-04-11 14:13:47 77.235.37.41:29391 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
469 2013-04-11 14:13:47 60.229.0.200:52148 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
470 2013-04-11 14:13:47 95.211.210.241:40288 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
471 2013-04-11 14:13:47 77.235.37.41:19246 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
472 2013-04-11 14:13:47 77.235.37.41:29663 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
473 2013-04-11 14:13:48 60.229.0.200:29195 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
474 2013-04-11 14:13:48 95.211.210.241:15320 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
475 2013-04-11 14:13:48 60.229.0.200:25130 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
476 2013-04-11 14:13:48 85.90.84.170:12750 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
477 2013-04-11 14:13:48 77.235.37.41:42230 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
478 2013-04-11 14:13:48 60.229.0.200:1961 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
479 2013-04-11 14:13:48 95.211.210.241:36488 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
480 2013-04-11 14:13:48 77.235.37.41:48488 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
481 2013-04-11 14:13:49 60.229.0.200:55205 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
482 2013-04-11 14:13:49 95.211.210.241:29120 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
483 2013-04-11 14:13:49 77.235.37.41:18011 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
484 2013-04-11 14:13:49 60.229.0.200:42622 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
485 2013-04-11 14:13:49 95.211.210.241:6829 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
486 2013-04-11 14:13:49 77.235.37.41:9934 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
487 2013-04-11 14:13:50 60.229.0.200:23817 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
488 2013-04-11 14:13:50 95.211.210.241:30681 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
489 2013-04-11 14:13:50 77.235.37.41:12103 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
490 2013-04-11 14:13:50 89.245.239.168:29884 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
491 2013-04-11 14:13:50 60.229.0.200:57845 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
492 2013-04-11 14:13:50 95.211.210.241:2279 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
493 2013-04-11 14:13:50 77.235.37.41:20693 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
494 2013-04-11 14:13:51 60.229.0.200:20284 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
495 2013-04-11 14:13:51 95.211.210.241:17400 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
496 2013-04-11 14:13:51 77.235.37.41:42059 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
497 2013-04-11 14:13:51 94.23.155.141:48275 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
498 2013-04-11 14:13:51 60.229.0.200:57827 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
499 2013-04-11 14:13:51 95.211.210.241:62411 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
500 2013-04-11 14:13:51 77.235.37.41:63030 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
501 2013-04-11 14:13:52 83.219.121.90:58157 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
502 2013-04-11 14:13:52 60.229.0.200:26913 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
503 2013-04-11 14:13:52 95.211.210.241:39640 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
504 2013-04-11 14:13:52 77.235.37.41:44334 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
505 2013-04-11 14:13:52 60.229.0.200:18430 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
506 2013-04-11 14:13:52 95.211.210.241:46391 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
507 2013-04-11 14:13:52 77.235.37.41:65233 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
508 2013-04-11 14:13:52 70.39.81.140:12290 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
509 2013-04-11 14:13:53 60.229.0.200:36925 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
510 2013-04-11 14:13:53 95.211.210.241:46040 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
511 2013-04-11 14:13:53 77.235.37.41:6914 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
512 2013-04-11 14:13:53 60.229.0.200:5310 192.168.4.254:53
notice firewall ACCESS FORWARD
priority:10, from WAN to ZyWALL, UDP, service others, ACCEPT
End of Logs


737

Maybe some interesting additional info, this Zyxel firewall is sitting behind another firewall.
This could be part of the problem?

ShadowPeak.com
2013-04-15, 14:10
No luck, the tunnel doesn't want to come up.
I can only see Phase 1 packets that are being sent by the checkpoint firewall.
I don't see any packets arriving on our firewall from the Zyxel.



Maybe some interesting additional info, this Zyxel firewall is sitting behind another firewall.
This could be part of the problem?

Yes that can make a huge difference because that intermediate firewall is almost certainly performing NAT. The Zyxel log file with that firewall initiating the tunnel was helpful, packets 400 and 401 show the Zyxel moving the IKE traffic from port 500 to 4500 in an attempt to start NAT Traversal (NAT-T) in packet 5; it is doing this because it senses NAT between itself and the Check Point. Unfortunately it looks like the intermediate firewall is dropping the port 4500 traffic. This can be caused by a policy drop of 4500 in the intermediate firewall's policy or possibly that intermediate firewall is also terminating VPN tunnels and is eating the 4500 traffic trying to process it for itself. The ports the intermediate firewall needs to allow are UDP/500, IP Protocol 50/ESP and UDP/4500.

When the Check Point initiates the tunnel, notice it still sends packet 5 on port 500 (instead of starting NAT-T on 4500) which I believe is why the Zyxel is sending the invalid payload error since it knows it needs to start NAT-T. I've never understood why, but Check Point firewalls will never try to start NAT-T themselves but will play along if the other side starts to use it.

One other thing to check (though unlikely) is make sure the box "Support NAT Traversal" hasn't been unchecked on your Check Point gateway/cluster object under IPSec VPN...VPN Advanced.

Edit: After consulting the RFC for NAT-T the two firewalls do indeed figure out whether NAT is present in IKE packets 3 and 4. So the failure at packet 5 sure sounds like a NAT-T issue.

torenhof
2013-04-18, 03:40
Yes that can make a huge difference because that intermediate firewall is almost certainly performing NAT. The Zyxel log file with that firewall initiating the tunnel was helpful, packets 400 and 401 show the Zyxel moving the IKE traffic from port 500 to 4500 in an attempt to start NAT Traversal (NAT-T) in packet 5; it is doing this because it senses NAT between itself and the Check Point. Unfortunately it looks like the intermediate firewall is dropping the port 4500 traffic. This can be caused by a policy drop of 4500 in the intermediate firewall's policy or possibly that intermediate firewall is also terminating VPN tunnels and is eating the 4500 traffic trying to process it for itself. The ports the intermediate firewall needs to allow are UDP/500, IP Protocol 50/ESP and UDP/4500.

When the Check Point initiates the tunnel, notice it still sends packet 5 on port 500 (instead of starting NAT-T on 4500) which I believe is why the Zyxel is sending the invalid payload error since it knows it needs to start NAT-T. I've never understood why, but Check Point firewalls will never try to start NAT-T themselves but will play along if the other side starts to use it.

One other thing to check (though unlikely) is make sure the box "Support NAT Traversal" hasn't been unchecked on your Check Point gateway/cluster object under IPSec VPN...VPN Advanced.

Edit: After consulting the RFC for NAT-T the two firewalls do indeed figure out whether NAT is present in IKE packets 3 and 4. So the failure at packet 5 sure sounds like a NAT-T issue.


NAT traversal is supported on our firewall, I've requested to check the intermediate firewall for the ports you have mentioned.
I'll keep you informed.